Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- syscalltable = {}
- syscalltable[0] = 'NtAccessCheck'
- syscalltable[1] = 'NtWorkerFactoryWorkerReady'
- syscalltable[10] = 'NtReleaseSemaphore'
- syscalltable[100] = 'NtAccessCheckByTypeResultList'
- syscalltable[101] = 'NtAccessCheckByTypeResultListAndAuditAlarm'
- syscalltable[102] = 'NtAccessCheckByTypeResultListAndAuditAlarmByHandle'
- syscalltable[103] = 'NtAcquireProcessActivityReference'
- syscalltable[104] = 'NtAddAtomEx'
- syscalltable[105] = 'NtAddBootEntry'
- syscalltable[106] = 'NtAddDriverEntry'
- syscalltable[107] = 'NtAdjustGroupsToken'
- syscalltable[108] = 'NtAdjustTokenClaimsAndDeviceGroups'
- syscalltable[109] = 'NtAlertResumeThread'
- syscalltable[11] = 'NtReplyWaitReceivePort'
- syscalltable[110] = 'NtAlertThread'
- syscalltable[111] = 'NtAlertThreadByThreadId'
- syscalltable[112] = 'NtAllocateLocallyUniqueId'
- syscalltable[113] = 'NtAllocateReserveObject'
- syscalltable[114] = 'NtAllocateUserPhysicalPages'
- syscalltable[115] = 'NtAllocateUuids'
- syscalltable[116] = 'NtAllocateVirtualMemoryEx'
- syscalltable[117] = 'NtAlpcAcceptConnectPort'
- syscalltable[118] = 'NtAlpcCancelMessage'
- syscalltable[119] = 'NtAlpcConnectPort'
- syscalltable[12] = 'NtReplyPort'
- syscalltable[120] = 'NtAlpcConnectPortEx'
- syscalltable[121] = 'NtAlpcCreatePort'
- syscalltable[122] = 'NtAlpcCreatePortSection'
- syscalltable[123] = 'NtAlpcCreateResourceReserve'
- syscalltable[124] = 'NtAlpcCreateSectionView'
- syscalltable[125] = 'NtAlpcCreateSecurityContext'
- syscalltable[126] = 'NtAlpcDeletePortSection'
- syscalltable[127] = 'NtAlpcDeleteResourceReserve'
- syscalltable[128] = 'NtAlpcDeleteSectionView'
- syscalltable[129] = 'NtAlpcDeleteSecurityContext'
- syscalltable[13] = 'NtSetInformationThread'
- syscalltable[130] = 'NtAlpcDisconnectPort'
- syscalltable[131] = 'NtAlpcImpersonateClientContainerOfPort'
- syscalltable[132] = 'NtAlpcImpersonateClientOfPort'
- syscalltable[133] = 'NtAlpcOpenSenderProcess'
- syscalltable[134] = 'NtAlpcOpenSenderThread'
- syscalltable[135] = 'NtAlpcQueryInformation'
- syscalltable[136] = 'NtAlpcQueryInformationMessage'
- syscalltable[137] = 'NtAlpcRevokeSecurityContext'
- syscalltable[138] = 'NtAlpcSendWaitReceivePort'
- syscalltable[139] = 'NtAlpcSetInformation'
- syscalltable[14] = 'NtSetEvent'
- syscalltable[140] = 'NtAreMappedFilesTheSame'
- syscalltable[141] = 'NtAssignProcessToJobObject'
- syscalltable[142] = 'NtAssociateWaitCompletionPacket'
- syscalltable[143] = 'NtCallEnclave'
- syscalltable[144] = 'NtCancelIoFileEx'
- syscalltable[145] = 'NtCancelSynchronousIoFile'
- syscalltable[146] = 'NtCancelTimer2'
- syscalltable[147] = 'NtCancelWaitCompletionPacket'
- syscalltable[148] = 'NtCommitComplete'
- syscalltable[149] = 'NtCommitEnlistment'
- syscalltable[15] = 'NtClose'
- syscalltable[150] = 'NtCommitRegistryTransaction'
- syscalltable[151] = 'NtCommitTransaction'
- syscalltable[152] = 'NtCompactKeys'
- syscalltable[153] = 'NtCompareObjects'
- syscalltable[154] = 'NtCompareSigningLevels'
- syscalltable[155] = 'NtCompareTokens'
- syscalltable[156] = 'NtCompleteConnectPort'
- syscalltable[157] = 'NtCompressKey'
- syscalltable[158] = 'NtConnectPort'
- syscalltable[159] = 'NtConvertBetweenAuxiliaryCounterAndPerformanceCounter'
- syscalltable[16] = 'NtQueryObject'
- syscalltable[160] = 'NtCreateDebugObject'
- syscalltable[161] = 'NtCreateDirectoryObject'
- syscalltable[162] = 'NtCreateDirectoryObjectEx'
- syscalltable[163] = 'NtCreateEnclave'
- syscalltable[164] = 'NtCreateEnlistment'
- syscalltable[165] = 'NtCreateEventPair'
- syscalltable[166] = 'NtCreateIRTimer'
- syscalltable[167] = 'NtCreateIoCompletion'
- syscalltable[168] = 'NtCreateJobObject'
- syscalltable[169] = 'NtCreateJobSet'
- syscalltable[17] = 'NtQueryInformationFile'
- syscalltable[170] = 'NtCreateKeyTransacted'
- syscalltable[171] = 'NtCreateKeyedEvent'
- syscalltable[172] = 'NtCreateLowBoxToken'
- syscalltable[173] = 'NtCreateMailslotFile'
- syscalltable[174] = 'NtCreateMutant'
- syscalltable[175] = 'NtCreateNamedPipeFile'
- syscalltable[176] = 'NtCreatePagingFile'
- syscalltable[177] = 'NtCreatePartition'
- syscalltable[178] = 'NtCreatePort'
- syscalltable[179] = 'NtCreatePrivateNamespace'
- syscalltable[18] = 'NtOpenKey'
- syscalltable[180] = 'NtCreateProcess'
- syscalltable[181] = 'NtCreateProfile'
- syscalltable[182] = 'NtCreateProfileEx'
- syscalltable[183] = 'NtCreateRegistryTransaction'
- syscalltable[184] = 'NtCreateResourceManager'
- syscalltable[185] = 'NtCreateSectionEx'
- syscalltable[186] = 'NtCreateSemaphore'
- syscalltable[187] = 'NtCreateSymbolicLinkObject'
- syscalltable[188] = 'NtCreateThreadEx'
- syscalltable[189] = 'NtCreateTimer'
- syscalltable[19] = 'NtEnumerateValueKey'
- syscalltable[190] = 'NtCreateTimer2'
- syscalltable[191] = 'NtCreateToken'
- syscalltable[192] = 'NtCreateTokenEx'
- syscalltable[193] = 'NtCreateTransaction'
- syscalltable[194] = 'NtCreateTransactionManager'
- syscalltable[195] = 'NtCreateUserProcess'
- syscalltable[196] = 'NtCreateWaitCompletionPacket'
- syscalltable[197] = 'NtCreateWaitablePort'
- syscalltable[198] = 'NtCreateWnfStateName'
- syscalltable[199] = 'NtCreateWorkerFactory'
- syscalltable[2] = 'NtAcceptConnectPort'
- syscalltable[20] = 'NtFindAtom'
- syscalltable[200] = 'NtDebugActiveProcess'
- syscalltable[201] = 'NtDebugContinue'
- syscalltable[202] = 'NtDeleteAtom'
- syscalltable[203] = 'NtDeleteBootEntry'
- syscalltable[204] = 'NtDeleteDriverEntry'
- syscalltable[205] = 'NtDeleteFile'
- syscalltable[206] = 'NtDeleteKey'
- syscalltable[207] = 'NtDeleteObjectAuditAlarm'
- syscalltable[208] = 'NtDeletePrivateNamespace'
- syscalltable[209] = 'NtDeleteValueKey'
- syscalltable[21] = 'NtQueryDefaultLocale'
- syscalltable[210] = 'NtDeleteWnfStateData'
- syscalltable[211] = 'NtDeleteWnfStateName'
- syscalltable[212] = 'NtDisableLastKnownGood'
- syscalltable[213] = 'NtDisplayString'
- syscalltable[214] = 'NtDrawText'
- syscalltable[215] = 'NtEnableLastKnownGood'
- syscalltable[216] = 'NtEnumerateBootEntries'
- syscalltable[217] = 'NtEnumerateDriverEntries'
- syscalltable[218] = 'NtEnumerateSystemEnvironmentValuesEx'
- syscalltable[219] = 'NtEnumerateTransactionObject'
- syscalltable[22] = 'NtQueryKey'
- syscalltable[220] = 'NtExtendSection'
- syscalltable[221] = 'NtFilterBootOption'
- syscalltable[222] = 'NtFilterToken'
- syscalltable[223] = 'NtFilterTokenEx'
- syscalltable[224] = 'NtFlushBuffersFileEx'
- syscalltable[225] = 'NtFlushInstallUILanguage'
- syscalltable[226] = 'NtFlushInstructionCache'
- syscalltable[227] = 'NtFlushKey'
- syscalltable[228] = 'NtFlushProcessWriteBuffers'
- syscalltable[229] = 'NtFlushVirtualMemory'
- syscalltable[23] = 'NtQueryValueKey'
- syscalltable[230] = 'NtFlushWriteBuffer'
- syscalltable[231] = 'NtFreeUserPhysicalPages'
- syscalltable[232] = 'NtFreezeRegistry'
- syscalltable[233] = 'NtFreezeTransactions'
- syscalltable[234] = 'NtGetCachedSigningLevel'
- syscalltable[235] = 'NtGetCompleteWnfStateSubscription'
- syscalltable[236] = 'NtGetContextThread'
- syscalltable[237] = 'NtGetCurrentProcessorNumber'
- syscalltable[238] = 'NtGetCurrentProcessorNumberEx'
- syscalltable[239] = 'NtGetDevicePowerState'
- syscalltable[24] = 'NtAllocateVirtualMemory'
- syscalltable[240] = 'NtGetMUIRegistryInfo'
- syscalltable[241] = 'NtGetNextProcess'
- syscalltable[242] = 'NtGetNextThread'
- syscalltable[243] = 'NtGetNlsSectionPtr'
- syscalltable[244] = 'NtGetNotificationResourceManager'
- syscalltable[245] = 'NtGetWriteWatch'
- syscalltable[246] = 'NtImpersonateAnonymousToken'
- syscalltable[247] = 'NtImpersonateThread'
- syscalltable[248] = 'NtInitializeEnclave'
- syscalltable[249] = 'NtInitializeNlsFiles'
- syscalltable[25] = 'NtQueryInformationProcess'
- syscalltable[250] = 'NtInitializeRegistry'
- syscalltable[251] = 'NtInitiatePowerAction'
- syscalltable[252] = 'NtIsSystemResumeAutomatic'
- syscalltable[253] = 'NtIsUILanguageComitted'
- syscalltable[254] = 'NtListenPort'
- syscalltable[255] = 'NtLoadDriver'
- syscalltable[256] = 'NtLoadEnclaveData'
- syscalltable[257] = 'NtLoadKey'
- syscalltable[258] = 'NtLoadKey2'
- syscalltable[259] = 'NtLoadKeyEx'
- syscalltable[26] = 'NtWaitForMultipleObjects32'
- syscalltable[260] = 'NtLockFile'
- syscalltable[261] = 'NtLockProductActivationKeys'
- syscalltable[262] = 'NtLockRegistryKey'
- syscalltable[263] = 'NtLockVirtualMemory'
- syscalltable[264] = 'NtMakePermanentObject'
- syscalltable[265] = 'NtMakeTemporaryObject'
- syscalltable[266] = 'NtManageHotPatch'
- syscalltable[267] = 'NtManagePartition'
- syscalltable[268] = 'NtMapCMFModule'
- syscalltable[269] = 'NtMapUserPhysicalPages'
- syscalltable[27] = 'NtWriteFileGather'
- syscalltable[270] = 'NtMapViewOfSectionEx'
- syscalltable[271] = 'NtModifyBootEntry'
- syscalltable[272] = 'NtModifyDriverEntry'
- syscalltable[273] = 'NtNotifyChangeDirectoryFile'
- syscalltable[274] = 'NtNotifyChangeDirectoryFileEx'
- syscalltable[275] = 'NtNotifyChangeKey'
- syscalltable[276] = 'NtNotifyChangeMultipleKeys'
- syscalltable[277] = 'NtNotifyChangeSession'
- syscalltable[278] = 'NtOpenEnlistment'
- syscalltable[279] = 'NtOpenEventPair'
- syscalltable[28] = 'NtSetInformationProcess'
- syscalltable[280] = 'NtOpenIoCompletion'
- syscalltable[281] = 'NtOpenJobObject'
- syscalltable[282] = 'NtOpenKeyEx'
- syscalltable[283] = 'NtOpenKeyTransacted'
- syscalltable[284] = 'NtOpenKeyTransactedEx'
- syscalltable[285] = 'NtOpenKeyedEvent'
- syscalltable[286] = 'NtOpenMutant'
- syscalltable[287] = 'NtOpenObjectAuditAlarm'
- syscalltable[288] = 'NtOpenPartition'
- syscalltable[289] = 'NtOpenPrivateNamespace'
- syscalltable[29] = 'NtCreateKey'
- syscalltable[290] = 'NtOpenProcessToken'
- syscalltable[291] = 'NtOpenRegistryTransaction'
- syscalltable[292] = 'NtOpenResourceManager'
- syscalltable[293] = 'NtOpenSemaphore'
- syscalltable[294] = 'NtOpenSession'
- syscalltable[295] = 'NtOpenSymbolicLinkObject'
- syscalltable[296] = 'NtOpenThread'
- syscalltable[297] = 'NtOpenTimer'
- syscalltable[298] = 'NtOpenTransaction'
- syscalltable[299] = 'NtOpenTransactionManager'
- syscalltable[3] = 'NtMapUserPhysicalPagesScatter'
- syscalltable[30] = 'NtFreeVirtualMemory'
- syscalltable[300] = 'NtPlugPlayControl'
- syscalltable[301] = 'NtPrePrepareComplete'
- syscalltable[302] = 'NtPrePrepareEnlistment'
- syscalltable[303] = 'NtPrepareComplete'
- syscalltable[304] = 'NtPrepareEnlistment'
- syscalltable[305] = 'NtPrivilegeCheck'
- syscalltable[306] = 'NtPrivilegeObjectAuditAlarm'
- syscalltable[307] = 'NtPrivilegedServiceAuditAlarm'
- syscalltable[308] = 'NtPropagationComplete'
- syscalltable[309] = 'NtPropagationFailed'
- syscalltable[31] = 'NtImpersonateClientOfPort'
- syscalltable[310] = 'NtPulseEvent'
- syscalltable[311] = 'NtQueryAuxiliaryCounterFrequency'
- syscalltable[312] = 'NtQueryBootEntryOrder'
- syscalltable[313] = 'NtQueryBootOptions'
- syscalltable[314] = 'NtQueryDebugFilterState'
- syscalltable[315] = 'NtQueryDirectoryFileEx'
- syscalltable[316] = 'NtQueryDirectoryObject'
- syscalltable[317] = 'NtQueryDriverEntryOrder'
- syscalltable[318] = 'NtQueryEaFile'
- syscalltable[319] = 'NtQueryFullAttributesFile'
- syscalltable[32] = 'NtReleaseMutant'
- syscalltable[320] = 'NtQueryInformationAtom'
- syscalltable[321] = 'NtQueryInformationByName'
- syscalltable[322] = 'NtQueryInformationEnlistment'
- syscalltable[323] = 'NtQueryInformationJobObject'
- syscalltable[324] = 'NtQueryInformationPort'
- syscalltable[325] = 'NtQueryInformationResourceManager'
- syscalltable[326] = 'NtQueryInformationTransaction'
- syscalltable[327] = 'NtQueryInformationTransactionManager'
- syscalltable[328] = 'NtQueryInformationWorkerFactory'
- syscalltable[329] = 'NtQueryInstallUILanguage'
- syscalltable[33] = 'NtQueryInformationToken'
- syscalltable[330] = 'NtQueryIntervalProfile'
- syscalltable[331] = 'NtQueryIoCompletion'
- syscalltable[332] = 'NtQueryLicenseValue'
- syscalltable[333] = 'NtQueryMultipleValueKey'
- syscalltable[334] = 'NtQueryMutant'
- syscalltable[335] = 'NtQueryOpenSubKeys'
- syscalltable[336] = 'NtQueryOpenSubKeysEx'
- syscalltable[337] = 'NtQueryPortInformationProcess'
- syscalltable[338] = 'NtQueryQuotaInformationFile'
- syscalltable[339] = 'NtQuerySecurityAttributesToken'
- syscalltable[34] = 'NtRequestWaitReplyPort'
- syscalltable[340] = 'NtQuerySecurityObject'
- syscalltable[341] = 'NtQuerySecurityPolicy'
- syscalltable[342] = 'NtQuerySemaphore'
- syscalltable[343] = 'NtQuerySymbolicLinkObject'
- syscalltable[344] = 'NtQuerySystemEnvironmentValue'
- syscalltable[345] = 'NtQuerySystemEnvironmentValueEx'
- syscalltable[346] = 'NtQuerySystemInformationEx'
- syscalltable[347] = 'NtQueryTimerResolution'
- syscalltable[348] = 'NtQueryWnfStateData'
- syscalltable[349] = 'NtQueryWnfStateNameInformation'
- syscalltable[35] = 'NtQueryVirtualMemory'
- syscalltable[350] = 'NtQueueApcThreadEx'
- syscalltable[351] = 'NtRaiseException'
- syscalltable[352] = 'NtRaiseHardError'
- syscalltable[353] = 'NtReadOnlyEnlistment'
- syscalltable[354] = 'NtRecoverEnlistment'
- syscalltable[355] = 'NtRecoverResourceManager'
- syscalltable[356] = 'NtRecoverTransactionManager'
- syscalltable[357] = 'NtRegisterProtocolAddressInformation'
- syscalltable[358] = 'NtRegisterThreadTerminatePort'
- syscalltable[359] = 'NtReleaseKeyedEvent'
- syscalltable[36] = 'NtOpenThreadToken'
- syscalltable[360] = 'NtReleaseWorkerFactoryWorker'
- syscalltable[361] = 'NtRemoveIoCompletionEx'
- syscalltable[362] = 'NtRemoveProcessDebug'
- syscalltable[363] = 'NtRenameKey'
- syscalltable[364] = 'NtRenameTransactionManager'
- syscalltable[365] = 'NtReplaceKey'
- syscalltable[366] = 'NtReplacePartitionUnit'
- syscalltable[367] = 'NtReplyWaitReplyPort'
- syscalltable[368] = 'NtRequestPort'
- syscalltable[369] = 'NtResetEvent'
- syscalltable[37] = 'NtQueryInformationThread'
- syscalltable[370] = 'NtResetWriteWatch'
- syscalltable[371] = 'NtRestoreKey'
- syscalltable[372] = 'NtResumeProcess'
- syscalltable[373] = 'NtRevertContainerImpersonation'
- syscalltable[374] = 'NtRollbackComplete'
- syscalltable[375] = 'NtRollbackEnlistment'
- syscalltable[376] = 'NtRollbackRegistryTransaction'
- syscalltable[377] = 'NtRollbackTransaction'
- syscalltable[378] = 'NtRollforwardTransactionManager'
- syscalltable[379] = 'NtSaveKey'
- syscalltable[38] = 'NtOpenProcess'
- syscalltable[380] = 'NtSaveKeyEx'
- syscalltable[381] = 'NtSaveMergedKeys'
- syscalltable[382] = 'NtSecureConnectPort'
- syscalltable[383] = 'NtSerializeBoot'
- syscalltable[384] = 'NtSetBootEntryOrder'
- syscalltable[385] = 'NtSetBootOptions'
- syscalltable[386] = 'NtSetCachedSigningLevel'
- syscalltable[387] = 'NtSetCachedSigningLevel2'
- syscalltable[388] = 'NtSetContextThread'
- syscalltable[389] = 'NtSetDebugFilterState'
- syscalltable[39] = 'NtSetInformationFile'
- syscalltable[390] = 'NtSetDefaultHardErrorPort'
- syscalltable[391] = 'NtSetDefaultLocale'
- syscalltable[392] = 'NtSetDefaultUILanguage'
- syscalltable[393] = 'NtSetDriverEntryOrder'
- syscalltable[394] = 'NtSetEaFile'
- syscalltable[395] = 'NtSetHighEventPair'
- syscalltable[396] = 'NtSetHighWaitLowEventPair'
- syscalltable[397] = 'NtSetIRTimer'
- syscalltable[398] = 'NtSetInformationDebugObject'
- syscalltable[399] = 'NtSetInformationEnlistment'
- syscalltable[4] = 'NtWaitForSingleObject'
- syscalltable[40] = 'NtMapViewOfSection'
- syscalltable[400] = 'NtSetInformationJobObject'
- syscalltable[401] = 'NtSetInformationKey'
- syscalltable[402] = 'NtSetInformationResourceManager'
- syscalltable[403] = 'NtSetInformationSymbolicLink'
- syscalltable[404] = 'NtSetInformationToken'
- syscalltable[405] = 'NtSetInformationTransaction'
- syscalltable[406] = 'NtSetInformationTransactionManager'
- syscalltable[407] = 'NtSetInformationVirtualMemory'
- syscalltable[408] = 'NtSetInformationWorkerFactory'
- syscalltable[409] = 'NtSetIntervalProfile'
- syscalltable[4096] = 'NtUserGetOwnerTransformedMonitorRect'
- syscalltable[4097] = 'NtUserYieldTask'
- syscalltable[4098] = 'NtUserSetSensorPresence'
- syscalltable[4099] = 'NtUserGetThreadState'
- syscalltable[41] = 'NtAccessCheckAndAuditAlarm'
- syscalltable[410] = 'NtSetIoCompletion'
- syscalltable[4100] = 'NtUserPeekMessage'
- syscalltable[4101] = 'NtUserCallOneParam'
- syscalltable[4102] = 'NtUserGetKeyState'
- syscalltable[4103] = 'NtUserInvalidateRect'
- syscalltable[4104] = 'NtUserCallNoParam'
- syscalltable[4105] = 'NtUserGetMessage'
- syscalltable[4106] = 'NtUserMessageCall'
- syscalltable[4107] = 'NtGdiBitBlt'
- syscalltable[4108] = 'NtGdiGetCharSet'
- syscalltable[4109] = 'NtUserGetDC'
- syscalltable[411] = 'NtSetIoCompletionEx'
- syscalltable[4110] = 'NtGdiSelectBitmap'
- syscalltable[4111] = 'NtUserWaitMessage'
- syscalltable[4112] = 'NtUserTranslateMessage'
- syscalltable[4113] = 'NtUserGetProp'
- syscalltable[4114] = 'NtUserPostMessage'
- syscalltable[4115] = 'NtUserQueryWindow'
- syscalltable[4116] = 'NtUserTranslateAccelerator'
- syscalltable[4117] = 'NtGdiFlush'
- syscalltable[4118] = 'NtUserRedrawWindow'
- syscalltable[4119] = 'NtUserWindowFromPoint'
- syscalltable[412] = 'NtSetLdtEntries'
- syscalltable[4120] = 'NtUserCallMsgFilter'
- syscalltable[4121] = 'NtUserValidateTimerCallback'
- syscalltable[4122] = 'NtUserBeginPaint'
- syscalltable[4123] = 'NtUserSetTimer'
- syscalltable[4124] = 'NtUserEndPaint'
- syscalltable[4125] = 'NtUserSetCursor'
- syscalltable[4126] = 'NtUserKillTimer'
- syscalltable[4127] = 'NtUserBuildHwndList'
- syscalltable[4128] = 'NtUserSelectPalette'
- syscalltable[4129] = 'NtUserCallNextHookEx'
- syscalltable[413] = 'NtSetLowEventPair'
- syscalltable[4130] = 'NtUserHideCaret'
- syscalltable[4131] = 'NtGdiIntersectClipRect'
- syscalltable[4132] = 'NtUserCallHwndLock'
- syscalltable[4133] = 'NtUserGetProcessWindowStation'
- syscalltable[4134] = 'NtGdiDeleteObjectApp'
- syscalltable[4135] = 'NtUserSetWindowPos'
- syscalltable[4136] = 'NtUserShowCaret'
- syscalltable[4137] = 'NtUserEndDeferWindowPosEx'
- syscalltable[4138] = 'NtUserCallHwndParamLock'
- syscalltable[4139] = 'NtUserVkKeyScanEx'
- syscalltable[414] = 'NtSetLowWaitHighEventPair'
- syscalltable[4140] = 'NtGdiSetDIBitsToDeviceInternal'
- syscalltable[4141] = 'NtUserCallTwoParam'
- syscalltable[4142] = 'NtGdiGetRandomRgn'
- syscalltable[4143] = 'NtUserCopyAcceleratorTable'
- syscalltable[4144] = 'NtUserNotifyWinEvent'
- syscalltable[4145] = 'NtGdiExtSelectClipRgn'
- syscalltable[4146] = 'NtUserIsClipboardFormatAvailable'
- syscalltable[4147] = 'NtUserSetScrollInfo'
- syscalltable[4148] = 'NtGdiStretchBlt'
- syscalltable[4149] = 'NtUserCreateCaret'
- syscalltable[415] = 'NtSetQuotaInformationFile'
- syscalltable[4150] = 'NtGdiRectVisible'
- syscalltable[4151] = 'NtGdiCombineRgn'
- syscalltable[4152] = 'NtGdiGetDCObject'
- syscalltable[4153] = 'NtUserDispatchMessage'
- syscalltable[4154] = 'NtUserRegisterWindowMessage'
- syscalltable[4155] = 'NtGdiExtTextOutW'
- syscalltable[4156] = 'NtGdiSelectFont'
- syscalltable[4157] = 'NtGdiRestoreDC'
- syscalltable[4158] = 'NtGdiSaveDC'
- syscalltable[4159] = 'NtUserGetForegroundWindow'
- syscalltable[416] = 'NtSetSecurityObject'
- syscalltable[4160] = 'NtUserShowScrollBar'
- syscalltable[4161] = 'NtUserFindExistingCursorIcon'
- syscalltable[4162] = 'NtGdiGetDCDword'
- syscalltable[4163] = 'NtGdiGetRegionData'
- syscalltable[4164] = 'NtGdiLineTo'
- syscalltable[4165] = 'NtUserSystemParametersInfo'
- syscalltable[4166] = 'NtGdiGetAppClipBox'
- syscalltable[4167] = 'NtUserGetAsyncKeyState'
- syscalltable[4168] = 'NtUserGetCPD'
- syscalltable[4169] = 'NtUserRemoveProp'
- syscalltable[417] = 'NtSetSystemEnvironmentValue'
- syscalltable[4170] = 'NtGdiDoPalette'
- syscalltable[4171] = 'NtGdiPolyPolyDraw'
- syscalltable[4172] = 'NtUserSetCapture'
- syscalltable[4173] = 'NtUserEnumDisplayMonitors'
- syscalltable[4174] = 'NtGdiCreateCompatibleBitmap'
- syscalltable[4175] = 'NtUserSetProp'
- syscalltable[4176] = 'NtGdiGetTextCharsetInfo'
- syscalltable[4177] = 'NtUserSBGetParms'
- syscalltable[4178] = 'NtUserGetIconInfo'
- syscalltable[4179] = 'NtUserExcludeUpdateRgn'
- syscalltable[418] = 'NtSetSystemEnvironmentValueEx'
- syscalltable[4180] = 'NtUserSetFocus'
- syscalltable[4181] = 'NtGdiExtGetObjectW'
- syscalltable[4182] = 'NtUserGetUpdateRect'
- syscalltable[4183] = 'NtGdiCreateCompatibleDC'
- syscalltable[4184] = 'NtUserGetClipboardSequenceNumber'
- syscalltable[4185] = 'NtGdiCreatePen'
- syscalltable[4186] = 'NtUserShowWindow'
- syscalltable[4187] = 'NtUserGetKeyboardLayoutList'
- syscalltable[4188] = 'NtGdiPatBlt'
- syscalltable[4189] = 'NtUserMapVirtualKeyEx'
- syscalltable[419] = 'NtSetSystemInformation'
- syscalltable[4190] = 'NtUserSetWindowLong'
- syscalltable[4191] = 'NtGdiHfontCreate'
- syscalltable[4192] = 'NtUserMoveWindow'
- syscalltable[4193] = 'NtUserPostThreadMessage'
- syscalltable[4194] = 'NtUserDrawIconEx'
- syscalltable[4195] = 'NtUserGetSystemMenu'
- syscalltable[4196] = 'NtGdiDrawStream'
- syscalltable[4197] = 'NtUserInternalGetWindowText'
- syscalltable[4198] = 'NtUserGetWindowDC'
- syscalltable[4199] = 'NtGdiInvertRgn'
- syscalltable[42] = 'NtUnmapViewOfSection'
- syscalltable[420] = 'NtSetSystemPowerState'
- syscalltable[4200] = 'NtGdiGetRgnBox'
- syscalltable[4201] = 'NtGdiGetAndSetDCDword'
- syscalltable[4202] = 'NtGdiMaskBlt'
- syscalltable[4203] = 'NtGdiGetWidthTable'
- syscalltable[4204] = 'NtUserScrollDC'
- syscalltable[4205] = 'NtUserGetObjectInformation'
