// SDB-CGEN V2.6.2 #include #include #include struct kv { const char *name; const char *value; }; static const struct kv kvs[] = { // gcc -DMAIN=1 windows_x86_64.c ; ./a.out > windows_x86_64.h {"DxEngVisRgnUniq", "0x2e,0x1331,0,"}, {"0x2e.0x1331", "DxEngVisRgnUniq"}, {"DxgStubContextDestroyAll", "0x2e,0x1323,1,i arg0"}, {"0x2e.0x1323", "DxgStubContextDestroyAll"}, {"DxgStubDvpUpdateVideoPort", "0x2e,0x10cf,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x10cf", "DxgStubDvpUpdateVideoPort"}, {"DxgStubEndMoCompFrame", "0x2e,0x1322,2,ii arg0 arg1"}, {"0x2e.0x1322", "DxgStubEndMoCompFrame"}, {"NtAcceptConnectPort", "0x2e,0x0000,6,pppipp PortHandle PortContext ConnectionRequest AcceptConnection ServerView ClientView"}, {"0x2e.0x0000", "NtAcceptConnectPort"}, {"NtAccessCheck", "0x2e,0x0001,8,pixppppp SecurityDescriptor ClientToken DesiredAccess GenericMapping PrivilegeSet PrivilegeSetLength GrantedAccess AccessStatus"}, {"0x2e.0x0001", "NtAccessCheck"}, {"NtAccessCheckAndAuditAlarm", "0x2e,0x0002,11,pppppxpippp SubsystemName HandleId ObjectTypeName ObjectName SecurityDescriptor DesiredAccess GenericMapping ObjectCreation GrantedAccess AccessStatus GenerateOnClose"}, {"0x2e.0x0002", "NtAccessCheckAndAuditAlarm"}, {"NtAccessCheckByType", "0x2e,0x0003,11,ppixpxppppp SecurityDescriptor PrincipalSelfSid ClientToken DesiredAccess ObjectTypeList ObjectTypeListLength GenericMapping PrivilegeSet PrivilegeSetLength GrantedAccess AccessStatus"}, {"0x2e.0x0003", "NtAccessCheckByType"}, {"NtAccessCheckByTypeAndAuditAlarm", "0x2e,0x0004,16,ppppppxxxpxpippp SubsystemName HandleId ObjectTypeName ObjectName SecurityDescriptor PrincipalSelfSid DesiredAccess AuditType Flags ObjectTypeList ObjectTypeListLength GenericMapping ObjectCreation GrantedAccess AccessStatus GenerateOnClose"}, {"0x2e.0x0004", "NtAccessCheckByTypeAndAuditAlarm"}, {"NtAccessCheckByTypeResultList", "0x2e,0x0005,11,ppixpxppppp SecurityDescriptor PrincipalSelfSid ClientToken DesiredAccess ObjectTypeList ObjectTypeListLength GenericMapping PrivilegeSet PrivilegeSetLength GrantedAccess AccessStatus"}, {"0x2e.0x0005", "NtAccessCheckByTypeResultList"}, {"NtAccessCheckByTypeResultListAndAuditAlarm", "0x2e,0x0006,16,ppppppxxxpxpippp SubsystemName HandleId ObjectTypeName ObjectName SecurityDescriptor PrincipalSelfSid DesiredAccess AuditType Flags ObjectTypeList ObjectTypeListLength GenericMapping ObjectCreation GrantedAccess AccessStatus GenerateOnClose"}, {"0x2e.0x0006", "NtAccessCheckByTypeResultListAndAuditAlarm"}, {"NtAccessCheckByTypeResultListAndAuditAlarmByPlugin", "0x2e,0x0007,17,iiiiiiiiiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9 arg10 arg11 arg12 arg13 arg14 arg15 arg16"}, {"0x2e.0x0007", "NtAccessCheckByTypeResultListAndAuditAlarmByPlugin"}, {"NtAddAtom", "0x2e,0x0008,3,pip AtomName Length Atom"}, {"0x2e.0x0008", "NtAddAtom"}, {"NtAddBootEntry", "0x2e,0x0009,2,pp BootEntry Id"}, {"0x2e.0x0009", "NtAddBootEntry"}, {"NtAddDriverEntry", "0x2e,0x000a,2,pp DriverEntry Id"}, {"0x2e.0x000a", "NtAddDriverEntry"}, {"NtAdjustGroupsToken", "0x2e,0x000b,6,iipipp TokenHandle ResetToDefault NewState BufferLength PreviousState ReturnLength"}, {"0x2e.0x000b", "NtAdjustGroupsToken"}, {"NtAdjustPrivilegesToken", "0x2e,0x000c,6,iipipp TokenHandle DisableAllPrivileges NewState BufferLength PreviousState ReturnLength"}, {"0x2e.0x000c", "NtAdjustPrivilegesToken"}, {"NtAlertResumeThread", "0x2e,0x000d,2,ip ThreadHandle PreviousSuspendCount"}, {"0x2e.0x000d", "NtAlertResumeThread"}, {"NtAlertThread", "0x2e,0x000e,1,i ThreadHandle"}, {"0x2e.0x000e", "NtAlertThread"}, {"NtAllocateLocallyUniqueId", "0x2e,0x000f,1,p Luid"}, {"0x2e.0x000f", "NtAllocateLocallyUniqueId"}, {"NtAllocateReserveObject", "0x2e,0x0010,3,ppx MemoryReserveHandle ObjectAttributes Type"}, {"0x2e.0x0010", "NtAllocateReserveObject"}, {"NtAllocateUserPhysicalPages", "0x2e,0x0011,3,ipp ProcessHandle NumberOfPages UserPfnArray"}, {"0x2e.0x0011", "NtAllocateUserPhysicalPages"}, {"NtAllocateUuids", "0x2e,0x0012,4,pppp Time Range Sequence Seed"}, {"0x2e.0x0012", "NtAllocateUuids"}, {"NtAllocateVirtualMemory", "0x2e,0x0013,6,ipipxx ProcessHandle BaseAddress ZeroBits RegionSize AllocationType PageProtection"}, {"0x2e.0x0013", "NtAllocateVirtualMemory"}, {"NtAlpcAcceptConnectPort", "0x2e,0x0014,9,pixpppppi PortHandle ConnectionPortHandle Flags ObjectAttributes PortAttributes PortContext ConnectionRequest ConnectionMessageAttributes AcceptConnection"}, {"0x2e.0x0014", "NtAlpcAcceptConnectPort"}, {"NtAlpcCancelMessage", "0x2e,0x0015,3,ixp PortHandle Flags MessageContext"}, {"0x2e.0x0015", "NtAlpcCancelMessage"}, {"NtAlpcConnectPort", "0x2e,0x0016,11,ppppxpppppp PortHandle PortName ObjectAttributes PortAttributes Flags RequiredServerSid ConnectionMessage BufferLength OutMessageAttributes InMessageAttributes Timeout"}, {"0x2e.0x0016", "NtAlpcConnectPort"}, {"NtAlpcCreatePort", "0x2e,0x0017,3,ppp PortHandle ObjectAttributes PortAttributes"}, {"0x2e.0x0017", "NtAlpcCreatePort"}, {"NtAlpcCreatePortSection", "0x2e,0x0018,6,ixiipp PortHandle Flags SectionHandle SectionSize AlpcSectionHandle ActualSectionSize"}, {"0x2e.0x0018", "NtAlpcCreatePortSection"}, {"NtAlpcCreateResourceReserve", "0x2e,0x0019,4,ixip PortHandle Flags MessageSize ResourceId"}, {"0x2e.0x0019", "NtAlpcCreateResourceReserve"}, {"NtAlpcCreateSectionView", "0x2e,0x001a,3,ixp PortHandle Flags ViewAttributes"}, {"0x2e.0x001a", "NtAlpcCreateSectionView"}, {"NtAlpcCreateSecurityContext", "0x2e,0x001b,3,ixp PortHandle Flags SecurityAttribute"}, {"0x2e.0x001b", "NtAlpcCreateSecurityContext"}, {"NtAlpcDeletePortSection", "0x2e,0x001c,3,ixi PortHandle Flags SectionHandle"}, {"0x2e.0x001c", "NtAlpcDeletePortSection"}, {"NtAlpcDeleteResourceReserve", "0x2e,0x001d,3,ixi PortHandle Flags ResourceId"}, {"0x2e.0x001d", "NtAlpcDeleteResourceReserve"}, {"NtAlpcDeleteSectionView", "0x2e,0x001e,3,ixp PortHandle Flags ViewBase"}, {"0x2e.0x001e", "NtAlpcDeleteSectionView"}, {"NtAlpcDeleteSecurityContext", "0x2e,0x001f,3,ixi PortHandle Flags ContextHandle"}, {"0x2e.0x001f", "NtAlpcDeleteSecurityContext"}, {"NtAlpcDisconnectPort", "0x2e,0x0020,2,ix PortHandle Flags"}, {"0x2e.0x0020", "NtAlpcDisconnectPort"}, {"NtAlpcImpersonateClientOfPort", "0x2e,0x0021,3,ipp PortHandle Message Flags"}, {"0x2e.0x0021", "NtAlpcImpersonateClientOfPort"}, {"NtAlpcOpenSenderProcess", "0x2e,0x0022,6,pipxxp ProcessHandle PortHandle PortMessage Flags DesiredAccess ObjectAttributes"}, {"0x2e.0x0022", "NtAlpcOpenSenderProcess"}, {"NtAlpcOpenSenderThread", "0x2e,0x0023,6,pipxxp ThreadHandle PortHandle PortMessage Flags DesiredAccess ObjectAttributes"}, {"0x2e.0x0023", "NtAlpcOpenSenderThread"}, {"NtAlpcQueryInformation", "0x2e,0x0024,5,iipip PortHandle PortInformationClass PortInformation Length ReturnLength"}, {"0x2e.0x0024", "NtAlpcQueryInformation"}, {"NtAlpcQueryInformationMessage", "0x2e,0x0025,6,ipipip PortHandle PortMessage MessageInformationClass MessageInformation Length ReturnLength"}, {"0x2e.0x0025", "NtAlpcQueryInformationMessage"}, {"NtAlpcRevokeSecurityContext", "0x2e,0x0026,3,ixi PortHandle Flags ContextHandle"}, {"0x2e.0x0026", "NtAlpcRevokeSecurityContext"}, {"NtAlpcSendWaitReceivePort", "0x2e,0x0027,8,ixpppppp PortHandle Flags SendMessage SendMessageAttributes ReceiveMessage BufferLength ReceiveMessageAttributes Timeout"}, {"0x2e.0x0027", "NtAlpcSendWaitReceivePort"}, {"NtAlpcSetInformation", "0x2e,0x0028,4,iipi PortHandle PortInformationClass PortInformation Length"}, {"0x2e.0x0028", "NtAlpcSetInformation"}, {"NtApphelpCacheControl", "0x2e,0x0029,2,ip ServiceClass ServiceContext"}, {"0x2e.0x0029", "NtApphelpCacheControl"}, {"NtAreMappedFilesTheSame", "0x2e,0x002a,2,pp File1MappedAsAnImage File2MappedAsFile"}, {"0x2e.0x002a", "NtAreMappedFilesTheSame"}, {"NtAssignProcessToJobObject", "0x2e,0x002b,2,ii JobHandle ProcessHandle"}, {"0x2e.0x002b", "NtAssignProcessToJobObject"}, {"NtCallbackReturn", "0x2e,0x002c,3,pii OutputBuffer OutputLength Status"}, {"0x2e.0x002c", "NtCallbackReturn"}, {"NtCancelIoFile", "0x2e,0x002d,2,ip FileHandle IoStatusBlock"}, {"0x2e.0x002d", "NtCancelIoFile"}, {"NtCancelIoFileEx", "0x2e,0x002e,3,ipp FileHandle IoRequestToCancel IoStatusBlock"}, {"0x2e.0x002e", "NtCancelIoFileEx"}, {"NtCancelSynchronousIoFile", "0x2e,0x002f,3,ipp ThreadHandle IoRequestToCancel IoStatusBlock"}, {"0x2e.0x002f", "NtCancelSynchronousIoFile"}, {"NtCancelTimer", "0x2e,0x0030,2,ip TimerHandle CurrentState"}, {"0x2e.0x0030", "NtCancelTimer"}, {"NtClearEvent", "0x2e,0x0031,1,x EventHandle"}, {"0x2e.0x0031", "NtClearEvent"}, {"NtClose", "0x2e,0x0032,1,i Handle"}, {"0x2e.0x0032", "NtClose"}, {"NtCloseObjectAuditAlarm", "0x2e,0x0033,3,ppi SubsystemName HandleId GenerateOnClose"}, {"0x2e.0x0033", "NtCloseObjectAuditAlarm"}, {"NtCommitComplete", "0x2e,0x0034,2,ip EnlistmentHandle TmVirtualClock"}, {"0x2e.0x0034", "NtCommitComplete"}, {"NtCommitEnlistment", "0x2e,0x0035,2,ip EnlistmentHandle TmVirtualClock"}, {"0x2e.0x0035", "NtCommitEnlistment"}, {"NtCommitTransaction", "0x2e,0x0036,2,ii TransactionHandle Wait"}, {"0x2e.0x0036", "NtCommitTransaction"}, {"NtCompactKeys", "0x2e,0x0037,2,ii Count KeyArray"}, {"0x2e.0x0037", "NtCompactKeys"}, {"NtCompareTokens", "0x2e,0x0038,3,iip FirstTokenHandle SecondTokenHandle Equal"}, {"0x2e.0x0038", "NtCompareTokens"}, {"NtCompleteConnectPort", "0x2e,0x0039,1,i PortHandle"}, {"0x2e.0x0039", "NtCompleteConnectPort"}, {"NtCompressKey", "0x2e,0x003a,1,i KeyHandle"}, {"0x2e.0x003a", "NtCompressKey"}, {"NtConnectPort", "0x2e,0x003b,8,pppppppp PortHandle PortName SecurityQos ClientView ServerView MaxMessageLength ConnectionInformation ConnectionInformationLength"}, {"0x2e.0x003b", "NtConnectPort"}, {"NtContinue", "0x2e,0x003c,2,pi ContextRecord TestAlert"}, {"0x2e.0x003c", "NtContinue"}, {"NtCreateDebugObject", "0x2e,0x003d,4,pxpx DebugObjectHandle DesiredAccess ObjectAttributes Flags"}, {"0x2e.0x003d", "NtCreateDebugObject"}, {"NtCreateDirectoryObject", "0x2e,0x003e,3,pxp DirectoryHandle DesiredAccess ObjectAttributes"}, {"0x2e.0x003e", "NtCreateDirectoryObject"}, {"NtCreateEnlistment", "0x2e,0x003f,8,pxiipxxp EnlistmentHandle DesiredAccess ResourceManagerHandle TransactionHandle ObjectAttributes CreateOptions NotificationMask EnlistmentKey"}, {"0x2e.0x003f", "NtCreateEnlistment"}, {"NtCreateEvent", "0x2e,0x0040,5,pxpxi EventHandle DesiredAccess ObjectAttributes EventType InitialState"}, {"0x2e.0x0040", "NtCreateEvent"}, {"NtCreateEventPair", "0x2e,0x0041,3,pxp EventPairHandle DesiredAccess ObjectAttributes"}, {"0x2e.0x0041", "NtCreateEventPair"}, {"NtCreateFile", "0x2e,0x0042,11,pxpppxxixpi FileHandle DesiredAccess ObjectAttributes IoStatusBlock AllocationSize FileAttributes ShareAccess CreateDisposition CreateOptions EaBuffer EaLength"}, {"0x2e.0x0042", "NtCreateFile"}, {"NtCreateIoCompletion", "0x2e,0x0043,4,pxpi IoCompletionHandle DesiredAccess ObjectAttributes NumberOfConcurrentThreads"}, {"0x2e.0x0043", "NtCreateIoCompletion"}, {"NtCreateJobObject", "0x2e,0x0044,3,pxp JobHandle DesiredAccess ObjectAttributes"}, {"0x2e.0x0044", "NtCreateJobObject"}, {"NtCreateJobSet", "0x2e,0x0045,3,ipx NumJob UserJobSet Flags"}, {"0x2e.0x0045", "NtCreateJobSet"}, {"NtCreateKey", "0x2e,0x0046,7,pxpipxp KeyHandle DesiredAccess ObjectAttributes TitleIndex Class CreateOptions Disposition"}, {"0x2e.0x0046", "NtCreateKey"}, {"NtCreateKeyTransacted", "0x2e,0x0048,8,pxpipxip KeyHandle DesiredAccess ObjectAttributes TitleIndex Class CreateOptions TransactionHandle Disposition"}, {"0x2e.0x0048", "NtCreateKeyTransacted"}, {"NtCreateKeyedEvent", "0x2e,0x0047,4,pxpx KeyedEventHandle DesiredAccess ObjectAttributes Flags"}, {"0x2e.0x0047", "NtCreateKeyedEvent"}, {"NtCreateMailslotFile", "0x2e,0x0049,8,pxppxiip FileHandle DesiredAccess ObjectAttributes IoStatusBlock CreateOptions MailslotQuota MaximumMessageSize ReadTimeout"}, {"0x2e.0x0049", "NtCreateMailslotFile"}, {"NtCreateMutant", "0x2e,0x004a,4,pxpi MutantHandle DesiredAccess ObjectAttributes InitialOwner"}, {"0x2e.0x004a", "NtCreateMutant"}, {"NtCreateNamedPipeFile", "0x2e,0x004b,14,pxppxixxxxiiip FileHandle DesiredAccess ObjectAttributes IoStatusBlock ShareAccess CreateDisposition CreateOptions NamedPipeType ReadMode CompletionMode MaximumInstances InboundQuota OutboundQuota DefaultTimeout"}, {"0x2e.0x004b", "NtCreateNamedPipeFile"}, {"NtCreatePagingFile", "0x2e,0x004c,4,pppi PageFileName MinimumSize MaximumSize Priority"}, {"0x2e.0x004c", "NtCreatePagingFile"}, {"NtCreatePort", "0x2e,0x004d,5,ppiii PortHandle ObjectAttributes MaxConnectionInfoLength MaxMessageLength MaxPoolUsage"}, {"0x2e.0x004d", "NtCreatePort"}, {"NtCreatePrivateNamespace", "0x2e,0x004e,4,pxpp NamespaceHandle DesiredAccess ObjectAttributes BoundaryDescriptor"}, {"0x2e.0x004e", "NtCreatePrivateNamespace"}, {"NtCreateProcess", "0x2e,0x004f,8,pxpiiiii ProcessHandle DesiredAccess ObjectAttributes ParentProcess InheritObjectTable SectionHandle DebugPort TokenHandle"}, {"0x2e.0x004f", "NtCreateProcess"}, {"NtCreateProcessEx", "0x2e,0x0050,9,pxpixiiii ProcessHandle DesiredAccess ObjectAttributes ParentProcess Flags SectionHandle DebugPort TokenHandle Reserved"}, {"0x2e.0x0050", "NtCreateProcessEx"}, {"NtCreateProfile", "0x2e,0x0051,9,pipiipiii ProfileHandle Process ProfileBase ProfileSize BucketSize Buffer BufferSize ProfileSource Affinity"}, {"0x2e.0x0051", "NtCreateProfile"}, {"NtCreateProfileEx", "0x2e,0x0052,10,pipiipiiip ProfileHandle Process ProfileBase ProfileSize BucketSize Buffer BufferSize ProfileSource GroupCount GroupAffinity"}, {"0x2e.0x0052", "NtCreateProfileEx"}, {"NtCreateResourceManager", "0x2e,0x0053,7,pxiipxp ResourceManagerHandle DesiredAccess TmHandle RmGuid ObjectAttributes CreateOptions Description"}, {"0x2e.0x0053", "NtCreateResourceManager"}, {"NtCreateSection", "0x2e,0x0054,7,pxppxxi SectionHandle DesiredAccess ObjectAttributes MaximumSize SectionPageProtection AllocationAttributes FileHandle"}, {"0x2e.0x0054", "NtCreateSection"}, {"NtCreateSemaphore", "0x2e,0x0055,5,pxpii SemaphoreHandle DesiredAccess ObjectAttributes InitialCount MaximumCount"}, {"0x2e.0x0055", "NtCreateSemaphore"}, {"NtCreateSymbolicLinkObject", "0x2e,0x0056,4,pxpp LinkHandle DesiredAccess ObjectAttributes LinkTarget"}, {"0x2e.0x0056", "NtCreateSymbolicLinkObject"}, {"NtCreateThread", "0x2e,0x0057,8,pxpipppi ThreadHandle DesiredAccess ObjectAttributes ProcessHandle ClientId ThreadContext InitialTeb CreateSuspended"}, {"0x2e.0x0057", "NtCreateThread"}, {"NtCreateThreadEx", "0x2e,0x0058,11,pxpippxiiip ThreadHandle DesiredAccess ObjectAttributes ProcessHandle StartRoutine Argument CreateFlags ZeroBits StackSize MaximumStackSize AttributeList"}, {"0x2e.0x0058", "NtCreateThreadEx"}, {"NtCreateTimer", "0x2e,0x0059,4,pxpx TimerHandle DesiredAccess ObjectAttributes TimerType"}, {"0x2e.0x0059", "NtCreateTimer"}, {"NtCreateToken", "0x2e,0x005a,13,pxpxppppppppp TokenHandle DesiredAccess ObjectAttributes Type AuthenticationId ExpirationTime User Groups Privileges Owner PrimaryGroup DefaultDacl Source"}, {"0x2e.0x005a", "NtCreateToken"}, {"NtCreateTransaction", "0x2e,0x005b,10,pxpiixixpp TransactionHandle DesiredAccess ObjectAttributes Uow TmHandle CreateOptions IsolationLevel IsolationFlags Timeout Description"}, {"0x2e.0x005b", "NtCreateTransaction"}, {"NtCreateTransactionManager", "0x2e,0x005c,6,pxppxi TmHandle DesiredAccess ObjectAttributes LogFileName CreateOptions CommitStrength"}, {"0x2e.0x005c", "NtCreateTransactionManager"}, {"NtCreateUserProcess", "0x2e,0x005d,11,ppxxppxxppp ProcessHandle ThreadHandle ProcessDesiredAccess ThreadDesiredAccess ProcessObjectAttributes ThreadObjectAttributes ProcessFlags ThreadFlags ProcessParameters CreateInfo AttributeList"}, {"0x2e.0x005d", "NtCreateUserProcess"}, {"NtCreateWaitablePort", "0x2e,0x005e,5,ppiii PortHandle ObjectAttributes MaxConnectionInfoLength MaxMessageLength MaxPoolUsage"}, {"0x2e.0x005e", "NtCreateWaitablePort"}, {"NtCreateWorkerFactory", "0x2e,0x005f,10,pxpiippiii WorkerFactoryHandleReturn DesiredAccess ObjectAttributes CompletionPortHandle WorkerProcessHandle StartRoutine StartParameter MaxThreadCount StackReserve StackCommit"}, {"0x2e.0x005f", "NtCreateWorkerFactory"}, {"NtDebugActiveProcess", "0x2e,0x0060,2,ii ProcessHandle DebugObjectHandle"}, {"0x2e.0x0060", "NtDebugActiveProcess"}, {"NtDebugContinue", "0x2e,0x0061,3,ipi DebugObjectHandle ClientId ContinueStatus"}, {"0x2e.0x0061", "NtDebugContinue"}, {"NtDelayExecution", "0x2e,0x0062,2,ip Alertable DelayInterval"}, {"0x2e.0x0062", "NtDelayExecution"}, {"NtDeleteAtom", "0x2e,0x0063,1,i Atom"}, {"0x2e.0x0063", "NtDeleteAtom"}, {"NtDeleteBootEntry", "0x2e,0x0064,1,i Id"}, {"0x2e.0x0064", "NtDeleteBootEntry"}, {"NtDeleteDriverEntry", "0x2e,0x0065,1,i Id"}, {"0x2e.0x0065", "NtDeleteDriverEntry"}, {"NtDeleteFile", "0x2e,0x0066,1,p ObjectAttributes"}, {"0x2e.0x0066", "NtDeleteFile"}, {"NtDeleteKey", "0x2e,0x0067,1,i KeyHandle"}, {"0x2e.0x0067", "NtDeleteKey"}, {"NtDeleteObjectAuditAlarm", "0x2e,0x0068,3,ppi SubsystemName HandleId GenerateOnClose"}, {"0x2e.0x0068", "NtDeleteObjectAuditAlarm"}, {"NtDeletePrivateNamespace", "0x2e,0x0069,1,i NamespaceHandle"}, {"0x2e.0x0069", "NtDeletePrivateNamespace"}, {"NtDeleteValueKey", "0x2e,0x006a,2,ip KeyHandle ValueName"}, {"0x2e.0x006a", "NtDeleteValueKey"}, {"NtDeviceIoControlFile", "0x2e,0x006b,10,ixpppipipi FileHandle Event ApcRoutine ApcContext IoStatusBlock IoControlCode InputBuffer InputBufferLength OutputBuffer OutputBufferLength"}, {"0x2e.0x006b", "NtDeviceIoControlFile"}, {"NtDisableLastKnownGood", "0x2e,0x006c,1,i VOID"}, {"0x2e.0x006c", "NtDisableLastKnownGood"}, {"NtDisplayString", "0x2e,0x006d,1,p String"}, {"0x2e.0x006d", "NtDisplayString"}, {"NtDrawText", "0x2e,0x006e,1,p Text"}, {"0x2e.0x006e", "NtDrawText"}, {"NtDuplicateObject", "0x2e,0x006f,7,iiipxxx SourceProcessHandle SourceHandle TargetProcessHandle TargetHandle DesiredAccess HandleAttributes Options"}, {"0x2e.0x006f", "NtDuplicateObject"}, {"NtDuplicateToken", "0x2e,0x0070,6,ixpixp ExistingTokenHandle DesiredAccess ObjectAttributes EffectiveOnly Type NewTokenHandle"}, {"0x2e.0x0070", "NtDuplicateToken"}, {"NtEnableLastKnownGood", "0x2e,0x0071,1,i VOID"}, {"0x2e.0x0071", "NtEnableLastKnownGood"}, {"NtEnumerateBootEntries", "0x2e,0x0072,2,pp Buffer BufferLength"}, {"0x2e.0x0072", "NtEnumerateBootEntries"}, {"NtEnumerateDriverEntries", "0x2e,0x0073,2,pp Buffer BufferLength"}, {"0x2e.0x0073", "NtEnumerateDriverEntries"}, {"NtEnumerateKey", "0x2e,0x0074,6,iiipip KeyHandle Index KeyInformationClass KeyInformation Length ResultLength"}, {"0x2e.0x0074", "NtEnumerateKey"}, {"NtEnumerateSystemEnvironmentValuesEx", "0x2e,0x0075,3,ipp InformationClass Buffer BufferLength"}, {"0x2e.0x0075", "NtEnumerateSystemEnvironmentValuesEx"}, {"NtEnumerateTransactionObject", "0x2e,0x0076,5,ixpip RootObjectHandle QueryType ObjectCursor ObjectCursorLength