- syscalltable[4206] = 'NtGdiCreateBitmap'
- syscalltable[4207] = 'NtUserFindWindowEx'
- syscalltable[4208] = 'NtGdiPolyPatBlt'
- syscalltable[4209] = 'NtUserUnhookWindowsHookEx'
- syscalltable[421] = 'NtSetSystemTime'
- syscalltable[4210] = 'NtGdiGetNearestColor'
- syscalltable[4211] = 'NtGdiTransformPoints'
- syscalltable[4212] = 'NtGdiGetDCPoint'
- syscalltable[4213] = 'NtGdiCreateDIBBrush'
- syscalltable[4214] = 'NtGdiGetTextMetricsW'
- syscalltable[4215] = 'NtUserCreateWindowEx'
- syscalltable[4216] = 'NtUserSetParent'
- syscalltable[4217] = 'NtUserGetKeyboardState'
- syscalltable[4218] = 'NtUserToUnicodeEx'
- syscalltable[4219] = 'NtUserGetControlBrush'
- syscalltable[422] = 'NtSetThreadExecutionState'
- syscalltable[4220] = 'NtUserGetClassName'
- syscalltable[4221] = 'NtGdiAlphaBlend'
- syscalltable[4222] = 'NtGdiOffsetRgn'
- syscalltable[4223] = 'NtUserDefSetText'
- syscalltable[4224] = 'NtGdiGetTextFaceW'
- syscalltable[4225] = 'NtGdiStretchDIBitsInternal'
- syscalltable[4226] = 'NtUserSendInput'
- syscalltable[4227] = 'NtUserGetThreadDesktop'
- syscalltable[4228] = 'NtGdiCreateRectRgn'
- syscalltable[4229] = 'NtGdiGetDIBitsInternal'
- syscalltable[423] = 'NtSetTimer2'
- syscalltable[4230] = 'NtUserGetUpdateRgn'
- syscalltable[4231] = 'NtGdiDeleteClientObj'
- syscalltable[4232] = 'NtUserGetIconSize'
- syscalltable[4233] = 'NtUserFillWindow'
- syscalltable[4234] = 'NtGdiExtCreateRegion'
- syscalltable[4235] = 'NtGdiComputeXformCoefficients'
- syscalltable[4236] = 'NtUserSetWindowsHookEx'
- syscalltable[4237] = 'NtUserNotifyProcessCreate'
- syscalltable[4238] = 'NtGdiUnrealizeObject'
- syscalltable[4239] = 'NtUserGetTitleBarInfo'
- syscalltable[424] = 'NtSetTimerEx'
- syscalltable[4240] = 'NtGdiRectangle'
- syscalltable[4241] = 'NtUserSetThreadDesktop'
- syscalltable[4242] = 'NtUserGetDCEx'
- syscalltable[4243] = 'NtUserGetScrollBarInfo'
- syscalltable[4244] = 'NtGdiGetTextExtent'
- syscalltable[4245] = 'NtUserSetWindowFNID'
- syscalltable[4246] = 'NtGdiSetLayout'
- syscalltable[4247] = 'NtUserCalcMenuBar'
- syscalltable[4248] = 'NtUserThunkedMenuItemInfo'
- syscalltable[4249] = 'NtGdiExcludeClipRect'
- syscalltable[425] = 'NtSetTimerResolution'
- syscalltable[4250] = 'NtGdiCreateDIBSection'
- syscalltable[4251] = 'NtGdiGetDCforBitmap'
- syscalltable[4252] = 'NtUserDestroyCursor'
- syscalltable[4253] = 'NtUserDestroyWindow'
- syscalltable[4254] = 'NtUserCallHwndParam'
- syscalltable[4255] = 'NtGdiCreateDIBitmapInternal'
- syscalltable[4256] = 'NtUserOpenWindowStation'
- syscalltable[4257] = 'NtUserSetCursorIconData'
- syscalltable[4258] = 'NtUserCloseDesktop'
- syscalltable[4259] = 'NtUserOpenDesktop'
- syscalltable[426] = 'NtSetUuidSeed'
- syscalltable[4260] = 'NtUserSetProcessWindowStation'
- syscalltable[4261] = 'NtUserGetAtomName'
- syscalltable[4262] = 'NtGdiExtCreatePen'
- syscalltable[4263] = 'NtGdiCreatePaletteInternal'
- syscalltable[4264] = 'NtGdiSetBrushOrg'
- syscalltable[4265] = 'NtUserBuildNameList'
- syscalltable[4266] = 'NtGdiSetPixel'
- syscalltable[4267] = 'NtUserRegisterClassExWOW'
- syscalltable[4268] = 'NtGdiCreatePatternBrushInternal'
- syscalltable[4269] = 'NtUserGetAncestor'
- syscalltable[427] = 'NtSetVolumeInformationFile'
- syscalltable[4270] = 'NtGdiGetOutlineTextMetricsInternalW'
- syscalltable[4271] = 'NtGdiSetBitmapBits'
- syscalltable[4272] = 'NtUserCloseWindowStation'
- syscalltable[4273] = 'NtUserGetDoubleClickTime'
- syscalltable[4274] = 'NtUserEnableScrollBar'
- syscalltable[4275] = 'NtGdiCreateSolidBrush'
- syscalltable[4276] = 'NtUserGetClassInfoEx'
- syscalltable[4277] = 'NtGdiCreateClientObj'
- syscalltable[4278] = 'NtUserUnregisterClass'
- syscalltable[4279] = 'NtUserDeleteMenu'
- syscalltable[428] = 'NtSetWnfProcessNotificationEvent'
- syscalltable[4280] = 'NtGdiRectInRegion'
- syscalltable[4281] = 'NtUserScrollWindowEx'
- syscalltable[4282] = 'NtGdiGetPixel'
- syscalltable[4283] = 'NtUserSetClassLong'
- syscalltable[4284] = 'NtUserGetMenuBarInfo'
- syscalltable[4285] = 'NtGdiGetNearestPaletteIndex'
- syscalltable[4286] = 'NtGdiGetCharWidthW'
- syscalltable[4287] = 'NtUserInvalidateRgn'
- syscalltable[4288] = 'NtUserGetClipboardOwner'
- syscalltable[4289] = 'NtUserSetWindowRgn'
- syscalltable[429] = 'NtShutdownSystem'
- syscalltable[4290] = 'NtUserBitBltSysBmp'
- syscalltable[4291] = 'NtGdiGetCharWidthInfo'
- syscalltable[4292] = 'NtUserValidateRect'
- syscalltable[4293] = 'NtUserCloseClipboard'
- syscalltable[4294] = 'NtUserOpenClipboard'
- syscalltable[4295] = 'NtUserSetClipboardData'
- syscalltable[4296] = 'NtUserEnableMenuItem'
- syscalltable[4297] = 'NtUserAlterWindowStyle'
- syscalltable[4298] = 'NtGdiFillRgn'
- syscalltable[4299] = 'NtUserGetWindowPlacement'
- syscalltable[43] = 'NtReplyWaitReceivePortEx'
- syscalltable[430] = 'NtShutdownWorkerFactory'
- syscalltable[4300] = 'NtGdiModifyWorldTransform'
- syscalltable[4301] = 'NtGdiGetFontData'
- syscalltable[4302] = 'NtUserGetOpenClipboardWindow'
- syscalltable[4303] = 'NtUserSetThreadState'
- syscalltable[4304] = 'NtGdiOpenDCW'
- syscalltable[4305] = 'NtUserTrackMouseEvent'
- syscalltable[4306] = 'NtGdiGetTransform'
- syscalltable[4307] = 'NtUserDestroyMenu'
- syscalltable[4308] = 'NtGdiGetBitmapBits'
- syscalltable[4309] = 'NtUserConsoleControl'
- syscalltable[431] = 'NtSignalAndWaitForSingleObject'
- syscalltable[4310] = 'NtUserSetActiveWindow'
- syscalltable[4311] = 'NtUserSetInformationThread'
- syscalltable[4312] = 'NtUserSetWindowPlacement'
- syscalltable[4313] = 'NtUserGetControlColor'
- syscalltable[4314] = 'NtGdiSetMetaRgn'
- syscalltable[4315] = 'NtGdiSetMiterLimit'
- syscalltable[4316] = 'NtGdiSetVirtualResolution'
- syscalltable[4317] = 'NtGdiGetRasterizerCaps'
- syscalltable[4318] = 'NtUserSetWindowWord'
- syscalltable[4319] = 'NtUserGetClipboardFormatName'
- syscalltable[432] = 'NtSinglePhaseReject'
- syscalltable[4320] = 'NtUserRealInternalGetMessage'
- syscalltable[4321] = 'NtUserCreateLocalMemHandle'
- syscalltable[4322] = 'NtUserAttachThreadInput'
- syscalltable[4323] = 'NtGdiCreateHalftonePalette'
- syscalltable[4324] = 'NtUserPaintMenuBar'
- syscalltable[4325] = 'NtUserSetKeyboardState'
- syscalltable[4326] = 'NtGdiCombineTransform'
- syscalltable[4327] = 'NtUserCreateAcceleratorTable'
- syscalltable[4328] = 'NtUserGetCursorFrameInfo'
- syscalltable[4329] = 'NtUserGetAltTabInfo'
- syscalltable[433] = 'NtStartProfile'
- syscalltable[4330] = 'NtUserGetCaretBlinkTime'
- syscalltable[4331] = 'NtGdiQueryFontAssocInfo'
- syscalltable[4332] = 'NtUserProcessConnect'
- syscalltable[4333] = 'NtUserEnumDisplayDevices'
- syscalltable[4334] = 'NtUserEmptyClipboard'
- syscalltable[4335] = 'NtUserGetClipboardData'
- syscalltable[4336] = 'NtUserRemoveMenu'
- syscalltable[4337] = 'NtGdiSetBoundsRect'
- syscalltable[4338] = 'NtGdiGetBitmapDimension'
- syscalltable[4339] = 'NtUserConvertMemHandle'
- syscalltable[434] = 'NtStopProfile'
- syscalltable[4340] = 'NtUserDestroyAcceleratorTable'
- syscalltable[4341] = 'NtUserGetGUIThreadInfo'
- syscalltable[4342] = 'NtGdiCloseFigure'
- syscalltable[4343] = 'NtUserSetWindowsHookAW'
- syscalltable[4344] = 'NtUserSetMenuDefaultItem'
- syscalltable[4345] = 'NtUserCheckMenuItem'
- syscalltable[4346] = 'NtUserSetWinEventHook'
- syscalltable[4347] = 'NtUserUnhookWinEvent'
- syscalltable[4348] = 'NtUserLockWindowUpdate'
- syscalltable[4349] = 'NtUserSetSystemMenu'
- syscalltable[435] = 'NtSubscribeWnfStateChange'
- syscalltable[4350] = 'NtUserThunkedMenuInfo'
- syscalltable[4351] = 'NtGdiBeginPath'
- syscalltable[4352] = 'NtGdiEndPath'
- syscalltable[4353] = 'NtGdiFillPath'
- syscalltable[4354] = 'NtUserCallHwnd'
- syscalltable[4355] = 'NtUserDdeInitialize'
- syscalltable[4356] = 'NtUserModifyUserStartupInfoFlags'
- syscalltable[4357] = 'NtUserCountClipboardFormats'
- syscalltable[4358] = 'NtGdiAddFontMemResourceEx'
- syscalltable[4359] = 'NtGdiEqualRgn'
- syscalltable[436] = 'NtSuspendProcess'
- syscalltable[4360] = 'NtGdiGetSystemPaletteUse'
- syscalltable[4361] = 'NtGdiRemoveFontMemResourceEx'
- syscalltable[4362] = 'NtUserEnumDisplaySettings'
- syscalltable[4363] = 'NtUserPaintDesktop'
- syscalltable[4364] = 'NtGdiExtEscape'
- syscalltable[4365] = 'NtGdiSetBitmapDimension'
- syscalltable[4366] = 'NtGdiSetFontEnumeration'
- syscalltable[4367] = 'NtUserChangeClipboardChain'
- syscalltable[4368] = 'NtUserSetClipboardViewer'
- syscalltable[4369] = 'NtUserShowWindowAsync'
- syscalltable[437] = 'NtSuspendThread'
- syscalltable[4370] = 'NtGdiCreateColorSpace'
- syscalltable[4371] = 'NtGdiDeleteColorSpace'
- syscalltable[4372] = 'NtUserActivateKeyboardLayout'
- syscalltable[4373] = 'NtBindCompositionSurface'
- syscalltable[4374] = 'NtCloseCompositionInputSink'
- syscalltable[4375] = 'NtCompositionInputThread'
- syscalltable[4376] = 'NtCompositionSetDropTarget'
- syscalltable[4377] = 'NtConfigureInputSpace'
- syscalltable[4378] = 'NtCreateCompositionInputSink'
- syscalltable[4379] = 'NtCreateCompositionSurfaceHandle'
- syscalltable[438] = 'NtSystemDebugControl'
- syscalltable[4380] = 'NtCreateImplicitCompositionInputSink'
- syscalltable[4381] = 'NtDCompositionAddCrossDeviceVisualChild'
- syscalltable[4382] = 'NtDCompositionBeginFrame'
- syscalltable[4383] = 'NtDCompositionCommitChannel'
- syscalltable[4384] = 'NtDCompositionCommitSynchronizationObject'
- syscalltable[4385] = 'NtDCompositionConfirmFrame'
- syscalltable[4386] = 'NtDCompositionConnectPipe'
- syscalltable[4387] = 'NtDCompositionCreateAndBindSharedSection'
- syscalltable[4388] = 'NtDCompositionCreateChannel'
- syscalltable[4389] = 'NtDCompositionCreateConnection'
- syscalltable[439] = 'NtTerminateEnclave'
- syscalltable[4390] = 'NtDCompositionCreateDwmChannel'
- syscalltable[4391] = 'NtDCompositionCreateSharedVisualHandle'
- syscalltable[4392] = 'NtDCompositionCreateSynchronizationObject'
- syscalltable[4393] = 'NtDCompositionDestroyChannel'
- syscalltable[4394] = 'NtDCompositionDestroyConnection'
- syscalltable[4395] = 'NtDCompositionDiscardFrame'
- syscalltable[4396] = 'NtDCompositionDuplicateHandleToProcess'
- syscalltable[4397] = 'NtDCompositionDuplicateSwapchainHandleToDwm'
- syscalltable[4398] = 'NtDCompositionEnableMMCSS'
- syscalltable[4399] = 'NtDCompositionGetBatchId'
- syscalltable[44] = 'NtTerminateProcess'
- syscalltable[440] = 'NtTerminateJobObject'
- syscalltable[4400] = 'NtDCompositionGetChannels'
- syscalltable[4401] = 'NtDCompositionGetConnectionBatch'
- syscalltable[4402] = 'NtDCompositionGetDeletedResources'
- syscalltable[4403] = 'NtDCompositionGetFrameLegacyTokens'
- syscalltable[4404] = 'NtDCompositionGetFrameStatistics'
- syscalltable[4405] = 'NtDCompositionGetFrameSurfaceUpdates'
- syscalltable[4406] = 'NtDCompositionGetMaterialProperty'
- syscalltable[4407] = 'NtDCompositionProcessChannelBatchBuffer'
- syscalltable[4408] = 'NtDCompositionReferenceSharedResourceOnDwmChannel'
- syscalltable[4409] = 'NtDCompositionRegisterThumbnailVisual'
- syscalltable[441] = 'NtTestAlert'
- syscalltable[4410] = 'NtDCompositionRegisterVirtualDesktopVisual'
- syscalltable[4411] = 'NtDCompositionReleaseAllResources'
- syscalltable[4412] = 'NtDCompositionRemoveCrossDeviceVisualChild'
- syscalltable[4413] = 'NtDCompositionRetireFrame'
- syscalltable[4414] = 'NtDCompositionSetChannelCommitCompletionEvent'
- syscalltable[4415] = 'NtDCompositionSetChannelConnectionId'
- syscalltable[4416] = 'NtDCompositionSetChildRootVisual'
- syscalltable[4417] = 'NtDCompositionSetDebugCounter'
- syscalltable[4418] = 'NtDCompositionSetMaterialProperty'
- syscalltable[4419] = 'NtDCompositionSubmitDWMBatch'
- syscalltable[442] = 'NtThawRegistry'
- syscalltable[4420] = 'NtDCompositionSuspendAnimations'
- syscalltable[4421] = 'NtDCompositionSynchronize'
- syscalltable[4422] = 'NtDCompositionTelemetryAnimationScenarioBegin'
- syscalltable[4423] = 'NtDCompositionTelemetryAnimationScenarioReference'
- syscalltable[4424] = 'NtDCompositionTelemetryAnimationScenarioUnreference'
- syscalltable[4425] = 'NtDCompositionTelemetrySetApplicationId'
- syscalltable[4426] = 'NtDCompositionTelemetryTouchInteractionBegin'
- syscalltable[4427] = 'NtDCompositionTelemetryTouchInteractionEnd'
- syscalltable[4428] = 'NtDCompositionTelemetryTouchInteractionUpdate'
- syscalltable[4429] = 'NtDCompositionUpdatePointerCapture'
- syscalltable[443] = 'NtThawTransactions'
- syscalltable[4430] = 'NtDCompositionWaitForChannel'
- syscalltable[4431] = 'NtDesktopCaptureBits'
- syscalltable[4432] = 'NtDuplicateCompositionInputSink'
- syscalltable[4433] = 'NtDxgkCreateTrackedWorkload'
- syscalltable[4434] = 'NtDxgkDestroyTrackedWorkload'
- syscalltable[4435] = 'NtDxgkEndTrackedWorkload'
- syscalltable[4436] = 'NtDxgkGetAvailableTrackedWorkloadIndex'
- syscalltable[4437] = 'NtDxgkGetProcessList'
- syscalltable[4438] = 'NtDxgkGetTrackedWorkloadStatistics'
- syscalltable[4439] = 'NtDxgkRegisterVailProcess'
- syscalltable[444] = 'NtTraceControl'
- syscalltable[4440] = 'NtDxgkResetTrackedWorkload'
- syscalltable[4441] = 'NtDxgkSubmitPresentBltToHwQueue'
- syscalltable[4442] = 'NtDxgkSubmitPresentToHwQueue'
- syscalltable[4443] = 'NtDxgkUpdateTrackedWorkload'
- syscalltable[4444] = 'NtDxgkVailConnect'
- syscalltable[4445] = 'NtDxgkVailDisconnect'
- syscalltable[4446] = 'NtDxgkVailPromoteCompositionSurface'
- syscalltable[4447] = 'NtEnableOneCoreTransformMode'
- syscalltable[4448] = 'NtFlipObjectAddContent'
- syscalltable[4449] = 'NtFlipObjectAddPoolBuffer'
- syscalltable[445] = 'NtTranslateFilePath'
- syscalltable[4450] = 'NtFlipObjectConsumerAcquirePresent'
- syscalltable[4451] = 'NtFlipObjectConsumerAdjustUsageReference'
- syscalltable[4452] = 'NtFlipObjectConsumerBeginProcessPresent'
- syscalltable[4453] = 'NtFlipObjectConsumerEndProcessPresent'
- syscalltable[4454] = 'NtFlipObjectConsumerPostMessage'
- syscalltable[4455] = 'NtFlipObjectConsumerQueryBufferInfo'
- syscalltable[4456] = 'NtFlipObjectCreate'
- syscalltable[4457] = 'NtFlipObjectDisconnectEndpoint'
- syscalltable[4458] = 'NtFlipObjectOpen'
- syscalltable[4459] = 'NtFlipObjectPresentCancel'
- syscalltable[446] = 'NtUmsThreadYield'
- syscalltable[4460] = 'NtFlipObjectQueryBufferAvailableEvent'
- syscalltable[4461] = 'NtFlipObjectQueryEndpointConnected'
- syscalltable[4462] = 'NtFlipObjectQueryNextMessageToProducer'
- syscalltable[4463] = 'NtFlipObjectReadNextMessageToProducer'
- syscalltable[4464] = 'NtFlipObjectRemoveContent'
- syscalltable[4465] = 'NtFlipObjectRemovePoolBuffer'
- syscalltable[4466] = 'NtFlipObjectSetContent'
- syscalltable[4467] = 'NtGdiAbortDoc'
- syscalltable[4468] = 'NtGdiAbortPath'
- syscalltable[4469] = 'NtGdiAddEmbFontToDC'
- syscalltable[447] = 'NtUnloadDriver'
- syscalltable[4470] = 'NtGdiAddFontResourceW'
- syscalltable[4471] = 'NtGdiAddInitialFonts'
- syscalltable[4472] = 'NtGdiAddRemoteFontToDC'
- syscalltable[4473] = 'NtGdiAddRemoteMMInstanceToDC'
- syscalltable[4474] = 'NtGdiAngleArc'
- syscalltable[4475] = 'NtGdiAnyLinkedFonts'
- syscalltable[4476] = 'NtGdiArcInternal'
- syscalltable[4477] = 'NtGdiBRUSHOBJ_DeleteRbrush'
- syscalltable[4478] = 'NtGdiBRUSHOBJ_hGetColorTransform'
- syscalltable[4479] = 'NtGdiBRUSHOBJ_pvAllocRbrush'
- syscalltable[448] = 'NtUnloadKey'
- syscalltable[4480] = 'NtGdiBRUSHOBJ_pvGetRbrush'
- syscalltable[4481] = 'NtGdiBRUSHOBJ_ulGetBrushColor'
- syscalltable[4482] = 'NtGdiBeginGdiRendering'
- syscalltable[4483] = 'NtGdiCLIPOBJ_bEnum'
- syscalltable[4484] = 'NtGdiCLIPOBJ_cEnumStart'
- syscalltable[4485] = 'NtGdiCLIPOBJ_ppoGetPath'
- syscalltable[4486] = 'NtGdiCancelDC'
- syscalltable[4487] = 'NtGdiChangeGhostFont'
- syscalltable[4488] = 'NtGdiCheckBitmapBits'
- syscalltable[4489] = 'NtGdiClearBitmapAttributes'
- syscalltable[449] = 'NtUnloadKey2'
- syscalltable[4490] = 'NtGdiClearBrushAttributes'
- syscalltable[4491] = 'NtGdiColorCorrectPalette'
- syscalltable[4492] = 'NtGdiConfigureOPMProtectedOutput'
- syscalltable[4493] = 'NtGdiConvertMetafileRect'
- syscalltable[4494] = 'NtGdiCreateBitmapFromDxSurface'
- syscalltable[4495] = 'NtGdiCreateBitmapFromDxSurface2'
- syscalltable[4496] = 'NtGdiCreateColorTransform'
- syscalltable[4497] = 'NtGdiCreateEllipticRgn'
- syscalltable[4498] = 'NtGdiCreateHatchBrushInternal'
- syscalltable[4499] = 'NtGdiCreateMetafileDC'
- syscalltable[45] = 'NtSetEventBoostPriority'
- syscalltable[450] = 'NtUnloadKeyEx'
- syscalltable[4500] = 'NtGdiCreateOPMProtectedOutput'
- syscalltable[4501] = 'NtGdiCreateOPMProtectedOutputs'
- syscalltable[4502] = 'NtGdiCreateRoundRectRgn'
- syscalltable[4503] = 'NtGdiCreateServerMetaFile'
- syscalltable[4504] = 'NtGdiCreateSessionMappedDIBSection'
- syscalltable[4505] = 'NtGdiDDCCIGetCapabilitiesString'
- syscalltable[4506] = 'NtGdiDDCCIGetCapabilitiesStringLength'
- syscalltable[4507] = 'NtGdiDDCCIGetTimingReport'
- syscalltable[4508] = 'NtGdiDDCCIGetVCPFeature'
- syscalltable[4509] = 'NtGdiDDCCISaveCurrentSettings'
- syscalltable[451] = 'NtUnlockFile'
- syscalltable[4510] = 'NtGdiDDCCISetVCPFeature'
- syscalltable[4511] = 'NtGdiDdCreateFullscreenSprite'
- syscalltable[4512] = 'NtGdiDdDDIAbandonSwapChain'
- syscalltable[4513] = 'NtGdiDdDDIAcquireKeyedMutex'
- syscalltable[4514] = 'NtGdiDdDDIAcquireKeyedMutex2'
- syscalltable[4515] = 'NtGdiDdDDIAcquireSwapChain'
- syscalltable[4516] = 'NtGdiDdDDIAddSurfaceToSwapChain'
- syscalltable[4517] = 'NtGdiDdDDIAdjustFullscreenGamma'
- syscalltable[4518] = 'NtGdiDdDDICacheHybridQueryValue'
- syscalltable[4519] = 'NtGdiDdDDIChangeVideoMemoryReservation'
- syscalltable[452] = 'NtUnlockVirtualMemory'
- syscalltable[4520] = 'NtGdiDdDDICheckExclusiveOwnership'
- syscalltable[4521] = 'NtGdiDdDDICheckMonitorPowerState'
- syscalltable[4522] = 'NtGdiDdDDICheckMultiPlaneOverlaySupport'
- syscalltable[4523] = 'NtGdiDdDDICheckMultiPlaneOverlaySupport2'
- syscalltable[4524] = 'NtGdiDdDDICheckMultiPlaneOverlaySupport3'
- syscalltable[4525] = 'NtGdiDdDDICheckOcclusion'
- syscalltable[4526] = 'NtGdiDdDDICheckSharedResourceAccess'
- syscalltable[4527] = 'NtGdiDdDDICheckVidPnExclusiveOwnership'
- syscalltable[4528] = 'NtGdiDdDDICloseAdapter'
- syscalltable[4529] = 'NtGdiDdDDIConfigureSharedResource'
- syscalltable[453] = 'NtUnmapViewOfSectionEx'
- syscalltable[4530] = 'NtGdiDdDDICreateAllocation'
- syscalltable[4531] = 'NtGdiDdDDICreateBundleObject'
- syscalltable[4532] = 'NtGdiDdDDICreateContext'
- syscalltable[4533] = 'NtGdiDdDDICreateContextVirtual'
- syscalltable[4534] = 'NtGdiDdDDICreateDCFromMemory'
- syscalltable[4535] = 'NtGdiDdDDICreateDevice'
- syscalltable[4536] = 'NtGdiDdDDICreateHwContext'
- syscalltable[4537] = 'NtGdiDdDDICreateHwQueue'
- syscalltable[4538] = 'NtGdiDdDDICreateKeyedMutex'
- syscalltable[4539] = 'NtGdiDdDDICreateKeyedMutex2'
- syscalltable[454] = 'NtUnsubscribeWnfStateChange'
- syscalltable[4540] = 'NtGdiDdDDICreateOutputDupl'
- syscalltable[4541] = 'NtGdiDdDDICreateOverlay'
- syscalltable[4542] = 'NtGdiDdDDICreatePagingQueue'
- syscalltable[4543] = 'NtGdiDdDDICreateProtectedSession'
- syscalltable[4544] = 'NtGdiDdDDICreateSwapChain'
- syscalltable[4545] = 'NtGdiDdDDICreateSynchronizationObject'
- syscalltable[4546] = 'NtGdiDdDDIDDisplayEnum'
- syscalltable[4547] = 'NtGdiDdDDIDestroyAllocation'
- syscalltable[4548] = 'NtGdiDdDDIDestroyAllocation2'
- syscalltable[4549] = 'NtGdiDdDDIDestroyContext'
- syscalltable[455] = 'NtUpdateWnfStateData'
- syscalltable[4550] = 'NtGdiDdDDIDestroyDCFromMemory'
- syscalltable[4551] = 'NtGdiDdDDIDestroyDevice'
- syscalltable[4552] = 'NtGdiDdDDIDestroyHwContext'
- syscalltable[4553] = 'NtGdiDdDDIDestroyHwQueue'
- syscalltable[4554] = 'NtGdiDdDDIDestroyKeyedMutex'
- syscalltable[4555] = 'NtGdiDdDDIDestroyOutputDupl'
- syscalltable[4556] = 'NtGdiDdDDIDestroyOverlay'
- syscalltable[4557] = 'NtGdiDdDDIDestroyPagingQueue'
- syscalltable[4558] = 'NtGdiDdDDIDestroyProtectedSession'
- syscalltable[4559] = 'NtGdiDdDDIDestroySynchronizationObject'
- syscalltable[456] = 'NtVdmControl'
- syscalltable[4560] = 'NtGdiDdDDIDispMgrCreate'
- syscalltable[4561] = 'NtGdiDdDDIDispMgrSourceOperation'
- syscalltable[4562] = 'NtGdiDdDDIDispMgrTargetOperation'
- syscalltable[4563] = 'NtGdiDdDDIEnumAdapters'
- syscalltable[4564] = 'NtGdiDdDDIEnumAdapters2'
- syscalltable[4565] = 'NtGdiDdDDIEscape'
- syscalltable[4566] = 'NtGdiDdDDIEvict'
- syscalltable[4567] = 'NtGdiDdDDIExtractBundleObject'
- syscalltable[4568] = 'NtGdiDdDDIFlipOverlay'
- syscalltable[4569] = 'NtGdiDdDDIFlushHeapTransitions'
- syscalltable[457] = 'NtWaitForAlertByThreadId'
- syscalltable[4570] = 'NtGdiDdDDIFreeGpuVirtualAddress'
- syscalltable[4571] = 'NtGdiDdDDIGetAllocationPriority'
- syscalltable[4572] = 'NtGdiDdDDIGetCachedHybridQueryValue'
- syscalltable[4573] = 'NtGdiDdDDIGetContextInProcessSchedulingPriority'
- syscalltable[4574] = 'NtGdiDdDDIGetContextSchedulingPriority'
- syscalltable[4575] = 'NtGdiDdDDIGetDWMVerticalBlankEvent'
- syscalltable[4576] = 'NtGdiDdDDIGetDeviceState'
- syscalltable[4577] = 'NtGdiDdDDIGetDisplayModeList'
- syscalltable[4578] = 'NtGdiDdDDIGetMemoryBudgetTarget'
- syscalltable[4579] = 'NtGdiDdDDIGetMultiPlaneOverlayCaps'
- syscalltable[458] = 'NtWaitForDebugEvent'
- syscalltable[4580] = 'NtGdiDdDDIGetMultisampleMethodList'
- syscalltable[4581] = 'NtGdiDdDDIGetOverlayState'
- syscalltable[4582] = 'NtGdiDdDDIGetPostCompositionCaps'
- syscalltable[4583] = 'NtGdiDdDDIGetPresentHistory'
- syscalltable[4584] = 'NtGdiDdDDIGetPresentQueueEvent'
- syscalltable[4585] = 'NtGdiDdDDIGetProcessDeviceRemovalSupport'
- syscalltable[4586] = 'NtGdiDdDDIGetProcessSchedulingPriorityBand'