ReturnLength"}, {"0x2e.0x0076", "NtEnumerateTransactionObject"}, {"NtEnumerateValueKey", "0x2e,0x0077,6,iiipip KeyHandle Index KeyValueInformationClass KeyValueInformation Length ResultLength"}, {"0x2e.0x0077", "NtEnumerateValueKey"}, {"NtExtendSection", "0x2e,0x0078,2,ip SectionHandle NewSectionSize"}, {"0x2e.0x0078", "NtExtendSection"}, {"NtFilterToken", "0x2e,0x0079,6,ixpppp ExistingTokenHandle Flags SidsToDisable PrivilegesToDelete RestrictedSids NewTokenHandle"}, {"0x2e.0x0079", "NtFilterToken"}, {"NtFindAtom", "0x2e,0x007a,3,pip AtomName Length Atom"}, {"0x2e.0x007a", "NtFindAtom"}, {"NtFlushBuffersFile", "0x2e,0x007b,2,ip FileHandle IoStatusBlock"}, {"0x2e.0x007b", "NtFlushBuffersFile"}, {"NtFlushInstallUILanguage", "0x2e,0x007c,2,ix InstallUILanguage SetComittedFlag"}, {"0x2e.0x007c", "NtFlushInstallUILanguage"}, {"NtFlushInstructionCache", "0x2e,0x007d,3,ipi ProcessHandle BaseAddress RegionSize"}, {"0x2e.0x007d", "NtFlushInstructionCache"}, {"NtFlushKey", "0x2e,0x007e,1,i KeyHandle"}, {"0x2e.0x007e", "NtFlushKey"}, {"NtFlushProcessWriteBuffers", "0x2e,0x007f,1,i VOID"}, {"0x2e.0x007f", "NtFlushProcessWriteBuffers"}, {"NtFlushVirtualMemory", "0x2e,0x0080,4,ippp ProcessHandle BaseAddress RegionSize IoStatus"}, {"0x2e.0x0080", "NtFlushVirtualMemory"}, {"NtFlushWriteBuffer", "0x2e,0x0081,1,i VOID"}, {"0x2e.0x0081", "NtFlushWriteBuffer"}, {"NtFreeUserPhysicalPages", "0x2e,0x0082,3,ipp ProcessHandle NumberOfPages UserPfnArray"}, {"0x2e.0x0082", "NtFreeUserPhysicalPages"}, {"NtFreeVirtualMemory", "0x2e,0x0083,4,ippx ProcessHandle BaseAddress RegionSize FreeType"}, {"0x2e.0x0083", "NtFreeVirtualMemory"}, {"NtFreezeRegistry", "0x2e,0x0084,1,i TimeOutInSeconds"}, {"0x2e.0x0084", "NtFreezeRegistry"}, {"NtFreezeTransactions", "0x2e,0x0085,2,pp FreezeTimeout ThawTimeout"}, {"0x2e.0x0085", "NtFreezeTransactions"}, {"NtFsControlFile", "0x2e,0x0086,10,ixpppipipi FileHandle Event ApcRoutine ApcContext IoStatusBlock FsControlCode InputBuffer InputBufferLength OutputBuffer OutputBufferLength"}, {"0x2e.0x0086", "NtFsControlFile"}, {"NtGdiAbortDoc", "0x2e,0x1000,1,i arg0"}, {"0x2e.0x1000", "NtGdiAbortDoc"}, {"NtGdiAbortPath", "0x2e,0x1001,1,i arg0"}, {"0x2e.0x1001", "NtGdiAbortPath"}, {"NtGdiAddEmbFontToDC", "0x2e,0x10e0,2,ii arg0 arg1"}, {"0x2e.0x10e0", "NtGdiAddEmbFontToDC"}, {"NtGdiAddFontMemResourceEx", "0x2e,0x1004,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x1004", "NtGdiAddFontMemResourceEx"}, {"NtGdiAddFontResourceW", "0x2e,0x1002,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x1002", "NtGdiAddFontResourceW"}, {"NtGdiAddRemoteFontToDC", "0x2e,0x1003,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1003", "NtGdiAddRemoteFontToDC"}, {"NtGdiAddRemoteMMInstanceToDC", "0x2e,0x1006,3,iii arg0 arg1 arg2"}, {"0x2e.0x1006", "NtGdiAddRemoteMMInstanceToDC"}, {"NtGdiAlphaBlend", "0x2e,0x1007,12,iiiiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9 arg10 arg11"}, {"0x2e.0x1007", "NtGdiAlphaBlend"}, {"NtGdiAngleArc", "0x2e,0x1008,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x1008", "NtGdiAngleArc"}, {"NtGdiAnyLinkedFonts", "0x2e,0x1009,0,"}, {"0x2e.0x1009", "NtGdiAnyLinkedFonts"}, {"NtGdiArcInternal", "0x2e,0x100b,10,iiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9"}, {"0x2e.0x100b", "NtGdiArcInternal"}, {"NtGdiBRUSHOBJ_DeleteRbrush", "0x2e,0x12d9,2,ii arg0 arg1"}, {"0x2e.0x12d9", "NtGdiBRUSHOBJ_DeleteRbrush"}, {"NtGdiBRUSHOBJ_hGetColorTransform", "0x2e,0x12be,1,i arg0"}, {"0x2e.0x12be", "NtGdiBRUSHOBJ_hGetColorTransform"}, {"NtGdiBRUSHOBJ_pvAllocRbrush", "0x2e,0x12bc,2,ii arg0 arg1"}, {"0x2e.0x12bc", "NtGdiBRUSHOBJ_pvAllocRbrush"}, {"NtGdiBRUSHOBJ_pvGetRbrush", "0x2e,0x12bd,1,i arg0"}, {"0x2e.0x12bd", "NtGdiBRUSHOBJ_pvGetRbrush"}, {"NtGdiBRUSHOBJ_ulGetBrushColor", "0x2e,0x12bb,1,i arg0"}, {"0x2e.0x12bb", "NtGdiBRUSHOBJ_ulGetBrushColor"}, {"NtGdiBeginGdiRendering", "0x2e,0x100c,2,ii arg0 arg1"}, {"0x2e.0x100c", "NtGdiBeginGdiRendering"}, {"NtGdiBeginPath", "0x2e,0x100d,1,i arg0"}, {"0x2e.0x100d", "NtGdiBeginPath"}, {"NtGdiBitBlt", "0x2e,0x100e,11,iiiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9 arg10"}, {"0x2e.0x100e", "NtGdiBitBlt"}, {"NtGdiCLIPOBJ_bEnum", "0x2e,0x12b5,3,iii arg0 arg1 arg2"}, {"0x2e.0x12b5", "NtGdiCLIPOBJ_bEnum"}, {"NtGdiCLIPOBJ_cEnumStart", "0x2e,0x12b6,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x12b6", "NtGdiCLIPOBJ_cEnumStart"}, {"NtGdiCLIPOBJ_ppoGetPath", "0x2e,0x12b7,1,i arg0"}, {"0x2e.0x12b7", "NtGdiCLIPOBJ_ppoGetPath"}, {"NtGdiCancelDC", "0x2e,0x100f,1,i arg0"}, {"0x2e.0x100f", "NtGdiCancelDC"}, {"NtGdiChangeGhostFont", "0x2e,0x10df,2,ii arg0 arg1"}, {"0x2e.0x10df", "NtGdiChangeGhostFont"}, {"NtGdiCheckBitmapBits", "0x2e,0x1010,8,iiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7"}, {"0x2e.0x1010", "NtGdiCheckBitmapBits"}, {"NtGdiClearBitmapAttributes", "0x2e,0x1012,2,ii arg0 arg1"}, {"0x2e.0x1012", "NtGdiClearBitmapAttributes"}, {"NtGdiClearBrushAttributes", "0x2e,0x1013,2,ii arg0 arg1"}, {"0x2e.0x1013", "NtGdiClearBrushAttributes"}, {"NtGdiCloseFigure", "0x2e,0x1011,1,i arg0"}, {"0x2e.0x1011", "NtGdiCloseFigure"}, {"NtGdiColorCorrectPalette", "0x2e,0x1014,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x1014", "NtGdiColorCorrectPalette"}, {"NtGdiCombineRgn", "0x2e,0x1015,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1015", "NtGdiCombineRgn"}, {"NtGdiCombineTransform", "0x2e,0x1016,3,iii arg0 arg1 arg2"}, {"0x2e.0x1016", "NtGdiCombineTransform"}, {"NtGdiComputeXformCoefficients", "0x2e,0x1017,1,i arg0"}, {"0x2e.0x1017", "NtGdiComputeXformCoefficients"}, {"NtGdiConfigureOPMProtectedOutput", "0x2e,0x1018,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1018", "NtGdiConfigureOPMProtectedOutput"}, {"NtGdiConvertMetafileRect", "0x2e,0x1019,2,ii arg0 arg1"}, {"0x2e.0x1019", "NtGdiConvertMetafileRect"}, {"NtGdiCreateBitmap", "0x2e,0x101a,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x101a", "NtGdiCreateBitmap"}, {"NtGdiCreateBitmapFromDxSurface", "0x2e,0x101b,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x101b", "NtGdiCreateBitmapFromDxSurface"}, {"NtGdiCreateClientObj", "0x2e,0x101c,1,i arg0"}, {"0x2e.0x101c", "NtGdiCreateClientObj"}, {"NtGdiCreateColorSpace", "0x2e,0x101d,1,i arg0"}, {"0x2e.0x101d", "NtGdiCreateColorSpace"}, {"NtGdiCreateColorTransform", "0x2e,0x101e,8,iiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7"}, {"0x2e.0x101e", "NtGdiCreateColorTransform"}, {"NtGdiCreateCompatibleBitmap", "0x2e,0x101f,3,iii arg0 arg1 arg2"}, {"0x2e.0x101f", "NtGdiCreateCompatibleBitmap"}, {"NtGdiCreateCompatibleDC", "0x2e,0x1020,1,i arg0"}, {"0x2e.0x1020", "NtGdiCreateCompatibleDC"}, {"NtGdiCreateDIBBrush", "0x2e,0x1021,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x1021", "NtGdiCreateDIBBrush"}, {"NtGdiCreateDIBSection", "0x2e,0x1023,9,iiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8"}, {"0x2e.0x1023", "NtGdiCreateDIBSection"}, {"NtGdiCreateDIBitmapInternal", "0x2e,0x1022,11,iiiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9 arg10"}, {"0x2e.0x1022", "NtGdiCreateDIBitmapInternal"}, {"NtGdiCreateEllipticRgn", "0x2e,0x1024,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1024", "NtGdiCreateEllipticRgn"}, {"NtGdiCreateHalftonePalette", "0x2e,0x1025,1,i arg0"}, {"0x2e.0x1025", "NtGdiCreateHalftonePalette"}, {"NtGdiCreateHatchBrushInternal", "0x2e,0x1026,3,iii arg0 arg1 arg2"}, {"0x2e.0x1026", "NtGdiCreateHatchBrushInternal"}, {"NtGdiCreateMetafileDC", "0x2e,0x1027,1,i arg0"}, {"0x2e.0x1027", "NtGdiCreateMetafileDC"}, {"NtGdiCreateOPMProtectedOutputs", "0x2e,0x1028,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x1028", "NtGdiCreateOPMProtectedOutputs"}, {"NtGdiCreatePaletteInternal", "0x2e,0x1029,2,ii arg0 arg1"}, {"0x2e.0x1029", "NtGdiCreatePaletteInternal"}, {"NtGdiCreatePatternBrushInternal", "0x2e,0x102a,3,iii arg0 arg1 arg2"}, {"0x2e.0x102a", "NtGdiCreatePatternBrushInternal"}, {"NtGdiCreatePen", "0x2e,0x102b,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x102b", "NtGdiCreatePen"}, {"NtGdiCreateRectRgn", "0x2e,0x102c,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x102c", "NtGdiCreateRectRgn"}, {"NtGdiCreateRoundRectRgn", "0x2e,0x102d,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x102d", "NtGdiCreateRoundRectRgn"}, {"NtGdiCreateServerMetaFile", "0x2e,0x102e,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x102e", "NtGdiCreateServerMetaFile"}, {"NtGdiCreateSolidBrush", "0x2e,0x102f,2,ii arg0 arg1"}, {"0x2e.0x102f", "NtGdiCreateSolidBrush"}, {"NtGdiD3dContextCreate", "0x2e,0x1030,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1030", "NtGdiD3dContextCreate"}, {"NtGdiD3dContextDestroy", "0x2e,0x1031,1,i arg0"}, {"0x2e.0x1031", "NtGdiD3dContextDestroy"}, {"NtGdiD3dContextDestroyAll", "0x2e,0x1032,1,i arg0"}, {"0x2e.0x1032", "NtGdiD3dContextDestroyAll"}, {"NtGdiD3dDrawPrimitives2", "0x2e,0x1034,7,iiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6"}, {"0x2e.0x1034", "NtGdiD3dDrawPrimitives2"}, {"NtGdiD3dValidateTextureStageState", "0x2e,0x1033,1,i arg0"}, {"0x2e.0x1033", "NtGdiD3dValidateTextureStageState"}, {"NtGdiDDCCIGetCapabilitiesString", "0x2e,0x132c,3,iii arg0 arg1 arg2"}, {"0x2e.0x132c", "NtGdiDDCCIGetCapabilitiesString"}, {"NtGdiDDCCIGetCapabilitiesStringLength", "0x2e,0x132b,2,ii arg0 arg1"}, {"0x2e.0x132b", "NtGdiDDCCIGetCapabilitiesStringLength"}, {"NtGdiDDCCIGetTimingReport", "0x2e,0x132d,2,ii arg0 arg1"}, {"0x2e.0x132d", "NtGdiDDCCIGetTimingReport"}, {"NtGdiDDCCIGetVCPFeature", "0x2e,0x1328,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x1328", "NtGdiDDCCIGetVCPFeature"}, {"NtGdiDDCCISaveCurrentSettings", "0x2e,0x132a,1,i arg0"}, {"0x2e.0x132a", "NtGdiDDCCISaveCurrentSettings"}, {"NtGdiDDCCISetVCPFeature", "0x2e,0x1329,3,iii arg0 arg1 arg2"}, {"0x2e.0x1329", "NtGdiDDCCISetVCPFeature"}, {"NtGdiDdAddAttachedSurface", "0x2e,0x1036,3,iii arg0 arg1 arg2"}, {"0x2e.0x1036", "NtGdiDdAddAttachedSurface"}, {"NtGdiDdAlphaBlt", "0x2e,0x1037,3,iii arg0 arg1 arg2"}, {"0x2e.0x1037", "NtGdiDdAlphaBlt"}, {"NtGdiDdAttachSurface", "0x2e,0x1038,2,ii arg0 arg1"}, {"0x2e.0x1038", "NtGdiDdAttachSurface"}, {"NtGdiDdBeginMoCompFrame", "0x2e,0x1039,2,ii arg0 arg1"}, {"0x2e.0x1039", "NtGdiDdBeginMoCompFrame"}, {"NtGdiDdBlt", "0x2e,0x103a,3,iii arg0 arg1 arg2"}, {"0x2e.0x103a", "NtGdiDdBlt"}, {"NtGdiDdCanCreateD3DBuffer", "0x2e,0x103c,2,ii arg0 arg1"}, {"0x2e.0x103c", "NtGdiDdCanCreateD3DBuffer"}, {"NtGdiDdCanCreateSurface", "0x2e,0x103b,2,ii arg0 arg1"}, {"0x2e.0x103b", "NtGdiDdCanCreateSurface"}, {"NtGdiDdColorControl", "0x2e,0x103d,2,ii arg0 arg1"}, {"0x2e.0x103d", "NtGdiDdColorControl"}, {"NtGdiDdCreateD3DBuffer", "0x2e,0x1040,8,iiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7"}, {"0x2e.0x1040", "NtGdiDdCreateD3DBuffer"}, {"NtGdiDdCreateDirectDrawObject", "0x2e,0x103e,1,i arg0"}, {"0x2e.0x103e", "NtGdiDdCreateDirectDrawObject"}, {"NtGdiDdCreateFullscreenSprite", "0x2e,0x132e,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x132e", "NtGdiDdCreateFullscreenSprite"}, {"NtGdiDdCreateMoComp", "0x2e,0x1041,2,ii arg0 arg1"}, {"0x2e.0x1041", "NtGdiDdCreateMoComp"}, {"NtGdiDdCreateSurface", "0x2e,0x103f,8,iiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7"}, {"0x2e.0x103f", "NtGdiDdCreateSurface"}, {"NtGdiDdCreateSurfaceEx", "0x2e,0x1061,3,iii arg0 arg1 arg2"}, {"0x2e.0x1061", "NtGdiDdCreateSurfaceEx"}, {"NtGdiDdCreateSurfaceObject", "0x2e,0x1042,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x1042", "NtGdiDdCreateSurfaceObject"}, {"NtGdiDdDDIAcquireKeyedMutex", "0x2e,0x131c,1,i arg0"}, {"0x2e.0x131c", "NtGdiDdDDIAcquireKeyedMutex"}, {"NtGdiDdDDICheckExclusiveOwnership", "0x2e,0x1315,0,"}, {"0x2e.0x1315", "NtGdiDdDDICheckExclusiveOwnership"}, {"NtGdiDdDDICheckMonitorPowerState", "0x2e,0x1314,1,i arg0"}, {"0x2e.0x1314", "NtGdiDdDDICheckMonitorPowerState"}, {"NtGdiDdDDICheckOcclusion", "0x2e,0x1312,1,i arg0"}, {"0x2e.0x1312", "NtGdiDdDDICheckOcclusion"}, {"NtGdiDdDDICheckSharedResourceAccess", "0x2e,0x1321,1,i arg0"}, {"0x2e.0x1321", "NtGdiDdDDICheckSharedResourceAccess"}, {"NtGdiDdDDICheckVidPnExclusiveOwnership", "0x2e,0x1320,1,i arg0"}, {"0x2e.0x1320", "NtGdiDdDDICheckVidPnExclusiveOwnership"}, {"NtGdiDdDDICloseAdapter", "0x2e,0x12f9,1,i arg0"}, {"0x2e.0x12f9", "NtGdiDdDDICloseAdapter"}, {"NtGdiDdDDIConfigureSharedResource", "0x2e,0x131e,1,i arg0"}, {"0x2e.0x131e", "NtGdiDdDDIConfigureSharedResource"}, {"NtGdiDdDDICreateAllocation", "0x2e,0x12df,1,i arg0"}, {"0x2e.0x12df", "NtGdiDdDDICreateAllocation"}, {"NtGdiDdDDICreateContext", "0x2e,0x12e7,1,i arg0"}, {"0x2e.0x12e7", "NtGdiDdDDICreateContext"}, {"NtGdiDdDDICreateDCFromMemory", "0x2e,0x1307,1,i arg0"}, {"0x2e.0x1307", "NtGdiDdDDICreateDCFromMemory"}, {"NtGdiDdDDICreateDevice", "0x2e,0x12e5,1,i arg0"}, {"0x2e.0x12e5", "NtGdiDdDDICreateDevice"}, {"NtGdiDdDDICreateKeyedMutex", "0x2e,0x1319,1,i arg0"}, {"0x2e.0x1319", "NtGdiDdDDICreateKeyedMutex"}, {"NtGdiDdDDICreateOverlay", "0x2e,0x1300,1,i arg0"}, {"0x2e.0x1300", "NtGdiDdDDICreateOverlay"}, {"NtGdiDdDDICreateSynchronizationObject", "0x2e,0x12e9,1,i arg0"}, {"0x2e.0x12e9", "NtGdiDdDDICreateSynchronizationObject"}, {"NtGdiDdDDIDestroyAllocation", "0x2e,0x12e2,1,i arg0"}, {"0x2e.0x12e2", "NtGdiDdDDIDestroyAllocation"}, {"NtGdiDdDDIDestroyContext", "0x2e,0x12e8,1,i arg0"}, {"0x2e.0x12e8", "NtGdiDdDDIDestroyContext"}, {"NtGdiDdDDIDestroyDCFromMemory", "0x2e,0x1308,1,i arg0"}, {"0x2e.0x1308", "NtGdiDdDDIDestroyDCFromMemory"}, {"NtGdiDdDDIDestroyDevice", "0x2e,0x12e6,1,i arg0"}, {"0x2e.0x12e6", "NtGdiDdDDIDestroyDevice"}, {"NtGdiDdDDIDestroyKeyedMutex", "0x2e,0x131b,1,i arg0"}, {"0x2e.0x131b", "NtGdiDdDDIDestroyKeyedMutex"}, {"NtGdiDdDDIDestroyOverlay", "0x2e,0x1303,1,i arg0"}, {"0x2e.0x1303", "NtGdiDdDDIDestroyOverlay"}, {"NtGdiDdDDIDestroySynchronizationObject", "0x2e,0x12eb,1,i arg0"}, {"0x2e.0x12eb", "NtGdiDdDDIDestroySynchronizationObject"}, {"NtGdiDdDDIEscape", "0x2e,0x12fb,1,i arg0"}, {"0x2e.0x12fb", "NtGdiDdDDIEscape"}, {"NtGdiDdDDIFlipOverlay", "0x2e,0x1302,1,i arg0"}, {"0x2e.0x1302", "NtGdiDdDDIFlipOverlay"}, {"NtGdiDdDDIGetContextSchedulingPriority", "0x2e,0x130a,1,i arg0"}, {"0x2e.0x130a", "NtGdiDdDDIGetContextSchedulingPriority"}, {"NtGdiDdDDIGetDeviceState", "0x2e,0x1306,1,i arg0"}, {"0x2e.0x1306", "NtGdiDdDDIGetDeviceState"}, {"NtGdiDdDDIGetDisplayModeList", "0x2e,0x12f2,1,i arg0"}, {"0x2e.0x12f2", "NtGdiDdDDIGetDisplayModeList"}, {"NtGdiDdDDIGetMultisampleMethodList", "0x2e,0x12f4,1,i arg0"}, {"0x2e.0x12f4", "NtGdiDdDDIGetMultisampleMethodList"}, {"NtGdiDdDDIGetOverlayState", "0x2e,0x131f,1,i arg0"}, {"0x2e.0x131f", "NtGdiDdDDIGetOverlayState"}, {"NtGdiDdDDIGetPresentHistory", "0x2e,0x12fe,1,i arg0"}, {"0x2e.0x12fe", "NtGdiDdDDIGetPresentHistory"}, {"NtGdiDdDDIGetPresentQueueEvent", "0x2e,0x12ff,2,ii arg0 arg1"}, {"0x2e.0x12ff", "NtGdiDdDDIGetPresentQueueEvent"}, {"NtGdiDdDDIGetProcessSchedulingPriorityClass", "0x2e,0x130c,2,ii arg0 arg1"}, {"0x2e.0x130c", "NtGdiDdDDIGetProcessSchedulingPriorityClass"}, {"NtGdiDdDDIGetRuntimeData", "0x2e,0x12ee,1,i arg0"}, {"0x2e.0x12ee", "NtGdiDdDDIGetRuntimeData"}, {"NtGdiDdDDIGetScanLine", "0x2e,0x130e,1,i arg0"}, {"0x2e.0x130e", "NtGdiDdDDIGetScanLine"}, {"NtGdiDdDDIGetSharedPrimaryPlugin", "0x2e,0x12fa,1,i arg0"}, {"0x2e.0x12fa", "NtGdiDdDDIGetSharedPrimaryPlugin"}, {"NtGdiDdDDIInvalidateActiveVidPn", "0x2e,0x1311,1,i arg0"}, {"0x2e.0x1311", "NtGdiDdDDIInvalidateActiveVidPn"}, {"NtGdiDdDDILock", "0x2e,0x12f0,1,i arg0"}, {"0x2e.0x12f0", "NtGdiDdDDILock"}, {"NtGdiDdDDIOpenAdapterFromDeviceName", "0x2e,0x12f7,1,i arg0"}, {"0x2e.0x12f7", "NtGdiDdDDIOpenAdapterFromDeviceName"}, {"NtGdiDdDDIOpenAdapterFromHdc", "0x2e,0x12f8,1,i arg0"}, {"0x2e.0x12f8", "NtGdiDdDDIOpenAdapterFromHdc"}, {"NtGdiDdDDIOpenKeyedMutex", "0x2e,0x131a,1,i arg0"}, {"0x2e.0x131a", "NtGdiDdDDIOpenKeyedMutex"}, {"NtGdiDdDDIOpenResource", "0x2e,0x12e1,1,i arg0"}, {"0x2e.0x12e1", "NtGdiDdDDIOpenResource"}, {"NtGdiDdDDIOpenSynchronizationObject", "0x2e,0x12ea,1,i arg0"}, {"0x2e.0x12ea", "NtGdiDdDDIOpenSynchronizationObject"}, {"NtGdiDdDDIPollDisplayChildren", "0x2e,0x1310,1,i arg0"}, {"0x2e.0x1310", "NtGdiDdDDIPollDisplayChildren"}, {"NtGdiDdDDIPresent", "0x2e,0x12f5,1,i arg0"}, {"0x2e.0x12f5", "NtGdiDdDDIPresent"}, {"NtGdiDdDDIQueryAdapterInfo", "0x2e,0x12ef,1,i arg0"}, {"0x2e.0x12ef", "NtGdiDdDDIQueryAdapterInfo"}, {"NtGdiDdDDIQueryAllocationResidency", "0x2e,0x12e4,1,i arg0"}, {"0x2e.0x12e4", "NtGdiDdDDIQueryAllocationResidency"}, {"NtGdiDdDDIQueryResourceInfo", "0x2e,0x12e0,1,i arg0"}, {"0x2e.0x12e0", "NtGdiDdDDIQueryResourceInfo"}, {"NtGdiDdDDIQueryStatistics", "0x2e,0x12fc,1,i arg0"}, {"0x2e.0x12fc", "NtGdiDdDDIQueryStatistics"}, {"NtGdiDdDDIReleaseKeyedMutex", "0x2e,0x131d,1,i arg0"}, {"0x2e.0x131d", "NtGdiDdDDIReleaseKeyedMutex"}, {"NtGdiDdDDIReleaseProcessVidPnSourceOwners", "0x2e,0x130d,1,i arg0"}, {"0x2e.0x130d", "NtGdiDdDDIReleaseProcessVidPnSourceOwners"}, {"NtGdiDdDDIRender", "0x2e,0x12f6,1,i arg0"}, {"0x2e.0x12f6", "NtGdiDdDDIRender"}, {"NtGdiDdDDISetAllocationPriority", "0x2e,0x12e3,1,i arg0"}, {"0x2e.0x12e3", "NtGdiDdDDISetAllocationPriority"}, {"NtGdiDdDDISetContextSchedulingPriority", "0x2e,0x1309,1,i arg0"}, {"0x2e.0x1309", "NtGdiDdDDISetContextSchedulingPriority"}, {"NtGdiDdDDISetDisplayMode", "0x2e,0x12f3,1,i arg0"}, {"0x2e.0x12f3", "NtGdiDdDDISetDisplayMode"}, {"NtGdiDdDDISetDisplayPrivateDriverFormat", "0x2e,0x1316,1,i arg0"}, {"0x2e.0x1316", "NtGdiDdDDISetDisplayPrivateDriverFormat"}, {"NtGdiDdDDISetGammaRamp", "0x2e,0x1305,1,i arg0"}, {"0x2e.0x1305", "NtGdiDdDDISetGammaRamp"}, {"NtGdiDdDDISetProcessSchedulingPriorityClass", "0x2e,0x130b,2,ii arg0 arg1"}, {"0x2e.0x130b", "NtGdiDdDDISetProcessSchedulingPriorityClass"}, {"NtGdiDdDDISetQueuedLimit", "0x2e,0x130f,1,i arg0"}, {"0x2e.0x130f", "NtGdiDdDDISetQueuedLimit"}, {"NtGdiDdDDISetVidPnSourceOwner", "0x2e,0x12fd,1,i arg0"}, {"0x2e.0x12fd", "NtGdiDdDDISetVidPnSourceOwner"}, {"NtGdiDdDDISharedPrimaryLockNotification", "0x2e,0x1317,1,i arg0"}, {"0x2e.0x1317", "NtGdiDdDDISharedPrimaryLockNotification"}, {"NtGdiDdDDISharedPrimaryUnLockNotification", "0x2e,0x1318,1,i arg0"}, {"0x2e.0x1318", "NtGdiDdDDISharedPrimaryUnLockNotification"}, {"NtGdiDdDDISignalSynchronizationObject", "0x2e,0x12ed,1,i arg0"}, {"0x2e.0x12ed", "NtGdiDdDDISignalSynchronizationObject"}, {"NtGdiDdDDIUnlock", "0x2e,0x12f1,1,i arg0"}, {"0x2e.0x12f1", "NtGdiDdDDIUnlock"}, {"NtGdiDdDDIUpdateOverlay", "0x2e,0x1301,1,i arg0"}, {"0x2e.0x1301", "NtGdiDdDDIUpdateOverlay"}, {"NtGdiDdDDIWaitForIdle", "0x2e,0x1313,1,i arg0"}, {"0x2e.0x1313", "NtGdiDdDDIWaitForIdle"}, {"NtGdiDdDDIWaitForSynchronizationObject", "0x2e,0x12ec,1,i arg0"}, {"0x2e.0x12ec", "NtGdiDdDDIWaitForSynchronizationObject"}, {"NtGdiDdDDIWaitForVerticalBlankEvent", "0x2e,0x1304,1,i arg0"}, {"0x2e.0x1304", "NtGdiDdDDIWaitForVerticalBlankEvent"}, {"NtGdiDdDeleteDirectDrawObject", "0x2e,0x1043,1,i arg0"}, {"0x2e.0x1043", "NtGdiDdDeleteDirectDrawObject"}, {"NtGdiDdDeleteSurfaceObject", "0x2e,0x1044,1,i arg0"}, {"0x2e.0x1044", "NtGdiDdDeleteSurfaceObject"}, {"NtGdiDdDestroyD3DBuffer", "0x2e,0x1047,1,i arg0"}, {"0x2e.0x1047", "NtGdiDdDestroyD3DBuffer"}, {"NtGdiDdDestroyFullscreenSprite", "0x2e,0x1330,2,ii arg0 arg1"}, {"0x2e.0x1330", "NtGdiDdDestroyFullscreenSprite"}, {"NtGdiDdDestroyMoComp", "0x2e,0x1045,2,ii arg0 arg1"}, {"0x2e.0x1045", "NtGdiDdDestroyMoComp"}, {"NtGdiDdDestroySurface", "0x2e,0x1046,2,ii arg0 arg1"}, {"0x2e.0x1046", "NtGdiDdDestroySurface"}, {"NtGdiDdEndMoCompFrame", "0x2e,0x1048,2,ii arg0 arg1"}, {"0x2e.0x1048", "NtGdiDdEndMoCompFrame"}, {"NtGdiDdFlip", "0x2e,0x1049,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x1049", "NtGdiDdFlip"}, {"NtGdiDdFlipToGDISurface", "0x2e,0x104a,2,ii arg0 arg1"}, {"0x2e.0x104a", "NtGdiDdFlipToGDISurface"}, {"NtGdiDdGetAvailDriverMemory", "0x2e,0x104b,2,ii arg0 arg1"}, {"0x2e.0x104b", "NtGdiDdGetAvailDriverMemory"}, {"NtGdiDdGetBltStatus", "0x2e,0x104c,2,ii arg0 arg1"}, {"0x2e.0x104c", "NtGdiDdGetBltStatus"}, {"NtGdiDdGetDC", "0x2e,0x104d,2,ii arg0 arg1"}, {"0x2e.0x104d", "NtGdiDdGetDC"}, {"NtGdiDdGetDriverInfo", "0x2e,0x104e,2,ii arg0 arg1"}, {"0x2e.0x104e", "NtGdiDdGetDriverInfo"}, {"NtGdiDdGetDriverState", "0x2e,0x1035,1,i arg0"}, {"0x2e.0x1035", "NtGdiDdGetDriverState"}, {"NtGdiDdGetDxPlugin", "0x2e,0x104f,3,iii arg0 arg1 arg2"}, {"0x2e.0x104f", "NtGdiDdGetDxPlugin"}, {"NtGdiDdGetFlipStatus", "0x2e,0x1050,2,ii arg0 arg1"}, {"0x2e.0x1050", "NtGdiDdGetFlipStatus"}, {"NtGdiDdGetInternalMoCompInfo", "0x2e,0x1051,2,ii arg0 arg1"}, {"0x2e.0x1051", "NtGdiDdGetInternalMoCompInfo"}, {"NtGdiDdGetMoCompBuffInfo", "0x2e,0x1052,2,ii arg0 arg1"}, {"0x2e.0x1052", "NtGdiDdGetMoCompBuffInfo"}, {"NtGdiDdGetMoCompFormats", "0x2e,0x1054,2,ii arg0 arg1"}, {"0x2e.0x1054", "NtGdiDdGetMoCompFormats"}, {"NtGdiDdGetMoCompGuids", "0x2e,0x1053,2,ii arg0 arg1"}, {"0x2e.0x1053", "NtGdiDdGetMoCompGuids"}, {"NtGdiDdGetScanLine", "0x2e,0x1055,2,ii arg0 arg1"}, {"0x2e.0x1055", "NtGdiDdGetScanLine"}, {"NtGdiDdLock", "0x2e,0x1056,3,iii arg0 arg1 arg2"}, {"0x2e.0x1056", "NtGdiDdLock"}, {"NtGdiDdLockD3D", "0x2e,0x1057,2,ii arg0 arg1"}, {"0x2e.0x1057", "NtGdiDdLockD3D"}, {"NtGdiDdNotifyFullscreenSpriteUpdate", "0x2e,0x132f,2,ii arg0 arg1"}, {"0x2e.0x132f", "NtGdiDdNotifyFullscreenSpriteUpdate"}, {"NtGdiDdQueryDirectDrawObject", "0x2e,0x1058,11,iiiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9 arg10"}, {"0x2e.0x1058", "NtGdiDdQueryDirectDrawObject"}, {"NtGdiDdQueryMoCompStatus", "0x2e,0x1059,2,ii arg0 arg1"}, {"0x2e.0x1059", "NtGdiDdQueryMoCompStatus"}, {"NtGdiDdReenableDirectDrawObject", "0x2e,0x105a,2,ii arg0 arg1"}, {"0x2e.0x105a", "NtGdiDdReenableDirectDrawObject"}, {"NtGdiDdReleaseDC", "0x2e,0x105b,1,i arg0"}, {"0x2e.0x105b", "NtGdiDdReleaseDC"}, {"NtGdiDdRenderMoComp", "0x2e,0x105c,2,ii arg0 arg1"}, {"0x2e.0x105c", "NtGdiDdRenderMoComp"}, {"NtGdiDdResetVisrgn", "0x2e,0x105d,2,ii arg0 arg1"}, {"0x2e.0x105d", "NtGdiDdResetVisrgn"}, {"NtGdiDdSetColorKey", "0x2e,0x105e,2,ii arg0 arg1"}, {"0x2e.0x105e", "NtGdiDdSetColorKey"}, {"NtGdiDdSetExclusiveMode", "0x2e,0x105f,2,ii arg0 arg1"}, {"0x2e.0x105f", "NtGdiDdSetExclusiveMode"}, {"NtGdiDdSetGammaRamp", "0x2e,0x1060,3,iii arg0 arg1 arg2"}, {"0x2e.0x1060", "NtGdiDdSetGammaRamp"}, {"NtGdiDdSetOverlayPosition", "0x2e,0x1062,3,iii arg0 arg1 arg2"}, {"0x2e.0x1062", "NtGdiDdSetOverlayPosition"}, {"NtGdiDdUnattachSurface", "0x2e,0x1063,2,ii arg0 arg1"}, {"0x2e.0x1063", "NtGdiDdUnattachSurface"}, {"NtGdiDdUnlock", "0x2e,0x1064,2,ii arg0 arg1"}, {"0x2e.0x1064", "NtGdiDdUnlock"}, {"NtGdiDdUnlockD3D", "0x2e,0x1065,2,ii arg0 arg1"}, {"0x2e.0x1065", "NtGdiDdUnlockD3D"}, {"NtGdiDdUpdateOverlay", "0x2e,0x1066,3,iii arg0 arg1 arg2"}, {"0x2e.0x1066", "NtGdiDdUpdateOverlay"}, {"NtGdiDdWaitForVerticalBlank", "0x2e,0x1067,2,ii arg0 arg1"}, {"0x2e.0x1067", "NtGdiDdWaitForVerticalBlank"}, {"NtGdiDeleteClientObj", "0x2e,0x107a,1,i arg0"}, {"0x2e.0x107a", "NtGdiDeleteClientObj"}, {"NtGdiDeleteColorSpace", "0x2e,0x107b,1,i arg0"}, {"0x2e.0x107b", "NtGdiDeleteColorSpace"}, {"NtGdiDeleteColorTransform", "0x2e,0x107c,2,ii arg0 arg1"}, {"0x2e.0x107c", "NtGdiDeleteColorTransform"}, {"NtGdiDeleteObjectApp", "0x2e,0x107d,1,i arg0"}, {"0x2e.0x107d", "NtGdiDeleteObjectApp"}, {"NtGdiDescribePixelFormat", "0x2e,0x107e,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x107e", "NtGdiDescribePixelFormat"}, {"NtGdiDestroyOPMProtectedOutput", "0x2e,0x107f,1,i arg0"}, {"0x2e.0x107f", "NtGdiDestroyOPMProtectedOutput"}, {"NtGdiDestroyPhysicalMonitor", "0x2e,0x1327,1,i arg0"}, {"0x2e.0x1327", "NtGdiDestroyPhysicalMonitor"}, {"NtGdiDoBanding", "0x2e,0x1081,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1081", "NtGdiDoBanding"}, {"NtGdiDoPalette", "0x2e,0x1082,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x1082", "NtGdiDoPalette"}, {"NtGdiDrawEscape", "0x2e,0x1083,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1083", "NtGdiDrawEscape"}, {"NtGdiDrawStream", "0x2e,0x12db,3,iii arg0 arg1 arg2"}, {"0x2e.0x12db", "NtGdiDrawStream"}, {"NtGdiDvpAcquireNotification", "0x2e,0x1077,3,iii arg0 arg1 arg2"}, {"0x2e.0x1077", "NtGdiDvpAcquireNotification"}, {"NtGdiDvpCanCreateVideoPort", "0x2e,0x1068,2,ii arg0 arg1"}, {"0x2e.0x1068", "NtGdiDvpCanCreateVideoPort"}, {"NtGdiDvpColorControl", "0x2e,0x1069,2,ii arg0 arg1"}, {"0x2e.0x1069", "NtGdiDvpColorControl"}, {"NtGdiDvpCreateVideoPort", "0x2e,0x106a,2,ii arg0 arg1"}, {"0x2e.0x106a", "NtGdiDvpCreateVideoPort"}, {"NtGdiDvpDestroyVideoPort", "0x2e,0x106b,2,ii arg0 arg1"}, {"0x2e.0x106b", "NtGdiDvpDestroyVideoPort"}, {"NtGdiDvpFlipVideoPort", "0x2e,0x106c,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x106c", "NtGdiDvpFlipVideoPort"}, {"NtGdiDvpGetVideoPortBandwidth", "0x2e,0x106d,2,ii arg0 arg1"}, {"0x2e.0x106d", "NtGdiDvpGetVideoPortBandwidth"}, {"NtGdiDvpGetVideoPortConnectInfo", "0x2e,0x1073,2,ii arg0 arg1"}, {"0x2e.0x1073", "NtGdiDvpGetVideoPortConnectInfo"}, {"NtGdiDvpGetVideoPortField", "0x2e,0x106e,2,ii arg0 arg1"}, {"0x2e.0x106e", "NtGdiDvpGetVideoPortField"}, {"NtGdiDvpGetVideoPortFlipStatus", "0x2e,0x106f,2,ii arg0 arg1"}, {"0x2e.0x106f", "NtGdiDvpGetVideoPortFlipStatus"}, {"NtGdiDvpGetVideoPortInputFormats", "0x2e,0x1070,2,ii arg0 arg1"}, {"0x2e.0x1070", "NtGdiDvpGetVideoPortInputFormats"}, {"NtGdiDvpGetVideoPortLine", "0x2e,0x1071,2,ii arg0 arg1"}, {"0x2e.0x1071", "NtGdiDvpGetVideoPortLine"}, {"NtGdiDvpGetVideoPortOutputFormats", "0x2e,0x1072,2,ii arg0 arg1"}, {"0x2e.0x1072", "NtGdiDvpGetVideoPortOutputFormats"}, {"NtGdiDvpGetVideoSignalStatus", "0x2e,0x1074,2,ii arg0 arg1"}, {"0x2e.0x1074", "NtGdiDvpGetVideoSignalStatus"}, {"NtGdiDvpReleaseNotification", "0x2e,0x1078,2,ii arg0 arg1"}, {"0x2e.0x1078", "NtGdiDvpReleaseNotification"}, {"NtGdiDvpUpdateVideoPort", "0x2e,0x1075,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1075", "NtGdiDvpUpdateVideoPort"}, {"NtGdiDvpWaitForVideoPortSync", "0x2e,0x1076,2,ii arg0 arg1"}, {"0x2e.0x1076", "NtGdiDvpWaitForVideoPortSync"}, {"NtGdiDxgGenericThunk", "0x2e,0x1079,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x1079", "NtGdiDxgGenericThunk"}, {"NtGdiEllipse", "0x2e,0x1084,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x1084", "NtGdiEllipse"}, {"NtGdiEnableEudc", "0x2e,0x1085,1,i arg0"}, {"0x2e.0x1085", "NtGdiEnableEudc"}, {"NtGdiEndDoc", "0x2e,0x1086,1,i arg0"}, {"0x2e.0x1086", "NtGdiEndDoc"}, {"NtGdiEndGdiRendering", "0x2e,0x1087,3,iii arg0 arg1 arg2"}, {"0x2e.0x1087", "NtGdiEndGdiRendering"}, {"NtGdiEndPage", "0x2e,0x1088,1,i arg0"}, {"0x2e.0x1088", "NtGdiEndPage"}, {"NtGdiEndPath", "0x2e,0x1089,1,i arg0"}, {"0x2e.0x1089", "NtGdiEndPath"}, {"NtGdiEngAlphaBlend", "0x2e,0x12ad,7,iiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6"}, {"0x2e.0x12ad", "NtGdiEngAlphaBlend"}, {"NtGdiEngAssociateSurface", "0x2e,0x1298,3,iii arg0 arg1 arg2"}, {"0x2e.0x1298", "NtGdiEngAssociateSurface"}, {"NtGdiEngBitBlt", "0x2e,0x12a4,11,iiiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9 arg10"}, {"0x2e.0x12a4", "NtGdiEngBitBlt"}, {"NtGdiEngCheckAbort", "0x2e,0x12d4,1,i arg0"}, {"0x2e.0x12d4", "NtGdiEngCheckAbort"}, {"NtGdiEngComputeGlyphSet", "0x2e,0x129d,3,iii arg0 arg1 arg2"}, {"0x2e.0x129d", "NtGdiEngComputeGlyphSet"}, {"NtGdiEngCopyBits", "0x2e,0x129e,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x129e", "NtGdiEngCopyBits"}, {"NtGdiEngCreateBitmap", "0x2e,0x1299,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x1299", "NtGdiEngCreateBitmap"}, {"NtGdiEngCreateClip", "0x2e,0x12b9,0,"}, {"0x2e.0x12b9", "NtGdiEngCreateClip"}, {"NtGdiEngCreateDeviceBitmap", "0x2e,0x129b,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x129b", "NtGdiEngCreateDeviceBitmap"}, {"NtGdiEngCreateDeviceSurface", "0x2e,0x129a,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x129a", "NtGdiEngCreateDeviceSurface"}, {"NtGdiEngCreatePalette", "0x2e,0x129c,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x129c", "NtGdiEngCreatePalette"}, {"NtGdiEngDeleteClip", "0x2e,0x12ba,1,i arg0"}, {"0x2e.0x12ba", "NtGdiEngDeleteClip"}, {"NtGdiEngDeletePalette", "0x2e,0x129f,1,i arg0"}, {"0x2e.0x129f", "NtGdiEngDeletePalette"}, {"NtGdiEngDeletePath", "0x2e,0x12b8,1,i arg0"}, {"0x2e.0x12b8", "NtGdiEngDeletePath"}, {"NtGdiEngDeleteSurface", "0x2e,0x12a0,1,i arg0"}, {"0x2e.0x12a0", "NtGdiEngDeleteSurface"}, {"NtGdiEngEraseSurface", "0x2e,0x12a1,3,iii arg0 arg1 arg2"}, {"0x2e.0x12a1", "NtGdiEngEraseSurface"}, {"NtGdiEngFillPath", "0x2e,0x12a9,7,iiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6"}, {"0x2e.0x12a9", "NtGdiEngFillPath"}, {"NtGdiEngGradientFill", "0x2e,0x12ae,10,iiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9"}, {"0x2e.0x12ae", "NtGdiEngGradientFill"}, {"NtGdiEngLineTo", "0x2e,0x12ac,9,iiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8"}, {"0x2e.0x12ac", "NtGdiEngLineTo"}, {"NtGdiEngLockSurface", "0x2e,0x12a3,1,i arg0"}, {"0x2e.0x12a3", "NtGdiEngLockSurface"}, {"NtGdiEngMarkBandingSurface", "0x2e,0x12a7,1,i arg0"}, {"0x2e.0x12a7", "NtGdiEngMarkBandingSurface"}, {"NtGdiEngPaint", "0x2e,0x12ab,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x12ab", "NtGdiEngPaint"}, {"NtGdiEngPlgBlt", "0x2e,0x12a6,11,iiiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9 arg10"}, {"0x2e.0x12a6", "NtGdiEngPlgBlt"}, {"NtGdiEngStretchBlt", "0x2e,0x12a5,11,iiiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9 arg10"}, {"0x2e.0x12a5", "NtGdiEngStretchBlt"}, {"NtGdiEngStretchBltROP", "0x2e,0x12b1,13,iiiiiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9 arg10 arg11 arg12"}, {"0x2e.0x12b1", "NtGdiEngStretchBltROP"}, {"NtGdiEngStrokeAndFillPath", "0x2e,0x12aa,10,iiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9"}, {"0x2e.0x12aa", "NtGdiEngStrokeAndFillPath"}, {"NtGdiEngStrokePath", "0x2e,0x12a8,8,iiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7"}, {"0x2e.0x12a8", "NtGdiEngStrokePath"}, {"NtGdiEngTextOut", "0x2e,0x12b0,10,iiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9"}, {"0x2e.0x12b0", "NtGdiEngTextOut"}, {"NtGdiEngTransparentBlt", "0x2e,0x12af,8,iiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7"}, {"0x2e.0x12af", "NtGdiEngTransparentBlt"}, {"NtGdiEngUnlockSurface", "0x2e,0x12a2,1,i arg0"}, {"0x2e.0x12a2", "NtGdiEngUnlockSurface"}, {"NtGdiEnumFonts", "0x2e,0x108a,8,iiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7"}, {"0x2e.0x108a", "NtGdiEnumFonts"}, {"NtGdiEnumObjects", "0x2e,0x108b,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x108b", "NtGdiEnumObjects"}, {"NtGdiEqualRgn", "0x2e,0x108c,2,ii arg0 arg1"}, {"0x2e.0x108c", "NtGdiEqualRgn"}, {"NtGdiEudcLoadUnloadLink", "0x2e,0x108d,7,iiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6"}, {"0x2e.0x108d", "NtGdiEudcLoadUnloadLink"}, {"NtGdiExcludeClipRect", "0x2e,0x108e,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x108e", "NtGdiExcludeClipRect"}, {"NtGdiExtCreatePen", "0x2e,0x108f,11,iiiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9 arg10"}, {"0x2e.0x108f", "NtGdiExtCreatePen"}, {"NtGdiExtCreateRegion", "0x2e,0x1090,3,iii arg0 arg1 arg2"}, {"0x2e.0x1090", "NtGdiExtCreateRegion"}, {"NtGdiExtEscape", "0x2e,0x1091,8,iiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7"}, {"0x2e.0x1091", "NtGdiExtEscape"}, {"NtGdiExtFloodFill", "0x2e,0x1092,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x1092", "NtGdiExtFloodFill"}, {"NtGdiExtGetObjectW", "0x2e,0x1093,3,iii arg0 arg1 arg2"}, {"0x2e.0x1093", "NtGdiExtGetObjectW"}, {"NtGdiExtSelectClipRgn", "0x2e,0x1094,3,iii arg0 arg1 arg2"}, {"0x2e.0x1094", "NtGdiExtSelectClipRgn"}, {"NtGdiExtTextOutW", "0x2e,0x1095,9,iiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8"}, {"0x2e.0x1095", "NtGdiExtTextOutW"}, {"NtGdiFONTOBJ_cGetAllGlyphPlugins", "0x2e,0x12c8,2,ii arg0 arg1"}, {"0x2e.0x12c8", "NtGdiFONTOBJ_cGetAllGlyphPlugins"}, {"NtGdiFONTOBJ_cGetGlyphs", "0x2e,0x12c3,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x12c3", "NtGdiFONTOBJ_cGetGlyphs"}, {"NtGdiFONTOBJ_pQueryGlyphAttrs", "0x2e,0x12c6,2,ii arg0 arg1"}, {"0x2e.0x12c6", "NtGdiFONTOBJ_pQueryGlyphAttrs"}, {"NtGdiFONTOBJ_pfdg", "0x2e,0x12c5,1,i arg0"}, {"0x2e.0x12c5", "NtGdiFONTOBJ_pfdg"}, {"NtGdiFONTOBJ_pifi", "0x2e,0x12c4,1,i arg0"}, {"0x2e.0x12c4", "NtGdiFONTOBJ_pifi"}, {"NtGdiFONTOBJ_pvTrueTypeFontFile", "0x2e,0x12c7,2,ii arg0 arg1"}, {"0x2e.0x12c7", "NtGdiFONTOBJ_pvTrueTypeFontFile"}, {"NtGdiFONTOBJ_pxoGetXform", "0x2e,0x12c2,1,i arg0"}, {"0x2e.0x12c2", "NtGdiFONTOBJ_pxoGetXform"}, {"NtGdiFONTOBJ_vGetInfo", "0x2e,0x12c1,3,iii arg0 arg1 arg2"}, {"0x2e.0x12c1", "NtGdiFONTOBJ_vGetInfo"}, {"NtGdiFillPath", "0x2e,0x1096,1,i arg0"}, {"0x2e.0x1096", "NtGdiFillPath"}, {"NtGdiFillRgn", "0x2e,0x1097,3,iii arg0 arg1 arg2"}, {"0x2e.0x1097", "NtGdiFillRgn"}, {"NtGdiFlattenPath", "0x2e,0x1098,1,i arg0"}, {"0x2e.0x1098", "NtGdiFlattenPath"}, {"NtGdiFlush", "0x2e,0x1099,0,"}, {"0x2e.0x1099", "NtGdiFlush"}, {"NtGdiFontIsLinked", "0x2e,0x100a,1,i arg0"}, {"0x2e.0x100a", "NtGdiFontIsLinked"}, {"NtGdiForceUFIMapping", "0x2e,0x109a,2,ii arg0 arg1"}, {"0x2e.0x109a", "NtGdiForceUFIMapping"}, {"NtGdiFrameRgn", "0x2e,0x109b,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x109b", "NtGdiFrameRgn"}, {"NtGdiFullscreenControl", "0x2e,0x109c,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x109c", "NtGdiFullscreenControl"}, {"NtGdiGetAndSetDCDword", "0x2e,0x109d,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x109d", "NtGdiGetAndSetDCDword"}, {"NtGdiGetAppClipBox", "0x2e,0x109e,2,ii arg0 arg1"}, {"0x2e.0x109e", "NtGdiGetAppClipBox"}, {"NtGdiGetBitmapBits", "0x2e,0x109f,3,iii arg0 arg1 arg2"}, {"0x2e.0x109f", "NtGdiGetBitmapBits"}, {"NtGdiGetBitmapDimension", "0x2e,0x10a0,2,ii arg0 arg1"}, {"0x2e.0x10a0", "NtGdiGetBitmapDimension"}, {"NtGdiGetBoundsRect", "0x2e,0x10a1,3,iii arg0 arg1 arg2"}, {"0x2e.0x10a1", "NtGdiGetBoundsRect"}, {"NtGdiGetCOPPCompatibleOPMInformation", "0x2e,0x10ab,3,iii arg0 arg1 arg2"}, {"0x2e.0x10ab", "NtGdiGetCOPPCompatibleOPMInformation"}, {"NtGdiGetCertificate", "0x2e,0x10a2,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x10a2", "NtGdiGetCertificate"}, {"NtGdiGetCertificateSize", "0x2e,0x10a3,3,iii arg0 arg1 arg2"}, {"0x2e.0x10a3", "NtGdiGetCertificateSize"}, {"NtGdiGetCharABCWidthsW", "0x2e,0x10a4,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x10a4", "NtGdiGetCharABCWidthsW"}, {"NtGdiGetCharSet", "0x2e,0x10a6,1,i arg0"}, {"0x2e.0x10a6", "NtGdiGetCharSet"}, {"NtGdiGetCharWidthInfo", "0x2e,0x10a8,2,ii arg0 arg1"}, {"0x2e.0x10a8", "NtGdiGetCharWidthInfo"}, {"NtGdiGetCharWidthW", "0x2e,0x10a7,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x10a7", "NtGdiGetCharWidthW"}, {"NtGdiGetCharacterPlacementW", "0x2e,0x10a5,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x10a5", "NtGdiGetCharacterPlacementW"}, {"NtGdiGetColorAdjustment", "0x2e,0x10a9,2,ii arg0 arg1"}, {"0x2e.0x10a9", "NtGdiGetColorAdjustment"}, {"NtGdiGetColorSpaceforBitmap", "0x2e,0x10aa,1,i arg0"}, {"0x2e.0x10aa", "NtGdiGetColorSpaceforBitmap"}, {"NtGdiGetDCDword", "0x2e,0x10ac,3,iii arg0 arg1 arg2"}, {"0x2e.0x10ac", "NtGdiGetDCDword"}, {"NtGdiGetDCObject", "0x2e,0x10ae,2,ii arg0 arg1"}, {"0x2e.0x10ae", "NtGdiGetDCObject"}, {"NtGdiGetDCPoint", "0x2e,0x10af,3,iii arg0 arg1 arg2"}, {"0x2e.0x10af", "NtGdiGetDCPoint"}, {"NtGdiGetDCforBitmap", "0x2e,0x10ad,1,i arg0"}, {"0x2e.0x10ad", "NtGdiGetDCforBitmap"}, {"NtGdiGetDIBitsInternal", "0x2e,0x10b3,9,iiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8"}, {"0x2e.0x10b3", "NtGdiGetDIBitsInternal"}, {"NtGdiGetDeviceCaps", "0x2e,0x10b0,2,ii arg0 arg1"}, {"0x2e.0x10b0", "NtGdiGetDeviceCaps"}, {"NtGdiGetDeviceCapsAll", "0x2e,0x10b2,2,ii arg0 arg1"}, {"0x2e.0x10b2", "NtGdiGetDeviceCapsAll"}, {"NtGdiGetDeviceGammaRamp", "0x2e,0x10b1,2,ii arg0 arg1"}, {"0x2e.0x10b1", "NtGdiGetDeviceGammaRamp"}, {"NtGdiGetDeviceWidth", "0x2e,0x1121,1,i arg0"}, {"0x2e.0x1121", "NtGdiGetDeviceWidth"}, {"NtGdiGetDhpdev", "0x2e,0x12d3,1,i arg0"}, {"0x2e.0x12d3", "NtGdiGetDhpdev"}, {"NtGdiGetETM", "0x2e,0x10b4,2,ii arg0 arg1"}, {"0x2e.0x10b4", "NtGdiGetETM"}, {"NtGdiGetEmbUFI", "0x2e,0x10dc,7,iiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6"}, {"0x2e.0x10dc", "NtGdiGetEmbUFI"}, {"NtGdiGetEmbedFonts", "0x2e,0x10de,0,"}, {"0x2e.0x10de", "NtGdiGetEmbedFonts"}, {"NtGdiGetEudcTimeStampEx", "0x2e,0x10b5,3,iii arg0 arg1 arg2"}, {"0x2e.0x10b5", "NtGdiGetEudcTimeStampEx"}, {"NtGdiGetFontData", "0x2e,0x10b6,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x10b6", "NtGdiGetFontData"}, {"NtGdiGetFontFileData", "0x2e,0x10b7,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x10b7", "NtGdiGetFontFileData"}, {"NtGdiGetFontFileInfo", "0x2e,0x10b8,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x10b8", "NtGdiGetFontFileInfo"}, {"NtGdiGetFontResourceInfoInternalW", "0x2e,0x10b9,7,iiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6"}, {"0x2e.0x10b9", "NtGdiGetFontResourceInfoInternalW"}, {"NtGdiGetFontUnicodeRanges", "0x2e,0x10e1,2,ii arg0 arg1"}, {"0x2e.0x10e1", "NtGdiGetFontUnicodeRanges"}, {"NtGdiGetGlyphIndicesW", "0x2e,0x10ba,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x10ba", "NtGdiGetGlyphIndicesW"}, {"NtGdiGetGlyphIndicesWInternal", "0x2e,0x10bb,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x10bb", "NtGdiGetGlyphIndicesWInternal"}, {"NtGdiGetGlyphOutline", "0x2e,0x10bc,8,iiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7"}, {"0x2e.0x10bc", "NtGdiGetGlyphOutline"}, {"NtGdiGetKerningPairs", "0x2e,0x10be,3,iii arg0 arg1 arg2"}, {"0x2e.0x10be", "NtGdiGetKerningPairs"}, {"NtGdiGetLinkedUFIs", "0x2e,0x10bf,3,iii arg0 arg1 arg2"}, {"0x2e.0x10bf", "NtGdiGetLinkedUFIs"}, {"NtGdiGetMiterLimit", "0x2e,0x10c0,2,ii arg0 arg1"}, {"0x2e.0x10c0", "NtGdiGetMiterLimit"}, {"NtGdiGetMonitorID", "0x2e,0x10c1,3,iii arg0 arg1 arg2"}, {"0x2e.0x10c1", "NtGdiGetMonitorID"}, {"NtGdiGetNearestColor", "0x2e,0x10c2,2,ii arg0 