- syscalltable[4587] = 'NtGdiDdDDIGetProcessSchedulingPriorityClass'
- syscalltable[4588] = 'NtGdiDdDDIGetResourcePresentPrivateDriverData'
- syscalltable[4589] = 'NtGdiDdDDIGetRuntimeData'
- syscalltable[459] = 'NtWaitForKeyedEvent'
- syscalltable[4590] = 'NtGdiDdDDIGetScanLine'
- syscalltable[4591] = 'NtGdiDdDDIGetSetSwapChainMetadata'
- syscalltable[4592] = 'NtGdiDdDDIGetSharedPrimaryHandle'
- syscalltable[4593] = 'NtGdiDdDDIGetSharedResourceAdapterLuid'
- syscalltable[4594] = 'NtGdiDdDDIGetSharedResourceAdapterLuidFlipManager'
- syscalltable[4595] = 'NtGdiDdDDIGetYieldPercentage'
- syscalltable[4596] = 'NtGdiDdDDIInvalidateActiveVidPn'
- syscalltable[4597] = 'NtGdiDdDDIInvalidateCache'
- syscalltable[4598] = 'NtGdiDdDDILock'
- syscalltable[4599] = 'NtGdiDdDDILock2'
- syscalltable[46] = 'NtReadFileScatter'
- syscalltable[460] = 'NtWaitForWorkViaWorkerFactory'
- syscalltable[4600] = 'NtGdiDdDDIMakeResident'
- syscalltable[4601] = 'NtGdiDdDDIMapGpuVirtualAddress'
- syscalltable[4602] = 'NtGdiDdDDIMarkDeviceAsError'
- syscalltable[4603] = 'NtGdiDdDDINetDispGetNextChunkInfo'
- syscalltable[4604] = 'NtGdiDdDDINetDispQueryMiracastDisplayDeviceStatus'
- syscalltable[4605] = 'NtGdiDdDDINetDispQueryMiracastDisplayDeviceSupport'
- syscalltable[4606] = 'NtGdiDdDDINetDispStartMiracastDisplayDevice'
- syscalltable[4607] = 'NtGdiDdDDINetDispStopMiracastDisplayDevice'
- syscalltable[4608] = 'NtGdiDdDDINetDispStopSessions'
- syscalltable[4609] = 'NtGdiDdDDIOfferAllocations'
- syscalltable[461] = 'NtWaitHighEventPair'
- syscalltable[4610] = 'NtGdiDdDDIOpenAdapterFromDeviceName'
- syscalltable[4611] = 'NtGdiDdDDIOpenAdapterFromHdc'
- syscalltable[4612] = 'NtGdiDdDDIOpenAdapterFromLuid'
- syscalltable[4613] = 'NtGdiDdDDIOpenBundleObjectNtHandleFromName'
- syscalltable[4614] = 'NtGdiDdDDIOpenKeyedMutex'
- syscalltable[4615] = 'NtGdiDdDDIOpenKeyedMutex2'
- syscalltable[4616] = 'NtGdiDdDDIOpenKeyedMutexFromNtHandle'
- syscalltable[4617] = 'NtGdiDdDDIOpenNtHandleFromName'
- syscalltable[4618] = 'NtGdiDdDDIOpenProtectedSessionFromNtHandle'
- syscalltable[4619] = 'NtGdiDdDDIOpenResource'
- syscalltable[462] = 'NtWaitLowEventPair'
- syscalltable[4620] = 'NtGdiDdDDIOpenResourceFromNtHandle'
- syscalltable[4621] = 'NtGdiDdDDIOpenSwapChain'
- syscalltable[4622] = 'NtGdiDdDDIOpenSyncObjectFromNtHandle'
- syscalltable[4623] = 'NtGdiDdDDIOpenSyncObjectFromNtHandle2'
- syscalltable[4624] = 'NtGdiDdDDIOpenSyncObjectNtHandleFromName'
- syscalltable[4625] = 'NtGdiDdDDIOpenSynchronizationObject'
- syscalltable[4626] = 'NtGdiDdDDIOutputDuplGetFrameInfo'
- syscalltable[4627] = 'NtGdiDdDDIOutputDuplGetMetaData'
- syscalltable[4628] = 'NtGdiDdDDIOutputDuplGetPointerShapeData'
- syscalltable[4629] = 'NtGdiDdDDIOutputDuplPresent'
- syscalltable[4630] = 'NtGdiDdDDIOutputDuplReleaseFrame'
- syscalltable[4631] = 'NtGdiDdDDIPinDirectFlipResources'
- syscalltable[4632] = 'NtGdiDdDDIPollDisplayChildren'
- syscalltable[4633] = 'NtGdiDdDDIPresent'
- syscalltable[4634] = 'NtGdiDdDDIPresentMultiPlaneOverlay'
- syscalltable[4635] = 'NtGdiDdDDIPresentMultiPlaneOverlay2'
- syscalltable[4636] = 'NtGdiDdDDIPresentMultiPlaneOverlay3'
- syscalltable[4637] = 'NtGdiDdDDIPresentRedirected'
- syscalltable[4638] = 'NtGdiDdDDIQueryAdapterInfo'
- syscalltable[4639] = 'NtGdiDdDDIQueryAllocationResidency'
- syscalltable[4640] = 'NtGdiDdDDIQueryClockCalibration'
- syscalltable[4641] = 'NtGdiDdDDIQueryFSEBlock'
- syscalltable[4642] = 'NtGdiDdDDIQueryProcessOfferInfo'
- syscalltable[4643] = 'NtGdiDdDDIQueryProtectedSessionInfoFromNtHandle'
- syscalltable[4644] = 'NtGdiDdDDIQueryProtectedSessionStatus'
- syscalltable[4645] = 'NtGdiDdDDIQueryRemoteVidPnSourceFromGdiDisplayName'
- syscalltable[4646] = 'NtGdiDdDDIQueryResourceInfo'
- syscalltable[4647] = 'NtGdiDdDDIQueryResourceInfoFromNtHandle'
- syscalltable[4648] = 'NtGdiDdDDIQueryStatistics'
- syscalltable[4649] = 'NtGdiDdDDIQueryVidPnExclusiveOwnership'
- syscalltable[4650] = 'NtGdiDdDDIQueryVideoMemoryInfo'
- syscalltable[4651] = 'NtGdiDdDDIReclaimAllocations'
- syscalltable[4652] = 'NtGdiDdDDIReclaimAllocations2'
- syscalltable[4653] = 'NtGdiDdDDIReleaseKeyedMutex'
- syscalltable[4654] = 'NtGdiDdDDIReleaseKeyedMutex2'
- syscalltable[4655] = 'NtGdiDdDDIReleaseProcessVidPnSourceOwners'
- syscalltable[4656] = 'NtGdiDdDDIReleaseSwapChain'
- syscalltable[4657] = 'NtGdiDdDDIRemoveSurfaceFromSwapChain'
- syscalltable[4658] = 'NtGdiDdDDIRender'
- syscalltable[4659] = 'NtGdiDdDDIReserveGpuVirtualAddress'
- syscalltable[4660] = 'NtGdiDdDDISetAllocationPriority'
- syscalltable[4661] = 'NtGdiDdDDISetContextInProcessSchedulingPriority'
- syscalltable[4662] = 'NtGdiDdDDISetContextSchedulingPriority'
- syscalltable[4663] = 'NtGdiDdDDISetDisplayMode'
- syscalltable[4664] = 'NtGdiDdDDISetDisplayPrivateDriverFormat'
- syscalltable[4665] = 'NtGdiDdDDISetDodIndirectSwapchain'
- syscalltable[4666] = 'NtGdiDdDDISetFSEBlock'
- syscalltable[4667] = 'NtGdiDdDDISetGammaRamp'
- syscalltable[4668] = 'NtGdiDdDDISetHwProtectionTeardownRecovery'
- syscalltable[4669] = 'NtGdiDdDDISetMemoryBudgetTarget'
- syscalltable[4670] = 'NtGdiDdDDISetMonitorColorSpaceTransform'
- syscalltable[4671] = 'NtGdiDdDDISetProcessDeviceRemovalSupport'
- syscalltable[4672] = 'NtGdiDdDDISetProcessSchedulingPriorityBand'
- syscalltable[4673] = 'NtGdiDdDDISetProcessSchedulingPriorityClass'
- syscalltable[4674] = 'NtGdiDdDDISetQueuedLimit'
- syscalltable[4675] = 'NtGdiDdDDISetStablePowerState'
- syscalltable[4676] = 'NtGdiDdDDISetStereoEnabled'
- syscalltable[4677] = 'NtGdiDdDDISetSyncRefreshCountWaitTarget'
- syscalltable[4678] = 'NtGdiDdDDISetVidPnSourceHwProtection'
- syscalltable[4679] = 'NtGdiDdDDISetVidPnSourceOwner'
- syscalltable[4680] = 'NtGdiDdDDISetYieldPercentage'
- syscalltable[4681] = 'NtGdiDdDDIShareObjects'
- syscalltable[4682] = 'NtGdiDdDDISharedPrimaryLockNotification'
- syscalltable[4683] = 'NtGdiDdDDISharedPrimaryUnLockNotification'
- syscalltable[4684] = 'NtGdiDdDDISignalSynchronizationObject'
- syscalltable[4685] = 'NtGdiDdDDISignalSynchronizationObjectFromCpu'
- syscalltable[4686] = 'NtGdiDdDDISignalSynchronizationObjectFromGpu'
- syscalltable[4687] = 'NtGdiDdDDISignalSynchronizationObjectFromGpu2'
- syscalltable[4688] = 'NtGdiDdDDISubmitCommand'
- syscalltable[4689] = 'NtGdiDdDDISubmitCommandToHwQueue'
- syscalltable[4690] = 'NtGdiDdDDISubmitSignalSyncObjectsToHwQueue'
- syscalltable[4691] = 'NtGdiDdDDISubmitWaitForSyncObjectsToHwQueue'
- syscalltable[4692] = 'NtGdiDdDDITrimProcessCommitment'
- syscalltable[4693] = 'NtGdiDdDDIUnOrderedPresentSwapChain'
- syscalltable[4694] = 'NtGdiDdDDIUnlock'
- syscalltable[4695] = 'NtGdiDdDDIUnlock2'
- syscalltable[4696] = 'NtGdiDdDDIUnpinDirectFlipResources'
- syscalltable[4697] = 'NtGdiDdDDIUpdateAllocationProperty'
- syscalltable[4698] = 'NtGdiDdDDIUpdateGpuVirtualAddress'
- syscalltable[4699] = 'NtGdiDdDDIUpdateOverlay'
- syscalltable[47] = 'NtOpenThreadTokenEx'
- syscalltable[4700] = 'NtGdiDdDDIWaitForIdle'
- syscalltable[4701] = 'NtGdiDdDDIWaitForSynchronizationObject'
- syscalltable[4702] = 'NtGdiDdDDIWaitForSynchronizationObjectFromCpu'
- syscalltable[4703] = 'NtGdiDdDDIWaitForSynchronizationObjectFromGpu'
- syscalltable[4704] = 'NtGdiDdDDIWaitForVerticalBlankEvent'
- syscalltable[4705] = 'NtGdiDdDDIWaitForVerticalBlankEvent2'
- syscalltable[4706] = 'NtGdiDdDestroyFullscreenSprite'
- syscalltable[4707] = 'NtGdiDdNotifyFullscreenSpriteUpdate'
- syscalltable[4708] = 'NtGdiDdQueryVisRgnUniqueness'
- syscalltable[4709] = 'NtGdiDeleteColorTransform'
- syscalltable[4710] = 'NtGdiDescribePixelFormat'
- syscalltable[4711] = 'NtGdiDestroyOPMProtectedOutput'
- syscalltable[4712] = 'NtGdiDestroyPhysicalMonitor'
- syscalltable[4713] = 'NtGdiDoBanding'
- syscalltable[4714] = 'NtGdiDrawEscape'
- syscalltable[4715] = 'NtGdiDwmCreatedBitmapRemotingOutput'
- syscalltable[4716] = 'NtGdiEllipse'
- syscalltable[4717] = 'NtGdiEnableEudc'
- syscalltable[4718] = 'NtGdiEndDoc'
- syscalltable[4719] = 'NtGdiEndGdiRendering'
- syscalltable[4720] = 'NtGdiEndPage'
- syscalltable[4721] = 'NtGdiEngAlphaBlend'
- syscalltable[4722] = 'NtGdiEngAssociateSurface'
- syscalltable[4723] = 'NtGdiEngBitBlt'
- syscalltable[4724] = 'NtGdiEngCheckAbort'
- syscalltable[4725] = 'NtGdiEngComputeGlyphSet'
- syscalltable[4726] = 'NtGdiEngCopyBits'
- syscalltable[4727] = 'NtGdiEngCreateBitmap'
- syscalltable[4728] = 'NtGdiEngCreateClip'
- syscalltable[4729] = 'NtGdiEngCreateDeviceBitmap'
- syscalltable[4730] = 'NtGdiEngCreateDeviceSurface'
- syscalltable[4731] = 'NtGdiEngCreatePalette'
- syscalltable[4732] = 'NtGdiEngDeleteClip'
- syscalltable[4733] = 'NtGdiEngDeletePalette'
- syscalltable[4734] = 'NtGdiEngDeletePath'
- syscalltable[4735] = 'NtGdiEngDeleteSurface'
- syscalltable[4736] = 'NtGdiEngEraseSurface'
- syscalltable[4737] = 'NtGdiEngFillPath'
- syscalltable[4738] = 'NtGdiEngGradientFill'
- syscalltable[4739] = 'NtGdiEngLineTo'
- syscalltable[4740] = 'NtGdiEngLockSurface'
- syscalltable[4741] = 'NtGdiEngMarkBandingSurface'
- syscalltable[4742] = 'NtGdiEngPaint'
- syscalltable[4743] = 'NtGdiEngPlgBlt'
- syscalltable[4744] = 'NtGdiEngStretchBlt'
- syscalltable[4745] = 'NtGdiEngStretchBltROP'
- syscalltable[4746] = 'NtGdiEngStrokeAndFillPath'
- syscalltable[4747] = 'NtGdiEngStrokePath'
- syscalltable[4748] = 'NtGdiEngTextOut'
- syscalltable[4749] = 'NtGdiEngTransparentBlt'
- syscalltable[4750] = 'NtGdiEngUnlockSurface'
- syscalltable[4751] = 'NtGdiEnsureDpiDepDefaultGuiFontForPlateau'
- syscalltable[4752] = 'NtGdiEnumFonts'
- syscalltable[4753] = 'NtGdiEnumObjects'
- syscalltable[4754] = 'NtGdiEudcLoadUnloadLink'
- syscalltable[4755] = 'NtGdiExtFloodFill'
- syscalltable[4756] = 'NtGdiFONTOBJ_cGetAllGlyphHandles'
- syscalltable[4757] = 'NtGdiFONTOBJ_cGetGlyphs'
- syscalltable[4758] = 'NtGdiFONTOBJ_pQueryGlyphAttrs'
- syscalltable[4759] = 'NtGdiFONTOBJ_pfdg'
- syscalltable[4760] = 'NtGdiFONTOBJ_pifi'
- syscalltable[4761] = 'NtGdiFONTOBJ_pvTrueTypeFontFile'
- syscalltable[4762] = 'NtGdiFONTOBJ_pxoGetXform'
- syscalltable[4763] = 'NtGdiFONTOBJ_vGetInfo'
- syscalltable[4764] = 'NtGdiFlattenPath'
- syscalltable[4765] = 'NtGdiFontIsLinked'
- syscalltable[4766] = 'NtGdiForceUFIMapping'
- syscalltable[4767] = 'NtGdiFrameRgn'
- syscalltable[4768] = 'NtGdiFullscreenControl'
- syscalltable[4769] = 'NtGdiGetAppliedDeviceGammaRamp'
- syscalltable[4770] = 'NtGdiGetBitmapDpiScaleValue'
- syscalltable[4771] = 'NtGdiGetBoundsRect'
- syscalltable[4772] = 'NtGdiGetCOPPCompatibleOPMInformation'
- syscalltable[4773] = 'NtGdiGetCertificate'
- syscalltable[4774] = 'NtGdiGetCertificateByHandle'
- syscalltable[4775] = 'NtGdiGetCertificateSize'
- syscalltable[4776] = 'NtGdiGetCertificateSizeByHandle'
- syscalltable[4777] = 'NtGdiGetCharABCWidthsW'
- syscalltable[4778] = 'NtGdiGetCharacterPlacementW'
- syscalltable[4779] = 'NtGdiGetColorAdjustment'
- syscalltable[4780] = 'NtGdiGetColorSpaceforBitmap'
- syscalltable[4781] = 'NtGdiGetCurrentDpiInfo'
- syscalltable[4782] = 'NtGdiGetDCDpiScaleValue'
- syscalltable[4783] = 'NtGdiGetDeviceCaps'
- syscalltable[4784] = 'NtGdiGetDeviceCapsAll'
- syscalltable[4785] = 'NtGdiGetDeviceGammaRamp'
- syscalltable[4786] = 'NtGdiGetDeviceWidth'
- syscalltable[4787] = 'NtGdiGetDhpdev'
- syscalltable[4788] = 'NtGdiGetETM'
- syscalltable[4789] = 'NtGdiGetEmbUFI'
- syscalltable[4790] = 'NtGdiGetEmbedFonts'
- syscalltable[4791] = 'NtGdiGetEntry'
- syscalltable[4792] = 'NtGdiGetEudcTimeStampEx'
- syscalltable[4793] = 'NtGdiGetFontFileData'
- syscalltable[4794] = 'NtGdiGetFontFileInfo'
- syscalltable[4795] = 'NtGdiGetFontResourceInfoInternalW'
- syscalltable[4796] = 'NtGdiGetFontUnicodeRanges'
- syscalltable[4797] = 'NtGdiGetGammaRampCapability'
- syscalltable[4798] = 'NtGdiGetGlyphIndicesW'
- syscalltable[4799] = 'NtGdiGetGlyphIndicesWInternal'
- syscalltable[48] = 'NtOpenProcessTokenEx'
- syscalltable[4800] = 'NtGdiGetGlyphOutline'
- syscalltable[4801] = 'NtGdiGetKerningPairs'
- syscalltable[4802] = 'NtGdiGetLinkedUFIs'
- syscalltable[4803] = 'NtGdiGetMiterLimit'
- syscalltable[4804] = 'NtGdiGetMonitorID'
- syscalltable[4805] = 'NtGdiGetNumberOfPhysicalMonitors'
- syscalltable[4806] = 'NtGdiGetOPMInformation'
- syscalltable[4807] = 'NtGdiGetOPMRandomNumber'
- syscalltable[4808] = 'NtGdiGetObjectBitmapHandle'
- syscalltable[4809] = 'NtGdiGetPath'
- syscalltable[4810] = 'NtGdiGetPerBandInfo'
- syscalltable[4811] = 'NtGdiGetPhysicalMonitorDescription'
- syscalltable[4812] = 'NtGdiGetPhysicalMonitors'
- syscalltable[4813] = 'NtGdiGetProcessSessionFonts'
- syscalltable[4814] = 'NtGdiGetPublicFontTableChangeCookie'
- syscalltable[4815] = 'NtGdiGetRealizationInfo'
- syscalltable[4816] = 'NtGdiGetServerMetaFileBits'
- syscalltable[4817] = 'NtGdiGetSpoolMessage'
- syscalltable[4818] = 'NtGdiGetStats'
- syscalltable[4819] = 'NtGdiGetStringBitmapW'
- syscalltable[4820] = 'NtGdiGetSuggestedOPMProtectedOutputArraySize'
- syscalltable[4821] = 'NtGdiGetTextExtentExW'
- syscalltable[4822] = 'NtGdiGetUFI'
- syscalltable[4823] = 'NtGdiGetUFIPathname'
- syscalltable[4824] = 'NtGdiGradientFill'
- syscalltable[4825] = 'NtGdiHLSurfGetInformation'
- syscalltable[4826] = 'NtGdiHLSurfSetInformation'
- syscalltable[4827] = 'NtGdiHT_Get8BPPFormatPalette'
- syscalltable[4828] = 'NtGdiHT_Get8BPPMaskPalette'
- syscalltable[4829] = 'NtGdiIcmBrushInfo'
- syscalltable[4830] = 'NtGdiInit'
- syscalltable[4831] = 'NtGdiInitSpool'
- syscalltable[4832] = 'NtGdiMakeFontDir'
- syscalltable[4833] = 'NtGdiMakeInfoDC'
- syscalltable[4834] = 'NtGdiMakeObjectUnXferable'
- syscalltable[4835] = 'NtGdiMakeObjectXferable'
- syscalltable[4836] = 'NtGdiMirrorWindowOrg'
- syscalltable[4837] = 'NtGdiMonoBitmap'
- syscalltable[4838] = 'NtGdiMoveTo'
- syscalltable[4839] = 'NtGdiOffsetClipRgn'
- syscalltable[4840] = 'NtGdiPATHOBJ_bEnum'
- syscalltable[4841] = 'NtGdiPATHOBJ_bEnumClipLines'
- syscalltable[4842] = 'NtGdiPATHOBJ_vEnumStart'
- syscalltable[4843] = 'NtGdiPATHOBJ_vEnumStartClipLines'
- syscalltable[4844] = 'NtGdiPATHOBJ_vGetBounds'
- syscalltable[4845] = 'NtGdiPathToRegion'
- syscalltable[4846] = 'NtGdiPlgBlt'
- syscalltable[4847] = 'NtGdiPolyDraw'
- syscalltable[4848] = 'NtGdiPolyTextOutW'
- syscalltable[4849] = 'NtGdiPtInRegion'
- syscalltable[4850] = 'NtGdiPtVisible'
- syscalltable[4851] = 'NtGdiQueryFonts'
- syscalltable[4852] = 'NtGdiRemoveFontResourceW'
- syscalltable[4853] = 'NtGdiRemoveMergeFont'
- syscalltable[4854] = 'NtGdiResetDC'
- syscalltable[4855] = 'NtGdiResizePalette'
- syscalltable[4856] = 'NtGdiRoundRect'
- syscalltable[4857] = 'NtGdiSTROBJ_bEnum'
- syscalltable[4858] = 'NtGdiSTROBJ_bEnumPositionsOnly'
- syscalltable[4859] = 'NtGdiSTROBJ_bGetAdvanceWidths'
- syscalltable[4860] = 'NtGdiSTROBJ_dwGetCodePage'
- syscalltable[4861] = 'NtGdiSTROBJ_vEnumStart'
- syscalltable[4862] = 'NtGdiScaleRgn'
- syscalltable[4863] = 'NtGdiScaleValues'
- syscalltable[4864] = 'NtGdiScaleViewportExtEx'
- syscalltable[4865] = 'NtGdiScaleWindowExtEx'
- syscalltable[4866] = 'NtGdiSelectBrush'
- syscalltable[4867] = 'NtGdiSelectClipPath'
- syscalltable[4868] = 'NtGdiSelectPen'
- syscalltable[4869] = 'NtGdiSetBitmapAttributes'
- syscalltable[4870] = 'NtGdiSetBrushAttributes'
- syscalltable[4871] = 'NtGdiSetColorAdjustment'
- syscalltable[4872] = 'NtGdiSetColorSpace'
- syscalltable[4873] = 'NtGdiSetDeviceGammaRamp'
- syscalltable[4874] = 'NtGdiSetFontXform'
- syscalltable[4875] = 'NtGdiSetIcmMode'
- syscalltable[4876] = 'NtGdiSetLinkedUFIs'
- syscalltable[4877] = 'NtGdiSetMagicColors'
- syscalltable[4878] = 'NtGdiSetOPMSigningKeyAndSequenceNumbers'
- syscalltable[4879] = 'NtGdiSetPUMPDOBJ'
- syscalltable[4880] = 'NtGdiSetPixelFormat'
- syscalltable[4881] = 'NtGdiSetPrivateDeviceGammaRamp'
- syscalltable[4882] = 'NtGdiSetRectRgn'
- syscalltable[4883] = 'NtGdiSetSizeDevice'
- syscalltable[4884] = 'NtGdiSetSystemPaletteUse'
- syscalltable[4885] = 'NtGdiSetTextJustification'
- syscalltable[4886] = 'NtGdiSetUMPDSandboxState'
- syscalltable[4887] = 'NtGdiStartDoc'
- syscalltable[4888] = 'NtGdiStartPage'
- syscalltable[4889] = 'NtGdiStrokeAndFillPath'
- syscalltable[4890] = 'NtGdiStrokePath'
- syscalltable[4891] = 'NtGdiSwapBuffers'
- syscalltable[4892] = 'NtGdiTransparentBlt'
- syscalltable[4893] = 'NtGdiUMPDEngFreeUserMem'
- syscalltable[4894] = 'NtGdiUnloadPrinterDriver'
- syscalltable[4895] = 'NtGdiUnmapMemFont'
- syscalltable[4896] = 'NtGdiUpdateColors'
- syscalltable[4897] = 'NtGdiUpdateTransform'
- syscalltable[4898] = 'NtGdiWidenPath'
- syscalltable[4899] = 'NtGdiXFORMOBJ_bApplyXform'
- syscalltable[49] = 'NtQueryPerformanceCounter'
- syscalltable[4900] = 'NtGdiXFORMOBJ_iGetXform'
- syscalltable[4901] = 'NtGdiXLATEOBJ_cGetPalette'
- syscalltable[4902] = 'NtGdiXLATEOBJ_hGetColorTransform'
- syscalltable[4903] = 'NtGdiXLATEOBJ_iXlate'
- syscalltable[4904] = 'NtHWCursorUpdatePointer'
- syscalltable[4905] = 'NtIsOneCoreTransformMode'
- syscalltable[4906] = 'NtMITActivateInputProcessing'
- syscalltable[4907] = 'NtMITCoreMsgKGetConnectionHandle'
- syscalltable[4908] = 'NtMITCoreMsgKOpenConnectionTo'
- syscalltable[4909] = 'NtMITCoreMsgKSend'
- syscalltable[4910] = 'NtMITDeactivateInputProcessing'
- syscalltable[4911] = 'NtMITDisableMouseIntercept'
- syscalltable[4912] = 'NtMITDispatchCompletion'
- syscalltable[4913] = 'NtMITEnableMouseIntercept'
- syscalltable[4914] = 'NtMITGetCursorUpdateHandle'
- syscalltable[4915] = 'NtMITSetInputCallbacks'
- syscalltable[4916] = 'NtMITSetInputDelegationMode'
- syscalltable[4917] = 'NtMITSetLastInputRecipient'
- syscalltable[4918] = 'NtMITSynthesizeMouseInput'
- syscalltable[4919] = 'NtMITSynthesizeMouseWheel'
- syscalltable[4920] = 'NtMITSynthesizeTouchInput'
- syscalltable[4921] = 'NtMITUpdateInputGlobals'
- syscalltable[4922] = 'NtMITWaitForMultipleObjectsEx'
- syscalltable[4923] = 'NtMapVisualRelativePoints'
- syscalltable[4924] = 'NtNotifyPresentToCompositionSurface'
- syscalltable[4925] = 'NtOpenCompositionSurfaceDirtyRegion'
- syscalltable[4926] = 'NtOpenCompositionSurfaceSectionInfo'
- syscalltable[4927] = 'NtOpenCompositionSurfaceSwapChainHandleInfo'
- syscalltable[4928] = 'NtQueryCompositionInputIsImplicit'
- syscalltable[4929] = 'NtQueryCompositionInputQueueAndTransform'
- syscalltable[4930] = 'NtQueryCompositionInputSink'
- syscalltable[4931] = 'NtQueryCompositionInputSinkLuid'
- syscalltable[4932] = 'NtQueryCompositionInputSinkViewId'
- syscalltable[4933] = 'NtQueryCompositionSurfaceBinding'
- syscalltable[4934] = 'NtQueryCompositionSurfaceHDRMetaData'
- syscalltable[4935] = 'NtQueryCompositionSurfaceRenderingRealization'
- syscalltable[4936] = 'NtQueryCompositionSurfaceStatistics'
- syscalltable[4937] = 'NtRIMAddInputObserver'
- syscalltable[4938] = 'NtRIMAreSiblingDevices'
- syscalltable[4939] = 'NtRIMDeviceIoControl'
- syscalltable[4940] = 'NtRIMEnableMonitorMappingForDevice'
- syscalltable[4941] = 'NtRIMFreeInputBuffer'
- syscalltable[4942] = 'NtRIMGetDevicePreparsedData'
- syscalltable[4943] = 'NtRIMGetDevicePreparsedDataLockfree'
- syscalltable[4944] = 'NtRIMGetDeviceProperties'
- syscalltable[4945] = 'NtRIMGetDevicePropertiesLockfree'
- syscalltable[4946] = 'NtRIMGetPhysicalDeviceRect'
- syscalltable[4947] = 'NtRIMGetSourceProcessId'
- syscalltable[4948] = 'NtRIMObserveNextInput'
- syscalltable[4949] = 'NtRIMOnPnpNotification'
- syscalltable[4950] = 'NtRIMOnTimerNotification'
- syscalltable[4951] = 'NtRIMReadInput'
- syscalltable[4952] = 'NtRIMRegisterForInput'
- syscalltable[4953] = 'NtRIMRemoveInputObserver'
- syscalltable[4954] = 'NtRIMSetTestModeStatus'
- syscalltable[4955] = 'NtRIMUnregisterForInput'
- syscalltable[4956] = 'NtRIMUpdateInputObserverRegistration'
- syscalltable[4957] = 'NtSetCompositionSurfaceAnalogExclusive'
- syscalltable[4958] = 'NtSetCompositionSurfaceBufferUsage'
- syscalltable[4959] = 'NtSetCompositionSurfaceDirectFlipState'
- syscalltable[4960] = 'NtSetCompositionSurfaceIndependentFlipInfo'
- syscalltable[4961] = 'NtSetCompositionSurfaceStatistics'
- syscalltable[4962] = 'NtSetCursorInputSpace'
- syscalltable[4963] = 'NtSetPointerDeviceInputSpace'
- syscalltable[4964] = 'NtSetShellCursorState'
- syscalltable[4965] = 'NtTokenManagerConfirmOutstandingAnalogToken'
- syscalltable[4966] = 'NtTokenManagerCreateCompositionTokenHandle'
- syscalltable[4967] = 'NtTokenManagerCreateFlipObjectReturnTokenHandle'
- syscalltable[4968] = 'NtTokenManagerCreateFlipObjectTokenHandle'
- syscalltable[4969] = 'NtTokenManagerGetAnalogExclusiveSurfaceUpdates'
- syscalltable[4970] = 'NtTokenManagerGetAnalogExclusiveTokenEvent'
- syscalltable[4971] = 'NtTokenManagerOpenSectionAndEvents'
- syscalltable[4972] = 'NtTokenManagerThread'
- syscalltable[4973] = 'NtUnBindCompositionSurface'
- syscalltable[4974] = 'NtUpdateInputSinkTransforms'
- syscalltable[4975] = 'NtUserAcquireIAMKey'
- syscalltable[4976] = 'NtUserAcquireInteractiveControlBackgroundAccess'
- syscalltable[4977] = 'NtUserAddClipboardFormatListener'
- syscalltable[4978] = 'NtUserAssociateInputContext'
- syscalltable[4979] = 'NtUserAutoPromoteMouseInPointer'
- syscalltable[4980] = 'NtUserAutoRotateScreen'
- syscalltable[4981] = 'NtUserBeginLayoutUpdate'
- syscalltable[4982] = 'NtUserBlockInput'
- syscalltable[4983] = 'NtUserBroadcastThemeChangeEvent'
- syscalltable[4984] = 'NtUserBuildHimcList'
- syscalltable[4985] = 'NtUserBuildPropList'
- syscalltable[4986] = 'NtUserCalculatePopupWindowPosition'
- syscalltable[4987] = 'NtUserCallHwndLockSafe'
- syscalltable[4988] = 'NtUserCallHwndOpt'