arg1"}, {"0x2e.0x10c2", "NtGdiGetNearestColor"}, {"NtGdiGetNearestPaletteIndex", "0x2e,0x10c3,2,ii arg0 arg1"}, {"0x2e.0x10c3", "NtGdiGetNearestPaletteIndex"}, {"NtGdiGetNumberOfPhysicalMonitors", "0x2e,0x1324,2,ii arg0 arg1"}, {"0x2e.0x1324", "NtGdiGetNumberOfPhysicalMonitors"}, {"NtGdiGetOPMInformation", "0x2e,0x10bd,3,iii arg0 arg1 arg2"}, {"0x2e.0x10bd", "NtGdiGetOPMInformation"}, {"NtGdiGetOPMRandomNumber", "0x2e,0x10c5,2,ii arg0 arg1"}, {"0x2e.0x10c5", "NtGdiGetOPMRandomNumber"}, {"NtGdiGetObjectBitmapPlugin", "0x2e,0x10c4,2,ii arg0 arg1"}, {"0x2e.0x10c4", "NtGdiGetObjectBitmapPlugin"}, {"NtGdiGetOutlineTextMetricsInternalW", "0x2e,0x10c6,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x10c6", "NtGdiGetOutlineTextMetricsInternalW"}, {"NtGdiGetPath", "0x2e,0x10c7,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x10c7", "NtGdiGetPath"}, {"NtGdiGetPerBandInfo", "0x2e,0x1080,2,ii arg0 arg1"}, {"0x2e.0x1080", "NtGdiGetPerBandInfo"}, {"NtGdiGetPhysicalMonitorDescription", "0x2e,0x1326,3,iii arg0 arg1 arg2"}, {"0x2e.0x1326", "NtGdiGetPhysicalMonitorDescription"}, {"NtGdiGetPhysicalMonitors", "0x2e,0x1325,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1325", "NtGdiGetPhysicalMonitors"}, {"NtGdiGetPixel", "0x2e,0x10c8,3,iii arg0 arg1 arg2"}, {"0x2e.0x10c8", "NtGdiGetPixel"}, {"NtGdiGetRandomRgn", "0x2e,0x10c9,3,iii arg0 arg1 arg2"}, {"0x2e.0x10c9", "NtGdiGetRandomRgn"}, {"NtGdiGetRasterizerCaps", "0x2e,0x10ca,2,ii arg0 arg1"}, {"0x2e.0x10ca", "NtGdiGetRasterizerCaps"}, {"NtGdiGetRealizationInfo", "0x2e,0x10cb,2,ii arg0 arg1"}, {"0x2e.0x10cb", "NtGdiGetRealizationInfo"}, {"NtGdiGetRegionData", "0x2e,0x10cc,3,iii arg0 arg1 arg2"}, {"0x2e.0x10cc", "NtGdiGetRegionData"}, {"NtGdiGetRgnBox", "0x2e,0x10cd,2,ii arg0 arg1"}, {"0x2e.0x10cd", "NtGdiGetRgnBox"}, {"NtGdiGetServerMetaFileBits", "0x2e,0x10ce,7,iiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6"}, {"0x2e.0x10ce", "NtGdiGetServerMetaFileBits"}, {"NtGdiGetStats", "0x2e,0x10d0,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x10d0", "NtGdiGetStats"}, {"NtGdiGetStockObject", "0x2e,0x10d1,1,i arg0"}, {"0x2e.0x10d1", "NtGdiGetStockObject"}, {"NtGdiGetStringBitmapW", "0x2e,0x10d2,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x10d2", "NtGdiGetStringBitmapW"}, {"NtGdiGetSuggestedOPMProtectedOutputArraySize", "0x2e,0x10d3,2,ii arg0 arg1"}, {"0x2e.0x10d3", "NtGdiGetSuggestedOPMProtectedOutputArraySize"}, {"NtGdiGetSystemPaletteUse", "0x2e,0x10d4,1,i arg0"}, {"0x2e.0x10d4", "NtGdiGetSystemPaletteUse"}, {"NtGdiGetTextCharsetInfo", "0x2e,0x10d5,3,iii arg0 arg1 arg2"}, {"0x2e.0x10d5", "NtGdiGetTextCharsetInfo"}, {"NtGdiGetTextExtent", "0x2e,0x10d6,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x10d6", "NtGdiGetTextExtent"}, {"NtGdiGetTextExtentExW", "0x2e,0x10d7,8,iiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7"}, {"0x2e.0x10d7", "NtGdiGetTextExtentExW"}, {"NtGdiGetTextFaceW", "0x2e,0x10d8,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x10d8", "NtGdiGetTextFaceW"}, {"NtGdiGetTextMetricsW", "0x2e,0x10d9,3,iii arg0 arg1 arg2"}, {"0x2e.0x10d9", "NtGdiGetTextMetricsW"}, {"NtGdiGetTransform", "0x2e,0x10da,3,iii arg0 arg1 arg2"}, {"0x2e.0x10da", "NtGdiGetTransform"}, {"NtGdiGetUFI", "0x2e,0x10db,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x10db", "NtGdiGetUFI"}, {"NtGdiGetUFIPathname", "0x2e,0x10dd,10,iiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9"}, {"0x2e.0x10dd", "NtGdiGetUFIPathname"}, {"NtGdiGetWidthTable", "0x2e,0x10e2,7,iiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6"}, {"0x2e.0x10e2", "NtGdiGetWidthTable"}, {"NtGdiGradientFill", "0x2e,0x10e3,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x10e3", "NtGdiGradientFill"}, {"NtGdiHLSurfGetInformation", "0x2e,0x12dd,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x12dd", "NtGdiHLSurfGetInformation"}, {"NtGdiHLSurfSetInformation", "0x2e,0x12de,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x12de", "NtGdiHLSurfSetInformation"}, {"NtGdiHT_Get8BPPFormatPalette", "0x2e,0x12d5,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x12d5", "NtGdiHT_Get8BPPFormatPalette"}, {"NtGdiHT_Get8BPPMaskPalette", "0x2e,0x12d6,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x12d6", "NtGdiHT_Get8BPPMaskPalette"}, {"NtGdiHfontCreate", "0x2e,0x10e4,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x10e4", "NtGdiHfontCreate"}, {"NtGdiIcmBrushInfo", "0x2e,0x10e5,8,iiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7"}, {"0x2e.0x10e5", "NtGdiIcmBrushInfo"}, {"NtGdiInitSpool", "0x2e,0x10e7,0,"}, {"0x2e.0x10e7", "NtGdiInitSpool"}, {"NtGdiIntersectClipRect", "0x2e,0x10e8,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x10e8", "NtGdiIntersectClipRect"}, {"NtGdiInvertRgn", "0x2e,0x10e9,2,ii arg0 arg1"}, {"0x2e.0x10e9", "NtGdiInvertRgn"}, {"NtGdiLineTo", "0x2e,0x10ea,3,iii arg0 arg1 arg2"}, {"0x2e.0x10ea", "NtGdiLineTo"}, {"NtGdiMakeFontDir", "0x2e,0x10eb,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x10eb", "NtGdiMakeFontDir"}, {"NtGdiMakeInfoDC", "0x2e,0x10ec,2,ii arg0 arg1"}, {"0x2e.0x10ec", "NtGdiMakeInfoDC"}, {"NtGdiMaskBlt", "0x2e,0x10ed,13,iiiiiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9 arg10 arg11 arg12"}, {"0x2e.0x10ed", "NtGdiMaskBlt"}, {"NtGdiMirrorWindowOrg", "0x2e,0x1122,1,i arg0"}, {"0x2e.0x1122", "NtGdiMirrorWindowOrg"}, {"NtGdiModifyWorldTransform", "0x2e,0x10ee,3,iii arg0 arg1 arg2"}, {"0x2e.0x10ee", "NtGdiModifyWorldTransform"}, {"NtGdiMonoBitmap", "0x2e,0x10ef,1,i arg0"}, {"0x2e.0x10ef", "NtGdiMonoBitmap"}, {"NtGdiMoveTo", "0x2e,0x10f0,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x10f0", "NtGdiMoveTo"}, {"NtGdiOffsetClipRgn", "0x2e,0x10f1,3,iii arg0 arg1 arg2"}, {"0x2e.0x10f1", "NtGdiOffsetClipRgn"}, {"NtGdiOffsetRgn", "0x2e,0x10f2,3,iii arg0 arg1 arg2"}, {"0x2e.0x10f2", "NtGdiOffsetRgn"}, {"NtGdiOpenDCW", "0x2e,0x10f3,8,iiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7"}, {"0x2e.0x10f3", "NtGdiOpenDCW"}, {"NtGdiPATHOBJ_bEnum", "0x2e,0x12cf,2,ii arg0 arg1"}, {"0x2e.0x12cf", "NtGdiPATHOBJ_bEnum"}, {"NtGdiPATHOBJ_bEnumClipLines", "0x2e,0x12d2,3,iii arg0 arg1 arg2"}, {"0x2e.0x12d2", "NtGdiPATHOBJ_bEnumClipLines"}, {"NtGdiPATHOBJ_vEnumStart", "0x2e,0x12d0,1,i arg0"}, {"0x2e.0x12d0", "NtGdiPATHOBJ_vEnumStart"}, {"NtGdiPATHOBJ_vEnumStartClipLines", "0x2e,0x12d1,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x12d1", "NtGdiPATHOBJ_vEnumStartClipLines"}, {"NtGdiPATHOBJ_vGetBounds", "0x2e,0x12ce,2,ii arg0 arg1"}, {"0x2e.0x12ce", "NtGdiPATHOBJ_vGetBounds"}, {"NtGdiPatBlt", "0x2e,0x10f4,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x10f4", "NtGdiPatBlt"}, {"NtGdiPathToRegion", "0x2e,0x10f6,1,i arg0"}, {"0x2e.0x10f6", "NtGdiPathToRegion"}, {"NtGdiPlgBlt", "0x2e,0x10f7,11,iiiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9 arg10"}, {"0x2e.0x10f7", "NtGdiPlgBlt"}, {"NtGdiPolyDraw", "0x2e,0x10f8,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x10f8", "NtGdiPolyDraw"}, {"NtGdiPolyPatBlt", "0x2e,0x10f5,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x10f5", "NtGdiPolyPatBlt"}, {"NtGdiPolyPolyDraw", "0x2e,0x10f9,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x10f9", "NtGdiPolyPolyDraw"}, {"NtGdiPolyTextOutW", "0x2e,0x10fa,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x10fa", "NtGdiPolyTextOutW"}, {"NtGdiPtInRegion", "0x2e,0x10fb,3,iii arg0 arg1 arg2"}, {"0x2e.0x10fb", "NtGdiPtInRegion"}, {"NtGdiPtVisible", "0x2e,0x10fc,3,iii arg0 arg1 arg2"}, {"0x2e.0x10fc", "NtGdiPtVisible"}, {"NtGdiQueryFontAssocInfo", "0x2e,0x10fe,1,i arg0"}, {"0x2e.0x10fe", "NtGdiQueryFontAssocInfo"}, {"NtGdiQueryFonts", "0x2e,0x10fd,3,iii arg0 arg1 arg2"}, {"0x2e.0x10fd", "NtGdiQueryFonts"}, {"NtGdiRectInRegion", "0x2e,0x1100,2,ii arg0 arg1"}, {"0x2e.0x1100", "NtGdiRectInRegion"}, {"NtGdiRectVisible", "0x2e,0x1101,2,ii arg0 arg1"}, {"0x2e.0x1101", "NtGdiRectVisible"}, {"NtGdiRectangle", "0x2e,0x10ff,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x10ff", "NtGdiRectangle"}, {"NtGdiRemoveFontMemResourceEx", "0x2e,0x1103,1,i arg0"}, {"0x2e.0x1103", "NtGdiRemoveFontMemResourceEx"}, {"NtGdiRemoveFontResourceW", "0x2e,0x1102,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x1102", "NtGdiRemoveFontResourceW"}, {"NtGdiRemoveMergeFont", "0x2e,0x1005,2,ii arg0 arg1"}, {"0x2e.0x1005", "NtGdiRemoveMergeFont"}, {"NtGdiResetDC", "0x2e,0x1104,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x1104", "NtGdiResetDC"}, {"NtGdiResizePalette", "0x2e,0x1105,2,ii arg0 arg1"}, {"0x2e.0x1105", "NtGdiResizePalette"}, {"NtGdiRestoreDC", "0x2e,0x1106,2,ii arg0 arg1"}, {"0x2e.0x1106", "NtGdiRestoreDC"}, {"NtGdiRoundRect", "0x2e,0x1107,7,iiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6"}, {"0x2e.0x1107", "NtGdiRoundRect"}, {"NtGdiSTROBJ_bEnum", "0x2e,0x12c9,3,iii arg0 arg1 arg2"}, {"0x2e.0x12c9", "NtGdiSTROBJ_bEnum"}, {"NtGdiSTROBJ_bEnumPositionsOnly", "0x2e,0x12ca,3,iii arg0 arg1 arg2"}, {"0x2e.0x12ca", "NtGdiSTROBJ_bEnumPositionsOnly"}, {"NtGdiSTROBJ_bGetAdvanceWidths", "0x2e,0x12cb,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x12cb", "NtGdiSTROBJ_bGetAdvanceWidths"}, {"NtGdiSTROBJ_dwGetCodePage", "0x2e,0x12cd,1,i arg0"}, {"0x2e.0x12cd", "NtGdiSTROBJ_dwGetCodePage"}, {"NtGdiSTROBJ_vEnumStart", "0x2e,0x12cc,1,i arg0"}, {"0x2e.0x12cc", "NtGdiSTROBJ_vEnumStart"}, {"NtGdiSaveDC", "0x2e,0x1108,1,i arg0"}, {"0x2e.0x1108", "NtGdiSaveDC"}, {"NtGdiScaleViewportExtEx", "0x2e,0x1109,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x1109", "NtGdiScaleViewportExtEx"}, {"NtGdiScaleWindowExtEx", "0x2e,0x110a,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x110a", "NtGdiScaleWindowExtEx"}, {"NtGdiSelectBitmap", "0x2e,0x110b,2,ii arg0 arg1"}, {"0x2e.0x110b", "NtGdiSelectBitmap"}, {"NtGdiSelectBrush", "0x2e,0x110c,2,ii arg0 arg1"}, {"0x2e.0x110c", "NtGdiSelectBrush"}, {"NtGdiSelectClipPath", "0x2e,0x110d,2,ii arg0 arg1"}, {"0x2e.0x110d", "NtGdiSelectClipPath"}, {"NtGdiSelectFont", "0x2e,0x110e,2,ii arg0 arg1"}, {"0x2e.0x110e", "NtGdiSelectFont"}, {"NtGdiSelectPen", "0x2e,0x110f,2,ii arg0 arg1"}, {"0x2e.0x110f", "NtGdiSelectPen"}, {"NtGdiSetBitmapAttributes", "0x2e,0x1110,2,ii arg0 arg1"}, {"0x2e.0x1110", "NtGdiSetBitmapAttributes"}, {"NtGdiSetBitmapBits", "0x2e,0x1111,3,iii arg0 arg1 arg2"}, {"0x2e.0x1111", "NtGdiSetBitmapBits"}, {"NtGdiSetBitmapDimension", "0x2e,0x1112,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1112", "NtGdiSetBitmapDimension"}, {"NtGdiSetBoundsRect", "0x2e,0x1113,3,iii arg0 arg1 arg2"}, {"0x2e.0x1113", "NtGdiSetBoundsRect"}, {"NtGdiSetBrushAttributes", "0x2e,0x1114,2,ii arg0 arg1"}, {"0x2e.0x1114", "NtGdiSetBrushAttributes"}, {"NtGdiSetBrushOrg", "0x2e,0x1115,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1115", "NtGdiSetBrushOrg"}, {"NtGdiSetColorAdjustment", "0x2e,0x1116,2,ii arg0 arg1"}, {"0x2e.0x1116", "NtGdiSetColorAdjustment"}, {"NtGdiSetColorSpace", "0x2e,0x1117,2,ii arg0 arg1"}, {"0x2e.0x1117", "NtGdiSetColorSpace"}, {"NtGdiSetDIBitsToDeviceInternal", "0x2e,0x1119,16,iiiiiiiiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9 arg10 arg11 arg12 arg13 arg14 arg15"}, {"0x2e.0x1119", "NtGdiSetDIBitsToDeviceInternal"}, {"NtGdiSetDeviceGammaRamp", "0x2e,0x1118,2,ii arg0 arg1"}, {"0x2e.0x1118", "NtGdiSetDeviceGammaRamp"}, {"NtGdiSetFontEnumeration", "0x2e,0x111a,1,i arg0"}, {"0x2e.0x111a", "NtGdiSetFontEnumeration"}, {"NtGdiSetFontXform", "0x2e,0x111b,3,iii arg0 arg1 arg2"}, {"0x2e.0x111b", "NtGdiSetFontXform"}, {"NtGdiSetIcmMode", "0x2e,0x111c,3,iii arg0 arg1 arg2"}, {"0x2e.0x111c", "NtGdiSetIcmMode"}, {"NtGdiSetLayout", "0x2e,0x1123,3,iii arg0 arg1 arg2"}, {"0x2e.0x1123", "NtGdiSetLayout"}, {"NtGdiSetLinkedUFIs", "0x2e,0x111d,3,iii arg0 arg1 arg2"}, {"0x2e.0x111d", "NtGdiSetLinkedUFIs"}, {"NtGdiSetMagicColors", "0x2e,0x111e,3,iii arg0 arg1 arg2"}, {"0x2e.0x111e", "NtGdiSetMagicColors"}, {"NtGdiSetMetaRgn", "0x2e,0x111f,1,i arg0"}, {"0x2e.0x111f", "NtGdiSetMetaRgn"}, {"NtGdiSetMiterLimit", "0x2e,0x1120,3,iii arg0 arg1 arg2"}, {"0x2e.0x1120", "NtGdiSetMiterLimit"}, {"NtGdiSetOPMSigningKeyAndSequenceNumbers", "0x2e,0x1124,2,ii arg0 arg1"}, {"0x2e.0x1124", "NtGdiSetOPMSigningKeyAndSequenceNumbers"}, {"NtGdiSetPUMPDOBJ", "0x2e,0x12d8,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x12d8", "NtGdiSetPUMPDOBJ"}, {"NtGdiSetPixel", "0x2e,0x1125,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1125", "NtGdiSetPixel"}, {"NtGdiSetPixelFormat", "0x2e,0x1126,2,ii arg0 arg1"}, {"0x2e.0x1126", "NtGdiSetPixelFormat"}, {"NtGdiSetRectRgn", "0x2e,0x1127,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x1127", "NtGdiSetRectRgn"}, {"NtGdiSetSizeDevice", "0x2e,0x112b,3,iii arg0 arg1 arg2"}, {"0x2e.0x112b", "NtGdiSetSizeDevice"}, {"NtGdiSetSystemPaletteUse", "0x2e,0x1128,2,ii arg0 arg1"}, {"0x2e.0x1128", "NtGdiSetSystemPaletteUse"}, {"NtGdiSetTextJustification", "0x2e,0x1129,3,iii arg0 arg1 arg2"}, {"0x2e.0x1129", "NtGdiSetTextJustification"}, {"NtGdiSetVirtualResolution", "0x2e,0x112a,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x112a", "NtGdiSetVirtualResolution"}, {"NtGdiSfmGetNotificationTokens", "0x2e,0x12dc,3,iii arg0 arg1 arg2"}, {"0x2e.0x12dc", "NtGdiSfmGetNotificationTokens"}, {"NtGdiStartDoc", "0x2e,0x112c,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x112c", "NtGdiStartDoc"}, {"NtGdiStartPage", "0x2e,0x112d,1,i arg0"}, {"0x2e.0x112d", "NtGdiStartPage"}, {"NtGdiStretchBlt", "0x2e,0x112e,12,iiiiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9 arg10 arg11"}, {"0x2e.0x112e", "NtGdiStretchBlt"}, {"NtGdiStretchDIBitsInternal", "0x2e,0x112f,16,iiiiiiiiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9 arg10 arg11 arg12 arg13 arg14 arg15"}, {"0x2e.0x112f", "NtGdiStretchDIBitsInternal"}, {"NtGdiStrokeAndFillPath", "0x2e,0x1130,1,i arg0"}, {"0x2e.0x1130", "NtGdiStrokeAndFillPath"}, {"NtGdiStrokePath", "0x2e,0x1131,1,i arg0"}, {"0x2e.0x1131", "NtGdiStrokePath"}, {"NtGdiSwapBuffers", "0x2e,0x1132,1,i arg0"}, {"0x2e.0x1132", "NtGdiSwapBuffers"}, {"NtGdiTransformPoints", "0x2e,0x1133,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x1133", "NtGdiTransformPoints"}, {"NtGdiTransparentBlt", "0x2e,0x1134,11,iiiiiiiiiii arg0 arg1 arg2 arg3 arg4 arg5 arg6 arg7 arg8 arg9 arg10"}, {"0x2e.0x1134", "NtGdiTransparentBlt"}, {"NtGdiUMPDEngFreeUserMem", "0x2e,0x12da,1,i arg0"}, {"0x2e.0x12da", "NtGdiUMPDEngFreeUserMem"}, {"NtGdiUnrealizeObject", "0x2e,0x1137,1,i arg0"}, {"0x2e.0x1137", "NtGdiUnrealizeObject"}, {"NtGdiUpdateColors", "0x2e,0x1138,1,i arg0"}, {"0x2e.0x1138", "NtGdiUpdateColors"}, {"NtGdiUpdateTransform", "0x2e,0x12d7,1,i arg0"}, {"0x2e.0x12d7", "NtGdiUpdateTransform"}, {"NtGdiWidenPath", "0x2e,0x1139,1,i arg0"}, {"0x2e.0x1139", "NtGdiWidenPath"}, {"NtGdiXFORMOBJ_bApplyXform", "0x2e,0x12bf,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x12bf", "NtGdiXFORMOBJ_bApplyXform"}, {"NtGdiXFORMOBJ_iGetXform", "0x2e,0x12c0,2,ii arg0 arg1"}, {"0x2e.0x12c0", "NtGdiXFORMOBJ_iGetXform"}, {"NtGdiXLATEOBJ_cGetPalette", "0x2e,0x12b2,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x12b2", "NtGdiXLATEOBJ_cGetPalette"}, {"NtGdiXLATEOBJ_hGetColorTransform", "0x2e,0x12b4,1,i arg0"}, {"0x2e.0x12b4", "NtGdiXLATEOBJ_hGetColorTransform"}, {"NtGdiXLATEOBJ_iXlate", "0x2e,0x12b3,2,ii arg0 arg1"}, {"0x2e.0x12b3", "NtGdiXLATEOBJ_iXlate"}, {"NtGetContextThread", "0x2e,0x0087,2,ip ThreadHandle ThreadContext"}, {"0x2e.0x0087", "NtGetContextThread"}, {"NtGetCurrentProcessorNumber", "0x2e,0x0088,1,i VOID"}, {"0x2e.0x0088", "NtGetCurrentProcessorNumber"}, {"NtGetDevicePowerState", "0x2e,0x0089,2,ip Device State"}, {"0x2e.0x0089", "NtGetDevicePowerState"}, {"NtGetMUIRegistryInfo", "0x2e,0x008a,3,xpp Flags DataSize Data"}, {"0x2e.0x008a", "NtGetMUIRegistryInfo"}, {"NtGetNextProcess", "0x2e,0x008b,5,ixxxp ProcessHandle DesiredAccess HandleAttributes Flags NewProcessHandle"}, {"0x2e.0x008b", "NtGetNextProcess"}, {"NtGetNextThread", "0x2e,0x008c,6,iixxxp ProcessHandle ThreadHandle DesiredAccess HandleAttributes Flags NewThreadHandle"}, {"0x2e.0x008c", "NtGetNextThread"}, {"NtGetNlsSectionPtr", "0x2e,0x008d,5,xippp SectionType SectionData ContextData SectionPointer SectionSize"}, {"0x2e.0x008d", "NtGetNlsSectionPtr"}, {"NtGetNotificationResourceManager", "0x2e,0x008e,7,ipippii ResourceManagerHandle TransactionNotification NotificationLength Timeout ReturnLength Asynchronous AsynchronousContext"}, {"0x2e.0x008e", "NtGetNotificationResourceManager"}, {"NtGetPlugPlayEvent", "0x2e,0x008f,4,xppx EventHandle Context EventBlock EventBufferSize"}, {"0x2e.0x008f", "NtGetPlugPlayEvent"}, {"NtGetWriteWatch", "0x2e,0x0090,7,ixpippp ProcessHandle Flags BaseAddress RegionSize UserAddressArray EntriesInUserAddressArray Granularity"}, {"0x2e.0x0090", "NtGetWriteWatch"}, {"NtImpersonateAnonymousToken", "0x2e,0x0091,1,i ThreadHandle"}, {"0x2e.0x0091", "NtImpersonateAnonymousToken"}, {"NtImpersonateClientOfPort", "0x2e,0x0092,2,ip PortHandle Message"}, {"0x2e.0x0092", "NtImpersonateClientOfPort"}, {"NtImpersonateThread", "0x2e,0x0093,3,iip ServerThreadHandle ClientThreadHandle SecurityQos"}, {"0x2e.0x0093", "NtImpersonateThread"}, {"NtInitializeNlsFiles", "0x2e,0x0094,4,pppp BaseAddress DefaultLocaleId DefaultCasingTableSize CurrentNLSVersion"}, {"0x2e.0x0094", "NtInitializeNlsFiles"}, {"NtInitializeRegistry", "0x2e,0x0095,1,i BootCondition"}, {"0x2e.0x0095", "NtInitializeRegistry"}, {"NtInitiatePowerAction", "0x2e,0x0096,4,pixi SystemAction LightestSystemState Flags Asynchronous"}, {"0x2e.0x0096", "NtInitiatePowerAction"}, {"NtIsProcessInJob", "0x2e,0x0097,2,ii ProcessHandle JobHandle"}, {"0x2e.0x0097", "NtIsProcessInJob"}, {"NtIsSystemResumeAutomatic", "0x2e,0x0098,1,i VOID"}, {"0x2e.0x0098", "NtIsSystemResumeAutomatic"}, {"NtIsUILanguageComitted", "0x2e,0x0099,1,i VOID"}, {"0x2e.0x0099", "NtIsUILanguageComitted"}, {"NtListenPort", "0x2e,0x009a,2,ip PortHandle ConnectionRequest"}, {"0x2e.0x009a", "NtListenPort"}, {"NtLoadDriver", "0x2e,0x009b,1,p DriverServiceName"}, {"0x2e.0x009b", "NtLoadDriver"}, {"NtLoadKey", "0x2e,0x009c,2,pp TargetKey SourceFile"}, {"0x2e.0x009c", "NtLoadKey"}, {"NtLoadKey2", "0x2e,0x009d,3,ppx TargetKey SourceFile Flags"}, {"0x2e.0x009d", "NtLoadKey2"}, {"NtLoadKeyEx", "0x2e,0x009e,8,ppxixxpp TargetKey SourceFile Flags TrustClassKey Event DesiredAccess RootHandle Reserved"}, {"0x2e.0x009e", "NtLoadKeyEx"}, {"NtLockFile", "0x2e,0x009f,10,ixpppppiii FileHandle Event ApcRoutine ApcContext IoStatusBlock ByteOffset Length Key FailImmediately ExclusiveLock"}, {"0x2e.0x009f", "NtLockFile"}, {"NtLockProductActivationKeys", "0x2e,0x00a0,2,pp pPrivateVer pSafeMode"}, {"0x2e.0x00a0", "NtLockProductActivationKeys"}, {"NtLockRegistryKey", "0x2e,0x00a1,1,i KeyHandle"}, {"0x2e.0x00a1", "NtLockRegistryKey"}, {"NtLockVirtualMemory", "0x2e,0x00a2,4,ippx ProcessHandle BaseAddress RegionSize MapType"}, {"0x2e.0x00a2", "NtLockVirtualMemory"}, {"NtMakePermanentObject", "0x2e,0x00a3,1,i Handle"}, {"0x2e.0x00a3", "NtMakePermanentObject"}, {"NtMakeTemporaryObject", "0x2e,0x00a4,1,i Handle"}, {"0x2e.0x00a4", "NtMakeTemporaryObject"}, {"NtMapCMFModule", "0x2e,0x00a5,6,iipppp What Index CacheIndexOut CacheFlagsOut ViewSizeOut BaseAddress"}, {"0x2e.0x00a5", "NtMapCMFModule"}, {"NtMapUserPhysicalPages", "0x2e,0x00a6,3,pip VirtualAddress NumberOfPages UserPfnArray"}, {"0x2e.0x00a6", "NtMapUserPhysicalPages"}, {"NtMapUserPhysicalPagesScatter", "0x2e,0x00a7,3,pip VirtualAddresses NumberOfPages UserPfnArray"}, {"0x2e.0x00a7", "NtMapUserPhysicalPagesScatter"}, {"NtMapViewOfSection", "0x2e,0x00a8,10,iipiippixx SectionHandle ProcessHandle BaseAddress ZeroBits CommitSize SectionOffset ViewSize InheritDisposition AllocationType PageProtection"}, {"0x2e.0x00a8", "NtMapViewOfSection"}, {"NtModifyBootEntry", "0x2e,0x00a9,1,p BootEntry"}, {"0x2e.0x00a9", "NtModifyBootEntry"}, {"NtModifyDriverEntry", "0x2e,0x00aa,1,p DriverEntry"}, {"0x2e.0x00aa", "NtModifyDriverEntry"}, {"NtNotifyChangeDirectoryFile", "0x2e,0x00ab,9,ixppppiii FileHandle Event ApcRoutine ApcContext IoStatusBlock Buffer Length CompletionFilter WatchTree"}, {"0x2e.0x00ab", "NtNotifyChangeDirectoryFile"}, {"NtNotifyChangeKey", "0x2e,0x00ac,10,ixpppiipii KeyHandle Event ApcRoutine ApcContext IoStatusBlock CompletionFilter WatchTree Buffer BufferSize Asynchronous"}, {"0x2e.0x00ac", "NtNotifyChangeKey"}, {"NtNotifyChangeMultipleKeys", "0x2e,0x00ad,12,iiixpppiipii MasterKeyHandle Count SubordinateObjects Event ApcRoutine ApcContext IoStatusBlock CompletionFilter WatchTree Buffer BufferSize Asynchronous"}, {"0x2e.0x00ad", "NtNotifyChangeMultipleKeys"}, {"NtNotifyChangeSession", "0x2e,0x00ae,8,iipxiipi SessionHandle ChangeSequenceNumber ChangeTimeStamp Event NewState PreviousState Payload PayloadSize"}, {"0x2e.0x00ae", "NtNotifyChangeSession"}, {"NtOpenDirectoryObject", "0x2e,0x00af,3,pxp DirectoryHandle DesiredAccess ObjectAttributes"}, {"0x2e.0x00af", "NtOpenDirectoryObject"}, {"NtOpenEnlistment", "0x2e,0x00b0,5,pxiip EnlistmentHandle DesiredAccess ResourceManagerHandle EnlistmentGuid ObjectAttributes"}, {"0x2e.0x00b0", "NtOpenEnlistment"}, {"NtOpenEvent", "0x2e,0x00b1,3,pxp EventHandle DesiredAccess ObjectAttributes"}, {"0x2e.0x00b1", "NtOpenEvent"}, {"NtOpenEventPair", "0x2e,0x00b2,3,pxp EventPairHandle DesiredAccess ObjectAttributes"}, {"0x2e.0x00b2", "NtOpenEventPair"}, {"NtOpenFile", "0x2e,0x00b3,6,pxppxx FileHandle DesiredAccess ObjectAttributes IoStatusBlock ShareAccess OpenOptions"}, {"0x2e.0x00b3", "NtOpenFile"}, {"NtOpenIoCompletion", "0x2e,0x00b4,3,pxp IoCompletionHandle DesiredAccess ObjectAttributes"}, {"0x2e.0x00b4", "NtOpenIoCompletion"}, {"NtOpenJobObject", "0x2e,0x00b5,3,pxp JobHandle DesiredAccess ObjectAttributes"}, {"0x2e.0x00b5", "NtOpenJobObject"}, {"NtOpenKey", "0x2e,0x00b6,3,pxp KeyHandle DesiredAccess ObjectAttributes"}, {"0x2e.0x00b6", "NtOpenKey"}, {"NtOpenKeyEx", "0x2e,0x00b7,4,pxpx KeyHandle DesiredAccess ObjectAttributes OpenOptions"}, {"0x2e.0x00b7", "NtOpenKeyEx"}, {"NtOpenKeyTransacted", "0x2e,0x00b9,4,pxpi KeyHandle DesiredAccess ObjectAttributes TransactionHandle"}, {"0x2e.0x00b9", "NtOpenKeyTransacted"}, {"NtOpenKeyTransactedEx", "0x2e,0x00ba,5,pxpxi KeyHandle DesiredAccess ObjectAttributes OpenOptions TransactionHandle"}, {"0x2e.0x00ba", "NtOpenKeyTransactedEx"}, {"NtOpenKeyedEvent", "0x2e,0x00b8,3,pxp KeyedEventHandle DesiredAccess ObjectAttributes"}, {"0x2e.0x00b8", "NtOpenKeyedEvent"}, {"NtOpenMutant", "0x2e,0x00bb,3,pxp MutantHandle DesiredAccess ObjectAttributes"}, {"0x2e.0x00bb", "NtOpenMutant"}, {"NtOpenObjectAuditAlarm", "0x2e,0x00bc,12,pppppixxpixp SubsystemName HandleId ObjectTypeName ObjectName SecurityDescriptor ClientToken DesiredAccess GrantedAccess Privileges ObjectCreation AccessGranted GenerateOnClose"}, {"0x2e.0x00bc", "NtOpenObjectAuditAlarm"}, {"NtOpenPrivateNamespace", "0x2e,0x00bd,4,pxpp NamespaceHandle DesiredAccess ObjectAttributes BoundaryDescriptor"}, {"0x2e.0x00bd", "NtOpenPrivateNamespace"}, {"NtOpenProcess", "0x2e,0x00be,4,pxpp ProcessHandle DesiredAccess ObjectAttributes ClientId"}, {"0x2e.0x00be", "NtOpenProcess"}, {"NtOpenProcessToken", "0x2e,0x00bf,3,ixp ProcessHandle DesiredAccess TokenHandle"}, {"0x2e.0x00bf", "NtOpenProcessToken"}, {"NtOpenProcessTokenEx", "0x2e,0x00c0,4,ixxp ProcessHandle DesiredAccess HandleAttributes TokenHandle"}, {"0x2e.0x00c0", "NtOpenProcessTokenEx"}, {"NtOpenResourceManager", "0x2e,0x00c1,5,pxiip ResourceManagerHandle DesiredAccess TmHandle ResourceManagerGuid ObjectAttributes"}, {"0x2e.0x00c1", "NtOpenResourceManager"}, {"NtOpenSection", "0x2e,0x00c2,3,pxp SectionHandle DesiredAccess ObjectAttributes"}, {"0x2e.0x00c2", "NtOpenSection"}, {"NtOpenSemaphore", "0x2e,0x00c3,3,pxp SemaphoreHandle DesiredAccess ObjectAttributes"}, {"0x2e.0x00c3", "NtOpenSemaphore"}, {"NtOpenSession", "0x2e,0x00c4,3,pxp SessionHandle DesiredAccess ObjectAttributes"}, {"0x2e.0x00c4", "NtOpenSession"}, {"NtOpenSymbolicLinkObject", "0x2e,0x00c5,3,pxp LinkHandle DesiredAccess ObjectAttributes"}, {"0x2e.0x00c5", "NtOpenSymbolicLinkObject"}, {"NtOpenThread", "0x2e,0x00c6,4,pxpp ThreadHandle DesiredAccess ObjectAttributes ClientId"}, {"0x2e.0x00c6", "NtOpenThread"}, {"NtOpenThreadToken", "0x2e,0x00c7,4,ixxp ThreadHandle DesiredAccess OpenAsSelf TokenHandle"}, {"0x2e.0x00c7", "NtOpenThreadToken"}, {"NtOpenThreadTokenEx", "0x2e,0x00c8,5,ixxxp ThreadHandle DesiredAccess OpenAsSelf HandleAttributes TokenHandle"}, {"0x2e.0x00c8", "NtOpenThreadTokenEx"}, {"NtOpenTimer", "0x2e,0x00c9,3,pxp TimerHandle DesiredAccess ObjectAttributes"}, {"0x2e.0x00c9", "NtOpenTimer"}, {"NtOpenTransaction", "0x2e,0x00ca,5,pxpii TransactionHandle DesiredAccess ObjectAttributes Uow TmHandle"}, {"0x2e.0x00ca", "NtOpenTransaction"}, {"NtOpenTransactionManager", "0x2e,0x00cb,6,pxppix TmHandle DesiredAccess ObjectAttributes LogFileName TmIdentity OpenOptions"}, {"0x2e.0x00cb", "NtOpenTransactionManager"}, {"NtPlugPlayControl", "0x2e,0x00cc,3,ppi PnPControlClass PnPControlData PnPControlDataLength"}, {"0x2e.0x00cc", "NtPlugPlayControl"}, {"NtPowerInformation", "0x2e,0x00cd,5,ppipi InformationLevel InputBuffer InputBufferLength OutputBuffer OutputBufferLength"}, {"0x2e.0x00cd", "NtPowerInformation"}, {"NtPrePrepareComplete", "0x2e,0x00d0,2,ip EnlistmentHandle TmVirtualClock"}, {"0x2e.0x00d0", "NtPrePrepareComplete"}, {"NtPrePrepareEnlistment", "0x2e,0x00d1,2,ip EnlistmentHandle TmVirtualClock"}, {"0x2e.0x00d1", "NtPrePrepareEnlistment"}, {"NtPrepareComplete", "0x2e,0x00ce,2,ip EnlistmentHandle TmVirtualClock"}, {"0x2e.0x00ce", "NtPrepareComplete"}, {"NtPrepareEnlistment", "0x2e,0x00cf,2,ip EnlistmentHandle TmVirtualClock"}, {"0x2e.0x00cf", "NtPrepareEnlistment"}, {"NtPrivilegeCheck", "0x2e,0x00d2,3,ipp ClientToken RequiredPrivileges Result"}, {"0x2e.0x00d2", "NtPrivilegeCheck"}, {"NtPrivilegeObjectAuditAlarm", "0x2e,0x00d4,6,ppixpx SubsystemName HandleId ClientToken DesiredAccess Privileges AccessGranted"}, {"0x2e.0x00d4", "NtPrivilegeObjectAuditAlarm"}, {"NtPrivilegedServiceAuditAlarm", "0x2e,0x00d3,5,ppipx SubsystemName ServiceName ClientToken Privileges AccessGranted"}, {"0x2e.0x00d3", "NtPrivilegedServiceAuditAlarm"}, {"NtPropagationComplete", "0x2e,0x00d5,4,ixip ResourceManagerHandle RequestCookie BufferLength Buffer"}, {"0x2e.0x00d5", "NtPropagationComplete"}, {"NtPropagationFailed", "0x2e,0x00d6,3,ixx ResourceManagerHandle RequestCookie PropStatus"}, {"0x2e.0x00d6", "NtPropagationFailed"}, {"NtProtectVirtualMemory", "0x2e,0x00d7,5,ippxp ProcessHandle BaseAddress RegionSize NewProtection OldProtection"}, {"0x2e.0x00d7", "NtProtectVirtualMemory"}, {"NtPulseEvent", "0x2e,0x00d8,2,xp EventHandle PreviousState"}, {"0x2e.0x00d8", "NtPulseEvent"}, {"NtQueryAttributesFile", "0x2e,0x00d9,2,pp ObjectAttributes FileInformation"}, {"0x2e.0x00d9", "NtQueryAttributesFile"}, {"NtQueryBootEntryOrder", "0x2e,0x00da,2,pp Ids Count"}, {"0x2e.0x00da", "NtQueryBootEntryOrder"}, {"NtQueryBootOptions", "0x2e,0x00db,2,pp BootOptions BootOptionsLength"}, {"0x2e.0x00db", "NtQueryBootOptions"}, {"NtQueryDebugFilterState", "0x2e,0x00dc,2,ii ComponentId Level"}, {"0x2e.0x00dc", "NtQueryDebugFilterState"}, {"NtQueryDefaultLocale", "0x2e,0x00dd,2,ip UserProfile DefaultLocaleId"}, {"0x2e.0x00dd", "NtQueryDefaultLocale"}, {"NtQueryDefaultUILanguage", "0x2e,0x00de,1,p DefaultUILanguageId"}, {"0x2e.0x00de", "NtQueryDefaultUILanguage"}, {"NtQueryDirectoryFile", "0x2e,0x00df,11,ixppppiiipi FileHandle Event ApcRoutine ApcContext IoStatusBlock FileInformation Length FileInformationClass ReturnSingleEntry FileName RestartScan"}, {"0x2e.0x00df", "NtQueryDirectoryFile"}, {"NtQueryDirectoryObject", "0x2e,0x00e0,7,ipiiipp DirectoryHandle Buffer Length ReturnSingleEntry RestartScan Context ReturnLength"}, {"0x2e.0x00e0", "NtQueryDirectoryObject"}, {"NtQueryDriverEntryOrder", "0x2e,0x00e1,2,pp Ids Count"}, {"0x2e.0x00e1", "NtQueryDriverEntryOrder"}, {"NtQueryEaFile", "0x2e,0x00e2,9,ippiipipi FileHandle IoStatusBlock Buffer Length ReturnSingleEntry EaList EaListLength EaIndex RestartScan"}, {"0x2e.0x00e2", "NtQueryEaFile"}, {"NtQueryEvent", "0x2e,0x00e3,5,xxpxp EventHandle EventInformationClass EventInformation EventInformationLength ReturnLength"}, {"0x2e.0x00e3", "NtQueryEvent"}, {"NtQueryFullAttributesFile", "0x2e,0x00e4,2,pp ObjectAttributes FileInformation"}, {"0x2e.0x00e4", "NtQueryFullAttributesFile"}, {"NtQueryInformationAtom", "0x2e,0x00e5,5,iipip Atom AtomInformationClass AtomInformation AtomInformationLength ReturnLength"}, {"0x2e.0x00e5", "NtQueryInformationAtom"}, {"NtQueryInformationEnlistment", "0x2e,0x00e6,5,iipip EnlistmentHandle EnlistmentInformationClass EnlistmentInformation EnlistmentInformationLength ReturnLength"}, {"0x2e.0x00e6", "NtQueryInformationEnlistment"}, {"NtQueryInformationFile", "0x2e,0x00e7,5,ippii FileHandle IoStatusBlock FileInformation Length FileInformationClass"}, {"0x2e.0x00e7", "NtQueryInformationFile"}, {"NtQueryInformationJobObject", "0x2e,0x00e8,5,iipip JobHandle JobObjectInformationClass JobObjectInformation JobObjectInformationLength ReturnLength"}, {"0x2e.0x00e8", "NtQueryInformationJobObject"}, {"NtQueryInformationPort", "0x2e,0x00e9,5,ippip PortHandle PortInformationClass PortInformation Length ReturnLength"}, {"0x2e.0x00e9", "NtQueryInformationPort"}, {"NtQueryInformationProcess", "0x2e,0x00ea,5,ippip ProcessHandle ProcessInformationClass ProcessInformation ProcessInformationLength ReturnLength"}, {"0x2e.0x00ea", "NtQueryInformationProcess"}, {"NtQueryInformationResourceManager", "0x2e,0x00eb,5,iipip ResourceManagerHandle ResourceManagerInformationClass ResourceManagerInformation ResourceManagerInformationLength ReturnLength"}, {"0x2e.0x00eb", "NtQueryInformationResourceManager"}, {"NtQueryInformationThread", "0x2e,0x00ec,5,iipip ThreadHandle ThreadInformationClass ThreadInformation ThreadInformationLength ReturnLength"}, {"0x2e.0x00ec", "NtQueryInformationThread"}, {"NtQueryInformationToken", "0x2e,0x00ed,5,iipip TokenHandle TokenInformationClass TokenInformation TokenInformationLength ReturnLength"}, {"0x2e.0x00ed", "NtQueryInformationToken"}, {"NtQueryInformationTransaction", "0x2e,0x00ee,5,iipip TransactionHandle TransactionInformationClass TransactionInformation TransactionInformationLength ReturnLength"}, {"0x2e.0x00ee", "NtQueryInformationTransaction"}, {"NtQueryInformationTransactionManager", "0x2e,0x00ef,5,iipip TransactionManagerHandle TransactionManagerInformationClass TransactionManagerInformation TransactionManagerInformationLength ReturnLength"}, {"0x2e.0x00ef", "NtQueryInformationTransactionManager"}, {"NtQueryInformationWorkerFactory", "0x2e,0x00f0,5,iipip WorkerFactoryHandle WorkerFactoryInformationClass WorkerFactoryInformation WorkerFactoryInformationLength ReturnLength"}, {"0x2e.0x00f0", "NtQueryInformationWorkerFactory"}, {"NtQueryInstallUILanguage", "0x2e,0x00f1,1,p InstallUILanguageId"}, {"0x2e.0x00f1", "NtQueryInstallUILanguage"}, {"NtQueryIntervalProfile", "0x2e,0x00f2,2,ip ProfileSource Interval"}, {"0x2e.0x00f2", "NtQueryIntervalProfile"}, {"NtQueryIoCompletion", "0x2e,0x00f3,5,iipip IoCompletionHandle IoCompletionInformationClass IoCompletionInformation IoCompletionInformationLength ReturnLength"}, {"0x2e.0x00f3", "NtQueryIoCompletion"}, {"NtQueryKey", "0x2e,0x00f4,5,iipip KeyHandle KeyInformationClass KeyInformation Length ResultLength"}, {"0x2e.0x00f4", "NtQueryKey"}, {"NtQueryLicenseValue", "0x2e,0x00f5,5,pppip ValueName Type Data DataSize ResultDataSize"}, {"0x2e.0x00f5", "NtQueryLicenseValue"}, {"NtQueryMultipleValueKey", "0x2e,0x00f6,6,ipippp KeyHandle ValueEntries EntryCount ValueBuffer BufferLength RequiredBufferLength"}, {"0x2e.0x00f6", "NtQueryMultipleValueKey"}, {"NtQueryMutant", "0x2e,0x00f7,5,iipip MutantHandle MutantInformationClass MutantInformation MutantInformationLength ReturnLength"}, {"0x2e.0x00f7", "NtQueryMutant"}, {"NtQueryObject", "0x2e,0x00f8,5,iipip Handle ObjectInformationClass ObjectInformation ObjectInformationLength ReturnLength"}, {"0x2e.0x00f8", "NtQueryObject"}, {"NtQueryOpenSubKeys", "0x2e,0x00f9,2,pp TargetKey HandleCount"}, {"0x2e.0x00f9", "NtQueryOpenSubKeys"}, {"NtQueryOpenSubKeysEx", "0x2e,0x00fa,4,pipp TargetKey BufferLength Buffer RequiredSize"}, {"0x2e.0x00fa", "NtQueryOpenSubKeysEx"}, {"NtQueryPerformanceCounter", "0x2e,0x00fb,2,pp PerformanceCounter PerformanceFrequency"}, {"0x2e.0x00fb", "NtQueryPerformanceCounter"}, {"NtQueryPortInformationProcess", "0x2e,0x00fc,1,i VOID"}, {"0x2e.0x00fc", "NtQueryPortInformationProcess"}, {"NtQueryQuotaInformationFile", "0x2e,0x00fd,9,ippiipipi FileHandle IoStatusBlock Buffer Length ReturnSingleEntry SidList SidListLength StartSid RestartScan"}, {"0x2e.0x00fd", "NtQueryQuotaInformationFile"}, {"NtQuerySection", "0x2e,0x00fe,5,iipip SectionHandle SectionInformationClass SectionInformation SectionInformationLength ReturnLength"}, {"0x2e.0x00fe", "NtQuerySection"}, {"NtQuerySecurityAttributesToken", "0x2e,0x00ff,6,ipxpip TokenHandle Attributes NumberOfAttributes Buffer Length ReturnLength"}, {"0x2e.0x00ff", "NtQuerySecurityAttributesToken"}, {"NtQuerySecurityObject", "0x2e,0x0100,5,iipip Handle SecurityInformation SecurityDescriptor Length LengthNeeded"}, {"0x2e.0x0100", "NtQuerySecurityObject"}, {"NtQuerySemaphore", "0x2e,0x0101,5,iipip SemaphoreHandle SemaphoreInformationClass SemaphoreInformation SemaphoreInformationLength ReturnLength"}, {"0x2e.0x0101", "NtQuerySemaphore"}, {"NtQuerySymbolicLinkObject", "0x2e,0x0102,3,ipp LinkHandle LinkTarget ReturnedLength"}, {"0x2e.0x0102", "NtQuerySymbolicLinkObject"}, {"NtQuerySystemEnvironmentValue", "0x2e,0x0103,4,ppip VariableName VariableValue ValueLength ReturnLength"}, {"0x2e.0x0103", "NtQuerySystemEnvironmentValue"}, {"NtQuerySystemEnvironmentValueEx", "0x2e,0x0104,5,ppppp VariableName VendorGuid Buffer BufferLength Attributes"}, {"0x2e.0x0104", "NtQuerySystemEnvironmentValueEx"}, {"NtQuerySystemInformation", "0x2e,0x0105,4,ipip SystemInformationClass SystemInformation SystemInformationLength ReturnLength"}, {"0x2e.0x0105", "NtQuerySystemInformation"}, {"NtQuerySystemInformationEx", "0x2e,0x0106,6,ipipip SystemInformationClass InputBuffer InputBufferLength SystemInformation SystemInformationLength ReturnLength"}, {"0x2e.0x0106", "NtQuerySystemInformationEx"}, {"NtQuerySystemTime", "0x2e,0x0107,1,p SystemTime"}, {"0x2e.0x0107", "NtQuerySystemTime"}, {"NtQueryTimer", "0x2e,0x0108,5,iipip TimerHandle TimerInformationClass TimerInformation TimerInformationLength ReturnLength"}, {"0x2e.0x0108", "NtQueryTimer"}, {"NtQueryTimerResolution", "0x2e,0x0109,3,ppp MaximumTime MinimumTime CurrentTime"}, {"0x2e.0x0109", "NtQueryTimerResolution"}, {"NtQueryValueKey", "0x2e,0x010a,6,ipipip KeyHandle ValueName KeyValueInformationClass KeyValueInformation Length ResultLength"}, {"0x2e.0x010a", "NtQueryValueKey"}, {"NtQueryVirtualMemory", "0x2e,0x010b,6,ipipip ProcessHandle BaseAddress MemoryInformationClass MemoryInformation MemoryInformationLength ReturnLength"}, {"0x2e.0x010b", "NtQueryVirtualMemory"}, {"NtQueryVolumeInformationFile", "0x2e,0x010c,5,ippii FileHandle IoStatusBlock FsInformation Length FsInformationClass"}, {"0x2e.0x010c", "NtQueryVolumeInformationFile"}, {"NtQueueApcThread", "0x2e,0x010d,5,ipppp ThreadHandle ApcRoutine ApcArgument1 ApcArgument2 ApcArgument3"}, {"0x2e.0x010d", "NtQueueApcThread"}, {"NtQueueApcThreadEx", "0x2e,0x010e,6,iipppp ThreadHandle ReserveHandle ApcRoutine ApcArgument1 ApcArgument2 ApcArgument3"}, {"0x2e.0x010e", "NtQueueApcThreadEx"}, {"NtRaiseException", "0x2e,0x010f,3,ppi ExceptionRecord ContextRecord FirstChance"}, {"0x2e.0x010f", "NtRaiseException"}, {"NtRaiseHardError", "0x2e,0x0110,6,iixpxp ErrorStatus NumberOfParameters UnicodeStringParameterMask Parameters ValidResponseOptions Response"}, {"0x2e.0x0110", "NtRaiseHardError"}, {"NtReadFile", "0x2e,0x0111,9,ixppppipp FileHandle Event ApcRoutine ApcContext IoStatusBlock Buffer Length ByteOffset Key"}, {"0x2e.0x0111", "NtReadFile"}, {"NtReadFileScatter", "0x2e,0x0112,9,ixppppipp FileHandle Event ApcRoutine ApcContext IoStatusBlock SegmentArray Length ByteOffset Key"}, {"0x2e.0x0112", "NtReadFileScatter"}, {"NtReadOnlyEnlistment", "0x2e,0x0113,2,ip EnlistmentHandle TmVirtualClock"}, {"0x2e.0x0113", "NtReadOnlyEnlistment"}, {"NtReadRequestData", "0x2e,0x0114,6,ipipip PortHandle Message DataEntryIndex Buffer BufferSize NumberOfBytesRead"}, {"0x2e.0x0114", "NtReadRequestData"}, {"NtReadVirtualMemory", "0x2e,0x0115,5,ippip ProcessHandle BaseAddress Buffer NumberOfBytesToRead NumberOfBytesRead"}, {"0x2e.0x0115", "NtReadVirtualMemory"}, {"NtRecoverEnlistment", "0x2e,0x0116,2,ip EnlistmentHandle EnlistmentKey"}, {"0x2e.0x0116", "NtRecoverEnlistment"}, {"NtRecoverResourceManager", "0x2e,0x0117,1,i ResourceManagerHandle"}, {"0x2e.0x0117", "NtRecoverResourceManager"}, {"NtRecoverTransactionManager", "0x2e,0x0118,1,i TransactionManagerHandle"}, {"0x2e.0x0118", "NtRecoverTransactionManager"}, {"NtRegisterProtocolAddressInformation", "0x2e,0x0119,5,ipxpx ResourceManager ProtocolId ProtocolInformationSize ProtocolInformation CreateOptions"}, {"0x2e.0x0119", "NtRegisterProtocolAddressInformation"}, {"NtRegisterThreadTerminatePort", "0x2e,0x011a,1,i PortHandle"}, {"0x2e.0x011a", "NtRegisterThreadTerminatePort"}, {"NtReleaseKeyedEvent", "0x2e,0x011b,4,xpip KeyedEventHandle KeyValue Alertable Timeout"}, {"0x2e.0x011b", "NtReleaseKeyedEvent"}, {"NtReleaseMutant", "0x2e,0x011c,2,ip MutantHandle PreviousCount"}, {"0x2e.0x011c", "NtReleaseMutant"}, {"NtReleaseSemaphore", "0x2e,0x011d,3,iip SemaphoreHandle ReleaseCount PreviousCount"}, {"0x2e.0x011d", "NtReleaseSemaphore"}, {"NtReleaseWorkerFactoryWorker", "0x2e,0x011e,1,i WorkerFactoryHandle"}, {"0x2e.0x011e", "NtReleaseWorkerFactoryWorker"}, {"NtRemoveIoCompletion", "0x2e,0x011f,5,ipppp IoCompletionHandle