- syscalltable[4989] = 'NtUserCallHwndParamLockSafe'
- syscalltable[4990] = 'NtUserCallHwndSafe'
- syscalltable[4991] = 'NtUserCanBrokerForceForeground'
- syscalltable[4992] = 'NtUserChangeDisplaySettings'
- syscalltable[4993] = 'NtUserChangeWindowMessageFilterEx'
- syscalltable[4994] = 'NtUserCheckAccessForIntegrityLevel'
- syscalltable[4995] = 'NtUserCheckProcessForClipboardAccess'
- syscalltable[4996] = 'NtUserCheckProcessSession'
- syscalltable[4997] = 'NtUserCheckWindowThreadDesktop'
- syscalltable[4998] = 'NtUserChildWindowFromPointEx'
- syscalltable[4999] = 'NtUserClearForeground'
- syscalltable[5] = 'NtCallbackReturn'
- syscalltable[50] = 'NtEnumerateKey'
- syscalltable[5000] = 'NtUserClipCursor'
- syscalltable[5001] = 'NtUserCompositionInputSinkLuidFromPoint'
- syscalltable[5002] = 'NtUserCompositionInputSinkViewInstanceIdFromPoint'
- syscalltable[5003] = 'NtUserConfirmResizeCommit'
- syscalltable[5004] = 'NtUserCreateDCompositionHwndTarget'
- syscalltable[5005] = 'NtUserCreateDesktopEx'
- syscalltable[5006] = 'NtUserCreateEmptyCursorObject'
- syscalltable[5007] = 'NtUserCreateInputContext'
- syscalltable[5008] = 'NtUserCreatePalmRejectionDelayZone'
- syscalltable[5009] = 'NtUserCreateWindowGroup'
- syscalltable[5010] = 'NtUserCreateWindowStation'
- syscalltable[5011] = 'NtUserCtxDisplayIOCtl'
- syscalltable[5012] = 'NtUserDeferWindowDpiChanges'
- syscalltable[5013] = 'NtUserDeferWindowPosAndBand'
- syscalltable[5014] = 'NtUserDelegateCapturePointers'
- syscalltable[5015] = 'NtUserDelegateInput'
- syscalltable[5016] = 'NtUserDeleteWindowGroup'
- syscalltable[5017] = 'NtUserDestroyDCompositionHwndTarget'
- syscalltable[5018] = 'NtUserDestroyInputContext'
- syscalltable[5019] = 'NtUserDestroyPalmRejectionDelayZone'
- syscalltable[5020] = 'NtUserDisableImmersiveOwner'
- syscalltable[5021] = 'NtUserDisableProcessWindowFiltering'
- syscalltable[5022] = 'NtUserDisableThreadIme'
- syscalltable[5023] = 'NtUserDiscardPointerFrameMessages'
- syscalltable[5024] = 'NtUserDisplayConfigGetDeviceInfo'
- syscalltable[5025] = 'NtUserDisplayConfigSetDeviceInfo'
- syscalltable[5026] = 'NtUserDoSoundConnect'
- syscalltable[5027] = 'NtUserDoSoundDisconnect'
- syscalltable[5028] = 'NtUserDragDetect'
- syscalltable[5029] = 'NtUserDragObject'
- syscalltable[5030] = 'NtUserDrawAnimatedRects'
- syscalltable[5031] = 'NtUserDrawCaption'
- syscalltable[5032] = 'NtUserDrawCaptionTemp'
- syscalltable[5033] = 'NtUserDrawMenuBarTemp'
- syscalltable[5034] = 'NtUserDwmGetRemoteSessionOcclusionEvent'
- syscalltable[5035] = 'NtUserDwmGetRemoteSessionOcclusionState'
- syscalltable[5036] = 'NtUserDwmKernelShutdown'
- syscalltable[5037] = 'NtUserDwmKernelStartup'
- syscalltable[5038] = 'NtUserDwmValidateWindow'
- syscalltable[5039] = 'NtUserEnableChildWindowDpiMessage'
- syscalltable[5040] = 'NtUserEnableIAMAccess'
- syscalltable[5041] = 'NtUserEnableMouseInPointer'
- syscalltable[5042] = 'NtUserEnableMouseInputForCursorSuppression'
- syscalltable[5043] = 'NtUserEnableNonClientDpiScaling'
- syscalltable[5044] = 'NtUserEnableResizeLayoutSynchronization'
- syscalltable[5045] = 'NtUserEnableSoftwareCursorForScreenCapture'
- syscalltable[5046] = 'NtUserEnableTouchPad'
- syscalltable[5047] = 'NtUserEnableWindowGDIScaledDpiMessage'
- syscalltable[5048] = 'NtUserEnableWindowGroupPolicy'
- syscalltable[5049] = 'NtUserEnableWindowResizeOptimization'
- syscalltable[5050] = 'NtUserEndMenu'
- syscalltable[5051] = 'NtUserEvent'
- syscalltable[5052] = 'NtUserFlashWindowEx'
- syscalltable[5053] = 'NtUserForceWindowToDpiForTest'
- syscalltable[5054] = 'NtUserFrostCrashedWindow'
- syscalltable[5055] = 'NtUserFunctionalizeDisplayConfig'
- syscalltable[5056] = 'NtUserGetActiveProcessesDpis'
- syscalltable[5057] = 'NtUserGetAppImeLevel'
- syscalltable[5058] = 'NtUserGetAutoRotationState'
- syscalltable[5059] = 'NtUserGetCIMSSM'
- syscalltable[5060] = 'NtUserGetCaretPos'
- syscalltable[5061] = 'NtUserGetClipCursor'
- syscalltable[5062] = 'NtUserGetClipboardAccessToken'
- syscalltable[5063] = 'NtUserGetClipboardViewer'
- syscalltable[5064] = 'NtUserGetComboBoxInfo'
- syscalltable[5065] = 'NtUserGetCurrentDpiInfoForWindow'
- syscalltable[5066] = 'NtUserGetCurrentInputMessageSource'
- syscalltable[5067] = 'NtUserGetCursor'
- syscalltable[5068] = 'NtUserGetCursorInfo'
- syscalltable[5069] = 'NtUserGetDManipHookInitFunction'
- syscalltable[5070] = 'NtUserGetDesktopID'
- syscalltable[5071] = 'NtUserGetDisplayAutoRotationPreferences'
- syscalltable[5072] = 'NtUserGetDisplayAutoRotationPreferencesByProcessId'
- syscalltable[5073] = 'NtUserGetDisplayConfigBufferSizes'
- syscalltable[5074] = 'NtUserGetDpiForCurrentProcess'
- syscalltable[5075] = 'NtUserGetDpiForMonitor'
- syscalltable[5076] = 'NtUserGetGestureConfig'
- syscalltable[5077] = 'NtUserGetGestureExtArgs'
- syscalltable[5078] = 'NtUserGetGestureInfo'
- syscalltable[5079] = 'NtUserGetGuiResources'
- syscalltable[5080] = 'NtUserGetHDevName'
- syscalltable[5081] = 'NtUserGetHimetricScaleFactorFromPixelLocation'
- syscalltable[5082] = 'NtUserGetImeHotKey'
- syscalltable[5083] = 'NtUserGetImeInfoEx'
- syscalltable[5084] = 'NtUserGetInputLocaleInfo'
- syscalltable[5085] = 'NtUserGetInteractiveControlDeviceInfo'
- syscalltable[5086] = 'NtUserGetInteractiveControlInfo'
- syscalltable[5087] = 'NtUserGetInteractiveCtrlSupportedWaveforms'
- syscalltable[5088] = 'NtUserGetInternalWindowPos'
- syscalltable[5089] = 'NtUserGetKeyNameText'
- syscalltable[5090] = 'NtUserGetKeyboardLayout'
- syscalltable[5091] = 'NtUserGetKeyboardLayoutName'
- syscalltable[5092] = 'NtUserGetLayeredWindowAttributes'
- syscalltable[5093] = 'NtUserGetListBoxInfo'
- syscalltable[5094] = 'NtUserGetMenuIndex'
- syscalltable[5095] = 'NtUserGetMenuItemRect'
- syscalltable[5096] = 'NtUserGetMouseMovePointsEx'
- syscalltable[5097] = 'NtUserGetOemBitmapSize'
- syscalltable[5098] = 'NtUserGetPhysicalDeviceRect'
- syscalltable[5099] = 'NtUserGetPointerCursorId'
- syscalltable[51] = 'NtOpenFile'
- syscalltable[5100] = 'NtUserGetPointerDevice'
- syscalltable[5101] = 'NtUserGetPointerDeviceCursors'
- syscalltable[5102] = 'NtUserGetPointerDeviceProperties'
- syscalltable[5103] = 'NtUserGetPointerDeviceRects'
- syscalltable[5104] = 'NtUserGetPointerDevices'
- syscalltable[5105] = 'NtUserGetPointerFrameArrivalTimes'
- syscalltable[5106] = 'NtUserGetPointerInfoList'
- syscalltable[5107] = 'NtUserGetPointerInputTransform'
- syscalltable[5108] = 'NtUserGetPointerType'
- syscalltable[5109] = 'NtUserGetPrecisionTouchPadConfiguration'
- syscalltable[5110] = 'NtUserGetPriorityClipboardFormat'
- syscalltable[5111] = 'NtUserGetProcessDpiAwarenessContext'
- syscalltable[5112] = 'NtUserGetProcessUIContextInformation'
- syscalltable[5113] = 'NtUserGetQueueStatusReadonly'
- syscalltable[5114] = 'NtUserGetRawInputBuffer'
- syscalltable[5115] = 'NtUserGetRawInputData'
- syscalltable[5116] = 'NtUserGetRawInputDeviceInfo'
- syscalltable[5117] = 'NtUserGetRawInputDeviceList'
- syscalltable[5118] = 'NtUserGetRawPointerDeviceData'
- syscalltable[5119] = 'NtUserGetRegisteredRawInputDevices'
- syscalltable[5120] = 'NtUserGetRequiredCursorSizes'
- syscalltable[5121] = 'NtUserGetResizeDCompositionSynchronizationObject'
- syscalltable[5122] = 'NtUserGetSystemDpiForProcess'
- syscalltable[5123] = 'NtUserGetTopLevelWindow'
- syscalltable[5124] = 'NtUserGetTouchInputInfo'
- syscalltable[5125] = 'NtUserGetTouchValidationStatus'
- syscalltable[5126] = 'NtUserGetUpdatedClipboardFormats'
- syscalltable[5127] = 'NtUserGetWOWClass'
- syscalltable[5128] = 'NtUserGetWindowBand'
- syscalltable[5129] = 'NtUserGetWindowCompositionAttribute'
- syscalltable[5130] = 'NtUserGetWindowCompositionInfo'
- syscalltable[5131] = 'NtUserGetWindowDisplayAffinity'
- syscalltable[5132] = 'NtUserGetWindowFeedbackSetting'
- syscalltable[5133] = 'NtUserGetWindowGroupId'
- syscalltable[5134] = 'NtUserGetWindowMinimizeRect'
- syscalltable[5135] = 'NtUserGetWindowProcessHandle'
- syscalltable[5136] = 'NtUserGetWindowRgnEx'
- syscalltable[5137] = 'NtUserGhostWindowFromHungWindow'
- syscalltable[5138] = 'NtUserHandleDelegatedInput'
- syscalltable[5139] = 'NtUserHardErrorControl'
- syscalltable[5140] = 'NtUserHidePointerContactVisualization'
- syscalltable[5141] = 'NtUserHiliteMenuItem'
- syscalltable[5142] = 'NtUserHungWindowFromGhostWindow'
- syscalltable[5143] = 'NtUserHwndQueryRedirectionInfo'
- syscalltable[5144] = 'NtUserHwndSetRedirectionInfo'
- syscalltable[5145] = 'NtUserImpersonateDdeClientWindow'
- syscalltable[5146] = 'NtUserInheritWindowMonitor'
- syscalltable[5147] = 'NtUserInitTask'
- syscalltable[5148] = 'NtUserInitialize'
- syscalltable[5149] = 'NtUserInitializeClientPfnArrays'
- syscalltable[5150] = 'NtUserInitializeGenericHidInjection'
- syscalltable[5151] = 'NtUserInitializeInputDeviceInjection'
- syscalltable[5152] = 'NtUserInitializePointerDeviceInjection'
- syscalltable[5153] = 'NtUserInitializePointerDeviceInjectionEx'
- syscalltable[5154] = 'NtUserInitializeTouchInjection'
- syscalltable[5155] = 'NtUserInjectDeviceInput'
- syscalltable[5156] = 'NtUserInjectGenericHidInput'
- syscalltable[5157] = 'NtUserInjectGesture'
- syscalltable[5158] = 'NtUserInjectKeyboardInput'
- syscalltable[5159] = 'NtUserInjectMouseInput'
- syscalltable[5160] = 'NtUserInjectPointerInput'
- syscalltable[5161] = 'NtUserInjectTouchInput'
- syscalltable[5162] = 'NtUserInteractiveControlQueryUsage'
- syscalltable[5163] = 'NtUserInternalGetWindowIcon'
- syscalltable[5164] = 'NtUserIsChildWindowDpiMessageEnabled'
- syscalltable[5165] = 'NtUserIsMouseInPointerEnabled'
- syscalltable[5166] = 'NtUserIsMouseInputEnabled'
- syscalltable[5167] = 'NtUserIsNonClientDpiScalingEnabled'
- syscalltable[5168] = 'NtUserIsResizeLayoutSynchronizationEnabled'
- syscalltable[5169] = 'NtUserIsTopLevelWindow'
- syscalltable[5170] = 'NtUserIsTouchWindow'
- syscalltable[5171] = 'NtUserIsWindowBroadcastingDpiToChildren'
- syscalltable[5172] = 'NtUserIsWindowGDIScaledDpiMessageEnabled'
- syscalltable[5173] = 'NtUserLayoutCompleted'
- syscalltable[5174] = 'NtUserLinkDpiCursor'
- syscalltable[5175] = 'NtUserLoadKeyboardLayoutEx'
- syscalltable[5176] = 'NtUserLockCursor'
- syscalltable[5177] = 'NtUserLockWindowStation'
- syscalltable[5178] = 'NtUserLockWorkStation'
- syscalltable[5179] = 'NtUserLogicalToPerMonitorDPIPhysicalPoint'
- syscalltable[5180] = 'NtUserLogicalToPhysicalDpiPointForWindow'
- syscalltable[5181] = 'NtUserLogicalToPhysicalPoint'
- syscalltable[5182] = 'NtUserMNDragLeave'
- syscalltable[5183] = 'NtUserMNDragOver'
- syscalltable[5184] = 'NtUserMagControl'
- syscalltable[5185] = 'NtUserMagGetContextInformation'
- syscalltable[5186] = 'NtUserMagSetContextInformation'
- syscalltable[5187] = 'NtUserMenuItemFromPoint'
- syscalltable[5188] = 'NtUserMinMaximize'
- syscalltable[5189] = 'NtUserModifyWindowTouchCapability'
- syscalltable[5190] = 'NtUserMsgWaitForMultipleObjectsEx'
- syscalltable[5191] = 'NtUserNavigateFocus'
- syscalltable[5192] = 'NtUserNotifyIMEStatus'
- syscalltable[5193] = 'NtUserOpenInputDesktop'
- syscalltable[5194] = 'NtUserOpenThreadDesktop'
- syscalltable[5195] = 'NtUserPaintMonitor'
- syscalltable[5196] = 'NtUserPerMonitorDPIPhysicalToLogicalPoint'
- syscalltable[5197] = 'NtUserPhysicalToLogicalDpiPointForWindow'
- syscalltable[5198] = 'NtUserPhysicalToLogicalPoint'
- syscalltable[5199] = 'NtUserPrintWindow'
- syscalltable[52] = 'NtDelayExecution'
- syscalltable[5200] = 'NtUserProcessInkFeedbackCommand'
- syscalltable[5201] = 'NtUserPromoteMouseInPointer'
- syscalltable[5202] = 'NtUserPromotePointer'
- syscalltable[5203] = 'NtUserQueryBSDRWindow'
- syscalltable[5204] = 'NtUserQueryDisplayConfig'
- syscalltable[5205] = 'NtUserQueryInformationThread'
- syscalltable[5206] = 'NtUserQueryInputContext'
- syscalltable[5207] = 'NtUserQuerySendMessage'
- syscalltable[5208] = 'NtUserRealChildWindowFromPoint'
- syscalltable[5209] = 'NtUserRealWaitMessageEx'
- syscalltable[5210] = 'NtUserRegisterBSDRWindow'
- syscalltable[5211] = 'NtUserRegisterDManipHook'
- syscalltable[5212] = 'NtUserRegisterEdgy'
- syscalltable[5213] = 'NtUserRegisterErrorReportingDialog'
- syscalltable[5214] = 'NtUserRegisterHotKey'
- syscalltable[5215] = 'NtUserRegisterManipulationThread'
- syscalltable[5216] = 'NtUserRegisterPointerDeviceNotifications'
- syscalltable[5217] = 'NtUserRegisterPointerInputTarget'
- syscalltable[5218] = 'NtUserRegisterRawInputDevices'
- syscalltable[5219] = 'NtUserRegisterServicesProcess'
- syscalltable[5220] = 'NtUserRegisterSessionPort'
- syscalltable[5221] = 'NtUserRegisterShellPTPListener'
- syscalltable[5222] = 'NtUserRegisterTasklist'
- syscalltable[5223] = 'NtUserRegisterTouchHitTestingWindow'
- syscalltable[5224] = 'NtUserRegisterTouchPadCapable'
- syscalltable[5225] = 'NtUserRegisterUserApiHook'
- syscalltable[5226] = 'NtUserReleaseDC'
- syscalltable[5227] = 'NtUserReleaseDwmHitTestWaiters'
- syscalltable[5228] = 'NtUserRemoteConnect'
- syscalltable[5229] = 'NtUserRemoteRedrawRectangle'
- syscalltable[5230] = 'NtUserRemoteRedrawScreen'
- syscalltable[5231] = 'NtUserRemoteStopScreenUpdates'
- syscalltable[5232] = 'NtUserRemoveClipboardFormatListener'
- syscalltable[5233] = 'NtUserRemoveInjectionDevice'
- syscalltable[5234] = 'NtUserReportInertia'
- syscalltable[5235] = 'NtUserRequestMoveSizeOperation'
- syscalltable[5236] = 'NtUserResolveDesktopForWOW'
- syscalltable[5237] = 'NtUserRestoreWindowDpiChanges'
- syscalltable[5238] = 'NtUserSendEventMessage'
- syscalltable[5239] = 'NtUserSendInteractiveControlHapticsReport'
- syscalltable[5240] = 'NtUserSetActivationFilter'
- syscalltable[5241] = 'NtUserSetActiveProcessForMonitor'
- syscalltable[5242] = 'NtUserSetAppImeLevel'
- syscalltable[5243] = 'NtUserSetAutoRotation'
- syscalltable[5244] = 'NtUserSetBridgeWindowChild'
- syscalltable[5245] = 'NtUserSetBrokeredForeground'
- syscalltable[5246] = 'NtUserSetCalibrationData'
- syscalltable[5247] = 'NtUserSetChildWindowNoActivate'
- syscalltable[5248] = 'NtUserSetClassWord'
- syscalltable[5249] = 'NtUserSetCoreWindow'
- syscalltable[5250] = 'NtUserSetCoreWindowPartner'
- syscalltable[5251] = 'NtUserSetCursorContents'
- syscalltable[5252] = 'NtUserSetCursorPos'
- syscalltable[5253] = 'NtUserSetDesktopColorTransform'
- syscalltable[5254] = 'NtUserSetDialogControlDpiChangeBehavior'
- syscalltable[5255] = 'NtUserSetDisplayAutoRotationPreferences'
- syscalltable[5256] = 'NtUserSetDisplayConfig'
- syscalltable[5257] = 'NtUserSetDisplayMapping'
- syscalltable[5258] = 'NtUserSetFallbackForeground'
- syscalltable[5259] = 'NtUserSetFeatureReportResponse'
- syscalltable[5260] = 'NtUserSetForegroundWindowForApplication'
- syscalltable[5261] = 'NtUserSetGestureConfig'
- syscalltable[5262] = 'NtUserSetImeHotKey'
- syscalltable[5263] = 'NtUserSetImeInfoEx'
- syscalltable[5264] = 'NtUserSetImeOwnerWindow'
- syscalltable[5265] = 'NtUserSetInteractiveControlFocus'
- syscalltable[5266] = 'NtUserSetInteractiveCtrlRotationAngle'
- syscalltable[5267] = 'NtUserSetInternalWindowPos'
- syscalltable[5268] = 'NtUserSetLayeredWindowAttributes'
- syscalltable[5269] = 'NtUserSetManipulationInputTarget'
- syscalltable[5270] = 'NtUserSetMenu'
- syscalltable[5271] = 'NtUserSetMenuContextHelpId'
- syscalltable[5272] = 'NtUserSetMenuFlagRtoL'
- syscalltable[5273] = 'NtUserSetMirrorRendering'
- syscalltable[5274] = 'NtUserSetObjectInformation'
- syscalltable[5275] = 'NtUserSetPrecisionTouchPadConfiguration'
- syscalltable[5276] = 'NtUserSetProcessDpiAwarenessContext'
- syscalltable[5277] = 'NtUserSetProcessInteractionFlags'
- syscalltable[5278] = 'NtUserSetProcessRestrictionExemption'
- syscalltable[5279] = 'NtUserSetProcessUIAccessZorder'
- syscalltable[5280] = 'NtUserSetShellWindowEx'
- syscalltable[5281] = 'NtUserSetSysColors'
- syscalltable[5282] = 'NtUserSetSystemCursor'
- syscalltable[5283] = 'NtUserSetSystemTimer'
- syscalltable[5284] = 'NtUserSetTargetForResourceBrokering'
- syscalltable[5285] = 'NtUserSetThreadInputBlocked'
- syscalltable[5286] = 'NtUserSetThreadLayoutHandles'
- syscalltable[5287] = 'NtUserSetWindowArrangement'
- syscalltable[5288] = 'NtUserSetWindowBand'
- syscalltable[5289] = 'NtUserSetWindowCompositionAttribute'
- syscalltable[5290] = 'NtUserSetWindowCompositionTransition'
- syscalltable[5291] = 'NtUserSetWindowDisplayAffinity'
- syscalltable[5292] = 'NtUserSetWindowFeedbackSetting'
- syscalltable[5293] = 'NtUserSetWindowGroup'
- syscalltable[5294] = 'NtUserSetWindowRgnEx'
- syscalltable[5295] = 'NtUserSetWindowShowState'
- syscalltable[5296] = 'NtUserSetWindowStationUser'
- syscalltable[5297] = 'NtUserShowCursor'
- syscalltable[5298] = 'NtUserShowSystemCursor'
- syscalltable[5299] = 'NtUserShutdownBlockReasonCreate'
- syscalltable[53] = 'NtQueryDirectoryFile'
- syscalltable[5300] = 'NtUserShutdownBlockReasonQuery'
- syscalltable[5301] = 'NtUserShutdownReasonDestroy'
- syscalltable[5302] = 'NtUserSignalRedirectionStartComplete'
- syscalltable[5303] = 'NtUserSlicerControl'
- syscalltable[5304] = 'NtUserSoundSentry'
- syscalltable[5305] = 'NtUserStopAndEndInertia'
- syscalltable[5306] = 'NtUserSwitchDesktop'
- syscalltable[5307] = 'NtUserSystemParametersInfoForDpi'
- syscalltable[5308] = 'NtUserTestForInteractiveUser'
- syscalltable[5309] = 'NtUserTrackPopupMenuEx'
- syscalltable[5310] = 'NtUserTransformPoint'
- syscalltable[5311] = 'NtUserTransformRect'
- syscalltable[5312] = 'NtUserUndelegateInput'
- syscalltable[5313] = 'NtUserUnloadKeyboardLayout'
- syscalltable[5314] = 'NtUserUnlockWindowStation'
- syscalltable[5315] = 'NtUserUnregisterHotKey'
- syscalltable[5316] = 'NtUserUnregisterSessionPort'
- syscalltable[5317] = 'NtUserUnregisterUserApiHook'
- syscalltable[5318] = 'NtUserUpdateDefaultDesktopThumbnail'
- syscalltable[5319] = 'NtUserUpdateInputContext'
- syscalltable[5320] = 'NtUserUpdateInstance'
- syscalltable[5321] = 'NtUserUpdateLayeredWindow'
- syscalltable[5322] = 'NtUserUpdatePerUserSystemParameters'
- syscalltable[5323] = 'NtUserUpdateWindowInputSinkHints'
- syscalltable[5324] = 'NtUserUpdateWindowTrackingInfo'
- syscalltable[5325] = 'NtUserUserHandleGrantAccess'
- syscalltable[5326] = 'NtUserValidateHandleSecure'
- syscalltable[5327] = 'NtUserWOWCleanup'
- syscalltable[5328] = 'NtUserWaitAvailableMessageEx'
- syscalltable[5329] = 'NtUserWaitForInputIdle'
- syscalltable[5330] = 'NtUserWaitForMsgAndEvent'
- syscalltable[5331] = 'NtUserWaitForRedirectionStartComplete'
- syscalltable[5332] = 'NtUserWindowFromDC'
- syscalltable[5333] = 'NtUserWindowFromPhysicalPoint'
- syscalltable[5334] = 'NtValidateCompositionSurfaceHandle'
- syscalltable[5335] = 'NtVisualCaptureBits'
- syscalltable[5336] = 'NtUserSetClassLongPtr'
- syscalltable[5337] = 'NtUserSetWindowLongPtr'
- syscalltable[54] = 'NtQuerySystemInformation'
- syscalltable[55] = 'NtOpenSection'
- syscalltable[56] = 'NtQueryTimer'
- syscalltable[57] = 'NtFsControlFile'
- syscalltable[58] = 'NtWriteVirtualMemory'
- syscalltable[59] = 'NtCloseObjectAuditAlarm'
- syscalltable[6] = 'NtReadFile'
- syscalltable[60] = 'NtDuplicateObject'
- syscalltable[61] = 'NtQueryAttributesFile'
- syscalltable[62] = 'NtClearEvent'
- syscalltable[63] = 'NtReadVirtualMemory'
- syscalltable[64] = 'NtOpenEvent'
- syscalltable[65] = 'NtAdjustPrivilegesToken'
- syscalltable[66] = 'NtDuplicateToken'
- syscalltable[67] = 'NtContinue'
- syscalltable[68] = 'NtQueryDefaultUILanguage'
- syscalltable[69] = 'NtQueueApcThread'
- syscalltable[7] = 'NtDeviceIoControlFile'
- syscalltable[70] = 'NtYieldExecution'
- syscalltable[71] = 'NtAddAtom'
- syscalltable[72] = 'NtCreateEvent'
- syscalltable[73] = 'NtQueryVolumeInformationFile'
- syscalltable[74] = 'NtCreateSection'
- syscalltable[75] = 'NtFlushBuffersFile'
- syscalltable[76] = 'NtApphelpCacheControl'
- syscalltable[77] = 'NtCreateProcessEx'
- syscalltable[78] = 'NtCreateThread'
- syscalltable[79] = 'NtIsProcessInJob'
- syscalltable[8] = 'NtWriteFile'
- syscalltable[80] = 'NtProtectVirtualMemory'
- syscalltable[81] = 'NtQuerySection'
- syscalltable[82] = 'NtResumeThread'
- syscalltable[83] = 'NtTerminateThread'
- syscalltable[84] = 'NtReadRequestData'
- syscalltable[85] = 'NtCreateFile'
- syscalltable[86] = 'NtQueryEvent'
- syscalltable[87] = 'NtWriteRequestData'
- syscalltable[88] = 'NtOpenDirectoryObject'
- syscalltable[89] = 'NtAccessCheckByTypeAndAuditAlarm'
- syscalltable[9] = 'NtRemoveIoCompletion'
- syscalltable[91] = 'NtWaitForMultipleObjects'
- syscalltable[92] = 'NtSetInformationObject'
- syscalltable[93] = 'NtCancelIoFile'
- syscalltable[94] = 'NtTraceEvent'
- syscalltable[95] = 'NtPowerInformation'
- syscalltable[96] = 'NtSetValueKey'
- syscalltable[97] = 'NtCancelTimer'
- syscalltable[98] = 'NtSetTimer'
- syscalltable[99] = 'NtAccessCheckByType'
- syscallArgcTable = {}
- syscallArgcTable['NtAccessCheck'] = 8
- syscallArgcTable['NtWorkerFactoryWorkerReady'] = 1
- syscallArgcTable['NtAcceptConnectPort'] = 6
- syscallArgcTable['NtMapUserPhysicalPagesScatter'] = 3
- syscallArgcTable['NtWaitForSingleObject'] = 3
- syscallArgcTable['NtCallbackReturn'] = 3
- syscallArgcTable['NtReadFile'] = 9
- syscallArgcTable['NtDeviceIoControlFile'] = 10
- syscallArgcTable['NtWriteFile'] = 9
- syscallArgcTable['NtRemoveIoCompletion'] = 5
- syscallArgcTable['NtReleaseSemaphore'] = 3
- syscallArgcTable['NtReplyWaitReceivePort'] = 4
- syscallArgcTable['NtReplyPort'] = 2
- syscallArgcTable['NtSetInformationThread'] = 4
- syscallArgcTable['NtSetEvent'] = 2
- syscallArgcTable['NtClose'] = 1