KeyContext ApcContext IoStatusBlock Timeout"}, {"0x2e.0x011f", "NtRemoveIoCompletion"}, {"NtRemoveIoCompletionEx", "0x2e,0x0120,6,ipippi IoCompletionHandle IoCompletionInformation Count NumEntriesRemoved Timeout Alertable"}, {"0x2e.0x0120", "NtRemoveIoCompletionEx"}, {"NtRemoveProcessDebug", "0x2e,0x0121,2,ii ProcessHandle DebugObjectHandle"}, {"0x2e.0x0121", "NtRemoveProcessDebug"}, {"NtRenameKey", "0x2e,0x0122,2,ip KeyHandle NewName"}, {"0x2e.0x0122", "NtRenameKey"}, {"NtRenameTransactionManager", "0x2e,0x0123,2,pi LogFileName ExistingTransactionManagerGuid"}, {"0x2e.0x0123", "NtRenameTransactionManager"}, {"NtReplaceKey", "0x2e,0x0124,3,pip NewFile TargetHandle OldFile"}, {"0x2e.0x0124", "NtReplaceKey"}, {"NtReplacePartitionUnit", "0x2e,0x0125,3,ppx TargetInstancePath SpareInstancePath Flags"}, {"0x2e.0x0125", "NtReplacePartitionUnit"}, {"NtReplyPort", "0x2e,0x0126,2,ip PortHandle ReplyMessage"}, {"0x2e.0x0126", "NtReplyPort"}, {"NtReplyWaitReceivePort", "0x2e,0x0127,4,ippp PortHandle PortContext ReplyMessage ReceiveMessage"}, {"0x2e.0x0127", "NtReplyWaitReceivePort"}, {"NtReplyWaitReceivePortEx", "0x2e,0x0128,5,ipppp PortHandle PortContext ReplyMessage ReceiveMessage Timeout"}, {"0x2e.0x0128", "NtReplyWaitReceivePortEx"}, {"NtReplyWaitReplyPort", "0x2e,0x0129,2,ip PortHandle ReplyMessage"}, {"0x2e.0x0129", "NtReplyWaitReplyPort"}, {"NtRequestPort", "0x2e,0x012a,2,ip PortHandle RequestMessage"}, {"0x2e.0x012a", "NtRequestPort"}, {"NtRequestWaitReplyPort", "0x2e,0x012b,3,ipp PortHandle RequestMessage ReplyMessage"}, {"0x2e.0x012b", "NtRequestWaitReplyPort"}, {"NtResetEvent", "0x2e,0x012c,2,xp EventHandle PreviousState"}, {"0x2e.0x012c", "NtResetEvent"}, {"NtResetWriteWatch", "0x2e,0x012d,3,ipi ProcessHandle BaseAddress RegionSize"}, {"0x2e.0x012d", "NtResetWriteWatch"}, {"NtRestoreKey", "0x2e,0x012e,3,iix KeyHandle FileHandle Flags"}, {"0x2e.0x012e", "NtRestoreKey"}, {"NtResumeProcess", "0x2e,0x012f,1,i ProcessHandle"}, {"0x2e.0x012f", "NtResumeProcess"}, {"NtResumeThread", "0x2e,0x0130,2,ip ThreadHandle PreviousSuspendCount"}, {"0x2e.0x0130", "NtResumeThread"}, {"NtRollbackComplete", "0x2e,0x0131,2,ip EnlistmentHandle TmVirtualClock"}, {"0x2e.0x0131", "NtRollbackComplete"}, {"NtRollbackEnlistment", "0x2e,0x0132,2,ip EnlistmentHandle TmVirtualClock"}, {"0x2e.0x0132", "NtRollbackEnlistment"}, {"NtRollbackTransaction", "0x2e,0x0133,2,ii TransactionHandle Wait"}, {"0x2e.0x0133", "NtRollbackTransaction"}, {"NtRollforwardTransactionManager", "0x2e,0x0134,2,ip TransactionManagerHandle TmVirtualClock"}, {"0x2e.0x0134", "NtRollforwardTransactionManager"}, {"NtSaveKey", "0x2e,0x0135,2,ii KeyHandle FileHandle"}, {"0x2e.0x0135", "NtSaveKey"}, {"NtSaveKeyEx", "0x2e,0x0136,3,iii KeyHandle FileHandle Format"}, {"0x2e.0x0136", "NtSaveKeyEx"}, {"NtSaveMergedKeys", "0x2e,0x0137,3,iii HighPrecedenceKeyHandle LowPrecedenceKeyHandle FileHandle"}, {"0x2e.0x0137", "NtSaveMergedKeys"}, {"NtSecureConnectPort", "0x2e,0x0138,9,ppppppppp PortHandle PortName SecurityQos ClientView RequiredServerSid ServerView MaxMessageLength ConnectionInformation ConnectionInformationLength"}, {"0x2e.0x0138", "NtSecureConnectPort"}, {"NtSerializeBoot", "0x2e,0x0139,1,i VOID"}, {"0x2e.0x0139", "NtSerializeBoot"}, {"NtSetBootEntryOrder", "0x2e,0x013a,2,pi Ids Count"}, {"0x2e.0x013a", "NtSetBootEntryOrder"}, {"NtSetBootOptions", "0x2e,0x013b,2,pi BootOptions FieldsToChange"}, {"0x2e.0x013b", "NtSetBootOptions"}, {"NtSetContextThread", "0x2e,0x013c,2,ip ThreadHandle ThreadContext"}, {"0x2e.0x013c", "NtSetContextThread"}, {"NtSetDebugFilterState", "0x2e,0x013d,3,iii ComponentId Level State"}, {"0x2e.0x013d", "NtSetDebugFilterState"}, {"NtSetDefaultHardErrorPort", "0x2e,0x013e,1,i DefaultHardErrorPort"}, {"0x2e.0x013e", "NtSetDefaultHardErrorPort"}, {"NtSetDefaultLocale", "0x2e,0x013f,2,ii UserProfile DefaultLocaleId"}, {"0x2e.0x013f", "NtSetDefaultLocale"}, {"NtSetDefaultUILanguage", "0x2e,0x0140,1,i DefaultUILanguageId"}, {"0x2e.0x0140", "NtSetDefaultUILanguage"}, {"NtSetDriverEntryOrder", "0x2e,0x0141,2,pi Ids Count"}, {"0x2e.0x0141", "NtSetDriverEntryOrder"}, {"NtSetEaFile", "0x2e,0x0142,4,ippi FileHandle IoStatusBlock Buffer Length"}, {"0x2e.0x0142", "NtSetEaFile"}, {"NtSetEvent", "0x2e,0x0143,2,xp EventHandle PreviousState"}, {"0x2e.0x0143", "NtSetEvent"}, {"NtSetEventBoostPriority", "0x2e,0x0144,1,x EventHandle"}, {"0x2e.0x0144", "NtSetEventBoostPriority"}, {"NtSetHighEventPair", "0x2e,0x0145,1,x EventPairHandle"}, {"0x2e.0x0145", "NtSetHighEventPair"}, {"NtSetHighWaitLowEventPair", "0x2e,0x0146,1,x EventPairHandle"}, {"0x2e.0x0146", "NtSetHighWaitLowEventPair"}, {"NtSetInformationDebugObject", "0x2e,0x0147,5,iipip DebugObjectHandle DebugObjectInformationClass DebugInformation DebugInformationLength ReturnLength"}, {"0x2e.0x0147", "NtSetInformationDebugObject"}, {"NtSetInformationEnlistment", "0x2e,0x0148,4,iipi EnlistmentHandle EnlistmentInformationClass EnlistmentInformation EnlistmentInformationLength"}, {"0x2e.0x0148", "NtSetInformationEnlistment"}, {"NtSetInformationFile", "0x2e,0x0149,5,ippii FileHandle IoStatusBlock FileInformation Length FileInformationClass"}, {"0x2e.0x0149", "NtSetInformationFile"}, {"NtSetInformationJobObject", "0x2e,0x014a,4,iipi JobHandle JobObjectInformationClass JobObjectInformation JobObjectInformationLength"}, {"0x2e.0x014a", "NtSetInformationJobObject"}, {"NtSetInformationKey", "0x2e,0x014b,4,iipi KeyHandle KeySetInformationClass KeySetInformation KeySetInformationLength"}, {"0x2e.0x014b", "NtSetInformationKey"}, {"NtSetInformationObject", "0x2e,0x014c,4,iipi Handle ObjectInformationClass ObjectInformation ObjectInformationLength"}, {"0x2e.0x014c", "NtSetInformationObject"}, {"NtSetInformationProcess", "0x2e,0x014d,4,ippi ProcessHandle ProcessInformationClass ProcessInformation ProcessInformationLength"}, {"0x2e.0x014d", "NtSetInformationProcess"}, {"NtSetInformationResourceManager", "0x2e,0x014e,4,iipi ResourceManagerHandle ResourceManagerInformationClass ResourceManagerInformation ResourceManagerInformationLength"}, {"0x2e.0x014e", "NtSetInformationResourceManager"}, {"NtSetInformationThread", "0x2e,0x014f,4,iipi ThreadHandle ThreadInformationClass ThreadInformation ThreadInformationLength"}, {"0x2e.0x014f", "NtSetInformationThread"}, {"NtSetInformationToken", "0x2e,0x0150,4,iipi TokenHandle TokenInformationClass TokenInformation TokenInformationLength"}, {"0x2e.0x0150", "NtSetInformationToken"}, {"NtSetInformationTransaction", "0x2e,0x0151,4,iipi TransactionHandle TransactionInformationClass TransactionInformation TransactionInformationLength"}, {"0x2e.0x0151", "NtSetInformationTransaction"}, {"NtSetInformationTransactionManager", "0x2e,0x0152,4,iipi TmHandle TransactionManagerInformationClass TransactionManagerInformation TransactionManagerInformationLength"}, {"0x2e.0x0152", "NtSetInformationTransactionManager"}, {"NtSetInformationWorkerFactory", "0x2e,0x0153,4,iipi WorkerFactoryHandle WorkerFactoryInformationClass WorkerFactoryInformation WorkerFactoryInformationLength"}, {"0x2e.0x0153", "NtSetInformationWorkerFactory"}, {"NtSetIntervalProfile", "0x2e,0x0154,2,ii Interval Source"}, {"0x2e.0x0154", "NtSetIntervalProfile"}, {"NtSetIoCompletion", "0x2e,0x0155,5,ippii IoCompletionHandle KeyContext ApcContext IoStatus IoStatusInformation"}, {"0x2e.0x0155", "NtSetIoCompletion"}, {"NtSetIoCompletionEx", "0x2e,0x0156,6,iippii IoCompletionHandle IoCompletionPacketHandle KeyContext ApcContext IoStatus IoStatusInformation"}, {"0x2e.0x0156", "NtSetIoCompletionEx"}, {"NtSetLdtEntries", "0x2e,0x0157,6,iiiiii Selector0 Entry0Low Entry0Hi Selector1 Entry1Low Entry1Hi"}, {"0x2e.0x0157", "NtSetLdtEntries"}, {"NtSetLowEventPair", "0x2e,0x0158,1,x EventPairHandle"}, {"0x2e.0x0158", "NtSetLowEventPair"}, {"NtSetLowWaitHighEventPair", "0x2e,0x0159,1,x EventPairHandle"}, {"0x2e.0x0159", "NtSetLowWaitHighEventPair"}, {"NtSetQuotaInformationFile", "0x2e,0x015a,4,ippi FileHandle IoStatusBlock Buffer Length"}, {"0x2e.0x015a", "NtSetQuotaInformationFile"}, {"NtSetSecurityObject", "0x2e,0x015b,3,iip Handle SecurityInformation SecurityDescriptor"}, {"0x2e.0x015b", "NtSetSecurityObject"}, {"NtSetSystemEnvironmentValue", "0x2e,0x015c,2,pp VariableName VariableValue"}, {"0x2e.0x015c", "NtSetSystemEnvironmentValue"}, {"NtSetSystemEnvironmentValueEx", "0x2e,0x015d,5,pppix VariableName VendorGuid Buffer BufferLength Attributes"}, {"0x2e.0x015d", "NtSetSystemEnvironmentValueEx"}, {"NtSetSystemInformation", "0x2e,0x015e,3,ipi SystemInformationClass SystemInformation SystemInformationLength"}, {"0x2e.0x015e", "NtSetSystemInformation"}, {"NtSetSystemPowerState", "0x2e,0x015f,3,pix SystemAction LightestSystemState Flags"}, {"0x2e.0x015f", "NtSetSystemPowerState"}, {"NtSetSystemTime", "0x2e,0x0160,2,pp SystemTime PreviousTime"}, {"0x2e.0x0160", "NtSetSystemTime"}, {"NtSetThreadExecutionState", "0x2e,0x0161,2,xp NewFlags PreviousFlags"}, {"0x2e.0x0161", "NtSetThreadExecutionState"}, {"NtSetTimer", "0x2e,0x0162,7,ipppiip TimerHandle DueTime TimerApcRoutine TimerContext ResumeTimer Period PreviousState"}, {"0x2e.0x0162", "NtSetTimer"}, {"NtSetTimerEx", "0x2e,0x0163,4,iipi TimerHandle TimerSetInformationClass TimerSetInformation TimerSetInformationLength"}, {"0x2e.0x0163", "NtSetTimerEx"}, {"NtSetTimerResolution", "0x2e,0x0164,3,iip DesiredTime SetResolution ActualTime"}, {"0x2e.0x0164", "NtSetTimerResolution"}, {"NtSetUuidSeed", "0x2e,0x0165,1,p Seed"}, {"0x2e.0x0165", "NtSetUuidSeed"}, {"NtSetValueKey", "0x2e,0x0166,6,ipixpi KeyHandle ValueName TitleIndex Type Data DataSize"}, {"0x2e.0x0166", "NtSetValueKey"}, {"NtSetVolumeInformationFile", "0x2e,0x0167,5,ippii FileHandle IoStatusBlock FsInformation Length FsInformationClass"}, {"0x2e.0x0167", "NtSetVolumeInformationFile"}, {"NtShutdownSystem", "0x2e,0x0168,1,i Action"}, {"0x2e.0x0168", "NtShutdownSystem"}, {"NtShutdownWorkerFactory", "0x2e,0x0169,2,ip WorkerFactoryHandle PendingWorkerCount"}, {"0x2e.0x0169", "NtShutdownWorkerFactory"}, {"NtSignalAndWaitForSingleObject", "0x2e,0x016a,4,iiip SignalHandle WaitHandle Alertable Timeout"}, {"0x2e.0x016a", "NtSignalAndWaitForSingleObject"}, {"NtSinglePhaseReject", "0x2e,0x016b,2,ip EnlistmentHandle TmVirtualClock"}, {"0x2e.0x016b", "NtSinglePhaseReject"}, {"NtStartProfile", "0x2e,0x016c,1,i ProfileHandle"}, {"0x2e.0x016c", "NtStartProfile"}, {"NtStopProfile", "0x2e,0x016d,1,i ProfileHandle"}, {"0x2e.0x016d", "NtStopProfile"}, {"NtSuspendProcess", "0x2e,0x016e,1,i ProcessHandle"}, {"0x2e.0x016e", "NtSuspendProcess"}, {"NtSuspendThread", "0x2e,0x016f,2,ip ThreadHandle PreviousSuspendCount"}, {"0x2e.0x016f", "NtSuspendThread"}, {"NtSystemDebugControl", "0x2e,0x0170,6,xpipip Command InputBuffer InputBufferLength OutputBuffer OutputBufferLength ReturnLength"}, {"0x2e.0x0170", "NtSystemDebugControl"}, {"NtTerminateJobObject", "0x2e,0x0171,2,ii JobHandle ExitStatus"}, {"0x2e.0x0171", "NtTerminateJobObject"}, {"NtTerminateProcess", "0x2e,0x0172,2,ii ProcessHandle ExitStatus"}, {"0x2e.0x0172", "NtTerminateProcess"}, {"NtTerminateThread", "0x2e,0x0173,2,ii ThreadHandle ExitStatus"}, {"0x2e.0x0173", "NtTerminateThread"}, {"NtTestAlert", "0x2e,0x0174,1,i VOID"}, {"0x2e.0x0174", "NtTestAlert"}, {"NtThawRegistry", "0x2e,0x0175,1,i VOID"}, {"0x2e.0x0175", "NtThawRegistry"}, {"NtThawTransactions", "0x2e,0x0176,1,i VOID"}, {"0x2e.0x0176", "NtThawTransactions"}, {"NtTraceControl", "0x2e,0x0177,6,ipipip FunctionCode InputBuffer InputBufferLength OutputBuffer OutputBufferLength ReturnLength"}, {"0x2e.0x0177", "NtTraceControl"}, {"NtTraceEvent", "0x2e,0x0178,4,ixip TraceHandle Flags FieldSize Fields"}, {"0x2e.0x0178", "NtTraceEvent"}, {"NtTranslateFilePath", "0x2e,0x0179,4,pxpp InputFilePath OutputType OutputFilePath OutputFilePathLength"}, {"0x2e.0x0179", "NtTranslateFilePath"}, {"NtUmsThreadYield", "0x2e,0x017a,1,p SchedulerParam"}, {"0x2e.0x017a", "NtUmsThreadYield"}, {"NtUnloadDriver", "0x2e,0x017b,1,p DriverServiceName"}, {"0x2e.0x017b", "NtUnloadDriver"}, {"NtUnloadKey", "0x2e,0x017c,1,p TargetKey"}, {"0x2e.0x017c", "NtUnloadKey"}, {"NtUnloadKey2", "0x2e,0x017d,2,px TargetKey Flags"}, {"0x2e.0x017d", "NtUnloadKey2"}, {"NtUnloadKeyEx", "0x2e,0x017e,2,px TargetKey Event"}, {"0x2e.0x017e", "NtUnloadKeyEx"}, {"NtUnlockFile", "0x2e,0x017f,5,ipppi FileHandle IoStatusBlock ByteOffset Length Key"}, {"0x2e.0x017f", "NtUnlockFile"}, {"NtUnlockVirtualMemory", "0x2e,0x0180,4,ippx ProcessHandle BaseAddress RegionSize MapType"}, {"0x2e.0x0180", "NtUnlockVirtualMemory"}, {"NtUnmapViewOfSection", "0x2e,0x0181,2,ip ProcessHandle BaseAddress"}, {"0x2e.0x0181", "NtUnmapViewOfSection"}, {"NtUserActivateKeyboardLayout", "0x2e,0x113a,2,ix hKL Flags"}, {"0x2e.0x113a", "NtUserActivateKeyboardLayout"}, {"NtUserAddClipboardFormatListener", "0x2e,0x113b,1,i arg0"}, {"0x2e.0x113b", "NtUserAddClipboardFormatListener"}, {"NtUserAlterWindowStyle", "0x2e,0x113c,3,iii hWnd Index NewValue"}, {"0x2e.0x113c", "NtUserAlterWindowStyle"}, {"NtUserAssociateInputContext", "0x2e,0x113d,3,iix hWnd hIMC dwFlags"}, {"0x2e.0x113d", "NtUserAssociateInputContext"}, {"NtUserAttachThreadInput", "0x2e,0x113e,3,iii idAttach idAttachTo fAttach"}, {"0x2e.0x113e", "NtUserAttachThreadInput"}, {"NtUserBeginPaint", "0x2e,0x113f,2,ip hWnd lPs"}, {"0x2e.0x113f", "NtUserBeginPaint"}, {"NtUserBitBltSysBmp", "0x2e,0x1140,8,iiiiiiix hdc nXDest nYDest nWidth nHeight nXSrc nYSrc dwRop"}, {"0x2e.0x1140", "NtUserBitBltSysBmp"}, {"NtUserBlockInput", "0x2e,0x1141,1,i BlockIt"}, {"0x2e.0x1141", "NtUserBlockInput"}, {"NtUserBuildHimcList", "0x2e,0x1142,4,iipp dwThreadId dwCount phList pdwCount"}, {"0x2e.0x1142", "NtUserBuildHimcList"}, {"NtUserBuildHwndList", "0x2e,0x1143,7,xiiiipp hDesktop hwndParent bChildren dwThreadId cHwnd phwndList pcHwndNeeded"}, {"0x2e.0x1143", "NtUserBuildHwndList"}, {"NtUserBuildNameList", "0x2e,0x1144,4,iipp hWinSta dwSize lpBuffer pRequiredSize"}, {"0x2e.0x1144", "NtUserBuildNameList"}, {"NtUserBuildPropList", "0x2e,0x1145,4,ipip hWnd Buffer BufferSize Count"}, {"0x2e.0x1145", "NtUserBuildPropList"}, {"NtUserCalcMenuBar", "0x2e,0x125b,5,iiiii hwnd x width y prc"}, {"0x2e.0x125b", "NtUserCalcMenuBar"}, {"NtUserCalculatePopupWindowPosition", "0x2e,0x125a,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x125a", "NtUserCalculatePopupWindowPosition"}, {"NtUserCallHwnd", "0x2e,0x1146,2,ii hWnd Routine"}, {"0x2e.0x1146", "NtUserCallHwnd"}, {"NtUserCallHwndLock", "0x2e,0x1147,2,ii hWnd Routine"}, {"0x2e.0x1147", "NtUserCallHwndLock"}, {"NtUserCallHwndOpt", "0x2e,0x1148,2,ii hWnd Routine"}, {"0x2e.0x1148", "NtUserCallHwndOpt"}, {"NtUserCallHwndParam", "0x2e,0x1149,3,iii hWnd Param Routine"}, {"0x2e.0x1149", "NtUserCallHwndParam"}, {"NtUserCallHwndParamLock", "0x2e,0x114a,3,iii hWnd Param Routine"}, {"0x2e.0x114a", "NtUserCallHwndParamLock"}, {"NtUserCallMsgFilter", "0x2e,0x114b,2,pi msg code"}, {"0x2e.0x114b", "NtUserCallMsgFilter"}, {"NtUserCallNextHookEx", "0x2e,0x114c,4,iiii Code wParam lParam Ansi"}, {"0x2e.0x114c", "NtUserCallNextHookEx"}, {"NtUserCallNoParam", "0x2e,0x114d,1,i Routine"}, {"0x2e.0x114d", "NtUserCallNoParam"}, {"NtUserCallOneParam", "0x2e,0x114e,2,ii Param Routine"}, {"0x2e.0x114e", "NtUserCallOneParam"}, {"NtUserCallTwoParam", "0x2e,0x114f,3,iii Param1 Param2 Routine"}, {"0x2e.0x114f", "NtUserCallTwoParam"}, {"NtUserChangeClipboardChain", "0x2e,0x1150,2,ii hWndRemove hWndNewNext"}, {"0x2e.0x1150", "NtUserChangeClipboardChain"}, {"NtUserChangeDisplaySettings", "0x2e,0x1151,4,pxxi lpszDeviceName lpDevMode dwflags lParam"}, {"0x2e.0x1151", "NtUserChangeDisplaySettings"}, {"NtUserChangeWindowMessageFilterEx", "0x2e,0x1291,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1291", "NtUserChangeWindowMessageFilterEx"}, {"NtUserCheckAccessForIntegrityLevel", "0x2e,0x1157,3,iii arg0 arg1 arg2"}, {"0x2e.0x1157", "NtUserCheckAccessForIntegrityLevel"}, {"NtUserCheckDesktopByThreadId", "0x2e,0x1158,1,i dwThreadId"}, {"0x2e.0x1158", "NtUserCheckDesktopByThreadId"}, {"NtUserCheckMenuItem", "0x2e,0x115a,3,iii hmenu uIDCheckItem uCheck"}, {"0x2e.0x115a", "NtUserCheckMenuItem"}, {"NtUserCheckWindowThreadDesktop", "0x2e,0x1159,3,iii hwnd dwThreadId ReturnValue"}, {"0x2e.0x1159", "NtUserCheckWindowThreadDesktop"}, {"NtUserChildWindowFromPointEx", "0x2e,0x115b,4,iiix Parent x y Flags"}, {"0x2e.0x115b", "NtUserChildWindowFromPointEx"}, {"NtUserClipCursor", "0x2e,0x115c,1,p lpRect"}, {"0x2e.0x115c", "NtUserClipCursor"}, {"NtUserCloseClipboard", "0x2e,0x115d,1,i VOID"}, {"0x2e.0x115d", "NtUserCloseClipboard"}, {"NtUserCloseDesktop", "0x2e,0x115e,1,x hDesktop"}, {"0x2e.0x115e", "NtUserCloseDesktop"}, {"NtUserCloseWindowStation", "0x2e,0x115f,1,i hWinSta"}, {"0x2e.0x115f", "NtUserCloseWindowStation"}, {"NtUserConsoleControl", "0x2e,0x1160,3,iii ConsoleCtrl ConsoleCtrlInfo ConsoleCtrlInfoLength"}, {"0x2e.0x1160", "NtUserConsoleControl"}, {"NtUserConvertMemPlugin", "0x2e,0x1161,2,ii arg0 arg1"}, {"0x2e.0x1161", "NtUserConvertMemPlugin"}, {"NtUserCopyAcceleratorTable", "0x2e,0x1162,3,iii Table Entries EntriesCount"}, {"0x2e.0x1162", "NtUserCopyAcceleratorTable"}, {"NtUserCountClipboardFormats", "0x2e,0x1163,1,i VOID"}, {"0x2e.0x1163", "NtUserCountClipboardFormats"}, {"NtUserCreateAcceleratorTable", "0x2e,0x1164,2,ii Entries EntriesCount"}, {"0x2e.0x1164", "NtUserCreateAcceleratorTable"}, {"NtUserCreateCaret", "0x2e,0x1165,4,iiii hWnd hBitmap nWidth nHeight"}, {"0x2e.0x1165", "NtUserCreateCaret"}, {"NtUserCreateDesktopEx", "0x2e,0x1166,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x1166", "NtUserCreateDesktopEx"}, {"NtUserCreateInputContext", "0x2e,0x1167,1,i dwClientImcData"}, {"0x2e.0x1167", "NtUserCreateInputContext"}, {"NtUserCreateLocalMemPlugin", "0x2e,0x1168,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1168", "NtUserCreateLocalMemPlugin"}, {"NtUserCreateWindowEx", "0x2e,0x1169,15,ipppiiiiiiiiixp dwExStyle plstrClassName plstrClsVersion plstrWindowName dwStyle x y nWidth nHeight hWndParent hMenu hInstance lpParam dwFlags acbiBuffer"}, {"0x2e.0x1169", "NtUserCreateWindowEx"}, {"NtUserCreateWindowStation", "0x2e,0x116a,7,pxiiiii ObjectAttributes dwDesiredAccess Unknown2 Unknown3 Unknown4 Unknown5 Unknown6"}, {"0x2e.0x116a", "NtUserCreateWindowStation"}, {"NtUserCtxDisplayIOCtl", "0x2e,0x127b,3,iii dwUnknown1 dwUnknown2 dwUnknown3"}, {"0x2e.0x127b", "NtUserCtxDisplayIOCtl"}, {"NtUserDdeInitialize", "0x2e,0x116b,5,iiiii Unknown0 Unknown1 Unknown2 Unknown3 Unknown4"}, {"0x2e.0x116b", "NtUserDdeInitialize"}, {"NtUserDefSetText", "0x2e,0x116d,2,ip WindowHandle WindowText"}, {"0x2e.0x116d", "NtUserDefSetText"}, {"NtUserDeferWindowPos", "0x2e,0x116c,8,iiiiiiix WinPosInfo Wnd WndInsertAfter x y cx cy Flags"}, {"0x2e.0x116c", "NtUserDeferWindowPos"}, {"NtUserDeleteMenu", "0x2e,0x116e,3,iix hMenu uPosition uFlags"}, {"0x2e.0x116e", "NtUserDeleteMenu"}, {"NtUserDestroyAcceleratorTable", "0x2e,0x116f,1,i Table"}, {"0x2e.0x116f", "NtUserDestroyAcceleratorTable"}, {"NtUserDestroyCursor", "0x2e,0x1170,2,ii Handle bForce"}, {"0x2e.0x1170", "NtUserDestroyCursor"}, {"NtUserDestroyInputContext", "0x2e,0x1171,1,i hIMC"}, {"0x2e.0x1171", "NtUserDestroyInputContext"}, {"NtUserDestroyMenu", "0x2e,0x1172,1,i hMenu"}, {"0x2e.0x1172", "NtUserDestroyMenu"}, {"NtUserDestroyWindow", "0x2e,0x1173,1,i Wnd"}, {"0x2e.0x1173", "NtUserDestroyWindow"}, {"NtUserDisableThreadIme", "0x2e,0x1174,1,i dwThreadID"}, {"0x2e.0x1174", "NtUserDisableThreadIme"}, {"NtUserDispatchMessage", "0x2e,0x1175,1,p pMsg"}, {"0x2e.0x1175", "NtUserDispatchMessage"}, {"NtUserDisplayConfigGetDeviceInfo", "0x2e,0x1155,1,i arg0"}, {"0x2e.0x1155", "NtUserDisplayConfigGetDeviceInfo"}, {"NtUserDisplayConfigSetDeviceInfo", "0x2e,0x1156,1,i arg0"}, {"0x2e.0x1156", "NtUserDisplayConfigSetDeviceInfo"}, {"NtUserDoSoundConnect", "0x2e,0x1176,0,"}, {"0x2e.0x1176", "NtUserDoSoundConnect"}, {"NtUserDoSoundDisconnect", "0x2e,0x1177,0,"}, {"0x2e.0x1177", "NtUserDoSoundDisconnect"}, {"NtUserDragDetect", "0x2e,0x1178,2,ip hWnd pt"}, {"0x2e.0x1178", "NtUserDragDetect"}, {"NtUserDragObject", "0x2e,0x1179,5,iiiii hwnd1 hwnd2 u1 dw1 hc1"}, {"0x2e.0x1179", "NtUserDragObject"}, {"NtUserDrawAnimatedRects", "0x2e,0x117a,4,iipp hwnd idAni lprcFrom lprcTo"}, {"0x2e.0x117a", "NtUserDrawAnimatedRects"}, {"NtUserDrawCaption", "0x2e,0x117b,4,iiix hWnd hDc lpRc uFlags"}, {"0x2e.0x117b", "NtUserDrawCaption"}, {"NtUserDrawCaptionTemp", "0x2e,0x117c,7,iiiiiix hWnd hDC lpRc hFont hIcon str uFlags"}, {"0x2e.0x117c", "NtUserDrawCaptionTemp"}, {"NtUserDrawIconEx", "0x2e,0x117d,11,iixiiiiixip hdc xLeft yTop hIcon cxWidth cyWidth istepIfAniCur hbrFlickerFreeDraw diFlags bMetaHDC pDIXData"}, {"0x2e.0x117d", "NtUserDrawIconEx"}, {"NtUserDrawMenuBarTemp", "0x2e,0x117e,5,iipii hWnd hDC hRect hMenu hFont"}, {"0x2e.0x117e", "NtUserDrawMenuBarTemp"}, {"NtUserDwmStartRedirection", "0x2e,0x127f,1,i arg0"}, {"0x2e.0x127f", "NtUserDwmStartRedirection"}, {"NtUserDwmStopRedirection", "0x2e,0x1280,0,"}, {"0x2e.0x1280", "NtUserDwmStopRedirection"}, {"NtUserEmptyClipboard", "0x2e,0x117f,1,i VOID"}, {"0x2e.0x117f", "NtUserEmptyClipboard"}, {"NtUserEnableMenuItem", "0x2e,0x1180,3,iii hMenu uIDEnableItem uEnable"}, {"0x2e.0x1180", "NtUserEnableMenuItem"}, {"NtUserEnableScrollBar", "0x2e,0x1181,3,ixi hWnd wSBflags wArrows"}, {"0x2e.0x1181", "NtUserEnableScrollBar"}, {"NtUserEndDeferWindowPosEx", "0x2e,0x1182,2,ii WinPosInfo bAsync"}, {"0x2e.0x1182", "NtUserEndDeferWindowPosEx"}, {"NtUserEndMenu", "0x2e,0x1183,1,i VOID"}, {"0x2e.0x1183", "NtUserEndMenu"}, {"NtUserEndPaint", "0x2e,0x1184,2,ip hWnd lPs"}, {"0x2e.0x1184", "NtUserEndPaint"}, {"NtUserEndTouchOperation", "0x2e,0x128f,1,i arg0"}, {"0x2e.0x128f", "NtUserEndTouchOperation"}, {"NtUserEnumDisplayDevices", "0x2e,0x1185,4,pipx lpDevice iDevNum lpDisplayDevice dwFlags"}, {"0x2e.0x1185", "NtUserEnumDisplayDevices"}, {"NtUserEnumDisplayMonitors", "0x2e,0x1186,5,iipii hDC pRect hMonitorList monitorRectList listSize"}, {"0x2e.0x1186", "NtUserEnumDisplayMonitors"}, {"NtUserEnumDisplaySettings", "0x2e,0x1187,4,pxxx lpszDeviceName iModeNum lpDevMode dwFlags"}, {"0x2e.0x1187", "NtUserEnumDisplaySettings"}, {"NtUserEvent", "0x2e,0x1188,1,i Unknown0"}, {"0x2e.0x1188", "NtUserEvent"}, {"NtUserExcludeUpdateRgn", "0x2e,0x1189,2,ii hDC hWnd"}, {"0x2e.0x1189", "NtUserExcludeUpdateRgn"}, {"NtUserFillWindow", "0x2e,0x118a,4,iiii hWndPaint hWndPaint1 hDC hBrush"}, {"0x2e.0x118a", "NtUserFillWindow"}, {"NtUserFindExistingCursorIcon", "0x2e,0x118b,3,ppp pustrModule pustrRsrc param"}, {"0x2e.0x118b", "NtUserFindExistingCursorIcon"}, {"NtUserFindWindowEx", "0x2e,0x118c,5,iippi hwndParent hwndChildAfter ucClassName ucWindowName dwUnknown"}, {"0x2e.0x118c", "NtUserFindWindowEx"}, {"NtUserFlashWindowEx", "0x2e,0x118d,1,i pfwi"}, {"0x2e.0x118d", "NtUserFlashWindowEx"}, {"NtUserFrostCrashedWindow", "0x2e,0x118e,2,ii arg0 arg1"}, {"0x2e.0x118e", "NtUserFrostCrashedWindow"}, {"NtUserGetAltTabInfo", "0x2e,0x118f,6,iipiii hwnd iItem pati pszItemText cchItemText Ansi"}, {"0x2e.0x118f", "NtUserGetAltTabInfo"}, {"NtUserGetAncestor", "0x2e,0x1190,2,ix hWnd uType"}, {"0x2e.0x1190", "NtUserGetAncestor"}, {"NtUserGetAppImeLevel", "0x2e,0x1191,1,i hWnd"}, {"0x2e.0x1191", "NtUserGetAppImeLevel"}, {"NtUserGetAsyncKeyState", "0x2e,0x1192,1,i Key"}, {"0x2e.0x1192", "NtUserGetAsyncKeyState"}, {"NtUserGetAtomName", "0x2e,0x1193,2,ii arg0 arg1"}, {"0x2e.0x1193", "NtUserGetAtomName"}, {"NtUserGetCPD", "0x2e,0x11a1,3,ixi hWnd Flags Proc"}, {"0x2e.0x11a1", "NtUserGetCPD"}, {"NtUserGetCaretBlinkTime", "0x2e,0x1194,1,i VOID"}, {"0x2e.0x1194", "NtUserGetCaretBlinkTime"}, {"NtUserGetCaretPos", "0x2e,0x1195,1,i lpPoint"}, {"0x2e.0x1195", "NtUserGetCaretPos"}, {"NtUserGetClassInfoEx", "0x2e,0x1196,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x1196", "NtUserGetClassInfoEx"}, {"NtUserGetClassName", "0x2e,0x1197,3,iip hWnd Real ClassName"}, {"0x2e.0x1197", "NtUserGetClassName"}, {"NtUserGetClipCursor", "0x2e,0x119d,1,p lpRect"}, {"0x2e.0x119d", "NtUserGetClipCursor"}, {"NtUserGetClipboardData", "0x2e,0x1198,2,ip fmt pgcd"}, {"0x2e.0x1198", "NtUserGetClipboardData"}, {"NtUserGetClipboardFormatName", "0x2e,0x1199,3,iii uFormat lpszFormatName cchMaxCount"}, {"0x2e.0x1199", "NtUserGetClipboardFormatName"}, {"NtUserGetClipboardOwner", "0x2e,0x119a,1,i VOID"}, {"0x2e.0x119a", "NtUserGetClipboardOwner"}, {"NtUserGetClipboardSequenceNumber", "0x2e,0x119b,1,i VOID"}, {"0x2e.0x119b", "NtUserGetClipboardSequenceNumber"}, {"NtUserGetClipboardViewer", "0x2e,0x119c,1,i VOID"}, {"0x2e.0x119c", "NtUserGetClipboardViewer"}, {"NtUserGetComboBoxInfo", "0x2e,0x119e,2,ip hWnd pcbi"}, {"0x2e.0x119e", "NtUserGetComboBoxInfo"}, {"NtUserGetControlBrush", "0x2e,0x119f,3,iix hwnd hdc ctlType"}, {"0x2e.0x119f", "NtUserGetControlBrush"}, {"NtUserGetControlColor", "0x2e,0x11a0,4,iiii hwndParent hwnd hdc CtlMsg"}, {"0x2e.0x11a0", "NtUserGetControlColor"}, {"NtUserGetCursorFrameInfo", "0x2e,0x11a2,4,iipp hCursor istep rate_jiffies num_steps"}, {"0x2e.0x11a2", "NtUserGetCursorFrameInfo"}, {"NtUserGetCursorInfo", "0x2e,0x11a3,1,p pci"}, {"0x2e.0x11a3", "NtUserGetCursorInfo"}, {"NtUserGetDC", "0x2e,0x11a4,1,i hWnd"}, {"0x2e.0x11a4", "NtUserGetDC"}, {"NtUserGetDCEx", "0x2e,0x11a5,3,iix hWnd hRegion Flags"}, {"0x2e.0x11a5", "NtUserGetDCEx"}, {"NtUserGetDisplayConfigBufferSizes", "0x2e,0x1152,3,iii arg0 arg1 arg2"}, {"0x2e.0x1152", "NtUserGetDisplayConfigBufferSizes"}, {"NtUserGetDoubleClickTime", "0x2e,0x11a6,1,i VOID"}, {"0x2e.0x11a6", "NtUserGetDoubleClickTime"}, {"NtUserGetForegroundWindow", "0x2e,0x11a7,1,i VOID"}, {"0x2e.0x11a7", "NtUserGetForegroundWindow"}, {"NtUserGetGUIThreadInfo", "0x2e,0x11a9,2,ii idThread lpgui"}, {"0x2e.0x11a9", "NtUserGetGUIThreadInfo"}, {"NtUserGetGestureConfig", "0x2e,0x1297,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x1297", "NtUserGetGestureConfig"}, {"NtUserGetGestureExtArgs", "0x2e,0x1294,3,iii arg0 arg1 arg2"}, {"0x2e.0x1294", "NtUserGetGestureExtArgs"}, {"NtUserGetGestureInfo", "0x2e,0x1293,2,ii arg0 arg1"}, {"0x2e.0x1293", "NtUserGetGestureInfo"}, {"NtUserGetGuiResources", "0x2e,0x11a8,2,ix hProcess uiFlags"}, {"0x2e.0x11a8", "NtUserGetGuiResources"}, {"NtUserGetIconInfo", "0x2e,0x11aa,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x11aa", "NtUserGetIconInfo"}, {"NtUserGetIconSize", "0x2e,0x11ab,4,iipp Handle istepIfAniCur plcx plcy"}, {"0x2e.0x11ab", "NtUserGetIconSize"}, {"NtUserGetImeHotKey", "0x2e,0x11ac,4,ippi dwHotKeyId lpuModifiers lpuVirtualKey lphKL"}, {"0x2e.0x11ac", "NtUserGetImeHotKey"}, {"NtUserGetImeInfoEx", "0x2e,0x11ad,2,px pImeInfoEx SearchType"}, {"0x2e.0x11ad", "NtUserGetImeInfoEx"}, {"NtUserGetInputLocaleInfo", "0x2e,0x11ae,2,ii arg0 arg1"}, {"0x2e.0x11ae", "NtUserGetInputLocaleInfo"}, {"NtUserGetInternalWindowPos", "0x2e,0x11af,3,iii hwnd rectWnd ptIcon"}, {"0x2e.0x11af", "NtUserGetInternalWindowPos"}, {"NtUserGetKeyNameText", "0x2e,0x11b3,3,iii lParam lpString nSize"}, {"0x2e.0x11b3", "NtUserGetKeyNameText"}, {"NtUserGetKeyState", "0x2e,0x11b4,1,i VirtKey"}, {"0x2e.0x11b4", "NtUserGetKeyState"}, {"NtUserGetKeyboardLayoutList", "0x2e,0x11b0,2,ip nItems pHklBuff"}, {"0x2e.0x11b0", "NtUserGetKeyboardLayoutList"}, {"NtUserGetKeyboardLayoutName", "0x2e,0x11b1,1,p pustrName"}, {"0x2e.0x11b1", "NtUserGetKeyboardLayoutName"}, {"NtUserGetKeyboardState", "0x2e,0x11b2,1,i Unknown0"}, {"0x2e.0x11b2", "NtUserGetKeyboardState"}, {"NtUserGetLayeredWindowAttributes", "0x2e,0x1269,4,ippp hwnd pcrKey pbAlpha pdwFlags"}, {"0x2e.0x1269", "NtUserGetLayeredWindowAttributes"}, {"NtUserGetListBoxInfo", "0x2e,0x11b5,1,i hWnd"}, {"0x2e.0x11b5", "NtUserGetListBoxInfo"}, {"NtUserGetMenuBarInfo", "0x2e,0x11b6,4,iiip hwnd idObject idItem pmbi"}, {"0x2e.0x11b6", "NtUserGetMenuBarInfo"}, {"NtUserGetMenuIndex", "0x2e,0x11b7,2,ii hMenu hSubMenu"}, {"0x2e.0x11b7", "NtUserGetMenuIndex"}, {"NtUserGetMenuItemRect", "0x2e,0x11b8,4,iiii hWnd hMenu uItem lprcItem"}, {"0x2e.0x11b8", "NtUserGetMenuItemRect"}, {"NtUserGetMessage", "0x2e,0x11b9,4,piii pMsg hWnd MsgFilterMin MsgFilterMax"}, {"0x2e.0x11b9", "NtUserGetMessage"}, {"NtUserGetMouseMovePointsEx", "0x2e,0x11ba,5,iiiii cbSize lppt lpptBuf nBufPoints resolution"}, {"0x2e.0x11ba", "NtUserGetMouseMovePointsEx"}, {"NtUserGetObjectInformation", "0x2e,0x11bb,5,iipip hObject nIndex pvInformation nLength nLengthNeeded"}, {"0x2e.0x11bb", "NtUserGetObjectInformation"}, {"NtUserGetOpenClipboardWindow", "0x2e,0x11bc,1,i VOID"}, {"0x2e.0x11bc", "NtUserGetOpenClipboardWindow"}, {"NtUserGetPriorityClipboardFormat", "0x2e,0x11bd,2,pi paFormatPriorityList cFormats"}, {"0x2e.0x11bd", "NtUserGetPriorityClipboardFormat"}, {"NtUserGetProcessWindowStation", "0x2e,0x11be,1,i VOID"}, {"0x2e.0x11be", "NtUserGetProcessWindowStation"}, {"NtUserGetProp", "0x2e,0x1232,2,ii arg0 arg1"}, {"0x2e.0x1232", "NtUserGetProp"}, {"NtUserGetRawInputBuffer", "0x2e,0x11bf,3,ppi pData pcbSize cbSizeHeader"}, {"0x2e.0x11bf", "NtUserGetRawInputBuffer"}, {"NtUserGetRawInputData", "0x2e,0x11c0,5,ixipi hRawInput uiCommand pData pcbSize cbSizeHeader"}, {"0x2e.0x11c0", "NtUserGetRawInputData"}, {"NtUserGetRawInputDeviceInfo", "0x2e,0x11c1,4,ixip hDevice uiCommand pData pcbSize"}, {"0x2e.0x11c1", "NtUserGetRawInputDeviceInfo"}, {"NtUserGetRawInputDeviceList", "0x2e,0x11c2,3,ppi pRawInputDeviceList puiNumDevices cbSize"}, {"0x2e.0x11c2", "NtUserGetRawInputDeviceList"}, {"NtUserGetRegisteredRawInputDevices", "0x2e,0x11c3,3,ppi pRawInputDevices puiNumDevices cbSize"}, {"0x2e.0x11c3", "NtUserGetRegisteredRawInputDevices"}, {"NtUserGetScrollBarInfo", "0x2e,0x11c4,3,iip hWnd idObject psbi"}, {"0x2e.0x11c4", "NtUserGetScrollBarInfo"}, {"NtUserGetSystemMenu", "0x2e,0x11c5,2,ii hWnd bRevert"}, {"0x2e.0x11c5", "NtUserGetSystemMenu"}, {"NtUserGetThreadDesktop", "0x2e,0x11c6,2,ix dwThreadId hConsoleDesktop"}, {"0x2e.0x11c6", "NtUserGetThreadDesktop"}, {"NtUserGetThreadState", "0x2e,0x11c7,1,i Routine"}, {"0x2e.0x11c7", "NtUserGetThreadState"}, {"NtUserGetTitleBarInfo", "0x2e,0x11c8,2,ip hwnd pti"}, {"0x2e.0x11c8", "NtUserGetTitleBarInfo"}, {"NtUserGetTopLevelWindow", "0x2e,0x11c9,1,i arg0"}, {"0x2e.0x11c9", "NtUserGetTopLevelWindow"}, {"NtUserGetTouchInputInfo", "0x2e,0x1290,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1290", "NtUserGetTouchInputInfo"}, {"NtUserGetUpdateRect", "0x2e,0x11cb,3,iii hWnd lpRect fErase"}, {"0x2e.0x11cb", "NtUserGetUpdateRect"}, {"NtUserGetUpdateRgn", "0x2e,0x11cc,3,iii hWnd hRgn bErase"}, {"0x2e.0x11cc", "NtUserGetUpdateRgn"}, {"NtUserGetUpdatedClipboardFormats", "0x2e,0x11ca,3,iii arg0 arg1 arg2"}, {"0x2e.0x11ca", "NtUserGetUpdatedClipboardFormats"}, {"NtUserGetWOWClass", "0x2e,0x11d2,2,ip hInstance ClassName"}, {"0x2e.0x11d2", "NtUserGetWOWClass"}, {"NtUserGetWindowCompositionAttribute", "0x2e,0x11ce,2,ii arg0 arg1"}, {"0x2e.0x11ce", "NtUserGetWindowCompositionAttribute"}, {"NtUserGetWindowCompositionInfo", "0x2e,0x11cd,2,ii arg0 arg1"}, {"0x2e.0x11cd", "NtUserGetWindowCompositionInfo"}, {"NtUserGetWindowDC", "0x2e,0x11cf,1,i hWnd"}, {"0x2e.0x11cf", "NtUserGetWindowDC"}, {"NtUserGetWindowDisplayAffinity", "0x2e,0x11d0,2,ii arg0 arg1"}, {"0x2e.0x11d0", "NtUserGetWindowDisplayAffinity"}, {"NtUserGetWindowMinimizeRect", "0x2e,0x1281,2,ii arg0 arg1"}, {"0x2e.0x1281", "NtUserGetWindowMinimizeRect"}, {"NtUserGetWindowPlacement", "0x2e,0x11d1,2,ip hWnd lpwndpl"}, {"0x2e.0x11d1", "NtUserGetWindowPlacement"}, {"NtUserGetWindowRgnEx", "0x2e,0x1246,3,iii arg0 arg1 arg2"}, {"0x2e.0x1246", "NtUserGetWindowRgnEx"}, {"NtUserGhostWindowFromHungWindow", "0x2e,0x11d3,1,i arg0"}, {"0x2e.0x11d3", "NtUserGhostWindowFromHungWindow"}, {"NtUserHardErrorControl", "0x2e,0x11d4,3,iii dwUnknown1 dwUnknown2 dwUnknown3"}, {"0x2e.0x11d4", "NtUserHardErrorControl"}, {"NtUserHideCaret", "0x2e,0x11d5,1,i hWnd"}, {"0x2e.0x11d5", "NtUserHideCaret"}, {"NtUserHiliteMenuItem", "0x2e,0x11d6,4,iiii hWnd hMenu uItemHilite uHilite"}, {"0x2e.0x11d6", "NtUserHiliteMenuItem"}, {"NtUserHungWindowFromGhostWindow", "0x2e,0x11d7,1,i arg0"}, {"0x2e.0x11d7", "NtUserHungWindowFromGhostWindow"}, {"NtUserHwndQueryRedirectionInfo", "0x2e,0x1337,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1337", "NtUserHwndQueryRedirectionInfo"}, {"NtUserHwndSetRedirectionInfo", "0x2e,0x1338,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1338", "NtUserHwndSetRedirectionInfo"}, {"NtUserImpersonateDdeClientWindow", "0x2e,0x11d8,2,ii hWndClient hWndServer"}, {"0x2e.0x11d8", "NtUserImpersonateDdeClientWindow"}, {"NtUserInitTask", "0x2e,0x11db,12,iiiiiiiiiiii Unknown0 Unknown1 Unknown2 Unknown3 Unknown4 Unknown5 Unknown6 Unknown7 Unknown8 Unknown9 Unknown10 Unknown11"}, {"0x2e.0x11db", "NtUserInitTask"}, {"NtUserInitialize", "0x2e,0x11d9,3,ixx dwWinVersion hPowerRequestEvent hMediaRequestEvent"}, {"0x2e.0x11d9", "NtUserInitialize"}, {"NtUserInitializeClientPfnArrays", "0x2e,0x11da,4,pppi pfnClientA pfnClientW pfnClientWorker hmodUser"}, {"0x2e.0x11da", "NtUserInitializeClientPfnArrays"}, {"NtUserInjectGesture", "0x2e,0x1292,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x1292", "NtUserInjectGesture"}, {"NtUserInternalGetWindowIcon", "0x2e,0x11dd,2,ii arg0 arg1"}, {"0x2e.0x11dd", "NtUserInternalGetWindowIcon"}, {"NtUserInternalGetWindowText", "0x2e,0x11dc,3,iii hWnd lpString nMaxCount"}, {"0x2e.0x11dc", "NtUserInternalGetWindowText"}, {"NtUserInvalidateRect", "0x2e,0x11de,3,ipi hWnd lpRect bErase"}, {"0x2e.0x11de", "NtUserInvalidateRect"}, {"NtUserInvalidateRgn", "0x2e,0x11df,3,iii hWnd hRgn bErase"}, {"0x2e.0x11df", "NtUserInvalidateRgn"}, {"NtUserIsClipboardFormatAvailable", "0x2e,0x11e0,1,i format"}, {"0x2e.0x11e0", "NtUserIsClipboardFormatAvailable"}, {"NtUserIsTopLevelWindow", "0x2e,0x11e1,1,i arg0"}, {"0x2e.0x11e1", "NtUserIsTopLevelWindow"}, {"NtUserIsTouchWindow", "0x2e,0x128d,2,ii arg0 arg1"}, {"0x2e.0x128d", "NtUserIsTouchWindow"}, {"NtUserKillTimer", "0x2e,0x11e2,2,ix hWnd uIDEvent"}, {"0x2e.0x11e2", "NtUserKillTimer"}, {"NtUserLoadKeyboardLayoutEx", "0x2e,0x11e3,7,iiiiiix hFile offTable pTables hOldKL puszKLID dwNewKL Flags"}, {"0x2e.0x11e3", "NtUserLoadKeyboardLayoutEx"}, {"NtUserLockWindowStation", "0x2e,0x11e4,1,i hWindowStation"}, {"0x2e.0x11e4", "NtUserLockWindowStation"}, {"NtUserLockWindowUpdate", "0x2e,0x11e5,1,i hWnd"}, {"0x2e.0x11e5", "NtUserLockWindowUpdate"}, {"NtUserLockWorkStation", "0x2e,0x11e6,1,i VOID"}, {"0x2e.0x11e6", "NtUserLockWorkStation"}, {"NtUserLogicalToPhysicalPoint", "0x2e,0x11e7,2,ii arg0 arg1"}, {"0x2e.0x11e7", "NtUserLogicalToPhysicalPoint"}, {"NtUserMNDragLeave", "0x2e,0x11ec,1,i VOID"}, {"0x2e.0x11ec", "NtUserMNDragLeave"}, {"NtUserMNDragOver", "0x2e,0x11ed,2,ii Unknown0 Unknown1"}, {"0x2e.0x11ed", "NtUserMNDragOver"}, {"NtUserMagControl", "0x2e,0x1334,2,ii arg0 arg1"}, {"0x2e.0x1334", "NtUserMagControl"}, {"NtUserMagGetContextInformation", "0x2e,0x1336,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1336", "NtUserMagGetContextInformation"}, {"NtUserMagSetContextInformation", "0x2e,0x1335,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1335", "NtUserMagSetContextInformation"}, {"NtUserManageGesturePluginWindow", "0x2e,0x1295,2,ii arg0 arg1"}, {"0x2e.0x1295", "NtUserManageGesturePluginWindow"}, {"NtUserMapVirtualKeyEx", "0x2e,0x11e8,4,ixii keyCode transType keyboardId dwhkl"}, {"0x2e.0x11e8", "NtUserMapVirtualKeyEx"}, {"NtUserMenuItemFromPoint", "0x2e,0x11e9,4,iiii hWnd hMenu X Y"}, {"0x2e.0x11e9", "NtUserMenuItemFromPoint"}, {"NtUserMessageCall", "0x2e,0x11ea,7,ipiiixi hWnd Msg wParam lParam ResultInfo dwType Ansi"}, {"0x2e.0x11ea", "NtUserMessageCall"}, {"NtUserMinMaximize", "0x2e,0x11eb,3,ixi hWnd cmd Hide"}, {"0x2e.0x11eb", "NtUserMinMaximize"}, {"NtUserModifyUserStartupInfoFlags", "0x2e,0x11ee,2,ii Unknown0 Unknown1"}, {"0x2e.0x11ee", "NtUserModifyUserStartupInfoFlags"}, {"NtUserModifyWindowTouchCapability", "0x2e,0x128c,3,iii arg0 arg1 arg2"}, {"0x2e.0x128c", "NtUserModifyWindowTouchCapability"}, {"NtUserMoveWindow", "0x2e,0x11ef,6,iiiiii hWnd X Y nWidth nHeight bRepaint"}, {"0x2e.0x11ef", "NtUserMoveWindow"}, {"NtUserNotifyIMEStatus", "0x2e,0x11f0,3,ixi hwnd fOpen dwConversion"}, {"0x2e.0x11f0", "NtUserNotifyIMEStatus"}, {"NtUserNotifyProcessCreate", "0x2e,0x11f1,4,iiix NewProcessId ParentThreadId dwUnknown CreateFlags"}, {"0x2e.0x11f1", "NtUserNotifyProcessCreate"}, {"NtUserNotifyWinEvent", "0x2e,0x11f2,4,xiii Event hWnd idObject idChild"}, {"0x2e.0x11f2", "NtUserNotifyWinEvent"}, {"NtUserOpenClipboard", "0x2e,0x11f3,2,ii hWnd Unknown1"}, {"0x2e.0x11f3", "NtUserOpenClipboard"}, {"NtUserOpenDesktop", "0x2e,0x11f4,3,pxx ObjectAttributes dwFlags dwDesiredAccess"}, {"0x2e.0x11f4", "NtUserOpenDesktop"}, {"NtUserOpenInputDesktop", "0x2e,0x11f5,3,xix dwFlags fInherit dwDesiredAccess"}, {"0x2e.0x11f5", "NtUserOpenInputDesktop"}, {"NtUserOpenThreadDesktop", "0x2e,0x11f6,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x11f6", "NtUserOpenThreadDesktop"}, {"NtUserOpenWindowStation", "0x2e,0x11f7,2,px ObjectAttributes dwDesiredAccess"}, {"0x2e.0x11f7", "NtUserOpenWindowStation"}, {"NtUserPaintDesktop", "0x2e,0x11f8,1,i hDC"}, {"0x2e.0x11f8", "NtUserPaintDesktop"}, {"NtUserPaintMenuBar", "0x2e,0x125c,6,iiiixi hWnd hDC left right top bActive"}, {"0x2e.0x125c", "NtUserPaintMenuBar"}, {"NtUserPaintMonitor", "0x2e,0x11f9,3,iii arg0 arg1 arg2"}, {"0x2e.0x11f9", "NtUserPaintMonitor"}, {"NtUserPeekMessage", "0x2e,0x11fa,5,piiii pMsg hWnd MsgFilterMin MsgFilterMax RemoveMsg"}, {"0x2e.0x11fa", "NtUserPeekMessage"}, {"NtUserPhysicalToLogicalPoint", "0x2e,0x11fb,2,ii arg0 arg1"}, {"0x2e.0x11fb", "NtUserPhysicalToLogicalPoint"}, {"NtUserPostMessage", "0x2e,0x11fc,4,ipii hWnd Msg wParam lParam"}, {"0x2e.0x11fc", "NtUserPostMessage"}, {"NtUserPostThreadMessage", "0x2e,0x11fd,4,ipii idThread Msg wParam lParam"}, {"0x2e.0x11fd", "NtUserPostThreadMessage"}, {"NtUserPrintWindow", "0x2e,0x11fe,3,iix