- syscallArgcTable['NtQueryObject'] = 5
- syscallArgcTable['NtQueryInformationFile'] = 5
- syscallArgcTable['NtOpenKey'] = 3
- syscallArgcTable['NtEnumerateValueKey'] = 6
- syscallArgcTable['NtFindAtom'] = 3
- syscallArgcTable['NtQueryDefaultLocale'] = 2
- syscallArgcTable['NtQueryKey'] = 5
- syscallArgcTable['NtQueryValueKey'] = 6
- syscallArgcTable['NtAllocateVirtualMemory'] = 6
- syscallArgcTable['NtQueryInformationProcess'] = 5
- syscallArgcTable['NtWaitForMultipleObjects32'] = 5
- syscallArgcTable['NtWriteFileGather'] = 9
- syscallArgcTable['NtSetInformationProcess'] = 4
- syscallArgcTable['NtCreateKey'] = 7
- syscallArgcTable['NtFreeVirtualMemory'] = 4
- syscallArgcTable['NtImpersonateClientOfPort'] = 2
- syscallArgcTable['NtReleaseMutant'] = 2
- syscallArgcTable['NtQueryInformationToken'] = 5
- syscallArgcTable['NtRequestWaitReplyPort'] = 3
- syscallArgcTable['NtQueryVirtualMemory'] = 6
- syscallArgcTable['NtOpenThreadToken'] = 4
- syscallArgcTable['NtQueryInformationThread'] = 5
- syscallArgcTable['NtOpenProcess'] = 4
- syscallArgcTable['NtSetInformationFile'] = 5
- syscallArgcTable['NtMapViewOfSection'] = 10
- syscallArgcTable['NtAccessCheckAndAuditAlarm'] = 11
- syscallArgcTable['NtUnmapViewOfSection'] = 2
- syscallArgcTable['NtReplyWaitReceivePortEx'] = 5
- syscallArgcTable['NtTerminateProcess'] = 2
- syscallArgcTable['NtSetEventBoostPriority'] = 1
- syscallArgcTable['NtReadFileScatter'] = 9
- syscallArgcTable['NtOpenThreadTokenEx'] = 5
- syscallArgcTable['NtOpenProcessTokenEx'] = 4
- syscallArgcTable['NtQueryPerformanceCounter'] = 2
- syscallArgcTable['NtEnumerateKey'] = 6
- syscallArgcTable['NtOpenFile'] = 6
- syscallArgcTable['NtDelayExecution'] = 2
- syscallArgcTable['NtQueryDirectoryFile'] = 11
- syscallArgcTable['NtQuerySystemInformation'] = 4
- syscallArgcTable['NtOpenSection'] = 3
- syscallArgcTable['NtQueryTimer'] = 5
- syscallArgcTable['NtFsControlFile'] = 10
- syscallArgcTable['NtWriteVirtualMemory'] = 5
- syscallArgcTable['NtCloseObjectAuditAlarm'] = 3
- syscallArgcTable['NtDuplicateObject'] = 7
- syscallArgcTable['NtQueryAttributesFile'] = 2
- syscallArgcTable['NtClearEvent'] = 1
- syscallArgcTable['NtReadVirtualMemory'] = 5
- syscallArgcTable['NtOpenEvent'] = 3
- syscallArgcTable['NtAdjustPrivilegesToken'] = 6
- syscallArgcTable['NtDuplicateToken'] = 6
- syscallArgcTable['NtContinue'] = 2
- syscallArgcTable['NtQueryDefaultUILanguage'] = 1
- syscallArgcTable['NtQueueApcThread'] = 5
- syscallArgcTable['NtYieldExecution'] = 0
- syscallArgcTable['NtAddAtom'] = 3
- syscallArgcTable['NtCreateEvent'] = 5
- syscallArgcTable['NtQueryVolumeInformationFile'] = 5
- syscallArgcTable['NtCreateSection'] = 7
- syscallArgcTable['NtFlushBuffersFile'] = 2
- syscallArgcTable['NtApphelpCacheControl'] = 2
- syscallArgcTable['NtCreateProcessEx'] = 9
- syscallArgcTable['NtCreateThread'] = 8
- syscallArgcTable['NtIsProcessInJob'] = 2
- syscallArgcTable['NtProtectVirtualMemory'] = 5
- syscallArgcTable['NtQuerySection'] = 5
- syscallArgcTable['NtResumeThread'] = 2
- syscallArgcTable['NtTerminateThread'] = 2
- syscallArgcTable['NtReadRequestData'] = 6
- syscallArgcTable['NtCreateFile'] = 11
- syscallArgcTable['NtQueryEvent'] = 5
- syscallArgcTable['NtWriteRequestData'] = 6
- syscallArgcTable['NtOpenDirectoryObject'] = 3
- syscallArgcTable['NtAccessCheckByTypeAndAuditAlarm'] = 16
- syscallArgcTable['NtQuerySystemTime'] = 1
- syscallArgcTable['NtWaitForMultipleObjects'] = 5
- syscallArgcTable['NtSetInformationObject'] = 4
- syscallArgcTable['NtCancelIoFile'] = 2
- syscallArgcTable['NtTraceEvent'] = 4
- syscallArgcTable['NtPowerInformation'] = 5
- syscallArgcTable['NtSetValueKey'] = 6
- syscallArgcTable['NtCancelTimer'] = 2
- syscallArgcTable['NtSetTimer'] = 7
- syscallArgcTable['NtAccessCheckByType'] = 11
- syscallArgcTable['NtAccessCheckByTypeResultList'] = 11
- syscallArgcTable['NtAccessCheckByTypeResultListAndAuditAlarm'] = 16
- syscallArgcTable['NtAccessCheckByTypeResultListAndAuditAlarmByHandle'] = 17
- syscallArgcTable['NtAcquireProcessActivityReference'] = 3
- syscallArgcTable['NtAddAtomEx'] = 4
- syscallArgcTable['NtAddBootEntry'] = 2
- syscallArgcTable['NtAddDriverEntry'] = 2
- syscallArgcTable['NtAdjustGroupsToken'] = 6
- syscallArgcTable['NtAdjustTokenClaimsAndDeviceGroups'] = 16
- syscallArgcTable['NtAlertResumeThread'] = 2
- syscallArgcTable['NtAlertThread'] = 1
- syscallArgcTable['NtAlertThreadByThreadId'] = 1
- syscallArgcTable['NtAllocateLocallyUniqueId'] = 1
- syscallArgcTable['NtAllocateReserveObject'] = 3
- syscallArgcTable['NtAllocateUserPhysicalPages'] = 3
- syscallArgcTable['NtAllocateUuids'] = 4
- syscallArgcTable['NtAllocateVirtualMemoryEx'] = 7
- syscallArgcTable['NtAlpcAcceptConnectPort'] = 9
- syscallArgcTable['NtAlpcCancelMessage'] = 3
- syscallArgcTable['NtAlpcConnectPort'] = 11
- syscallArgcTable['NtAlpcConnectPortEx'] = 11
- syscallArgcTable['NtAlpcCreatePort'] = 3
- syscallArgcTable['NtAlpcCreatePortSection'] = 6
- syscallArgcTable['NtAlpcCreateResourceReserve'] = 4
- syscallArgcTable['NtAlpcCreateSectionView'] = 3
- syscallArgcTable['NtAlpcCreateSecurityContext'] = 3
- syscallArgcTable['NtAlpcDeletePortSection'] = 3
- syscallArgcTable['NtAlpcDeleteResourceReserve'] = 3
- syscallArgcTable['NtAlpcDeleteSectionView'] = 3
- syscallArgcTable['NtAlpcDeleteSecurityContext'] = 3
- syscallArgcTable['NtAlpcDisconnectPort'] = 2
- syscallArgcTable['NtAlpcImpersonateClientContainerOfPort'] = 3
- syscallArgcTable['NtAlpcImpersonateClientOfPort'] = 3
- syscallArgcTable['NtAlpcOpenSenderProcess'] = 6
- syscallArgcTable['NtAlpcOpenSenderThread'] = 6
- syscallArgcTable['NtAlpcQueryInformation'] = 5
- syscallArgcTable['NtAlpcQueryInformationMessage'] = 6
- syscallArgcTable['NtAlpcRevokeSecurityContext'] = 3
- syscallArgcTable['NtAlpcSendWaitReceivePort'] = 8
- syscallArgcTable['NtAlpcSetInformation'] = 4
- syscallArgcTable['NtAreMappedFilesTheSame'] = 2
- syscallArgcTable['NtAssignProcessToJobObject'] = 2
- syscallArgcTable['NtAssociateWaitCompletionPacket'] = 8
- syscallArgcTable['NtCallEnclave'] = 4
- syscallArgcTable['NtCancelIoFileEx'] = 3
- syscallArgcTable['NtCancelSynchronousIoFile'] = 3
- syscallArgcTable['NtCancelTimer2'] = 2
- syscallArgcTable['NtCancelWaitCompletionPacket'] = 2
- syscallArgcTable['NtCommitComplete'] = 2
- syscallArgcTable['NtCommitEnlistment'] = 2
- syscallArgcTable['NtCommitRegistryTransaction'] = 2
- syscallArgcTable['NtCommitTransaction'] = 2
- syscallArgcTable['NtCompactKeys'] = 2
- syscallArgcTable['NtCompareObjects'] = 2
- syscallArgcTable['NtCompareSigningLevels'] = 2
- syscallArgcTable['NtCompareTokens'] = 3
- syscallArgcTable['NtCompleteConnectPort'] = 1
- syscallArgcTable['NtCompressKey'] = 1
- syscallArgcTable['NtConnectPort'] = 8
- syscallArgcTable['NtConvertBetweenAuxiliaryCounterAndPerformanceCounter'] = 4
- syscallArgcTable['NtCreateDebugObject'] = 4
- syscallArgcTable['NtCreateDirectoryObject'] = 3
- syscallArgcTable['NtCreateDirectoryObjectEx'] = 5
- syscallArgcTable['NtCreateEnclave'] = 9
- syscallArgcTable['NtCreateEnlistment'] = 8
- syscallArgcTable['NtCreateEventPair'] = 3
- syscallArgcTable['NtCreateIRTimer'] = 3
- syscallArgcTable['NtCreateIoCompletion'] = 4
- syscallArgcTable['NtCreateJobObject'] = 3
- syscallArgcTable['NtCreateJobSet'] = 3
- syscallArgcTable['NtCreateKeyTransacted'] = 8
- syscallArgcTable['NtCreateKeyedEvent'] = 4
- syscallArgcTable['NtCreateLowBoxToken'] = 9
- syscallArgcTable['NtCreateMailslotFile'] = 8
- syscallArgcTable['NtCreateMutant'] = 4
- syscallArgcTable['NtCreateNamedPipeFile'] = 14
- syscallArgcTable['NtCreatePagingFile'] = 4
- syscallArgcTable['NtCreatePartition'] = 4
- syscallArgcTable['NtCreatePort'] = 5
- syscallArgcTable['NtCreatePrivateNamespace'] = 4
- syscallArgcTable['NtCreateProcess'] = 8
- syscallArgcTable['NtCreateProfile'] = 9
- syscallArgcTable['NtCreateProfileEx'] = 10
- syscallArgcTable['NtCreateRegistryTransaction'] = 4
- syscallArgcTable['NtCreateResourceManager'] = 7
- syscallArgcTable['NtCreateSemaphore'] = 5
- syscallArgcTable['NtCreateSymbolicLinkObject'] = 4
- syscallArgcTable['NtCreateThreadEx'] = 11
- syscallArgcTable['NtCreateTimer'] = 4
- syscallArgcTable['NtCreateTimer2'] = 5
- syscallArgcTable['NtCreateToken'] = 13
- syscallArgcTable['NtCreateTokenEx'] = 17
- syscallArgcTable['NtCreateTransaction'] = 10
- syscallArgcTable['NtCreateTransactionManager'] = 6
- syscallArgcTable['NtCreateUserProcess'] = 11
- syscallArgcTable['NtCreateWaitCompletionPacket'] = 3
- syscallArgcTable['NtCreateWaitablePort'] = 5
- syscallArgcTable['NtCreateWnfStateName'] = 7
- syscallArgcTable['NtCreateWorkerFactory'] = 10
- syscallArgcTable['NtDebugActiveProcess'] = 2
- syscallArgcTable['NtDebugContinue'] = 3
- syscallArgcTable['NtDeleteAtom'] = 1
- syscallArgcTable['NtDeleteBootEntry'] = 1
- syscallArgcTable['NtDeleteDriverEntry'] = 1
- syscallArgcTable['NtDeleteFile'] = 1
- syscallArgcTable['NtDeleteKey'] = 1
- syscallArgcTable['NtDeleteObjectAuditAlarm'] = 3
- syscallArgcTable['NtDeletePrivateNamespace'] = 1
- syscallArgcTable['NtDeleteValueKey'] = 2
- syscallArgcTable['NtDeleteWnfStateData'] = 2
- syscallArgcTable['NtDeleteWnfStateName'] = 1
- syscallArgcTable['NtDisableLastKnownGood'] = 0
- syscallArgcTable['NtDisplayString'] = 1
- syscallArgcTable['NtDrawText'] = 1
- syscallArgcTable['NtEnableLastKnownGood'] = 0
- syscallArgcTable['NtEnumerateBootEntries'] = 2
- syscallArgcTable['NtEnumerateDriverEntries'] = 2
- syscallArgcTable['NtEnumerateSystemEnvironmentValuesEx'] = 3
- syscallArgcTable['NtEnumerateTransactionObject'] = 5
- syscallArgcTable['NtExtendSection'] = 2
- syscallArgcTable['NtFilterBootOption'] = 5
- syscallArgcTable['NtFilterToken'] = 6
- syscallArgcTable['NtFilterTokenEx'] = 14
- syscallArgcTable['NtFlushBuffersFileEx'] = 5
- syscallArgcTable['NtFlushInstallUILanguage'] = 2
- syscallArgcTable['NtFlushInstructionCache'] = 3
- syscallArgcTable['NtFlushKey'] = 1
- syscallArgcTable['NtFlushProcessWriteBuffers'] = 0
- syscallArgcTable['NtFlushVirtualMemory'] = 4
- syscallArgcTable['NtFlushWriteBuffer'] = 0
- syscallArgcTable['NtFreeUserPhysicalPages'] = 3
- syscallArgcTable['NtFreezeRegistry'] = 1
- syscallArgcTable['NtFreezeTransactions'] = 2
- syscallArgcTable['NtGetCachedSigningLevel'] = 6
- syscallArgcTable['NtGetCompleteWnfStateSubscription'] = 6
- syscallArgcTable['NtGetContextThread'] = 2
- syscallArgcTable['NtGetCurrentProcessorNumber'] = 0
- syscallArgcTable['NtGetCurrentProcessorNumberEx'] = 1
- syscallArgcTable['NtGetDevicePowerState'] = 2
- syscallArgcTable['NtGetMUIRegistryInfo'] = 3
- syscallArgcTable['NtGetNextProcess'] = 5
- syscallArgcTable['NtGetNextThread'] = 6
- syscallArgcTable['NtGetNlsSectionPtr'] = 5
- syscallArgcTable['NtGetNotificationResourceManager'] = 7
- syscallArgcTable['NtGetWriteWatch'] = 7
- syscallArgcTable['NtImpersonateAnonymousToken'] = 1
- syscallArgcTable['NtImpersonateThread'] = 3
- syscallArgcTable['NtInitializeEnclave'] = 5
- syscallArgcTable['NtInitializeNlsFiles'] = 3
- syscallArgcTable['NtInitializeRegistry'] = 1
- syscallArgcTable['NtInitiatePowerAction'] = 4
- syscallArgcTable['NtIsSystemResumeAutomatic'] = 0
- syscallArgcTable['NtIsUILanguageComitted'] = 0
- syscallArgcTable['NtListenPort'] = 2
- syscallArgcTable['NtLoadDriver'] = 1
- syscallArgcTable['NtLoadEnclaveData'] = 9
- syscallArgcTable['NtLoadHotPatch'] = 2
- syscallArgcTable['NtLoadKey'] = 2
- syscallArgcTable['NtLoadKey2'] = 3
- syscallArgcTable['NtLoadKeyEx'] = 8
- syscallArgcTable['NtLockFile'] = 10
- syscallArgcTable['NtLockProductActivationKeys'] = 2
- syscallArgcTable['NtLockRegistryKey'] = 1
- syscallArgcTable['NtLockVirtualMemory'] = 4
- syscallArgcTable['NtMakePermanentObject'] = 1
- syscallArgcTable['NtMakeTemporaryObject'] = 1
- syscallArgcTable['NtManagePartition'] = 5
- syscallArgcTable['NtMapCMFModule'] = 6
- syscallArgcTable['NtMapUserPhysicalPages'] = 3
- syscallArgcTable['NtMapViewOfSectionEx'] = 9
- syscallArgcTable['NtModifyBootEntry'] = 1
- syscallArgcTable['NtModifyDriverEntry'] = 1
- syscallArgcTable['NtNotifyChangeDirectoryFile'] = 9
- syscallArgcTable['NtNotifyChangeDirectoryFileEx'] = 10
- syscallArgcTable['NtNotifyChangeKey'] = 10
- syscallArgcTable['NtNotifyChangeMultipleKeys'] = 12
- syscallArgcTable['NtNotifyChangeSession'] = 8
- syscallArgcTable['NtOpenEnlistment'] = 5
- syscallArgcTable['NtOpenEventPair'] = 3
- syscallArgcTable['NtOpenIoCompletion'] = 3
- syscallArgcTable['NtOpenJobObject'] = 3
- syscallArgcTable['NtOpenKeyEx'] = 4
- syscallArgcTable['NtOpenKeyTransacted'] = 4
- syscallArgcTable['NtOpenKeyTransactedEx'] = 5
- syscallArgcTable['NtOpenKeyedEvent'] = 3
- syscallArgcTable['NtOpenMutant'] = 3
- syscallArgcTable['NtOpenObjectAuditAlarm'] = 12
- syscallArgcTable['NtOpenPartition'] = 3
- syscallArgcTable['NtOpenPrivateNamespace'] = 4
- syscallArgcTable['NtOpenProcessToken'] = 3
- syscallArgcTable['NtOpenRegistryTransaction'] = 3
- syscallArgcTable['NtOpenResourceManager'] = 5
- syscallArgcTable['NtOpenSemaphore'] = 3
- syscallArgcTable['NtOpenSession'] = 3
- syscallArgcTable['NtOpenSymbolicLinkObject'] = 3
- syscallArgcTable['NtOpenThread'] = 4
- syscallArgcTable['NtOpenTimer'] = 3
- syscallArgcTable['NtOpenTransaction'] = 5
- syscallArgcTable['NtOpenTransactionManager'] = 6
- syscallArgcTable['NtPlugPlayControl'] = 3
- syscallArgcTable['NtPrePrepareComplete'] = 2
- syscallArgcTable['NtPrePrepareEnlistment'] = 2
- syscallArgcTable['NtPrepareComplete'] = 2
- syscallArgcTable['NtPrepareEnlistment'] = 2
- syscallArgcTable['NtPrivilegeCheck'] = 3
- syscallArgcTable['NtPrivilegeObjectAuditAlarm'] = 6
- syscallArgcTable['NtPrivilegedServiceAuditAlarm'] = 5
- syscallArgcTable['NtPropagationComplete'] = 4
- syscallArgcTable['NtPropagationFailed'] = 3
- syscallArgcTable['NtPulseEvent'] = 2
- syscallArgcTable['NtQueryAuxiliaryCounterFrequency'] = 1
- syscallArgcTable['NtQueryBootEntryOrder'] = 2
- syscallArgcTable['NtQueryBootOptions'] = 2
- syscallArgcTable['NtQueryDebugFilterState'] = 2
- syscallArgcTable['NtQueryDirectoryFileEx'] = 10
- syscallArgcTable['NtQueryDirectoryObject'] = 7
- syscallArgcTable['NtQueryDriverEntryOrder'] = 2
- syscallArgcTable['NtQueryEaFile'] = 9
- syscallArgcTable['NtQueryFullAttributesFile'] = 2
- syscallArgcTable['NtQueryInformationAtom'] = 5
- syscallArgcTable['NtQueryInformationByName'] = 5
- syscallArgcTable['NtQueryInformationEnlistment'] = 5
- syscallArgcTable['NtQueryInformationJobObject'] = 5
- syscallArgcTable['NtQueryInformationPort'] = 5
- syscallArgcTable['NtQueryInformationResourceManager'] = 5
- syscallArgcTable['NtQueryInformationTransaction'] = 5
- syscallArgcTable['NtQueryInformationTransactionManager'] = 5
- syscallArgcTable['NtQueryInformationWorkerFactory'] = 5
- syscallArgcTable['NtQueryInstallUILanguage'] = 1
- syscallArgcTable['NtQueryIntervalProfile'] = 2
- syscallArgcTable['NtQueryIoCompletion'] = 5
- syscallArgcTable['NtQueryLicenseValue'] = 5
- syscallArgcTable['NtQueryMultipleValueKey'] = 6
- syscallArgcTable['NtQueryMutant'] = 5
- syscallArgcTable['NtQueryOpenSubKeys'] = 2
- syscallArgcTable['NtQueryOpenSubKeysEx'] = 4
- syscallArgcTable['NtQueryPortInformationProcess'] = 0
- syscallArgcTable['NtQueryQuotaInformationFile'] = 9
- syscallArgcTable['NtQuerySecurityAttributesToken'] = 6
- syscallArgcTable['NtQuerySecurityObject'] = 5
- syscallArgcTable['NtQuerySecurityPolicy'] = 6
- syscallArgcTable['NtQuerySemaphore'] = 5
- syscallArgcTable['NtQuerySymbolicLinkObject'] = 3
- syscallArgcTable['NtQuerySystemEnvironmentValue'] = 4
- syscallArgcTable['NtQuerySystemEnvironmentValueEx'] = 5
- syscallArgcTable['NtQuerySystemInformationEx'] = 6
- syscallArgcTable['NtQueryTimerResolution'] = 3
- syscallArgcTable['NtQueryWnfStateData'] = 6
- syscallArgcTable['NtQueryWnfStateNameInformation'] = 5
- syscallArgcTable['NtQueueApcThreadEx'] = 6
- syscallArgcTable['NtRaiseException'] = 3
- syscallArgcTable['NtRaiseHardError'] = 6
- syscallArgcTable['NtReadOnlyEnlistment'] = 2
- syscallArgcTable['NtRecoverEnlistment'] = 2
- syscallArgcTable['NtRecoverResourceManager'] = 1
- syscallArgcTable['NtRecoverTransactionManager'] = 1
- syscallArgcTable['NtRegisterProtocolAddressInformation'] = 5
- syscallArgcTable['NtRegisterThreadTerminatePort'] = 1
- syscallArgcTable['NtReleaseKeyedEvent'] = 4
- syscallArgcTable['NtReleaseWorkerFactoryWorker'] = 1
- syscallArgcTable['NtRemoveIoCompletionEx'] = 6
- syscallArgcTable['NtRemoveProcessDebug'] = 2
- syscallArgcTable['NtRenameKey'] = 2
- syscallArgcTable['NtRenameTransactionManager'] = 2
- syscallArgcTable['NtReplaceKey'] = 3
- syscallArgcTable['NtReplacePartitionUnit'] = 3
- syscallArgcTable['NtReplyWaitReplyPort'] = 2
- syscallArgcTable['NtRequestPort'] = 2
- syscallArgcTable['NtResetEvent'] = 2
- syscallArgcTable['NtResetWriteWatch'] = 3
- syscallArgcTable['NtRestoreKey'] = 3
- syscallArgcTable['NtResumeProcess'] = 1
- syscallArgcTable['NtRevertContainerImpersonation'] = 0
- syscallArgcTable['NtRollbackComplete'] = 2
- syscallArgcTable['NtRollbackEnlistment'] = 2
- syscallArgcTable['NtRollbackRegistryTransaction'] = 2
- syscallArgcTable['NtRollbackTransaction'] = 2
- syscallArgcTable['NtRollforwardTransactionManager'] = 2
- syscallArgcTable['NtSaveKey'] = 2
- syscallArgcTable['NtSaveKeyEx'] = 3
- syscallArgcTable['NtSaveMergedKeys'] = 3
- syscallArgcTable['NtSecureConnectPort'] = 9
- syscallArgcTable['NtSerializeBoot'] = 0
- syscallArgcTable['NtSetBootEntryOrder'] = 2
- syscallArgcTable['NtSetBootOptions'] = 2
- syscallArgcTable['NtSetCachedSigningLevel'] = 5
- syscallArgcTable['NtSetCachedSigningLevel2'] = 6
- syscallArgcTable['NtSetContextThread'] = 2
- syscallArgcTable['NtSetDebugFilterState'] = 3
- syscallArgcTable['NtSetDefaultHardErrorPort'] = 1
- syscallArgcTable['NtSetDefaultLocale'] = 2
- syscallArgcTable['NtSetDefaultUILanguage'] = 1
- syscallArgcTable['NtSetDriverEntryOrder'] = 2
- syscallArgcTable['NtSetEaFile'] = 4
- syscallArgcTable['NtSetHighEventPair'] = 1
- syscallArgcTable['NtSetHighWaitLowEventPair'] = 1
- syscallArgcTable['NtSetIRTimer'] = 2
- syscallArgcTable['NtSetInformationDebugObject'] = 5
- syscallArgcTable['NtSetInformationEnlistment'] = 4
- syscallArgcTable['NtSetInformationJobObject'] = 4
- syscallArgcTable['NtSetInformationKey'] = 4
- syscallArgcTable['NtSetInformationResourceManager'] = 4
- syscallArgcTable['NtSetInformationSymbolicLink'] = 4
- syscallArgcTable['NtSetInformationToken'] = 4
- syscallArgcTable['NtSetInformationTransaction'] = 4
- syscallArgcTable['NtSetInformationTransactionManager'] = 4
- syscallArgcTable['NtSetInformationVirtualMemory'] = 6
- syscallArgcTable['NtSetInformationWorkerFactory'] = 4
- syscallArgcTable['NtSetIntervalProfile'] = 2
- syscallArgcTable['NtSetIoCompletion'] = 5
- syscallArgcTable['NtSetIoCompletionEx'] = 6
- syscallArgcTable['NtSetLdtEntries'] = 6
- syscallArgcTable['NtSetLowEventPair'] = 1
- syscallArgcTable['NtSetLowWaitHighEventPair'] = 1
- syscallArgcTable['NtSetQuotaInformationFile'] = 4
- syscallArgcTable['NtSetSecurityObject'] = 3
- syscallArgcTable['NtSetSystemEnvironmentValue'] = 2
- syscallArgcTable['NtSetSystemEnvironmentValueEx'] = 5
- syscallArgcTable['NtSetSystemInformation'] = 3
- syscallArgcTable['NtSetSystemPowerState'] = 3
- syscallArgcTable['NtSetSystemTime'] = 2
- syscallArgcTable['NtSetThreadExecutionState'] = 2
- syscallArgcTable['NtSetTimer2'] = 4
- syscallArgcTable['NtSetTimerEx'] = 4
- syscallArgcTable['NtSetTimerResolution'] = 3
- syscallArgcTable['NtSetUuidSeed'] = 1
- syscallArgcTable['NtSetVolumeInformationFile'] = 5
- syscallArgcTable['NtSetWnfProcessNotificationEvent'] = 1
- syscallArgcTable['NtShutdownSystem'] = 1
- syscallArgcTable['NtShutdownWorkerFactory'] = 2
- syscallArgcTable['NtSignalAndWaitForSingleObject'] = 4
- syscallArgcTable['NtSinglePhaseReject'] = 2
- syscallArgcTable['NtStartProfile'] = 1
- syscallArgcTable['NtStopProfile'] = 1
- syscallArgcTable['NtSubscribeWnfStateChange'] = 4
- syscallArgcTable['NtSuspendProcess'] = 1
- syscallArgcTable['NtSuspendThread'] = 2
- syscallArgcTable['NtSystemDebugControl'] = 6
- syscallArgcTable['NtTerminateEnclave'] = 2
- syscallArgcTable['NtTerminateJobObject'] = 2
- syscallArgcTable['NtTestAlert'] = 0
- syscallArgcTable['NtThawRegistry'] = 0
- syscallArgcTable['NtThawTransactions'] = 0
- syscallArgcTable['NtTraceControl'] = 6
- syscallArgcTable['NtTranslateFilePath'] = 4
- syscallArgcTable['NtUmsThreadYield'] = 1
- syscallArgcTable['NtUnloadDriver'] = 1
- syscallArgcTable['NtUnloadKey'] = 1
- syscallArgcTable['NtUnloadKey2'] = 2
- syscallArgcTable['NtUnloadKeyEx'] = 2
- syscallArgcTable['NtUnlockFile'] = 5
- syscallArgcTable['NtUnlockVirtualMemory'] = 4
- syscallArgcTable['NtUnmapViewOfSectionEx'] = 3
- syscallArgcTable['NtUnsubscribeWnfStateChange'] = 1
- syscallArgcTable['NtUpdateWnfStateData'] = 7
- syscallArgcTable['NtVdmControl'] = 2
- syscallArgcTable['NtWaitForAlertByThreadId'] = 2
- syscallArgcTable['NtWaitForDebugEvent'] = 4
- syscallArgcTable['NtWaitForKeyedEvent'] = 4
- syscallArgcTable['NtWaitForWorkViaWorkerFactory'] = 5
- syscallArgcTable['NtWaitHighEventPair'] = 1
- syscallArgcTable['NtWaitLowEventPair'] = 1
- syscallArgcTable['NtUserGetOwnerTransformedMonitorRect'] = 4
- syscallArgcTable['NtUserYieldTask'] = 0
- syscallArgcTable['NtUserSetSensorPresence'] = 1
- syscallArgcTable['NtUserGetThreadState'] = 1
- syscallArgcTable['NtUserPeekMessage'] = 5
- syscallArgcTable['NtUserCallOneParam'] = 2
- syscallArgcTable['NtUserGetKeyState'] = 1
- syscallArgcTable['NtUserInvalidateRect'] = 3
- syscallArgcTable['NtUserCallNoParam'] = 1
- syscallArgcTable['NtUserGetMessage'] = 4
- syscallArgcTable['NtUserMessageCall'] = 7
- syscallArgcTable['NtGdiBitBlt'] = 11
- syscallArgcTable['NtGdiGetCharSet'] = 1
- syscallArgcTable['NtUserGetDC'] = 1
- syscallArgcTable['NtGdiSelectBitmap'] = 2
- syscallArgcTable['NtUserWaitMessage'] = 0
- syscallArgcTable['NtUserTranslateMessage'] = 2
- syscallArgcTable['NtUserGetProp'] = 2
- syscallArgcTable['NtUserPostMessage'] = 4
- syscallArgcTable['NtUserQueryWindow'] = 2
- syscallArgcTable['NtUserTranslateAccelerator'] = 3
- syscallArgcTable['NtGdiFlush'] = 0
- syscallArgcTable['NtUserRedrawWindow'] = 4
- syscallArgcTable['NtUserWindowFromPoint'] = 2
- syscallArgcTable['NtUserCallMsgFilter'] = 2
- syscallArgcTable['NtUserValidateTimerCallback'] = 1
- syscallArgcTable['NtUserBeginPaint'] = 2
- syscallArgcTable['NtUserSetTimer'] = 5
- syscallArgcTable['NtUserEndPaint'] = 2
- syscallArgcTable['NtUserSetCursor'] = 1
- syscallArgcTable['NtUserKillTimer'] = 2
- syscallArgcTable['NtUserBuildHwndList'] = 8
- syscallArgcTable['NtUserSelectPalette'] = 3
- syscallArgcTable['NtUserCallNextHookEx'] = 4
- syscallArgcTable['NtUserHideCaret'] = 1
- syscallArgcTable['NtGdiIntersectClipRect'] = 5
- syscallArgcTable['NtUserCallHwndLock'] = 2
- syscallArgcTable['NtUserGetProcessWindowStation'] = 0
- syscallArgcTable['NtGdiDeleteObjectApp'] = 1
- syscallArgcTable['NtUserSetWindowPos'] = 7
- syscallArgcTable['NtUserShowCaret'] = 1
- syscallArgcTable['NtUserEndDeferWindowPosEx'] = 2
- syscallArgcTable['NtUserCallHwndParamLock'] = 3
- syscallArgcTable['NtUserVkKeyScanEx'] = 3
- syscallArgcTable['NtGdiSetDIBitsToDeviceInternal'] = 16
- syscallArgcTable['NtUserCallTwoParam'] = 3
- syscallArgcTable['NtGdiGetRandomRgn'] = 3
- syscallArgcTable['NtUserCopyAcceleratorTable'] = 3
- syscallArgcTable['NtUserNotifyWinEvent'] = 4
- syscallArgcTable['NtGdiExtSelectClipRgn'] = 3
- syscallArgcTable['NtUserIsClipboardFormatAvailable'] = 1
- syscallArgcTable['NtUserSetScrollInfo'] = 4
- syscallArgcTable['NtGdiStretchBlt'] = 12
- syscallArgcTable['NtUserCreateCaret'] = 4
- syscallArgcTable['NtGdiRectVisible'] = 2
- syscallArgcTable['NtGdiCombineRgn'] = 4
- syscallArgcTable['NtGdiGetDCObject'] = 2
- syscallArgcTable['NtUserDispatchMessage'] = 1
- syscallArgcTable['NtUserRegisterWindowMessage'] = 1
- syscallArgcTable['NtGdiExtTextOutW'] = 9
- syscallArgcTable['NtGdiSelectFont'] = 2
- syscallArgcTable['NtGdiRestoreDC'] = 2
- syscallArgcTable['NtGdiSaveDC'] = 1
- syscallArgcTable['NtUserGetForegroundWindow'] = 0
- syscallArgcTable['NtUserShowScrollBar'] = 3
- syscallArgcTable['NtUserFindExistingCursorIcon'] = 3
- syscallArgcTable['NtGdiGetDCDword'] = 3
- syscallArgcTable['NtGdiGetRegionData'] = 3
- syscallArgcTable['NtGdiLineTo'] = 3
- syscallArgcTable['NtUserSystemParametersInfo'] = 4
- syscallArgcTable['NtGdiGetAppClipBox'] = 2
- syscallArgcTable['NtUserGetAsyncKeyState'] = 1
- syscallArgcTable['NtUserGetCPD'] = 3
- syscallArgcTable['NtUserRemoveProp'] = 2
- syscallArgcTable['NtGdiDoPalette'] = 6
- syscallArgcTable['NtGdiPolyPolyDraw'] = 5
- syscallArgcTable['NtUserSetCapture'] = 1
- syscallArgcTable['NtUserEnumDisplayMonitors'] = 4
- syscallArgcTable['NtGdiCreateCompatibleBitmap'] = 3
- syscallArgcTable['NtUserSetProp'] = 3
- syscallArgcTable['NtGdiGetTextCharsetInfo'] = 3
- syscallArgcTable['NtUserSBGetParms'] = 4
- syscallArgcTable['NtUserGetIconInfo'] = 6
- syscallArgcTable['NtUserExcludeUpdateRgn'] = 2
- syscallArgcTable['NtUserSetFocus'] = 1
- syscallArgcTable['NtGdiExtGetObjectW'] = 3
- syscallArgcTable['NtUserGetUpdateRect'] = 3
- syscallArgcTable['NtGdiCreateCompatibleDC'] = 1
- syscallArgcTable['NtUserGetClipboardSequenceNumber'] = 0
- syscallArgcTable['NtGdiCreatePen'] = 4
- syscallArgcTable['NtUserShowWindow'] = 2
- syscallArgcTable['NtUserGetKeyboardLayoutList'] = 2
- syscallArgcTable['NtGdiPatBlt'] = 6
- syscallArgcTable['NtUserMapVirtualKeyEx'] = 4
- syscallArgcTable['NtUserSetWindowLong'] = 4
- syscallArgcTable['NtGdiHfontCreate'] = 5
- syscallArgcTable['NtUserMoveWindow'] = 6
- syscallArgcTable['NtUserPostThreadMessage'] = 4
- syscallArgcTable['NtUserDrawIconEx'] = 11
- syscallArgcTable['NtUserGetSystemMenu'] = 2
- syscallArgcTable['NtGdiDrawStream'] = 3
- syscallArgcTable['NtUserInternalGetWindowText'] = 3
- syscallArgcTable['NtUserGetWindowDC'] = 1
- syscallArgcTable['NtGdiInvertRgn'] = 2
- syscallArgcTable['NtGdiGetRgnBox'] = 2
- syscallArgcTable['NtGdiGetAndSetDCDword'] = 4
- syscallArgcTable['NtGdiMaskBlt'] = 13
- syscallArgcTable['NtGdiGetWidthTable'] = 7
- syscallArgcTable['NtUserScrollDC'] = 7
- syscallArgcTable['NtUserGetObjectInformation'] = 5
- syscallArgcTable['NtGdiCreateBitmap'] = 5
- syscallArgcTable['NtUserFindWindowEx'] = 5
- syscallArgcTable['NtGdiPolyPatBlt'] = 5
- syscallArgcTable['NtUserUnhookWindowsHookEx'] = 1
- syscallArgcTable['NtGdiGetNearestColor'] = 2
- syscallArgcTable['NtGdiTransformPoints'] = 5
- syscallArgcTable['NtGdiGetDCPoint'] = 3
- syscallArgcTable['NtGdiCreateDIBBrush'] = 6
- syscallArgcTable['NtGdiGetTextMetricsW'] = 3
- syscallArgcTable['NtUserCreateWindowEx'] = 17
- syscallArgcTable['NtUserSetParent'] = 2
- syscallArgcTable['NtUserGetKeyboardState'] = 1
- syscallArgcTable['NtUserToUnicodeEx'] = 7
- syscallArgcTable['NtUserGetControlBrush'] = 3
- syscallArgcTable['NtUserGetClassName'] = 3
- syscallArgcTable['NtGdiAlphaBlend'] = 12
- syscallArgcTable['NtGdiOffsetRgn'] = 3
- syscallArgcTable['NtUserDefSetText'] = 2
- syscallArgcTable['NtGdiGetTextFaceW'] = 4
- syscallArgcTable['NtGdiStretchDIBitsInternal'] = 16
- syscallArgcTable['NtUserSendInput'] = 3
- syscallArgcTable['NtUserGetThreadDesktop'] = 1
- syscallArgcTable['NtGdiCreateRectRgn'] = 4
- syscallArgcTable['NtGdiGetDIBitsInternal'] = 9
- syscallArgcTable['NtUserGetUpdateRgn'] = 3
- syscallArgcTable['NtGdiDeleteClientObj'] = 1
- syscallArgcTable['NtUserGetIconSize'] = 4
- syscallArgcTable['NtUserFillWindow'] = 4
- syscallArgcTable['NtGdiExtCreateRegion'] = 3
- syscallArgcTable['NtGdiComputeXformCoefficients'] = 1
- syscallArgcTable['NtUserSetWindowsHookEx'] = 6
- syscallArgcTable['NtUserNotifyProcessCreate'] = 4
- syscallArgcTable['NtGdiUnrealizeObject'] = 1
- syscallArgcTable['NtUserGetTitleBarInfo'] = 2
- syscallArgcTable['NtGdiRectangle'] = 5
- syscallArgcTable['NtUserSetThreadDesktop'] = 1
- syscallArgcTable['NtUserGetDCEx'] = 3
- syscallArgcTable['NtUserGetScrollBarInfo'] = 3
- syscallArgcTable['NtGdiGetTextExtent'] = 5
- syscallArgcTable['NtUserSetWindowFNID'] = 2
- syscallArgcTable['NtGdiSetLayout'] = 3
- syscallArgcTable['NtUserCalcMenuBar'] = 5
- syscallArgcTable['NtUserThunkedMenuItemInfo'] = 6
- syscallArgcTable['NtGdiExcludeClipRect'] = 5
- syscallArgcTable['NtGdiCreateDIBSection'] = 9
- syscallArgcTable['NtGdiGetDCforBitmap'] = 1
- syscallArgcTable['NtUserDestroyCursor'] = 2
- syscallArgcTable['NtUserDestroyWindow'] = 1
- syscallArgcTable['NtUserCallHwndParam'] = 3
- syscallArgcTable['NtGdiCreateDIBitmapInternal'] = 11
- syscallArgcTable['NtUserOpenWindowStation'] = 2
- syscallArgcTable['NtUserSetCursorIconData'] = 4
- syscallArgcTable['NtUserCloseDesktop'] = 1
- syscallArgcTable['NtUserOpenDesktop'] = 3
- syscallArgcTable['NtUserSetProcessWindowStation'] = 1
- syscallArgcTable['NtUserGetAtomName'] = 2
- syscallArgcTable['NtGdiExtCreatePen'] = 11
- syscallArgcTable['NtGdiCreatePaletteInternal'] = 2
- syscallArgcTable['NtGdiSetBrushOrg'] = 4
- syscallArgcTable['NtUserBuildNameList'] = 4
- syscallArgcTable['NtGdiSetPixel'] = 4
- syscallArgcTable['NtUserRegisterClassExWOW'] = 7
- syscallArgcTable['NtGdiCreatePatternBrushInternal'] = 3
- syscallArgcTable['NtUserGetAncestor'] = 2
- syscallArgcTable['NtGdiGetOutlineTextMetricsInternalW'] = 4
- syscallArgcTable['NtGdiSetBitmapBits'] = 3
- syscallArgcTable['NtUserCloseWindowStation'] = 1
- syscallArgcTable['NtUserGetDoubleClickTime'] = 0
- syscallArgcTable['NtUserEnableScrollBar'] = 3
- syscallArgcTable['NtGdiCreateSolidBrush'] = 2
- syscallArgcTable['NtUserGetClassInfoEx'] = 5
- syscallArgcTable['NtGdiCreateClientObj'] = 1
- syscallArgcTable['NtUserUnregisterClass'] = 3
- syscallArgcTable['NtUserDeleteMenu'] = 3
- syscallArgcTable['NtGdiRectInRegion'] = 2
- syscallArgcTable['NtUserScrollWindowEx'] = 8
- syscallArgcTable['NtGdiGetPixel'] = 3
- syscallArgcTable['NtUserSetClassLong'] = 4
- syscallArgcTable['NtUserGetMenuBarInfo'] = 4
- syscallArgcTable['NtGdiGetNearestPaletteIndex'] = 2
- syscallArgcTable['NtGdiGetCharWidthW'] = 6
- syscallArgcTable['NtUserInvalidateRgn'] = 3
- syscallArgcTable['NtUserGetClipboardOwner'] = 0
- syscallArgcTable['NtUserSetWindowRgn'] = 3
- syscallArgcTable['NtUserBitBltSysBmp'] = 5
- syscallArgcTable['NtGdiGetCharWidthInfo'] = 2
- syscallArgcTable['NtUserValidateRect'] = 2
- syscallArgcTable['NtUserCloseClipboard'] = 0
- syscallArgcTable['NtUserOpenClipboard'] = 2
- syscallArgcTable['NtUserSetClipboardData'] = 3
- syscallArgcTable['NtUserEnableMenuItem'] = 3
- syscallArgcTable['NtUserAlterWindowStyle'] = 3
- syscallArgcTable['NtGdiFillRgn'] = 3
- syscallArgcTable['NtUserGetWindowPlacement'] = 2
- syscallArgcTable['NtGdiModifyWorldTransform'] = 3
- syscallArgcTable['NtGdiGetFontData'] = 5
- syscallArgcTable['NtUserGetOpenClipboardWindow'] = 0
- syscallArgcTable['NtUserSetThreadState'] = 2
- syscallArgcTable['NtGdiOpenDCW'] = 9
- syscallArgcTable['NtUserTrackMouseEvent'] = 1
- syscallArgcTable['NtGdiGetTransform'] = 3
- syscallArgcTable['NtUserDestroyMenu'] = 1
- syscallArgcTable['NtGdiGetBitmapBits'] = 3
- syscallArgcTable['NtUserConsoleControl'] = 3
- syscallArgcTable['NtUserSetActiveWindow'] = 1
- syscallArgcTable['NtUserSetInformationThread'] = 4
- syscallArgcTable['NtUserSetWindowPlacement'] = 2
- syscallArgcTable['NtUserGetControlColor'] = 4
- syscallArgcTable['NtGdiSetMetaRgn'] = 1
- syscallArgcTable['NtGdiSetMiterLimit'] = 3
- syscallArgcTable['NtGdiSetVirtualResolution'] = 5
- syscallArgcTable['NtGdiGetRasterizerCaps'] = 2
- syscallArgcTable['NtUserSetWindowWord'] = 3
- syscallArgcTable['NtUserGetClipboardFormatName'] = 3
- syscallArgcTable['NtUserRealInternalGetMessage'] = 6
- syscallArgcTable['NtUserCreateLocalMemHandle'] = 4
- syscallArgcTable['NtUserAttachThreadInput'] = 3
- syscallArgcTable['NtGdiCreateHalftonePalette'] = 1
- syscallArgcTable['NtUserPaintMenuBar'] = 6
- syscallArgcTable['NtUserSetKeyboardState'] = 1
- syscallArgcTable['NtGdiCombineTransform'] = 3
- syscallArgcTable['NtUserCreateAcceleratorTable'] = 2
- syscallArgcTable['NtUserGetCursorFrameInfo'] = 4
- syscallArgcTable['NtUserGetAltTabInfo'] = 6
- syscallArgcTable['NtUserGetCaretBlinkTime'] = 0
- syscallArgcTable['NtGdiQueryFontAssocInfo'] = 1
- syscallArgcTable['NtUserProcessConnect'] = 2
- syscallArgcTable['NtUserEnumDisplayDevices'] = 4
- syscallArgcTable['NtUserEmptyClipboard'] = 0
- syscallArgcTable['NtUserGetClipboardData'] = 2
- syscallArgcTable['NtUserRemoveMenu'] = 3
- syscallArgcTable['NtGdiSetBoundsRect'] = 3
- syscallArgcTable['NtGdiGetBitmapDimension'] = 2
- syscallArgcTable['NtUserConvertMemHandle'] = 2
- syscallArgcTable['NtUserDestroyAcceleratorTable'] = 1
- syscallArgcTable['NtUserGetGUIThreadInfo'] = 2
- syscallArgcTable['NtGdiCloseFigure'] = 1
- syscallArgcTable['NtUserSetWindowsHookAW'] = 3
- syscallArgcTable['NtUserSetMenuDefaultItem'] = 3
- syscallArgcTable['NtUserCheckMenuItem'] = 3
- syscallArgcTable['NtUserSetWinEventHook'] = 8
- syscallArgcTable['NtUserUnhookWinEvent'] = 1
- syscallArgcTable['NtUserLockWindowUpdate'] = 1
- syscallArgcTable['NtUserSetSystemMenu'] = 2
- syscallArgcTable['NtUserThunkedMenuInfo'] = 2
- syscallArgcTable['NtGdiBeginPath'] = 1
- syscallArgcTable['NtGdiEndPath'] = 1
- syscallArgcTable['NtGdiFillPath'] = 1
- syscallArgcTable['NtUserCallHwnd'] = 2
- syscallArgcTable['NtUserDdeInitialize'] = 5
- syscallArgcTable['NtUserModifyUserStartupInfoFlags'] = 2
- syscallArgcTable['NtUserCountClipboardFormats'] = 0
- syscallArgcTable['NtGdiAddFontMemResourceEx'] = 5
- syscallArgcTable['NtGdiEqualRgn'] = 2
- syscallArgcTable['NtGdiGetSystemPaletteUse'] = 1
- syscallArgcTable['NtGdiRemoveFontMemResourceEx'] = 1
- syscallArgcTable['NtUserEnumDisplaySettings'] = 4
- syscallArgcTable['NtUserPaintDesktop'] = 1
- syscallArgcTable['NtGdiExtEscape'] = 8
- syscallArgcTable['NtGdiSetBitmapDimension'] = 4
- syscallArgcTable['NtGdiSetFontEnumeration'] = 1
- syscallArgcTable['NtUserChangeClipboardChain'] = 2
- syscallArgcTable['NtUserSetClipboardViewer'] = 1
- syscallArgcTable['NtUserShowWindowAsync'] = 2
- syscallArgcTable['NtGdiCreateColorSpace'] = 1
- syscallArgcTable['NtGdiDeleteColorSpace'] = 1
- syscallArgcTable['NtUserActivateKeyboardLayout'] = 2
- syscallArgcTable['NtBindCompositionSurface'] = 5
- syscallArgcTable['NtCloseCompositionInputSink'] = 1
- syscallArgcTable['NtCompositionInputThread'] = 4
- syscallArgcTable['NtCompositionSetDropTarget'] = 3
- syscallArgcTable['NtCreateCompositionInputSink'] = 2
- syscallArgcTable['NtCreateCompositionSurfaceHandle'] = 3
- syscallArgcTable['NtCreateImplicitCompositionInputSink'] = 2
- syscallArgcTable['NtDCompositionAddCrossDeviceVisualChild'] = 7
- syscallArgcTable['NtDCompositionBeginFrame'] = 3
- syscallArgcTable['NtDCompositionCommitChannel'] = 5
- syscallArgcTable['NtDCompositionCommitSynchronizationObject'] = 1
- syscallArgcTable['NtDCompositionConfirmFrame'] = 2
- syscallArgcTable['NtDCompositionConnectPipe'] = 3
- syscallArgcTable['NtDCompositionCreateAndBindSharedSection'] = 4
- syscallArgcTable['NtDCompositionCreateChannel'] = 3
- syscallArgcTable['NtDCompositionCreateConnection'] = 2
- syscallArgcTable['NtDCompositionCreateDwmChannel'] = 1
- syscallArgcTable['NtDCompositionCreateSharedVisualHandle'] = 1
- syscallArgcTable['NtDCompositionCreateSynchronizationObject'] = 1
- syscallArgcTable['NtDCompositionDestroyChannel'] = 1
- syscallArgcTable['NtDCompositionDestroyConnection'] = 1
- syscallArgcTable['NtDCompositionDiscardFrame'] = 2
- syscallArgcTable['NtDCompositionDuplicateHandleToProcess'] = 3
- syscallArgcTable['NtDCompositionDuplicateSwapchainHandleToDwm'] = 2
- syscallArgcTable['NtDCompositionEnableDDASupport'] = 0
- syscallArgcTable['NtDCompositionEnableMMCSS'] = 1
- syscallArgcTable['NtDCompositionGetBatchId'] = 3
- syscallArgcTable['NtDCompositionGetChannels'] = 4
- syscallArgcTable['NtDCompositionGetConnectionBatch'] = 4
- syscallArgcTable['NtDCompositionGetDeletedResources'] = 4
- syscallArgcTable['NtDCompositionGetFrameLegacyTokens'] = 3
- syscallArgcTable['NtDCompositionGetFrameStatistics'] = 2
- syscallArgcTable['NtDCompositionGetFrameSurfaceUpdates'] = 3
- syscallArgcTable['NtDCompositionProcessChannelBatchBuffer'] = 4
- syscallArgcTable['NtDCompositionReferenceSharedResourceOnDwmChannel'] = 5
- syscallArgcTable['NtDCompositionRegisterThumbnailVisual'] = 9
- syscallArgcTable['NtDCompositionRegisterVirtualDesktopVisual'] = 3
- syscallArgcTable['NtDCompositionReleaseAllResources'] = 2
- syscallArgcTable['NtDCompositionRemoveCrossDeviceVisualChild'] = 4
- syscallArgcTable['NtDCompositionRetireFrame'] = 3
- syscallArgcTable['NtDCompositionSetChannelCallbackId'] = 3
- syscallArgcTable['NtDCompositionSetChannelCommitCompletionEvent'] = 3
- syscallArgcTable['NtDCompositionSetChildRootVisual'] = 2
- syscallArgcTable['NtDCompositionSetDebugCounter'] = 2
- syscallArgcTable['NtDCompositionSubmitDWMBatch'] = 3
- syscallArgcTable['NtDCompositionSuspendAnimations'] = 2
- syscallArgcTable['NtDCompositionSynchronize'] = 2
- syscallArgcTable['NtDCompositionTelemetryAnimationScenarioBegin'] = 3
- syscallArgcTable['NtDCompositionTelemetryAnimationScenarioReference'] = 3
- syscallArgcTable['NtDCompositionTelemetryAnimationScenarioUnreference'] = 3
- syscallArgcTable['NtDCompositionTelemetrySetApplicationId'] = 3
- syscallArgcTable['NtDCompositionTelemetryTouchInteractionBegin'] = 3
- syscallArgcTable['NtDCompositionTelemetryTouchInteractionEnd'] = 2
- syscallArgcTable['NtDCompositionTelemetryTouchInteractionUpdate'] = 3
- syscallArgcTable['NtDCompositionUpdatePointerCapture'] = 2
- syscallArgcTable['NtDCompositionWaitForChannel'] = 2
- syscallArgcTable['NtDWMBindCursorToOutputConfig'] = 1
- syscallArgcTable['NtDWMCommitInputSystemOutputConfig'] = 0
- syscallArgcTable['NtDWMSetCursorOrientation'] = 1
- syscallArgcTable['NtDWMSetInputSystemOutputConfig'] = 3
- syscallArgcTable['NtDesktopCaptureBits'] = 8
- syscallArgcTable['NtDuplicateCompositionInputSink'] = 2
- syscallArgcTable['NtDxgkGetProcessList'] = 1
- syscallArgcTable['NtDxgkRegisterVailProcess'] = 1
- syscallArgcTable['NtDxgkSubmitPresentBltToHwQueue'] = 1
- syscallArgcTable['NtDxgkVailConnect'] = 0
- syscallArgcTable['NtDxgkVailDisconnect'] = 0
- syscallArgcTable['NtDxgkVailPromoteCompositionSurface'] = 2
- syscallArgcTable['NtEnableOneCoreTransformMode'] = 0
- syscallArgcTable['NtFlipObjectAddContent'] = 4
- syscallArgcTable['NtFlipObjectAddPoolBuffer'] = 6
- syscallArgcTable['NtFlipObjectConsumerAcquirePresent'] = 5
- syscallArgcTable['NtFlipObjectConsumerAdjustUsageReference'] = 3
- syscallArgcTable['NtFlipObjectConsumerBeginProcessPresent'] = 3
- syscallArgcTable['NtFlipObjectConsumerEndProcessPresent'] = 1
- syscallArgcTable['NtFlipObjectConsumerPostMessage'] = 3
- syscallArgcTable['NtFlipObjectConsumerQueryBufferInfo'] = 4
- syscallArgcTable['NtFlipObjectCreate'] = 3
- syscallArgcTable['NtFlipObjectDisconnectEndpoint'] = 2
- syscallArgcTable['NtFlipObjectOpen'] = 4
- syscallArgcTable['NtFlipObjectQueryBufferAvailableEvent'] = 3
- syscallArgcTable['NtFlipObjectQueryEndpointConnected'] = 3
- syscallArgcTable['NtFlipObjectQueryNextMessageToProducer'] = 2
- syscallArgcTable['NtFlipObjectReadNextMessageToProducer'] = 3
- syscallArgcTable['NtFlipObjectRemoveContent'] = 2
- syscallArgcTable['NtFlipObjectRemovePoolBuffer'] = 2
- syscallArgcTable['NtFlipObjectSetContent'] = 5
- syscallArgcTable['NtGdiAbortDoc'] = 1
- syscallArgcTable['NtGdiAbortPath'] = 1
- syscallArgcTable['NtGdiAddEmbFontToDC'] = 2
- syscallArgcTable['NtGdiAddFontResourceW'] = 6
- syscallArgcTable['NtGdiAddInitialFonts'] = 0
- syscallArgcTable['NtGdiAddRemoteFontToDC'] = 4
- syscallArgcTable['NtGdiAddRemoteMMInstanceToDC'] = 3
- syscallArgcTable['NtGdiAngleArc'] = 6
- syscallArgcTable['NtGdiAnyLinkedFonts'] = 0
- syscallArgcTable['NtGdiArcInternal'] = 10
- syscallArgcTable['NtGdiBRUSHOBJ_DeleteRbrush'] = 2
- syscallArgcTable['NtGdiBRUSHOBJ_hGetColorTransform'] = 1
- syscallArgcTable['NtGdiBRUSHOBJ_pvAllocRbrush'] = 2
- syscallArgcTable['NtGdiBRUSHOBJ_pvGetRbrush'] = 1
- syscallArgcTable['NtGdiBRUSHOBJ_ulGetBrushColor'] = 1
- syscallArgcTable['NtGdiBeginGdiRendering'] = 3
- syscallArgcTable['NtGdiCLIPOBJ_bEnum'] = 3
- syscallArgcTable['NtGdiCLIPOBJ_cEnumStart'] = 5
- syscallArgcTable['NtGdiCLIPOBJ_ppoGetPath'] = 1
- syscallArgcTable['NtGdiCancelDC'] = 1
- syscallArgcTable['NtGdiChangeGhostFont'] = 2
- syscallArgcTable['NtGdiCheckBitmapBits'] = 8
- syscallArgcTable['NtGdiClearBitmapAttributes'] = 2
- syscallArgcTable['NtGdiClearBrushAttributes'] = 2
- syscallArgcTable['NtGdiColorCorrectPalette'] = 6
- syscallArgcTable['NtGdiConfigureOPMProtectedOutput'] = 4
- syscallArgcTable['NtGdiConvertMetafileRect'] = 2
- syscallArgcTable['NtGdiCreateBitmapFromDxSurface'] = 5
- syscallArgcTable['NtGdiCreateBitmapFromDxSurface2'] = 7
- syscallArgcTable['NtGdiCreateColorTransform'] = 8
- syscallArgcTable['NtGdiCreateEllipticRgn'] = 4
- syscallArgcTable['NtGdiCreateHatchBrushInternal'] = 3
- syscallArgcTable['NtGdiCreateMetafileDC'] = 1
- syscallArgcTable['NtGdiCreateOPMProtectedOutput'] = 2
- syscallArgcTable['NtGdiCreateOPMProtectedOutputs'] = 5
- syscallArgcTable['NtGdiCreateRoundRectRgn'] = 6
- syscallArgcTable['NtGdiCreateServerMetaFile'] = 6
- syscallArgcTable['NtGdiCreateSessionMappedDIBSection'] = 8
- syscallArgcTable['NtGdiDDCCIGetCapabilitiesString'] = 3
- syscallArgcTable['NtGdiDDCCIGetCapabilitiesStringLength'] = 2
- syscallArgcTable['NtGdiDDCCIGetTimingReport'] = 2
- syscallArgcTable['NtGdiDDCCIGetVCPFeature'] = 5
- syscallArgcTable['NtGdiDDCCISaveCurrentSettings'] = 1
- syscallArgcTable['NtGdiDDCCISetVCPFeature'] = 3
- syscallArgcTable['NtGdiDdCreateFullscreenSprite'] = 4
- syscallArgcTable['NtGdiDdDDIAbandonSwapChain'] = 1
- syscallArgcTable['NtGdiDdDDIAcquireKeyedMutex'] = 1
- syscallArgcTable['NtGdiDdDDIAcquireKeyedMutex2'] = 1
- syscallArgcTable['NtGdiDdDDIAcquireSwapChain'] = 1
- syscallArgcTable['NtGdiDdDDIAddSurfaceToSwapChain'] = 1
- syscallArgcTable['NtGdiDdDDIAdjustFullscreenGamma'] = 1
- syscallArgcTable['NtGdiDdDDICacheHybridQueryValue'] = 1
- syscallArgcTable['NtGdiDdDDIChangeVideoMemoryReservation'] = 1
- syscallArgcTable['NtGdiDdDDICheckExclusiveOwnership'] = 0
- syscallArgcTable['NtGdiDdDDICheckMonitorPowerState'] = 1
- syscallArgcTable['NtGdiDdDDICheckMultiPlaneOverlaySupport'] = 1
- syscallArgcTable['NtGdiDdDDICheckMultiPlaneOverlaySupport2'] = 1
- syscallArgcTable['NtGdiDdDDICheckMultiPlaneOverlaySupport3'] = 1
- syscallArgcTable['NtGdiDdDDICheckOcclusion'] = 1
- syscallArgcTable['NtGdiDdDDICheckSharedResourceAccess'] = 1
- syscallArgcTable['NtGdiDdDDICheckVidPnExclusiveOwnership'] = 1
- syscallArgcTable['NtGdiDdDDICloseAdapter'] = 1
- syscallArgcTable['NtGdiDdDDIConfigureSharedResource'] = 1
- syscallArgcTable['NtGdiDdDDICreateAllocation'] = 1
- syscallArgcTable['NtGdiDdDDICreateBundleObject'] = 1
- syscallArgcTable['NtGdiDdDDICreateContext'] = 1