hwnd hdcBlt nFlags"}, {"0x2e.0x11fe", "NtUserPrintWindow"}, {"NtUserProcessConnect", "0x2e,0x11ff,3,iii ProcessHandle pUserConnect Size"}, {"0x2e.0x11ff", "NtUserProcessConnect"}, {"NtUserQueryDisplayConfig", "0x2e,0x1154,6,iiiiii arg0 arg1 arg2 arg3 arg4 arg5"}, {"0x2e.0x1154", "NtUserQueryDisplayConfig"}, {"NtUserQueryInformationThread", "0x2e,0x1200,4,iiii ThreadHandle ThreadInformationClass ThreadInformation ThreadInformationLength"}, {"0x2e.0x1200", "NtUserQueryInformationThread"}, {"NtUserQueryInputContext", "0x2e,0x1201,2,ix hIMC dwType"}, {"0x2e.0x1201", "NtUserQueryInputContext"}, {"NtUserQuerySendMessage", "0x2e,0x1202,1,i Unknown0"}, {"0x2e.0x1202", "NtUserQuerySendMessage"}, {"NtUserQueryWindow", "0x2e,0x1203,2,ii hWnd Index"}, {"0x2e.0x1203", "NtUserQueryWindow"}, {"NtUserRealChildWindowFromPoint", "0x2e,0x1204,3,iii Parent x y"}, {"0x2e.0x1204", "NtUserRealChildWindowFromPoint"}, {"NtUserRealInternalGetMessage", "0x2e,0x1205,6,iiiiii lpMsg hWnd wMsgFilterMin wMsgFilterMax wRemoveMsg bGMSG"}, {"0x2e.0x1205", "NtUserRealInternalGetMessage"}, {"NtUserRealWaitMessageEx", "0x2e,0x1206,2,xi dwWakeMask uTimeout"}, {"0x2e.0x1206", "NtUserRealWaitMessageEx"}, {"NtUserRedrawWindow", "0x2e,0x1207,4,ipix hWnd lprcUpdate hrgnUpdate flags"}, {"0x2e.0x1207", "NtUserRedrawWindow"}, {"NtUserRegisterClassExWOW", "0x2e,0x1208,7,ppppixi lpwcx pustrClassName pustrCVersion pClassMenuName fnID Flags pWow"}, {"0x2e.0x1208", "NtUserRegisterClassExWOW"}, {"NtUserRegisterErrorReportingDialog", "0x2e,0x1209,2,ii arg0 arg1"}, {"0x2e.0x1209", "NtUserRegisterErrorReportingDialog"}, {"NtUserRegisterHotKey", "0x2e,0x120b,4,iiii hWnd id fsModifiers vk"}, {"0x2e.0x120b", "NtUserRegisterHotKey"}, {"NtUserRegisterRawInputDevices", "0x2e,0x120c,3,iii pRawInputDevices uiNumDevices cbSize"}, {"0x2e.0x120c", "NtUserRegisterRawInputDevices"}, {"NtUserRegisterServicesProcess", "0x2e,0x120d,1,i arg0"}, {"0x2e.0x120d", "NtUserRegisterServicesProcess"}, {"NtUserRegisterSessionPort", "0x2e,0x127c,2,ii arg0 arg1"}, {"0x2e.0x127c", "NtUserRegisterSessionPort"}, {"NtUserRegisterTasklist", "0x2e,0x120e,1,i Unknown0"}, {"0x2e.0x120e", "NtUserRegisterTasklist"}, {"NtUserRegisterUserApiHook", "0x2e,0x120a,4,ppii m_dllname1 m_funname1 dwUnknown3 dwUnknown4"}, {"0x2e.0x120a", "NtUserRegisterUserApiHook"}, {"NtUserRegisterWindowMessage", "0x2e,0x120f,1,p MessageName"}, {"0x2e.0x120f", "NtUserRegisterWindowMessage"}, {"NtUserRemoteConnect", "0x2e,0x1277,3,iii dwUnknown1 dwUnknown2 dwUnknown3"}, {"0x2e.0x1277", "NtUserRemoteConnect"}, {"NtUserRemoteRedrawRectangle", "0x2e,0x1278,4,iiii dwUnknown1 dwUnknown2 dwUnknown3 dwUnknown4"}, {"0x2e.0x1278", "NtUserRemoteRedrawRectangle"}, {"NtUserRemoteRedrawScreen", "0x2e,0x1279,1,i VOID"}, {"0x2e.0x1279", "NtUserRemoteRedrawScreen"}, {"NtUserRemoteStopScreenUpdates", "0x2e,0x127a,1,i VOID"}, {"0x2e.0x127a", "NtUserRemoteStopScreenUpdates"}, {"NtUserRemoveClipboardFormatListener", "0x2e,0x1210,1,i arg0"}, {"0x2e.0x1210", "NtUserRemoveClipboardFormatListener"}, {"NtUserRemoveMenu", "0x2e,0x1211,3,iix hMenu uPosition uFlags"}, {"0x2e.0x1211", "NtUserRemoveMenu"}, {"NtUserRemoveProp", "0x2e,0x1212,2,ii hWnd Atom"}, {"0x2e.0x1212", "NtUserRemoveProp"}, {"NtUserResolveDesktopForWOW", "0x2e,0x1213,1,i Unknown0"}, {"0x2e.0x1213", "NtUserResolveDesktopForWOW"}, {"NtUserSBGetParms", "0x2e,0x1214,4,iipi hwnd fnBar pSBData lpsi"}, {"0x2e.0x1214", "NtUserSBGetParms"}, {"NtUserScrollDC", "0x2e,0x1215,7,iiippii hDC dx dy lprcScroll lprcClip hrgnUpdate lprcUpdate"}, {"0x2e.0x1215", "NtUserScrollDC"}, {"NtUserScrollWindowEx", "0x2e,0x1216,8,iiippiix hWnd dx dy rect clipRect hrgnUpdate rcUpdate flags"}, {"0x2e.0x1216", "NtUserScrollWindowEx"}, {"NtUserSelectPalette", "0x2e,0x1217,3,iii hDC hpal ForceBackground"}, {"0x2e.0x1217", "NtUserSelectPalette"}, {"NtUserSendInput", "0x2e,0x1218,3,iii nInputs pInput cbSize"}, {"0x2e.0x1218", "NtUserSendInput"}, {"NtUserSendTouchInput", "0x2e,0x128e,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x128e", "NtUserSendTouchInput"}, {"NtUserSetActiveWindow", "0x2e,0x1219,1,i Wnd"}, {"0x2e.0x1219", "NtUserSetActiveWindow"}, {"NtUserSetAppImeLevel", "0x2e,0x121a,2,ii hWnd dwLevel"}, {"0x2e.0x121a", "NtUserSetAppImeLevel"}, {"NtUserSetCapture", "0x2e,0x121b,1,i Wnd"}, {"0x2e.0x121b", "NtUserSetCapture"}, {"NtUserSetChildWindowNoActivate", "0x2e,0x121c,1,i arg0"}, {"0x2e.0x121c", "NtUserSetChildWindowNoActivate"}, {"NtUserSetClassLong", "0x2e,0x121d,4,iiii hWnd Offset dwNewLong Ansi"}, {"0x2e.0x121d", "NtUserSetClassLong"}, {"NtUserSetClassWord", "0x2e,0x121e,3,iii hWnd nIndex wNewWord"}, {"0x2e.0x121e", "NtUserSetClassWord"}, {"NtUserSetClipboardData", "0x2e,0x121f,3,iip fmt hMem scd"}, {"0x2e.0x121f", "NtUserSetClipboardData"}, {"NtUserSetClipboardViewer", "0x2e,0x1220,1,i hWndNewViewer"}, {"0x2e.0x1220", "NtUserSetClipboardViewer"}, {"NtUserSetCursor", "0x2e,0x1221,1,i hCursor"}, {"0x2e.0x1221", "NtUserSetCursor"}, {"NtUserSetCursorContents", "0x2e,0x1222,2,ip Handle IconInfo"}, {"0x2e.0x1222", "NtUserSetCursorContents"}, {"NtUserSetCursorIconData", "0x2e,0x1223,4,ippp hCursor pustrModule puSrcName pCursorData"}, {"0x2e.0x1223", "NtUserSetCursorIconData"}, {"NtUserSetDisplayConfig", "0x2e,0x1153,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x1153", "NtUserSetDisplayConfig"}, {"NtUserSetFocus", "0x2e,0x1224,1,i hWnd"}, {"0x2e.0x1224", "NtUserSetFocus"}, {"NtUserSetGestureConfig", "0x2e,0x1296,5,iiiii arg0 arg1 arg2 arg3 arg4"}, {"0x2e.0x1296", "NtUserSetGestureConfig"}, {"NtUserSetImeHotKey", "0x2e,0x1225,5,iiiii dwHotKeyId uModifiers uVirtualKey hKL dwAction"}, {"0x2e.0x1225", "NtUserSetImeHotKey"}, {"NtUserSetImeInfoEx", "0x2e,0x1226,1,p pImeInfoEx"}, {"0x2e.0x1226", "NtUserSetImeInfoEx"}, {"NtUserSetImeOwnerWindow", "0x2e,0x1227,2,ii hImeWnd hwndFocus"}, {"0x2e.0x1227", "NtUserSetImeOwnerWindow"}, {"NtUserSetInformationThread", "0x2e,0x1228,4,iiii ThreadHandle ThreadInformationClass ThreadInformation ThreadInformationLength"}, {"0x2e.0x1228", "NtUserSetInformationThread"}, {"NtUserSetInternalWindowPos", "0x2e,0x1229,4,ixii hwnd showCmd rect pt"}, {"0x2e.0x1229", "NtUserSetInternalWindowPos"}, {"NtUserSetKeyboardState", "0x2e,0x122a,1,i lpKeyState"}, {"0x2e.0x122a", "NtUserSetKeyboardState"}, {"NtUserSetLayeredWindowAttributes", "0x2e,0x126a,4,iiix hwnd crKey bAlpha dwFlags"}, {"0x2e.0x126a", "NtUserSetLayeredWindowAttributes"}, {"NtUserSetMenu", "0x2e,0x122b,3,iii hWnd hMenu bRepaint"}, {"0x2e.0x122b", "NtUserSetMenu"}, {"NtUserSetMenuContextHelpId", "0x2e,0x122c,2,ii hmenu dwContextHelpId"}, {"0x2e.0x122c", "NtUserSetMenuContextHelpId"}, {"NtUserSetMenuDefaultItem", "0x2e,0x122d,3,iii hMenu uItem fByPos"}, {"0x2e.0x122d", "NtUserSetMenuDefaultItem"}, {"NtUserSetMenuFlagRtoL", "0x2e,0x122e,1,i hMenu"}, {"0x2e.0x122e", "NtUserSetMenuFlagRtoL"}, {"NtUserSetMirrorRendering", "0x2e,0x1332,2,ii arg0 arg1"}, {"0x2e.0x1332", "NtUserSetMirrorRendering"}, {"NtUserSetObjectInformation", "0x2e,0x122f,4,iipi hObject nIndex pvInformation nLength"}, {"0x2e.0x122f", "NtUserSetObjectInformation"}, {"NtUserSetParent", "0x2e,0x1230,2,ii hWndChild hWndNewParent"}, {"0x2e.0x1230", "NtUserSetParent"}, {"NtUserSetProcessDPIAware", "0x2e,0x123e,0,"}, {"0x2e.0x123e", "NtUserSetProcessDPIAware"}, {"NtUserSetProcessWindowStation", "0x2e,0x1231,1,i hWindowStation"}, {"0x2e.0x1231", "NtUserSetProcessWindowStation"}, {"NtUserSetProp", "0x2e,0x1233,3,iii hWnd Atom Data"}, {"0x2e.0x1233", "NtUserSetProp"}, {"NtUserSetScrollInfo", "0x2e,0x1234,4,iiii hwnd fnBar lpsi bRedraw"}, {"0x2e.0x1234", "NtUserSetScrollInfo"}, {"NtUserSetShellWindowEx", "0x2e,0x1235,2,ii hwndShell hwndShellListView"}, {"0x2e.0x1235", "NtUserSetShellWindowEx"}, {"NtUserSetSysColors", "0x2e,0x1236,4,ippx cElements lpaElements lpaRgbValues Flags"}, {"0x2e.0x1236", "NtUserSetSysColors"}, {"NtUserSetSystemCursor", "0x2e,0x1237,2,ii hcur id"}, {"0x2e.0x1237", "NtUserSetSystemCursor"}, {"NtUserSetSystemMenu", "0x2e,0x1238,2,ii hWnd hMenu"}, {"0x2e.0x1238", "NtUserSetSystemMenu"}, {"NtUserSetSystemTimer", "0x2e,0x1239,4,ixii hWnd nIDEvent uElapse lpTimerFunc"}, {"0x2e.0x1239", "NtUserSetSystemTimer"}, {"NtUserSetThreadDesktop", "0x2e,0x123a,1,x hDesktop"}, {"0x2e.0x123a", "NtUserSetThreadDesktop"}, {"NtUserSetThreadLayoutPlugins", "0x2e,0x123b,2,ii arg0 arg1"}, {"0x2e.0x123b", "NtUserSetThreadLayoutPlugins"}, {"NtUserSetThreadState", "0x2e,0x123c,2,ii Unknown0 Unknown1"}, {"0x2e.0x123c", "NtUserSetThreadState"}, {"NtUserSetTimer", "0x2e,0x123d,4,ixii hWnd nIDEvent uElapse lpTimerFunc"}, {"0x2e.0x123d", "NtUserSetTimer"}, {"NtUserSetWinEventHook", "0x2e,0x124c,8,xxxpxiix eventMin eventMax hmodWinEventProc puString lpfnWinEventProc idProcess idThread dwflags"}, {"0x2e.0x124c", "NtUserSetWinEventHook"}, {"NtUserSetWindowCompositionAttribute", "0x2e,0x123f,2,ii arg0 arg1"}, {"0x2e.0x123f", "NtUserSetWindowCompositionAttribute"}, {"NtUserSetWindowDisplayAffinity", "0x2e,0x1240,2,ii arg0 arg1"}, {"0x2e.0x1240", "NtUserSetWindowDisplayAffinity"}, {"NtUserSetWindowFNID", "0x2e,0x1241,2,ii hWnd fnID"}, {"0x2e.0x1241", "NtUserSetWindowFNID"}, {"NtUserSetWindowLong", "0x2e,0x1242,4,iiii hWnd Index NewValue Ansi"}, {"0x2e.0x1242", "NtUserSetWindowLong"}, {"NtUserSetWindowPlacement", "0x2e,0x1243,2,ip hWnd lpwndpl"}, {"0x2e.0x1243", "NtUserSetWindowPlacement"}, {"NtUserSetWindowPos", "0x2e,0x1244,7,iiiiiix hWnd hWndInsertAfter X Y cx cy uFlags"}, {"0x2e.0x1244", "NtUserSetWindowPos"}, {"NtUserSetWindowRgn", "0x2e,0x1245,3,iii hWnd hRgn bRedraw"}, {"0x2e.0x1245", "NtUserSetWindowRgn"}, {"NtUserSetWindowRgnEx", "0x2e,0x1247,3,iii arg0 arg1 arg2"}, {"0x2e.0x1247", "NtUserSetWindowRgnEx"}, {"NtUserSetWindowStationUser", "0x2e,0x124a,4,iixi hWindowStation pluid OPTIONAL size"}, {"0x2e.0x124a", "NtUserSetWindowStationUser"}, {"NtUserSetWindowWord", "0x2e,0x124b,3,iii hWnd Index NewVal"}, {"0x2e.0x124b", "NtUserSetWindowWord"}, {"NtUserSetWindowsHookAW", "0x2e,0x1248,3,iii idHook lpfn Ansi"}, {"0x2e.0x1248", "NtUserSetWindowsHookAW"}, {"NtUserSetWindowsHookEx", "0x2e,0x1249,6,ipiiii Mod ModuleName ThreadId HookId HookProc Ansi"}, {"0x2e.0x1249", "NtUserSetWindowsHookEx"}, {"NtUserSfmDestroyLogicalSurfaceBinding", "0x2e,0x128b,1,i arg0"}, {"0x2e.0x128b", "NtUserSfmDestroyLogicalSurfaceBinding"}, {"NtUserSfmDxBindSwapChain", "0x2e,0x1282,3,iii arg0 arg1 arg2"}, {"0x2e.0x1282", "NtUserSfmDxBindSwapChain"}, {"NtUserSfmDxGetSwapChainStats", "0x2e,0x1288,2,ii arg0 arg1"}, {"0x2e.0x1288", "NtUserSfmDxGetSwapChainStats"}, {"NtUserSfmDxOpenSwapChain", "0x2e,0x1283,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x1283", "NtUserSfmDxOpenSwapChain"}, {"NtUserSfmDxQuerySwapChainBindingStatus", "0x2e,0x1286,3,iii arg0 arg1 arg2"}, {"0x2e.0x1286", "NtUserSfmDxQuerySwapChainBindingStatus"}, {"NtUserSfmDxReleaseSwapChain", "0x2e,0x1284,2,ii arg0 arg1"}, {"0x2e.0x1284", "NtUserSfmDxReleaseSwapChain"}, {"NtUserSfmDxReportPendingBindingsToDwm", "0x2e,0x1287,0,"}, {"0x2e.0x1287", "NtUserSfmDxReportPendingBindingsToDwm"}, {"NtUserSfmDxSetSwapChainBindingStatus", "0x2e,0x1285,2,ii arg0 arg1"}, {"0x2e.0x1285", "NtUserSfmDxSetSwapChainBindingStatus"}, {"NtUserSfmDxSetSwapChainStats", "0x2e,0x1289,2,ii arg0 arg1"}, {"0x2e.0x1289", "NtUserSfmDxSetSwapChainStats"}, {"NtUserSfmGetLogicalSurfaceBinding", "0x2e,0x128a,4,iiii arg0 arg1 arg2 arg3"}, {"0x2e.0x128a", "NtUserSfmGetLogicalSurfaceBinding"}, {"NtUserShowCaret", "0x2e,0x124d,1,i hWnd"}, {"0x2e.0x124d", "NtUserShowCaret"}, {"NtUserShowScrollBar", "0x2e,0x124e,3,iix hWnd wBar bShow"}, {"0x2e.0x124e", "NtUserShowScrollBar"}, {"NtUserShowSystemCursor", "0x2e,0x1333,1,i arg0"}, {"0x2e.0x1333", "NtUserShowSystemCursor"}, {"NtUserShowWindow", "0x2e,0x124f,2,ix hWnd nCmdShow"}, {"0x2e.0x124f", "NtUserShowWindow"}, {"NtUserShowWindowAsync", "0x2e,0x1250,2,ix hWnd nCmdShow"}, {"0x2e.0x1250", "NtUserShowWindowAsync"}, {"NtUserSoundSentry", "0x2e,0x1251,1,i VOID"}, {"0x2e.0x1251", "NtUserSoundSentry"}, {"NtUserSwitchDesktop", "0x2e,0x1252,1,x hDesktop"}, {"0x2e.0x1252", "NtUserSwitchDesktop"}, {"NtUserSystemParametersInfo", "0x2e,0x1253,4,iipi uiAction uiParam pvParam fWinIni"}, {"0x2e.0x1253", "NtUserSystemParametersInfo"}, {"NtUserTestForInteractiveUser", "0x2e,0x1254,1,i dwUnknown1"}, {"0x2e.0x1254", "NtUserTestForInteractiveUser"}, {"NtUserThunkedMenuInfo", "0x2e,0x1255,2,ii hMenu lpcmi"}, {"0x2e.0x1255", "NtUserThunkedMenuInfo"}, {"NtUserThunkedMenuItemInfo", "0x2e,0x1256,6,iiiiip hMenu uItem fByPosition bInsert lpmii lpszCaption"}, {"0x2e.0x1256", "NtUserThunkedMenuItemInfo"}, {"NtUserToUnicodeEx", "0x2e,0x1257,7,iipiixi wVirtKey wScanCode lpKeyState pwszBuff cchBuff wFlags dwhkl"}, {"0x2e.0x1257", "NtUserToUnicodeEx"}, {"NtUserTrackMouseEvent", "0x2e,0x1258,1,x lpEventTrack"}, {"0x2e.0x1258", "NtUserTrackMouseEvent"}, {"NtUserTrackPopupMenuEx", "0x2e,0x1259,6,ixiiii hMenu fuFlags x y hwnd lptpm"}, {"0x2e.0x1259", "NtUserTrackPopupMenuEx"}, {"NtUserTranslateAccelerator", "0x2e,0x125d,3,iii Window Table Message"}, {"0x2e.0x125d", "NtUserTranslateAccelerator"}, {"NtUserTranslateMessage", "0x2e,0x125e,2,ix lpMsg flags"}, {"0x2e.0x125e", "NtUserTranslateMessage"}, {"NtUserUnhookWinEvent", "0x2e,0x1260,1,x hWinEventHook"}, {"0x2e.0x1260", "NtUserUnhookWinEvent"}, {"NtUserUnhookWindowsHookEx", "0x2e,0x125f,1,i Hook"}, {"0x2e.0x125f", "NtUserUnhookWindowsHookEx"}, {"NtUserUnloadKeyboardLayout", "0x2e,0x1261,1,i hKl"}, {"0x2e.0x1261", "NtUserUnloadKeyboardLayout"}, {"NtUserUnlockWindowStation", "0x2e,0x1262,1,i hWindowStation"}, {"0x2e.0x1262", "NtUserUnlockWindowStation"}, {"NtUserUnregisterClass", "0x2e,0x1263,3,pip ClassNameOrAtom hInstance pClassMenuName"}, {"0x2e.0x1263", "NtUserUnregisterClass"}, {"NtUserUnregisterHotKey", "0x2e,0x1265,2,ii hWnd id"}, {"0x2e.0x1265", "NtUserUnregisterHotKey"}, {"NtUserUnregisterSessionPort", "0x2e,0x127d,0,"}, {"0x2e.0x127d", "NtUserUnregisterSessionPort"}, {"NtUserUnregisterUserApiHook", "0x2e,0x1264,1,i VOID"}, {"0x2e.0x1264", "NtUserUnregisterUserApiHook"}, {"NtUserUpdateInputContext", "0x2e,0x1266,3,ixi hIMC dwType dwValue"}, {"0x2e.0x1266", "NtUserUpdateInputContext"}, {"NtUserUpdateInstance", "0x2e,0x1267,3,iii Unknown0 Unknown1 Unknown2"}, {"0x2e.0x1267", "NtUserUpdateInstance"}, {"NtUserUpdateLayeredWindow", "0x2e,0x1268,10,iippipipxp hwnd hdcDst pptDst psize hdcSrc pptSrc crKey pblend dwFlags prcDirty"}, {"0x2e.0x1268", "NtUserUpdateLayeredWindow"}, {"NtUserUpdatePerUserSystemParameters", "0x2e,0x126b,2,ii dwReserved bEnable"}, {"0x2e.0x126b", "NtUserUpdatePerUserSystemParameters"}, {"NtUserUpdateWindowTransform", "0x2e,0x127e,3,iii arg0 arg1 arg2"}, {"0x2e.0x127e", "NtUserUpdateWindowTransform"}, {"NtUserUserPluginGrantAccess", "0x2e,0x126c,3,iii arg0 arg1 arg2"}, {"0x2e.0x126c", "NtUserUserPluginGrantAccess"}, {"NtUserValidatePluginSecure", "0x2e,0x126d,1,i arg0"}, {"0x2e.0x126d", "NtUserValidatePluginSecure"}, {"NtUserValidateRect", "0x2e,0x126e,2,ip hWnd lpRect"}, {"0x2e.0x126e", "NtUserValidateRect"}, {"NtUserValidateTimerCallback", "0x2e,0x126f,1,i lParam"}, {"0x2e.0x126f", "NtUserValidateTimerCallback"}, {"NtUserVkKeyScanEx", "0x2e,0x1270,3,iii wChar KeyboardLayout bUsehHK"}, {"0x2e.0x1270", "NtUserVkKeyScanEx"}, {"NtUserWaitForInputIdle", "0x2e,0x1271,3,iii hProcess dwMilliseconds bSharedWow"}, {"0x2e.0x1271", "NtUserWaitForInputIdle"}, {"NtUserWaitForMsgAndEvent", "0x2e,0x1272,1,i Unknown0"}, {"0x2e.0x1272", "NtUserWaitForMsgAndEvent"}, {"NtUserWaitMessage", "0x2e,0x1273,1,i VOID"}, {"0x2e.0x1273", "NtUserWaitMessage"}, {"NtUserWindowFromPhysicalPoint", "0x2e,0x1274,2,ii arg0 arg1"}, {"0x2e.0x1274", "NtUserWindowFromPhysicalPoint"}, {"NtUserWindowFromPoint", "0x2e,0x1275,2,ii X Y"}, {"0x2e.0x1275", "NtUserWindowFromPoint"}, {"NtUserYieldTask", "0x2e,0x1276,1,i VOID"}, {"0x2e.0x1276", "NtUserYieldTask"}, {"NtVdmControl", "0x2e,0x0182,2,ip Service ServiceData"}, {"0x2e.0x0182", "NtVdmControl"}, {"NtWaitForDebugEvent", "0x2e,0x0183,4,iipp DebugObjectHandle Alertable Timeout WaitStateChange"}, {"0x2e.0x0183", "NtWaitForDebugEvent"}, {"NtWaitForKeyedEvent", "0x2e,0x0184,4,xpip KeyedEventHandle KeyValue Alertable Timeout"}, {"0x2e.0x0184", "NtWaitForKeyedEvent"}, {"NtWaitForMultipleObjects", "0x2e,0x0185,5,iixip Count Handles WaitType Alertable Timeout"}, {"0x2e.0x0185", "NtWaitForMultipleObjects"}, {"NtWaitForMultipleObjects32", "0x2e,0x0186,5,iixip Count Handles WaitType Alertable Timeout"}, {"0x2e.0x0186", "NtWaitForMultipleObjects32"}, {"NtWaitForSingleObject", "0x2e,0x0187,3,iip Handle Alertable Timeout"}, {"0x2e.0x0187", "NtWaitForSingleObject"}, {"NtWaitForWorkViaWorkerFactory", "0x2e,0x0188,2,ip WorkerFactoryHandle MiniPacket"}, {"0x2e.0x0188", "NtWaitForWorkViaWorkerFactory"}, {"NtWaitHighEventPair", "0x2e,0x0189,1,x EventPairHandle"}, {"0x2e.0x0189", "NtWaitHighEventPair"}, {"NtWaitLowEventPair", "0x2e,0x018a,1,x EventPairHandle"}, {"0x2e.0x018a", "NtWaitLowEventPair"}, {"NtWorkerFactoryWorkerReady", "0x2e,0x018b,1,i WorkerFactoryHandle"}, {"0x2e.0x018b", "NtWorkerFactoryWorkerReady"}, {"NtWriteFile", "0x2e,0x018c,9,ixppppipp FileHandle Event ApcRoutine ApcContext IoStatusBlock Buffer Length ByteOffset Key"}, {"0x2e.0x018c", "NtWriteFile"}, {"NtWriteFileGather", "0x2e,0x018d,9,ixppppipp FileHandle Event ApcRoutine ApcContext IoStatusBlock SegmentArray Length ByteOffset Key"}, {"0x2e.0x018d", "NtWriteFileGather"}, {"NtWriteRequestData", "0x2e,0x018e,6,ipipip PortHandle Message DataEntryIndex Buffer BufferSize NumberOfBytesWritten"}, {"0x2e.0x018e", "NtWriteRequestData"}, {"NtWriteVirtualMemory", "0x2e,0x018f,5,ippip ProcessHandle BaseAddress Buffer NumberOfBytesToWrite NumberOfBytesWritten"}, {"0x2e.0x018f", "NtWriteVirtualMemory"}, {"NtYieldExecution", "0x2e,0x0190,1,i VOID"}, {"0x2e.0x0190", "NtYieldExecution"}, {"bInitRedirDev", "0x2e,0x10e6,0,"}, {"0x2e.0x10e6", "bInitRedirDev"}, {NULL, NULL} }; typedef int (*GperfForeachCallback)(void *user, const char *k, const char *v); int gperf_windows_x86_64_foreach(GperfForeachCallback cb, void *user) { int i = 0; while (kvs[i].name) { cb (user, kvs[i].name, kvs[i].value); i++;} return 0; } const char *gperf_windows_x86_64_get(const char *s) { int i = 0; while (kvs[i].name) { if (!strcmp (s, kvs[i].name)) return kvs[i].value; i++;} return NULL; } #define sdb_hash_c_windows_x86_64(x,y) gperf_windows_x86_64_hash(x) const unsigned int gperf_windows_x86_64_hash(const char *s) { int sum = strlen (s); while (*s) { sum += *s; s++; } return sum; } struct {const char *name;void *get;void *hash;void *foreach;} gperf_windows_x86_64 = { .name = "windows-x86-64", .get = &gperf_windows_x86_64_get, .hash = &gperf_windows_x86_64_hash, .foreach = &gperf_windows_x86_64_foreach }; #if MAIN int main () { const char *s = ((char*(*)(char*))gperf_windows_x86_64.get)("foo"); printf ("%s\n", s); } #endif