- syscallArgcTable['NtGdiDdDDICreateContextVirtual'] = 1
- syscallArgcTable['NtGdiDdDDICreateDCFromMemory'] = 1
- syscallArgcTable['NtGdiDdDDICreateDevice'] = 1
- syscallArgcTable['NtGdiDdDDICreateHwContext'] = 1
- syscallArgcTable['NtGdiDdDDICreateHwQueue'] = 1
- syscallArgcTable['NtGdiDdDDICreateKeyedMutex'] = 1
- syscallArgcTable['NtGdiDdDDICreateKeyedMutex2'] = 1
- syscallArgcTable['NtGdiDdDDICreateOutputDupl'] = 1
- syscallArgcTable['NtGdiDdDDICreateOverlay'] = 1
- syscallArgcTable['NtGdiDdDDICreatePagingQueue'] = 1
- syscallArgcTable['NtGdiDdDDICreateProtectedSession'] = 1
- syscallArgcTable['NtGdiDdDDICreateSwapChain'] = 1
- syscallArgcTable['NtGdiDdDDICreateSynchronizationObject'] = 1
- syscallArgcTable['NtGdiDdDDIDDisplayEnum'] = 1
- syscallArgcTable['NtGdiDdDDIDestroyAllocation'] = 1
- syscallArgcTable['NtGdiDdDDIDestroyAllocation2'] = 1
- syscallArgcTable['NtGdiDdDDIDestroyContext'] = 1
- syscallArgcTable['NtGdiDdDDIDestroyDCFromMemory'] = 1
- syscallArgcTable['NtGdiDdDDIDestroyDevice'] = 1
- syscallArgcTable['NtGdiDdDDIDestroyHwContext'] = 1
- syscallArgcTable['NtGdiDdDDIDestroyHwQueue'] = 1
- syscallArgcTable['NtGdiDdDDIDestroyKeyedMutex'] = 1
- syscallArgcTable['NtGdiDdDDIDestroyOutputDupl'] = 1
- syscallArgcTable['NtGdiDdDDIDestroyOverlay'] = 1
- syscallArgcTable['NtGdiDdDDIDestroyPagingQueue'] = 1
- syscallArgcTable['NtGdiDdDDIDestroyProtectedSession'] = 1
- syscallArgcTable['NtGdiDdDDIDestroySynchronizationObject'] = 1
- syscallArgcTable['NtGdiDdDDIDispMgrCreate'] = 1
- syscallArgcTable['NtGdiDdDDIDispMgrSourceOperation'] = 1
- syscallArgcTable['NtGdiDdDDIDispMgrTargetOperation'] = 1
- syscallArgcTable['NtGdiDdDDIEnumAdapters'] = 1
- syscallArgcTable['NtGdiDdDDIEnumAdapters2'] = 1
- syscallArgcTable['NtGdiDdDDIEscape'] = 1
- syscallArgcTable['NtGdiDdDDIEvict'] = 1
- syscallArgcTable['NtGdiDdDDIExtractBundleObject'] = 1
- syscallArgcTable['NtGdiDdDDIFlipOverlay'] = 1
- syscallArgcTable['NtGdiDdDDIFlushHeapTransitions'] = 1
- syscallArgcTable['NtGdiDdDDIFreeGpuVirtualAddress'] = 1
- syscallArgcTable['NtGdiDdDDIGetAllocationPriority'] = 1
- syscallArgcTable['NtGdiDdDDIGetCachedHybridQueryValue'] = 1
- syscallArgcTable['NtGdiDdDDIGetContextInProcessSchedulingPriority'] = 1
- syscallArgcTable['NtGdiDdDDIGetContextSchedulingPriority'] = 1
- syscallArgcTable['NtGdiDdDDIGetDWMVerticalBlankEvent'] = 1
- syscallArgcTable['NtGdiDdDDIGetDeviceState'] = 1
- syscallArgcTable['NtGdiDdDDIGetDisplayModeList'] = 1
- syscallArgcTable['NtGdiDdDDIGetMemoryBudgetTarget'] = 1
- syscallArgcTable['NtGdiDdDDIGetMultiPlaneOverlayCaps'] = 1
- syscallArgcTable['NtGdiDdDDIGetMultisampleMethodList'] = 1
- syscallArgcTable['NtGdiDdDDIGetOverlayState'] = 1
- syscallArgcTable['NtGdiDdDDIGetPostCompositionCaps'] = 1
- syscallArgcTable['NtGdiDdDDIGetPresentHistory'] = 1
- syscallArgcTable['NtGdiDdDDIGetPresentQueueEvent'] = 2
- syscallArgcTable['NtGdiDdDDIGetProcessDeviceRemovalSupport'] = 1
- syscallArgcTable['NtGdiDdDDIGetProcessSchedulingPriorityBand'] = 1
- syscallArgcTable['NtGdiDdDDIGetProcessSchedulingPriorityClass'] = 2
- syscallArgcTable['NtGdiDdDDIGetResourcePresentPrivateDriverData'] = 1
- syscallArgcTable['NtGdiDdDDIGetRuntimeData'] = 1
- syscallArgcTable['NtGdiDdDDIGetScanLine'] = 1
- syscallArgcTable['NtGdiDdDDIGetSetSwapChainMetadata'] = 1
- syscallArgcTable['NtGdiDdDDIGetSharedPrimaryHandle'] = 1
- syscallArgcTable['NtGdiDdDDIGetSharedResourceAdapterLuid'] = 1
- syscallArgcTable['NtGdiDdDDIGetYieldPercentage'] = 1
- syscallArgcTable['NtGdiDdDDIInvalidateActiveVidPn'] = 1
- syscallArgcTable['NtGdiDdDDIInvalidateCache'] = 1
- syscallArgcTable['NtGdiDdDDILock'] = 1
- syscallArgcTable['NtGdiDdDDILock2'] = 1
- syscallArgcTable['NtGdiDdDDIMakeResident'] = 1
- syscallArgcTable['NtGdiDdDDIMapGpuVirtualAddress'] = 1
- syscallArgcTable['NtGdiDdDDIMarkDeviceAsError'] = 1
- syscallArgcTable['NtGdiDdDDINetDispGetNextChunkInfo'] = 7
- syscallArgcTable['NtGdiDdDDINetDispQueryMiracastDisplayDeviceStatus'] = 2
- syscallArgcTable['NtGdiDdDDINetDispQueryMiracastDisplayDeviceSupport'] = 1
- syscallArgcTable['NtGdiDdDDINetDispStartMiracastDisplayDevice'] = 1
- syscallArgcTable['NtGdiDdDDINetDispStopMiracastDisplayDevice'] = 2
- syscallArgcTable['NtGdiDdDDINetDispStopSessions'] = 1
- syscallArgcTable['NtGdiDdDDIOfferAllocations'] = 1
- syscallArgcTable['NtGdiDdDDIOpenAdapterFromDeviceName'] = 1
- syscallArgcTable['NtGdiDdDDIOpenAdapterFromHdc'] = 1
- syscallArgcTable['NtGdiDdDDIOpenAdapterFromLuid'] = 1
- syscallArgcTable['NtGdiDdDDIOpenBundleObjectNtHandleFromName'] = 1
- syscallArgcTable['NtGdiDdDDIOpenKeyedMutex'] = 1
- syscallArgcTable['NtGdiDdDDIOpenKeyedMutex2'] = 1
- syscallArgcTable['NtGdiDdDDIOpenKeyedMutexFromNtHandle'] = 1
- syscallArgcTable['NtGdiDdDDIOpenNtHandleFromName'] = 1
- syscallArgcTable['NtGdiDdDDIOpenProtectedSessionFromNtHandle'] = 1
- syscallArgcTable['NtGdiDdDDIOpenResource'] = 1
- syscallArgcTable['NtGdiDdDDIOpenResourceFromNtHandle'] = 1
- syscallArgcTable['NtGdiDdDDIOpenSwapChain'] = 1
- syscallArgcTable['NtGdiDdDDIOpenSyncObjectFromNtHandle'] = 1
- syscallArgcTable['NtGdiDdDDIOpenSyncObjectFromNtHandle2'] = 1
- syscallArgcTable['NtGdiDdDDIOpenSyncObjectNtHandleFromName'] = 1
- syscallArgcTable['NtGdiDdDDIOpenSynchronizationObject'] = 1
- syscallArgcTable['NtGdiDdDDIOutputDuplGetFrameInfo'] = 1
- syscallArgcTable['NtGdiDdDDIOutputDuplGetMetaData'] = 1
- syscallArgcTable['NtGdiDdDDIOutputDuplGetPointerShapeData'] = 1
- syscallArgcTable['NtGdiDdDDIOutputDuplPresent'] = 1
- syscallArgcTable['NtGdiDdDDIOutputDuplReleaseFrame'] = 1
- syscallArgcTable['NtGdiDdDDIPinDirectFlipResources'] = 1
- syscallArgcTable['NtGdiDdDDIPollDisplayChildren'] = 1
- syscallArgcTable['NtGdiDdDDIPresent'] = 1
- syscallArgcTable['NtGdiDdDDIPresentMultiPlaneOverlay'] = 1
- syscallArgcTable['NtGdiDdDDIPresentMultiPlaneOverlay2'] = 1
- syscallArgcTable['NtGdiDdDDIPresentMultiPlaneOverlay3'] = 1
- syscallArgcTable['NtGdiDdDDIPresentRedirected'] = 1
- syscallArgcTable['NtGdiDdDDIQueryAdapterInfo'] = 1
- syscallArgcTable['NtGdiDdDDIQueryAllocationResidency'] = 1
- syscallArgcTable['NtGdiDdDDIQueryClockCalibration'] = 1
- syscallArgcTable['NtGdiDdDDIQueryFSEBlock'] = 1
- syscallArgcTable['NtGdiDdDDIQueryProcessOfferInfo'] = 1
- syscallArgcTable['NtGdiDdDDIQueryProtectedSessionInfoFromNtHandle'] = 1
- syscallArgcTable['NtGdiDdDDIQueryProtectedSessionStatus'] = 1
- syscallArgcTable['NtGdiDdDDIQueryRemoteVidPnSourceFromGdiDisplayName'] = 1
- syscallArgcTable['NtGdiDdDDIQueryResourceInfo'] = 1
- syscallArgcTable['NtGdiDdDDIQueryResourceInfoFromNtHandle'] = 1
- syscallArgcTable['NtGdiDdDDIQueryStatistics'] = 1
- syscallArgcTable['NtGdiDdDDIQueryVidPnExclusiveOwnership'] = 1
- syscallArgcTable['NtGdiDdDDIQueryVideoMemoryInfo'] = 1
- syscallArgcTable['NtGdiDdDDIReclaimAllocations'] = 1
- syscallArgcTable['NtGdiDdDDIReclaimAllocations2'] = 1
- syscallArgcTable['NtGdiDdDDIReleaseKeyedMutex'] = 1
- syscallArgcTable['NtGdiDdDDIReleaseKeyedMutex2'] = 1
- syscallArgcTable['NtGdiDdDDIReleaseProcessVidPnSourceOwners'] = 1
- syscallArgcTable['NtGdiDdDDIReleaseSwapChain'] = 1
- syscallArgcTable['NtGdiDdDDIRemoveSurfaceFromSwapChain'] = 1
- syscallArgcTable['NtGdiDdDDIRender'] = 1
- syscallArgcTable['NtGdiDdDDIReserveGpuVirtualAddress'] = 1
- syscallArgcTable['NtGdiDdDDISetAllocationPriority'] = 1
- syscallArgcTable['NtGdiDdDDISetContextInProcessSchedulingPriority'] = 1
- syscallArgcTable['NtGdiDdDDISetContextSchedulingPriority'] = 1
- syscallArgcTable['NtGdiDdDDISetDisplayMode'] = 1
- syscallArgcTable['NtGdiDdDDISetDisplayPrivateDriverFormat'] = 1
- syscallArgcTable['NtGdiDdDDISetDodIndirectSwapchain'] = 1
- syscallArgcTable['NtGdiDdDDISetFSEBlock'] = 1
- syscallArgcTable['NtGdiDdDDISetGammaRamp'] = 1
- syscallArgcTable['NtGdiDdDDISetHwProtectionTeardownRecovery'] = 1
- syscallArgcTable['NtGdiDdDDISetMemoryBudgetTarget'] = 1
- syscallArgcTable['NtGdiDdDDISetMonitorColorSpaceTransform'] = 1
- syscallArgcTable['NtGdiDdDDISetProcessDeviceRemovalSupport'] = 1
- syscallArgcTable['NtGdiDdDDISetProcessSchedulingPriorityBand'] = 1
- syscallArgcTable['NtGdiDdDDISetProcessSchedulingPriorityClass'] = 2
- syscallArgcTable['NtGdiDdDDISetQueuedLimit'] = 1
- syscallArgcTable['NtGdiDdDDISetStablePowerState'] = 1
- syscallArgcTable['NtGdiDdDDISetStereoEnabled'] = 1
- syscallArgcTable['NtGdiDdDDISetSyncRefreshCountWaitTarget'] = 1
- syscallArgcTable['NtGdiDdDDISetVidPnSourceHwProtection'] = 1
- syscallArgcTable['NtGdiDdDDISetVidPnSourceOwner'] = 1
- syscallArgcTable['NtGdiDdDDISetYieldPercentage'] = 1
- syscallArgcTable['NtGdiDdDDIShareObjects'] = 5
- syscallArgcTable['NtGdiDdDDISharedPrimaryLockNotification'] = 1
- syscallArgcTable['NtGdiDdDDISharedPrimaryUnLockNotification'] = 1
- syscallArgcTable['NtGdiDdDDISignalSynchronizationObject'] = 1
- syscallArgcTable['NtGdiDdDDISignalSynchronizationObjectFromCpu'] = 1
- syscallArgcTable['NtGdiDdDDISignalSynchronizationObjectFromGpu'] = 1
- syscallArgcTable['NtGdiDdDDISignalSynchronizationObjectFromGpu2'] = 1
- syscallArgcTable['NtGdiDdDDISubmitCommand'] = 1
- syscallArgcTable['NtGdiDdDDISubmitCommandToHwQueue'] = 1
- syscallArgcTable['NtGdiDdDDISubmitSignalSyncObjectsToHwQueue'] = 1
- syscallArgcTable['NtGdiDdDDISubmitWaitForSyncObjectsToHwQueue'] = 1
- syscallArgcTable['NtGdiDdDDITrimProcessCommitment'] = 1
- syscallArgcTable['NtGdiDdDDIUnOrderedPresentSwapChain'] = 1
- syscallArgcTable['NtGdiDdDDIUnlock'] = 1
- syscallArgcTable['NtGdiDdDDIUnlock2'] = 1
- syscallArgcTable['NtGdiDdDDIUnpinDirectFlipResources'] = 1
- syscallArgcTable['NtGdiDdDDIUpdateAllocationProperty'] = 1
- syscallArgcTable['NtGdiDdDDIUpdateGpuVirtualAddress'] = 1
- syscallArgcTable['NtGdiDdDDIUpdateOverlay'] = 1
- syscallArgcTable['NtGdiDdDDIWaitForIdle'] = 1
- syscallArgcTable['NtGdiDdDDIWaitForSynchronizationObject'] = 1
- syscallArgcTable['NtGdiDdDDIWaitForSynchronizationObjectFromCpu'] = 1
- syscallArgcTable['NtGdiDdDDIWaitForSynchronizationObjectFromGpu'] = 1
- syscallArgcTable['NtGdiDdDDIWaitForVerticalBlankEvent'] = 1
- syscallArgcTable['NtGdiDdDDIWaitForVerticalBlankEvent2'] = 1
- syscallArgcTable['NtGdiDdDestroyFullscreenSprite'] = 2
- syscallArgcTable['NtGdiDdNotifyFullscreenSpriteUpdate'] = 2
- syscallArgcTable['NtGdiDdQueryVisRgnUniqueness'] = 0
- syscallArgcTable['NtGdiDeleteColorTransform'] = 2
- syscallArgcTable['NtGdiDescribePixelFormat'] = 4
- syscallArgcTable['NtGdiDestroyOPMProtectedOutput'] = 1
- syscallArgcTable['NtGdiDestroyPhysicalMonitor'] = 1
- syscallArgcTable['NtGdiDoBanding'] = 4
- syscallArgcTable['NtGdiDrawEscape'] = 4
- syscallArgcTable['NtGdiDwmCreatedBitmapRemotingOutput'] = 0
- syscallArgcTable['NtGdiEllipse'] = 5
- syscallArgcTable['NtGdiEnableEudc'] = 1
- syscallArgcTable['NtGdiEndDoc'] = 1
- syscallArgcTable['NtGdiEndGdiRendering'] = 4
- syscallArgcTable['NtGdiEndPage'] = 1
- syscallArgcTable['NtGdiEngAlphaBlend'] = 7
- syscallArgcTable['NtGdiEngAssociateSurface'] = 3
- syscallArgcTable['NtGdiEngBitBlt'] = 11
- syscallArgcTable['NtGdiEngCheckAbort'] = 1
- syscallArgcTable['NtGdiEngComputeGlyphSet'] = 3
- syscallArgcTable['NtGdiEngCopyBits'] = 6
- syscallArgcTable['NtGdiEngCreateBitmap'] = 6
- syscallArgcTable['NtGdiEngCreateClip'] = 0
- syscallArgcTable['NtGdiEngCreateDeviceBitmap'] = 4
- syscallArgcTable['NtGdiEngCreateDeviceSurface'] = 4
- syscallArgcTable['NtGdiEngCreatePalette'] = 6
- syscallArgcTable['NtGdiEngDeleteClip'] = 1
- syscallArgcTable['NtGdiEngDeletePalette'] = 1
- syscallArgcTable['NtGdiEngDeletePath'] = 1
- syscallArgcTable['NtGdiEngDeleteSurface'] = 1
- syscallArgcTable['NtGdiEngEraseSurface'] = 3
- syscallArgcTable['NtGdiEngFillPath'] = 7
- syscallArgcTable['NtGdiEngGradientFill'] = 10
- syscallArgcTable['NtGdiEngLineTo'] = 9
- syscallArgcTable['NtGdiEngLockSurface'] = 1
- syscallArgcTable['NtGdiEngMarkBandingSurface'] = 1
- syscallArgcTable['NtGdiEngPaint'] = 5
- syscallArgcTable['NtGdiEngPlgBlt'] = 11
- syscallArgcTable['NtGdiEngStretchBlt'] = 11
- syscallArgcTable['NtGdiEngStretchBltROP'] = 13
- syscallArgcTable['NtGdiEngStrokeAndFillPath'] = 10
- syscallArgcTable['NtGdiEngStrokePath'] = 8
- syscallArgcTable['NtGdiEngTextOut'] = 10
- syscallArgcTable['NtGdiEngTransparentBlt'] = 8
- syscallArgcTable['NtGdiEngUnlockSurface'] = 1
- syscallArgcTable['NtGdiEnsureDpiDepDefaultGuiFontForPlateau'] = 1
- syscallArgcTable['NtGdiEnumFonts'] = 8
- syscallArgcTable['NtGdiEnumObjects'] = 4
- syscallArgcTable['NtGdiEudcLoadUnloadLink'] = 7
- syscallArgcTable['NtGdiExtFloodFill'] = 5
- syscallArgcTable['NtGdiFONTOBJ_cGetAllGlyphHandles'] = 2
- syscallArgcTable['NtGdiFONTOBJ_cGetGlyphs'] = 5
- syscallArgcTable['NtGdiFONTOBJ_pQueryGlyphAttrs'] = 2
- syscallArgcTable['NtGdiFONTOBJ_pfdg'] = 1
- syscallArgcTable['NtGdiFONTOBJ_pifi'] = 1
- syscallArgcTable['NtGdiFONTOBJ_pvTrueTypeFontFile'] = 2
- syscallArgcTable['NtGdiFONTOBJ_pxoGetXform'] = 1
- syscallArgcTable['NtGdiFONTOBJ_vGetInfo'] = 3
- syscallArgcTable['NtGdiFlattenPath'] = 1
- syscallArgcTable['NtGdiFontIsLinked'] = 1
- syscallArgcTable['NtGdiForceUFIMapping'] = 2
- syscallArgcTable['NtGdiFrameRgn'] = 5
- syscallArgcTable['NtGdiFullscreenControl'] = 5
- syscallArgcTable['NtGdiGetAppliedDeviceGammaRamp'] = 2
- syscallArgcTable['NtGdiGetBitmapDpiScaleValue'] = 1
- syscallArgcTable['NtGdiGetBoundsRect'] = 3
- syscallArgcTable['NtGdiGetCOPPCompatibleOPMInformation'] = 3
- syscallArgcTable['NtGdiGetCertificate'] = 4
- syscallArgcTable['NtGdiGetCertificateByHandle'] = 4
- syscallArgcTable['NtGdiGetCertificateSize'] = 3
- syscallArgcTable['NtGdiGetCertificateSizeByHandle'] = 3
- syscallArgcTable['NtGdiGetCharABCWidthsW'] = 6
- syscallArgcTable['NtGdiGetCharacterPlacementW'] = 6
- syscallArgcTable['NtGdiGetColorAdjustment'] = 2
- syscallArgcTable['NtGdiGetColorSpaceforBitmap'] = 1
- syscallArgcTable['NtGdiGetCurrentDpiInfo'] = 2
- syscallArgcTable['NtGdiGetDCDpiScaleValue'] = 1
- syscallArgcTable['NtGdiGetDeviceCaps'] = 2
- syscallArgcTable['NtGdiGetDeviceCapsAll'] = 2
- syscallArgcTable['NtGdiGetDeviceGammaRamp'] = 2
- syscallArgcTable['NtGdiGetDeviceWidth'] = 1
- syscallArgcTable['NtGdiGetDhpdev'] = 1
- syscallArgcTable['NtGdiGetETM'] = 2
- syscallArgcTable['NtGdiGetEmbUFI'] = 7
- syscallArgcTable['NtGdiGetEmbedFonts'] = 0
- syscallArgcTable['NtGdiGetEntry'] = 2
- syscallArgcTable['NtGdiGetEudcTimeStampEx'] = 3
- syscallArgcTable['NtGdiGetFontFileData'] = 5
- syscallArgcTable['NtGdiGetFontFileInfo'] = 5
- syscallArgcTable['NtGdiGetFontResourceInfoInternalW'] = 7
- syscallArgcTable['NtGdiGetFontUnicodeRanges'] = 2
- syscallArgcTable['NtGdiGetGammaRampCapability'] = 1
- syscallArgcTable['NtGdiGetGlyphIndicesW'] = 5
- syscallArgcTable['NtGdiGetGlyphIndicesWInternal'] = 6
- syscallArgcTable['NtGdiGetGlyphOutline'] = 8
- syscallArgcTable['NtGdiGetKerningPairs'] = 3
- syscallArgcTable['NtGdiGetLinkedUFIs'] = 3
- syscallArgcTable['NtGdiGetMiterLimit'] = 2
- syscallArgcTable['NtGdiGetMonitorID'] = 3
- syscallArgcTable['NtGdiGetNumberOfPhysicalMonitors'] = 2
- syscallArgcTable['NtGdiGetOPMInformation'] = 3
- syscallArgcTable['NtGdiGetOPMRandomNumber'] = 2
- syscallArgcTable['NtGdiGetObjectBitmapHandle'] = 2
- syscallArgcTable['NtGdiGetPath'] = 4
- syscallArgcTable['NtGdiGetPerBandInfo'] = 2
- syscallArgcTable['NtGdiGetPhysicalMonitorDescription'] = 3
- syscallArgcTable['NtGdiGetPhysicalMonitors'] = 4
- syscallArgcTable['NtGdiGetProcessSessionFonts'] = 5
- syscallArgcTable['NtGdiGetPublicFontTableChangeCookie'] = 0
- syscallArgcTable['NtGdiGetRealizationInfo'] = 2
- syscallArgcTable['NtGdiGetServerMetaFileBits'] = 7
- syscallArgcTable['NtGdiGetSpoolMessage'] = 4
- syscallArgcTable['NtGdiGetStats'] = 5
- syscallArgcTable['NtGdiGetStringBitmapW'] = 5
- syscallArgcTable['NtGdiGetSuggestedOPMProtectedOutputArraySize'] = 2
- syscallArgcTable['NtGdiGetTextExtentExW'] = 8
- syscallArgcTable['NtGdiGetUFI'] = 6
- syscallArgcTable['NtGdiGetUFIPathname'] = 10
- syscallArgcTable['NtGdiGradientFill'] = 6
- syscallArgcTable['NtGdiHLSurfGetInformation'] = 4
- syscallArgcTable['NtGdiHLSurfSetInformation'] = 4
- syscallArgcTable['NtGdiHT_Get8BPPFormatPalette'] = 4
- syscallArgcTable['NtGdiHT_Get8BPPMaskPalette'] = 6
- syscallArgcTable['NtGdiIcmBrushInfo'] = 8
- syscallArgcTable['NtGdiInit'] = 0
- syscallArgcTable['NtGdiInitSpool'] = 0
- syscallArgcTable['NtGdiMakeFontDir'] = 5
- syscallArgcTable['NtGdiMakeInfoDC'] = 2
- syscallArgcTable['NtGdiMakeObjectUnXferable'] = 1
- syscallArgcTable['NtGdiMakeObjectXferable'] = 2
- syscallArgcTable['NtGdiMirrorWindowOrg'] = 1
- syscallArgcTable['NtGdiMonoBitmap'] = 1
- syscallArgcTable['NtGdiMoveTo'] = 4
- syscallArgcTable['NtGdiOffsetClipRgn'] = 3
- syscallArgcTable['NtGdiPATHOBJ_bEnum'] = 2
- syscallArgcTable['NtGdiPATHOBJ_bEnumClipLines'] = 3
- syscallArgcTable['NtGdiPATHOBJ_vEnumStart'] = 1
- syscallArgcTable['NtGdiPATHOBJ_vEnumStartClipLines'] = 4
- syscallArgcTable['NtGdiPATHOBJ_vGetBounds'] = 2
- syscallArgcTable['NtGdiPathToRegion'] = 1
- syscallArgcTable['NtGdiPlgBlt'] = 11
- syscallArgcTable['NtGdiPolyDraw'] = 4
- syscallArgcTable['NtGdiPolyTextOutW'] = 4
- syscallArgcTable['NtGdiPtInRegion'] = 3
- syscallArgcTable['NtGdiPtVisible'] = 3
- syscallArgcTable['NtGdiQueryFonts'] = 3
- syscallArgcTable['NtGdiRemoveFontResourceW'] = 6
- syscallArgcTable['NtGdiRemoveMergeFont'] = 2
- syscallArgcTable['NtGdiResetDC'] = 5
- syscallArgcTable['NtGdiResizePalette'] = 2
- syscallArgcTable['NtGdiRoundRect'] = 7
- syscallArgcTable['NtGdiSTROBJ_bEnum'] = 3
- syscallArgcTable['NtGdiSTROBJ_bEnumPositionsOnly'] = 3
- syscallArgcTable['NtGdiSTROBJ_bGetAdvanceWidths'] = 4
- syscallArgcTable['NtGdiSTROBJ_dwGetCodePage'] = 1
- syscallArgcTable['NtGdiSTROBJ_vEnumStart'] = 1
- syscallArgcTable['NtGdiScaleRgn'] = 2
- syscallArgcTable['NtGdiScaleValues'] = 3
- syscallArgcTable['NtGdiScaleViewportExtEx'] = 6
- syscallArgcTable['NtGdiScaleWindowExtEx'] = 6
- syscallArgcTable['NtGdiSelectBrush'] = 2
- syscallArgcTable['NtGdiSelectClipPath'] = 2
- syscallArgcTable['NtGdiSelectPen'] = 2
- syscallArgcTable['NtGdiSetBitmapAttributes'] = 2
- syscallArgcTable['NtGdiSetBrushAttributes'] = 2
- syscallArgcTable['NtGdiSetColorAdjustment'] = 2
- syscallArgcTable['NtGdiSetColorSpace'] = 2
- syscallArgcTable['NtGdiSetDeviceGammaRamp'] = 2
- syscallArgcTable['NtGdiSetFontXform'] = 3
- syscallArgcTable['NtGdiSetIcmMode'] = 3
- syscallArgcTable['NtGdiSetLinkedUFIs'] = 3
- syscallArgcTable['NtGdiSetMagicColors'] = 3
- syscallArgcTable['NtGdiSetOPMSigningKeyAndSequenceNumbers'] = 2
- syscallArgcTable['NtGdiSetPUMPDOBJ'] = 4
- syscallArgcTable['NtGdiSetPixelFormat'] = 2
- syscallArgcTable['NtGdiSetPrivateDeviceGammaRamp'] = 3
- syscallArgcTable['NtGdiSetRectRgn'] = 5
- syscallArgcTable['NtGdiSetSizeDevice'] = 3
- syscallArgcTable['NtGdiSetSystemPaletteUse'] = 2
- syscallArgcTable['NtGdiSetTextJustification'] = 3
- syscallArgcTable['NtGdiSetUMPDSandboxState'] = 1
- syscallArgcTable['NtGdiStartDoc'] = 4
- syscallArgcTable['NtGdiStartPage'] = 1
- syscallArgcTable['NtGdiStrokeAndFillPath'] = 1
- syscallArgcTable['NtGdiStrokePath'] = 1
- syscallArgcTable['NtGdiSwapBuffers'] = 1
- syscallArgcTable['NtGdiTransparentBlt'] = 11
- syscallArgcTable['NtGdiUMPDEngFreeUserMem'] = 1
- syscallArgcTable['NtGdiUnloadPrinterDriver'] = 2
- syscallArgcTable['NtGdiUnmapMemFont'] = 1
- syscallArgcTable['NtGdiUpdateColors'] = 1
- syscallArgcTable['NtGdiUpdateTransform'] = 1
- syscallArgcTable['NtGdiWidenPath'] = 1
- syscallArgcTable['NtGdiXFORMOBJ_bApplyXform'] = 5
- syscallArgcTable['NtGdiXFORMOBJ_iGetXform'] = 2
- syscallArgcTable['NtGdiXLATEOBJ_cGetPalette'] = 4
- syscallArgcTable['NtGdiXLATEOBJ_hGetColorTransform'] = 1
- syscallArgcTable['NtGdiXLATEOBJ_iXlate'] = 2
- syscallArgcTable['NtHWCursorUpdatePointer'] = 2
- syscallArgcTable['NtIsOneCoreTransformMode'] = 0
- syscallArgcTable['NtMITActivateInputProcessing'] = 2
- syscallArgcTable['NtMITBindInputTypeToMonitors'] = 3
- syscallArgcTable['NtMITCoreMsgKGetConnectionHandle'] = 2
- syscallArgcTable['NtMITCoreMsgKOpenConnectionTo'] = 2
- syscallArgcTable['NtMITCoreMsgKSend'] = 3
- syscallArgcTable['NtMITDeactivateInputProcessing'] = 0
- syscallArgcTable['NtMITDisableMouseIntercept'] = 0
- syscallArgcTable['NtMITDispatchCompletion'] = 2
- syscallArgcTable['NtMITEnableMouseIntercept'] = 1
- syscallArgcTable['NtMITGetCursorUpdateHandle'] = 0
- syscallArgcTable['NtMITSetInputCallbacks'] = 1
- syscallArgcTable['NtMITSetInputDelegationMode'] = 2
- syscallArgcTable['NtMITSetLastInputRecipient'] = 1
- syscallArgcTable['NtMITSynthesizeMouseInput'] = 3
- syscallArgcTable['NtMITSynthesizeMouseWheel'] = 2
- syscallArgcTable['NtMITSynthesizeTouchInput'] = 1
- syscallArgcTable['NtMITUpdateInputGlobals'] = 5
- syscallArgcTable['NtMITWaitForMultipleObjectsEx'] = 3
- syscallArgcTable['NtMapVisualRelativePoints'] = 7
- syscallArgcTable['NtNotifyPresentToCompositionSurface'] = 2
- syscallArgcTable['NtOpenCompositionSurfaceDirtyRegion'] = 4
- syscallArgcTable['NtOpenCompositionSurfaceSectionInfo'] = 4
- syscallArgcTable['NtOpenCompositionSurfaceSwapChainHandleInfo'] = 3
- syscallArgcTable['NtQueryCompositionInputIsImplicit'] = 2
- syscallArgcTable['NtQueryCompositionInputQueueAndTransform'] = 4
- syscallArgcTable['NtQueryCompositionInputSink'] = 2
- syscallArgcTable['NtQueryCompositionInputSinkLuid'] = 2
- syscallArgcTable['NtQueryCompositionInputSinkViewId'] = 2
- syscallArgcTable['NtQueryCompositionSurfaceBinding'] = 3
- syscallArgcTable['NtQueryCompositionSurfaceHDRMetaData'] = 5
- syscallArgcTable['NtQueryCompositionSurfaceRenderingRealization'] = 2
- syscallArgcTable['NtQueryCompositionSurfaceStatistics'] = 2
- syscallArgcTable['NtRIMAddInputObserver'] = 8
- syscallArgcTable['NtRIMAreSiblingDevices'] = 3
- syscallArgcTable['NtRIMDeviceIoControl'] = 9
- syscallArgcTable['NtRIMEnableMonitorMappingForDevice'] = 3
- syscallArgcTable['NtRIMFreeInputBuffer'] = 2
- syscallArgcTable['NtRIMGetDevicePreparsedData'] = 4
- syscallArgcTable['NtRIMGetDevicePreparsedDataLockfree'] = 3
- syscallArgcTable['NtRIMGetDeviceProperties'] = 3
- syscallArgcTable['NtRIMGetDevicePropertiesLockfree'] = 2
- syscallArgcTable['NtRIMGetPhysicalDeviceRect'] = 3
- syscallArgcTable['NtRIMGetSourceProcessId'] = 3
- syscallArgcTable['NtRIMObserveNextInput'] = 1
- syscallArgcTable['NtRIMOnPnpNotification'] = 1
- syscallArgcTable['NtRIMOnTimerNotification'] = 2
- syscallArgcTable['NtRIMReadInput'] = 7
- syscallArgcTable['NtRIMRegisterForInput'] = 10
- syscallArgcTable['NtRIMRemoveInputObserver'] = 1
- syscallArgcTable['NtRIMSetTestModeStatus'] = 1
- syscallArgcTable['NtRIMUnregisterForInput'] = 1
- syscallArgcTable['NtRIMUpdateInputObserverRegistration'] = 4
- syscallArgcTable['NtSetCompositionSurfaceAnalogExclusive'] = 2
- syscallArgcTable['NtSetCompositionSurfaceBufferUsage'] = 4
- syscallArgcTable['NtSetCompositionSurfaceDirectFlipState'] = 3
- syscallArgcTable['NtSetCompositionSurfaceIndependentFlipInfo'] = 8
- syscallArgcTable['NtSetCompositionSurfaceStatistics'] = 3
- syscallArgcTable['NtTokenManagerConfirmOutstandingAnalogToken'] = 0
- syscallArgcTable['NtTokenManagerCreateCompositionTokenHandle'] = 5
- syscallArgcTable['NtTokenManagerCreateFlipObjectReturnTokenHandle'] = 3
- syscallArgcTable['NtTokenManagerCreateFlipObjectTokenHandle'] = 6
- syscallArgcTable['NtTokenManagerGetAnalogExclusiveSurfaceUpdates'] = 5
- syscallArgcTable['NtTokenManagerGetAnalogExclusiveTokenEvent'] = 1
- syscallArgcTable['NtTokenManagerOpenSectionAndEvents'] = 4
- syscallArgcTable['NtTokenManagerThread'] = 1
- syscallArgcTable['NtUnBindCompositionSurface'] = 2
- syscallArgcTable['NtUpdateInputSinkTransforms'] = 2
- syscallArgcTable['NtUserAcquireIAMKey'] = 1
- syscallArgcTable['NtUserAcquireInteractiveControlBackgroundAccess'] = 3
- syscallArgcTable['NtUserAddClipboardFormatListener'] = 1
- syscallArgcTable['NtUserAssociateInputContext'] = 3
- syscallArgcTable['NtUserAutoPromoteMouseInPointer'] = 1
- syscallArgcTable['NtUserAutoRotateScreen'] = 1
- syscallArgcTable['NtUserBeginLayoutUpdate'] = 1
- syscallArgcTable['NtUserBlockInput'] = 1
- syscallArgcTable['NtUserBroadcastThemeChangeEvent'] = 2
- syscallArgcTable['NtUserBuildHimcList'] = 4
- syscallArgcTable['NtUserBuildPropList'] = 4
- syscallArgcTable['NtUserCalculatePopupWindowPosition'] = 5
- syscallArgcTable['NtUserCallHwndOpt'] = 2
- syscallArgcTable['NtUserCanBrokerForceForeground'] = 1
- syscallArgcTable['NtUserChangeDisplaySettings'] = 4
- syscallArgcTable['NtUserChangeWindowMessageFilterEx'] = 4
- syscallArgcTable['NtUserCheckAccessForIntegrityLevel'] = 3
- syscallArgcTable['NtUserCheckProcessForClipboardAccess'] = 2
- syscallArgcTable['NtUserCheckProcessSession'] = 1
- syscallArgcTable['NtUserCheckWindowThreadDesktop'] = 2
- syscallArgcTable['NtUserChildWindowFromPointEx'] = 4
- syscallArgcTable['NtUserClearForeground'] = 0
- syscallArgcTable['NtUserClipCursor'] = 1
- syscallArgcTable['NtUserCompositionInputSinkLuidFromPoint'] = 5
- syscallArgcTable['NtUserCompositionInputSinkViewInstanceIdFromPoint'] = 2
- syscallArgcTable['NtUserConfirmResizeCommit'] = 1
- syscallArgcTable['NtUserCreateDCompositionHwndTarget'] = 3
- syscallArgcTable['NtUserCreateDesktopEx'] = 6
- syscallArgcTable['NtUserCreateEmptyCursorObject'] = 1
- syscallArgcTable['NtUserCreateInputContext'] = 1
- syscallArgcTable['NtUserCreatePalmRejectionDelayZone'] = 2
- syscallArgcTable['NtUserCreateWindowGroup'] = 1
- syscallArgcTable['NtUserCreateWindowStation'] = 8
- syscallArgcTable['NtUserCtxDisplayIOCtl'] = 3
- syscallArgcTable['NtUserDeferWindowPosAndBand'] = 10
- syscallArgcTable['NtUserDelegateCapturePointers'] = 3
- syscallArgcTable['NtUserDelegateInput'] = 6
- syscallArgcTable['NtUserDeleteWindowGroup'] = 1
- syscallArgcTable['NtUserDestroyDCompositionHwndTarget'] = 2
- syscallArgcTable['NtUserDestroyInputContext'] = 1
- syscallArgcTable['NtUserDestroyPalmRejectionDelayZone'] = 1
- syscallArgcTable['NtUserDisableImmersiveOwner'] = 1
- syscallArgcTable['NtUserDisableProcessWindowFiltering'] = 0
- syscallArgcTable['NtUserDisableThreadIme'] = 1
- syscallArgcTable['NtUserDiscardPointerFrameMessages'] = 1
- syscallArgcTable['NtUserDisplayConfigGetDeviceInfo'] = 1
- syscallArgcTable['NtUserDisplayConfigSetDeviceInfo'] = 1
- syscallArgcTable['NtUserDoSoundConnect'] = 0
- syscallArgcTable['NtUserDoSoundDisconnect'] = 0
- syscallArgcTable['NtUserDragDetect'] = 3
- syscallArgcTable['NtUserDragObject'] = 5
- syscallArgcTable['NtUserDrawAnimatedRects'] = 4
- syscallArgcTable['NtUserDrawCaption'] = 4
- syscallArgcTable['NtUserDrawCaptionTemp'] = 7
- syscallArgcTable['NtUserDrawMenuBarTemp'] = 5
- syscallArgcTable['NtUserDwmGetRemoteSessionOcclusionEvent'] = 0
- syscallArgcTable['NtUserDwmGetRemoteSessionOcclusionState'] = 0
- syscallArgcTable['NtUserDwmKernelShutdown'] = 0
- syscallArgcTable['NtUserDwmKernelStartup'] = 0
- syscallArgcTable['NtUserDwmValidateWindow'] = 2
- syscallArgcTable['NtUserEnableChildWindowDpiMessage'] = 2
- syscallArgcTable['NtUserEnableIAMAccess'] = 3
- syscallArgcTable['NtUserEnableMouseInPointer'] = 1
- syscallArgcTable['NtUserEnableMouseInputForCursorSuppression'] = 1
- syscallArgcTable['NtUserEnableNonClientDpiScaling'] = 1
- syscallArgcTable['NtUserEnableResizeLayoutSynchronization'] = 2
- syscallArgcTable['NtUserEnableSoftwareCursorForScreenCapture'] = 1
- syscallArgcTable['NtUserEnableTouchPad'] = 1
- syscallArgcTable['NtUserEnableWindowGDIScaledDpiMessage'] = 2
- syscallArgcTable['NtUserEnableWindowGroupPolicy'] = 3
- syscallArgcTable['NtUserEnableWindowResizeOptimization'] = 3
- syscallArgcTable['NtUserEndMenu'] = 0
- syscallArgcTable['NtUserEvent'] = 1
- syscallArgcTable['NtUserFlashWindowEx'] = 1
- syscallArgcTable['NtUserFrostCrashedWindow'] = 2
- syscallArgcTable['NtUserFunctionalizeDisplayConfig'] = 6
- syscallArgcTable['NtUserGetActiveProcessesDpis'] = 0
- syscallArgcTable['NtUserGetAppImeLevel'] = 1
- syscallArgcTable['NtUserGetAutoRotationState'] = 1
- syscallArgcTable['NtUserGetCIMSSM'] = 1
- syscallArgcTable['NtUserGetCaretPos'] = 1
- syscallArgcTable['NtUserGetClipCursor'] = 1
- syscallArgcTable['NtUserGetClipboardAccessToken'] = 2
- syscallArgcTable['NtUserGetClipboardViewer'] = 0
- syscallArgcTable['NtUserGetComboBoxInfo'] = 2
- syscallArgcTable['NtUserGetCurrentInputMessageSource'] = 1
- syscallArgcTable['NtUserGetCursor'] = 0
- syscallArgcTable['NtUserGetCursorDims'] = 1
- syscallArgcTable['NtUserGetCursorInfo'] = 1
- syscallArgcTable['NtUserGetDManipHookInitFunction'] = 2
- syscallArgcTable['NtUserGetDesktopID'] = 2
- syscallArgcTable['NtUserGetDisplayAutoRotationPreferences'] = 1
- syscallArgcTable['NtUserGetDisplayAutoRotationPreferencesByProcessId'] = 3
- syscallArgcTable['NtUserGetDisplayConfigBufferSizes'] = 2
- syscallArgcTable['NtUserGetDpiForCurrentProcess'] = 0
- syscallArgcTable['NtUserGetDpiForMonitor'] = 4
- syscallArgcTable['NtUserGetGestureConfig'] = 6
- syscallArgcTable['NtUserGetGestureExtArgs'] = 3
- syscallArgcTable['NtUserGetGestureInfo'] = 2
- syscallArgcTable['NtUserGetGuiResources'] = 2
- syscallArgcTable['NtUserGetHDevName'] = 2
- syscallArgcTable['NtUserGetHimetricScaleFactorFromPixelLocation'] = 5
- syscallArgcTable['NtUserGetImeHotKey'] = 4
- syscallArgcTable['NtUserGetImeInfoEx'] = 2
- syscallArgcTable['NtUserGetInputLocaleInfo'] = 2
- syscallArgcTable['NtUserGetInteractiveControlDeviceInfo'] = 2
- syscallArgcTable['NtUserGetInteractiveControlInfo'] = 2
- syscallArgcTable['NtUserGetInteractiveCtrlSupportedWaveforms'] = 3
- syscallArgcTable['NtUserGetInternalWindowPos'] = 3
- syscallArgcTable['NtUserGetKeyNameText'] = 3
- syscallArgcTable['NtUserGetKeyboardLayoutName'] = 1
- syscallArgcTable['NtUserGetLayeredWindowAttributes'] = 4
- syscallArgcTable['NtUserGetListBoxInfo'] = 1
- syscallArgcTable['NtUserGetMenuIndex'] = 2
- syscallArgcTable['NtUserGetMenuItemRect'] = 4
- syscallArgcTable['NtUserGetMonitorBrightness'] = 4
- syscallArgcTable['NtUserGetMouseMovePointsEx'] = 5
- syscallArgcTable['NtUserGetOemBitmapSize'] = 2
- syscallArgcTable['NtUserGetPhysicalDeviceRect'] = 2
- syscallArgcTable['NtUserGetPointerCursorId'] = 2
- syscallArgcTable['NtUserGetPointerDevice'] = 2
- syscallArgcTable['NtUserGetPointerDeviceCursors'] = 3
- syscallArgcTable['NtUserGetPointerDeviceProperties'] = 3
- syscallArgcTable['NtUserGetPointerDeviceRects'] = 3
- syscallArgcTable['NtUserGetPointerDevices'] = 2
- syscallArgcTable['NtUserGetPointerFrameArrivalTimes'] = 3
- syscallArgcTable['NtUserGetPointerInfoList'] = 8
- syscallArgcTable['NtUserGetPointerInputTransform'] = 3
- syscallArgcTable['NtUserGetPointerType'] = 2
- syscallArgcTable['NtUserGetPrecisionTouchPadConfiguration'] = 1
- syscallArgcTable['NtUserGetPriorityClipboardFormat'] = 2
- syscallArgcTable['NtUserGetProcessDpiAwarenessContext'] = 1
- syscallArgcTable['NtUserGetProcessUIContextInformation'] = 2
- syscallArgcTable['NtUserGetQueueStatusReadonly'] = 1
- syscallArgcTable['NtUserGetRawInputBuffer'] = 3
- syscallArgcTable['NtUserGetRawInputData'] = 5
- syscallArgcTable['NtUserGetRawInputDeviceInfo'] = 4
- syscallArgcTable['NtUserGetRawInputDeviceList'] = 3
- syscallArgcTable['NtUserGetRawPointerDeviceData'] = 5
- syscallArgcTable['NtUserGetRegisteredRawInputDevices'] = 3
- syscallArgcTable['NtUserGetResizeDCompositionSynchronizationObject'] = 2
- syscallArgcTable['NtUserGetSystemDpiForProcess'] = 1
- syscallArgcTable['NtUserGetTopLevelWindow'] = 1
- syscallArgcTable['NtUserGetTouchInputInfo'] = 4
- syscallArgcTable['NtUserGetTouchValidationStatus'] = 1
- syscallArgcTable['NtUserGetUpdatedClipboardFormats'] = 3
- syscallArgcTable['NtUserGetWOWClass'] = 2
- syscallArgcTable['NtUserGetWindowBand'] = 2
- syscallArgcTable['NtUserGetWindowCompositionAttribute'] = 2
- syscallArgcTable['NtUserGetWindowCompositionInfo'] = 2
- syscallArgcTable['NtUserGetWindowDisplayAffinity'] = 2
- syscallArgcTable['NtUserGetWindowFeedbackSetting'] = 5
- syscallArgcTable['NtUserGetWindowGroupId'] = 2
- syscallArgcTable['NtUserGetWindowMinimizeRect'] = 2
- syscallArgcTable['NtUserGetWindowProcessHandle'] = 2
- syscallArgcTable['NtUserGetWindowRgnEx'] = 3
- syscallArgcTable['NtUserGhostWindowFromHungWindow'] = 1
- syscallArgcTable['NtUserHandleDelegatedInput'] = 2
- syscallArgcTable['NtUserHardErrorControl'] = 3
- syscallArgcTable['NtUserHidePointerContactVisualization'] = 1
- syscallArgcTable['NtUserHiliteMenuItem'] = 4
- syscallArgcTable['NtUserHungWindowFromGhostWindow'] = 1
- syscallArgcTable['NtUserHwndQueryRedirectionInfo'] = 4
- syscallArgcTable['NtUserHwndSetRedirectionInfo'] = 4
- syscallArgcTable['NtUserImpersonateDdeClientWindow'] = 2
- syscallArgcTable['NtUserInheritWindowMonitor'] = 2
- syscallArgcTable['NtUserInitTask'] = 12
- syscallArgcTable['NtUserInitialize'] = 2
- syscallArgcTable['NtUserInitializeClientPfnArrays'] = 4
- syscallArgcTable['NtUserInitializeGenericHidInjection'] = 2
- syscallArgcTable['NtUserInitializeInputDeviceInjection'] = 7
- syscallArgcTable['NtUserInitializePointerDeviceInjection'] = 5
- syscallArgcTable['NtUserInitializePointerDeviceInjectionEx'] = 6
- syscallArgcTable['NtUserInitializeTouchInjection'] = 2
- syscallArgcTable['NtUserInjectDeviceInput'] = 3
- syscallArgcTable['NtUserInjectGenericHidInput'] = 3
- syscallArgcTable['NtUserInjectGesture'] = 5
- syscallArgcTable['NtUserInjectKeyboardInput'] = 2
- syscallArgcTable['NtUserInjectMouseInput'] = 2
- syscallArgcTable['NtUserInjectPointerInput'] = 3
- syscallArgcTable['NtUserInjectTouchInput'] = 2
- syscallArgcTable['NtUserInteractiveControlQueryUsage'] = 5
- syscallArgcTable['NtUserInternalGetWindowIcon'] = 2
- syscallArgcTable['NtUserIsChildWindowDpiMessageEnabled'] = 1
- syscallArgcTable['NtUserIsMouseInPointerEnabled'] = 0
- syscallArgcTable['NtUserIsMouseInputEnabled'] = 0
- syscallArgcTable['NtUserIsNonClientDpiScalingEnabled'] = 1
- syscallArgcTable['NtUserIsResizeLayoutSynchronizationEnabled'] = 1
- syscallArgcTable['NtUserIsTopLevelWindow'] = 1
- syscallArgcTable['NtUserIsTouchWindow'] = 2
- syscallArgcTable['NtUserIsWindowBroadcastingDpiToChildren'] = 1
- syscallArgcTable['NtUserIsWindowGDIScaledDpiMessageEnabled'] = 1
- syscallArgcTable['NtUserLayoutCompleted'] = 1
- syscallArgcTable['NtUserLinkDpiCursor'] = 3
- syscallArgcTable['NtUserLoadKeyboardLayoutEx'] = 8
- syscallArgcTable['NtUserLockCursor'] = 1
- syscallArgcTable['NtUserLockWindowStation'] = 1
- syscallArgcTable['NtUserLockWorkStation'] = 0
- syscallArgcTable['NtUserLogicalToPerMonitorDPIPhysicalPoint'] = 2
- syscallArgcTable['NtUserLogicalToPhysicalDpiPointForWindow'] = 2
- syscallArgcTable['NtUserLogicalToPhysicalPoint'] = 2
- syscallArgcTable['NtUserMNDragLeave'] = 0
- syscallArgcTable['NtUserMNDragOver'] = 2
- syscallArgcTable['NtUserMagControl'] = 2
- syscallArgcTable['NtUserMagGetContextInformation'] = 4
- syscallArgcTable['NtUserMagSetContextInformation'] = 4
- syscallArgcTable['NtUserMenuItemFromPoint'] = 4
- syscallArgcTable['NtUserMinMaximize'] = 3
- syscallArgcTable['NtUserModifyWindowTouchCapability'] = 3
- syscallArgcTable['NtUserMsgWaitForMultipleObjectsEx'] = 5
- syscallArgcTable['NtUserNavigateFocus'] = 2
- syscallArgcTable['NtUserNotifyIMEStatus'] = 3
- syscallArgcTable['NtUserOpenInputDesktop'] = 3
- syscallArgcTable['NtUserOpenThreadDesktop'] = 4
- syscallArgcTable['NtUserPaintMonitor'] = 3
- syscallArgcTable['NtUserPerMonitorDPIPhysicalToLogicalPoint'] = 2
- syscallArgcTable['NtUserPhysicalToLogicalDpiPointForWindow'] = 2
- syscallArgcTable['NtUserPhysicalToLogicalPoint'] = 2
- syscallArgcTable['NtUserPrintWindow'] = 3
- syscallArgcTable['NtUserProcessInkFeedbackCommand'] = 3
- syscallArgcTable['NtUserPromoteMouseInPointer'] = 1
- syscallArgcTable['NtUserPromotePointer'] = 2
- syscallArgcTable['NtUserQueryBSDRWindow'] = 0
- syscallArgcTable['NtUserQueryDisplayConfig'] = 5
- syscallArgcTable['NtUserQueryInformationThread'] = 4
- syscallArgcTable['NtUserQueryInputContext'] = 2
- syscallArgcTable['NtUserQuerySendMessage'] = 1
- syscallArgcTable['NtUserRealChildWindowFromPoint'] = 3
- syscallArgcTable['NtUserRealWaitMessageEx'] = 2
- syscallArgcTable['NtUserRegisterBSDRWindow'] = 2
- syscallArgcTable['NtUserRegisterDManipHook'] = 0
- syscallArgcTable['NtUserRegisterEdgy'] = 3
- syscallArgcTable['NtUserRegisterErrorReportingDialog'] = 2
- syscallArgcTable['NtUserRegisterHotKey'] = 4
- syscallArgcTable['NtUserRegisterManipulationThread'] = 1
- syscallArgcTable['NtUserRegisterPointerDeviceNotifications'] = 2
- syscallArgcTable['NtUserRegisterPointerInputTarget'] = 4
- syscallArgcTable['NtUserRegisterRawInputDevices'] = 3
- syscallArgcTable['NtUserRegisterServicesProcess'] = 1
- syscallArgcTable['NtUserRegisterSessionPort'] = 1
- syscallArgcTable['NtUserRegisterShellPTPListener'] = 2
- syscallArgcTable['NtUserRegisterTasklist'] = 1
- syscallArgcTable['NtUserRegisterTouchHitTestingWindow'] = 2
- syscallArgcTable['NtUserRegisterTouchPadCapable'] = 1
- syscallArgcTable['NtUserRegisterUserApiHook'] = 4
- syscallArgcTable['NtUserReleaseDC'] = 1
- syscallArgcTable['NtUserReleaseDwmHitTestWaiters'] = 0
- syscallArgcTable['NtUserRemoteConnect'] = 3
- syscallArgcTable['NtUserRemoteRedrawRectangle'] = 4
- syscallArgcTable['NtUserRemoteRedrawScreen'] = 0
- syscallArgcTable['NtUserRemoteStopScreenUpdates'] = 0
- syscallArgcTable['NtUserRemoveClipboardFormatListener'] = 1
- syscallArgcTable['NtUserRemoveInjectionDevice'] = 1
- syscallArgcTable['NtUserReportInertia'] = 5
- syscallArgcTable['NtUserRequestMoveSizeOperation'] = 3
- syscallArgcTable['NtUserResolveDesktopForWOW'] = 1
- syscallArgcTable['NtUserSendEventMessage'] = 4
- syscallArgcTable['NtUserSendInteractiveControlHapticsReport'] = 3
- syscallArgcTable['NtUserSetActivationFilter'] = 2
- syscallArgcTable['NtUserSetActiveProcessForMonitor'] = 2
- syscallArgcTable['NtUserSetAppImeLevel'] = 2
- syscallArgcTable['NtUserSetAutoRotation'] = 1
- syscallArgcTable['NtUserSetBridgeWindowChild'] = 2
- syscallArgcTable['NtUserSetBrokeredForeground'] = 1
- syscallArgcTable['NtUserSetCalibrationData'] = 4
- syscallArgcTable['NtUserSetChildWindowNoActivate'] = 1
- syscallArgcTable['NtUserSetClassWord'] = 3
- syscallArgcTable['NtUserSetCoreWindow'] = 2
- syscallArgcTable['NtUserSetCoreWindowPartner'] = 3
- syscallArgcTable['NtUserSetCursorContents'] = 2
- syscallArgcTable['NtUserSetCursorPos'] = 3
- syscallArgcTable['NtUserSetDesktopColorTransform'] = 1
- syscallArgcTable['NtUserSetDialogControlDpiChangeBehavior'] = 3
- syscallArgcTable['NtUserSetDimUndimTransitionTime'] = 2
- syscallArgcTable['NtUserSetDisplayAutoRotationPreferences'] = 1
- syscallArgcTable['NtUserSetDisplayConfig'] = 5
- syscallArgcTable['NtUserSetDisplayMapping'] = 2
- syscallArgcTable['NtUserSetFallbackForeground'] = 2
- syscallArgcTable['NtUserSetFeatureReportResponse'] = 3
- syscallArgcTable['NtUserSetGestureConfig'] = 5
- syscallArgcTable['NtUserSetImeHotKey'] = 5
- syscallArgcTable['NtUserSetImeInfoEx'] = 1
- syscallArgcTable['NtUserSetImeOwnerWindow'] = 2
- syscallArgcTable['NtUserSetInteractiveControlFocus'] = 3
- syscallArgcTable['NtUserSetInteractiveCtrlRotationAngle'] = 5
- syscallArgcTable['NtUserSetInternalWindowPos'] = 4
- syscallArgcTable['NtUserSetLayeredWindowAttributes'] = 4
- syscallArgcTable['NtUserSetManipulationInputTarget'] = 4
- syscallArgcTable['NtUserSetMenu'] = 3
- syscallArgcTable['NtUserSetMenuContextHelpId'] = 2
- syscallArgcTable['NtUserSetMenuFlagRtoL'] = 1
- syscallArgcTable['NtUserSetMirrorRendering'] = 2
- syscallArgcTable['NtUserSetMonitorBrightness'] = 6
- syscallArgcTable['NtUserSetObjectInformation'] = 4
- syscallArgcTable['NtUserSetPrecisionTouchPadConfiguration'] = 1
- syscallArgcTable['NtUserSetProcessDpiAwarenessContext'] = 2
- syscallArgcTable['NtUserSetProcessInteractionFlags'] = 3
- syscallArgcTable['NtUserSetProcessRestrictionExemption'] = 1
- syscallArgcTable['NtUserSetProcessUIAccessZorder'] = 0
- syscallArgcTable['NtUserSetShellWindowEx'] = 2
- syscallArgcTable['NtUserSetSysColors'] = 4
- syscallArgcTable['NtUserSetSystemCursor'] = 2
- syscallArgcTable['NtUserSetSystemTimer'] = 3
- syscallArgcTable['NtUserSetTargetForResourceBrokering'] = 2
- syscallArgcTable['NtUserSetThreadInputBlocked'] = 2
- syscallArgcTable['NtUserSetThreadLayoutHandles'] = 2
- syscallArgcTable['NtUserSetWindowArrangement'] = 4
- syscallArgcTable['NtUserSetWindowBand'] = 3
- syscallArgcTable['NtUserSetWindowCompositionAttribute'] = 2
- syscallArgcTable['NtUserSetWindowCompositionTransition'] = 7
- syscallArgcTable['NtUserSetWindowDisplayAffinity'] = 2
- syscallArgcTable['NtUserSetWindowFeedbackSetting'] = 5
- syscallArgcTable['NtUserSetWindowGroup'] = 4
- syscallArgcTable['NtUserSetWindowRgnEx'] = 3
- syscallArgcTable['NtUserSetWindowShowState'] = 4
- syscallArgcTable['NtUserSetWindowStationUser'] = 4
- syscallArgcTable['NtUserShowCursor'] = 1
- syscallArgcTable['NtUserShowSystemCursor'] = 1
- syscallArgcTable['NtUserShutdownBlockReasonCreate'] = 3
- syscallArgcTable['NtUserShutdownBlockReasonQuery'] = 3
- syscallArgcTable['NtUserShutdownReasonDestroy'] = 1
- syscallArgcTable['NtUserSignalRedirectionStartComplete'] = 0
- syscallArgcTable['NtUserSlicerControl'] = 4
- syscallArgcTable['NtUserSoundSentry'] = 0
- syscallArgcTable['NtUserStopAndEndInertia'] = 2
- syscallArgcTable['NtUserSwitchDesktop'] = 3
- syscallArgcTable['NtUserSystemParametersInfoForDpi'] = 5
- syscallArgcTable['NtUserTestForInteractiveUser'] = 1
- syscallArgcTable['NtUserTrackPopupMenuEx'] = 6
- syscallArgcTable['NtUserTransformPoint'] = 3
- syscallArgcTable['NtUserTransformRect'] = 3
- syscallArgcTable['NtUserUndelegateInput'] = 2
- syscallArgcTable['NtUserUnloadKeyboardLayout'] = 1
- syscallArgcTable['NtUserUnlockWindowStation'] = 1
- syscallArgcTable['NtUserUnregisterHotKey'] = 2
- syscallArgcTable['NtUserUnregisterSessionPort'] = 0
- syscallArgcTable['NtUserUnregisterUserApiHook'] = 0
- syscallArgcTable['NtUserUpdateDefaultDesktopThumbnail'] = 5
- syscallArgcTable['NtUserUpdateInputContext'] = 3
- syscallArgcTable['NtUserUpdateInstance'] = 3
- syscallArgcTable['NtUserUpdateLayeredWindow'] = 10
- syscallArgcTable['NtUserUpdatePerUserSystemParameters'] = 1
- syscallArgcTable['NtUserUpdateWindowInputSinkHints'] = 2
- syscallArgcTable['NtUserUpdateWindowTrackingInfo'] = 3
- syscallArgcTable['NtUserUserHandleGrantAccess'] = 3
- syscallArgcTable['NtUserValidateHandleSecure'] = 1
- syscallArgcTable['NtUserWOWCleanup'] = 2
- syscallArgcTable['NtUserWaitAvailableMessageEx'] = 2
- syscallArgcTable['NtUserWaitForInputIdle'] = 3
- syscallArgcTable['NtUserWaitForMsgAndEvent'] = 1
- syscallArgcTable['NtUserWaitForRedirectionStartComplete'] = 0
- syscallArgcTable['NtUserWindowFromDC'] = 1
- syscallArgcTable['NtUserWindowFromPhysicalPoint'] = 2
- syscallArgcTable['NtValidateCompositionSurfaceHandle'] = 2
- syscallArgcTable['NtVisualCaptureBits'] = 9
- syscallArgcTable['NtUserSetClassLongPtr'] = 4
- syscallArgcTable['NtUserSetWindowLongPtr'] = 4
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement