From 2f4e08da137d49cec34f37045c4af723c9a0c1ed Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Fri, 15 Nov 2024 21:42:37 +0800 Subject: [PATCH 01/37] remove cgo --- main_test.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/main_test.go b/main_test.go index 3c785d41..5a41f96e 100644 --- a/main_test.go +++ b/main_test.go @@ -23,7 +23,7 @@ func TestUpdateAppModule(t *testing.T) { stream.RunCommand("go get github.com/ddkwork/app@" + id) } -func TestUpdateSDKAndBin(t *testing.T) { +func TestUpdateSDKAndBin(t *testing.T) { //todo use abs path, don't copy bin dir to here if !stream.IsDir("bin") { return } From e4e8103512a1fd4a997a47d5fb6d61ed8cdbdc8b Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Fri, 15 Nov 2024 21:52:32 +0800 Subject: [PATCH 02/37] remove cgo --- testdata/dump_x86regFor64bit_interge_calc.ds | 35 ++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 testdata/dump_x86regFor64bit_interge_calc.ds diff --git a/testdata/dump_x86regFor64bit_interge_calc.ds b/testdata/dump_x86regFor64bit_interge_calc.ds new file mode 100644 index 00000000..657eebe3 --- /dev/null +++ b/testdata/dump_x86regFor64bit_interge_calc.ds @@ -0,0 +1,35 @@ +.connect local +load vmm + +.start path asm.exe +.sympath SRV*c:\Symbols*https://msdl.microsoft.com/download/symbol +.sym load //todo load asm.pdb +.sym reload +.sym download + +bp __allmul +log 4 args from stack +make 64bit reg +print x*y=z + +bp __alldiv +log 4 args from stack +make 64bit reg +print x/y=z + +save log to file "dump_x86regFor64bit_interge_calc.log" ? + +stop debugging +unload vmm + + + + +///////////////////// +first in get stack on debug module +.debug remote namedpipe \\.\pipe\HyperDbgDebug +.debug prepare serial 115200 com1 +u nt!IopXxxControlFile l 74f +bp nt!IopXxxControlFile +g +kq l 60 \ No newline at end of file From caae0aee6983d8faa7b5d91fb0c5d65bf5d608d7 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 17 Nov 2024 00:58:21 +0800 Subject: [PATCH 03/37] remove cgo --- .github/workflows/build.yml | 2 +- .github/workflows/pre-release.yml | 4 ++-- go.mod | 2 +- main_test.go | 2 +- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 9b4be7ad..1fdd6c13 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -31,7 +31,7 @@ jobs: - name: Set up Go uses: actions/setup-go@v3 with: - go-version: '1.23.0' + go-version: '1.23.3' - name: Install dependencies run: go mod tidy diff --git a/.github/workflows/pre-release.yml b/.github/workflows/pre-release.yml index f22a0cdd..a6f47335 100644 --- a/.github/workflows/pre-release.yml +++ b/.github/workflows/pre-release.yml @@ -27,7 +27,7 @@ jobs: - name: Setup Go uses: actions/setup-go@v4 with: - go-version: '1.23.0' + go-version: '1.23.3' - name: Install GCC on Windows run: choco install mingw @@ -64,7 +64,7 @@ jobs: - name: Setup Go uses: actions/setup-go@v4 with: - go-version: '1.23.0' + go-version: '1.23.3' - name: Install GCC on Windows run: choco install mingw diff --git a/go.mod b/go.mod index ffedac89..5fcb4879 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/ddkwork/HyperDbg -go 1.23.0 +go 1.23.3 require ( github.com/ddkwork/app v0.0.0-20241026164255-6ce9e6cb2eb3 diff --git a/main_test.go b/main_test.go index 5a41f96e..068a40ea 100644 --- a/main_test.go +++ b/main_test.go @@ -23,7 +23,7 @@ func TestUpdateAppModule(t *testing.T) { stream.RunCommand("go get github.com/ddkwork/app@" + id) } -func TestUpdateSDKAndBin(t *testing.T) { //todo use abs path, don't copy bin dir to here +func TestUpdateSDKAndBin(t *testing.T) { // todo use abs path, don't copy bin dir to here if !stream.IsDir("bin") { return } From 267928a348672a60de1a63b702be5f36b25349a5 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 24 Nov 2024 22:36:08 +0800 Subject: [PATCH 04/37] fix https://github.com/ddkwork/debuger/issues/10 --- sdk/api.go | 97 +++++++++++++++++++++++++++++++++++++++++++++++++ sdk/sdk_test.go | 79 +++++++++++++++++++++++++++++++++++++++- 2 files changed, 175 insertions(+), 1 deletion(-) create mode 100644 sdk/api.go diff --git a/sdk/api.go b/sdk/api.go new file mode 100644 index 00000000..6f94ef83 --- /dev/null +++ b/sdk/api.go @@ -0,0 +1,97 @@ +package sdk + +import "unsafe" + +type API interface { + init() + DetectVmxSupport() Boolean + ReadVendorString(arg0 *Char) + LoadVmm() Int + UnloadVmm() Int + InstallVmmDriver() Int + UninstallVmmDriver() Int + StopVmmDriver() Int + TestCommandParser(command *Char, number_of_tokens Uint32, tokens_list **Char, failed_token_num *Uint32, failed_token_position *Uint32) Boolean + TestCommandParserShowTokens(command *Char) + SetupPathForFilename(filename *Char, file_location *Char, buffer_len Uint32, check_file_existence Boolean) Boolean + RunCommand(command *Char) Int + ShowSignature() + SetTextMessageCallback(handler unsafe.Pointer) + SetTextMessageCallbackUsingSharedBuffer(handler unsafe.Pointer) unsafe.Pointer + UnsetTextMessageCallback() + ScriptReadFileAndExecuteCommandline(argc Int, argv **Char) Int + ContinuePreviousCommand() Boolean + CheckMultilineCommand(current_command *Char, reset Boolean) Boolean + SetCustomDriverPath(driver_file_path *Char, driver_name *Char) Boolean + UseDefaultDriverPath() + ConnectLocalDebugger() + ConnectRemoteDebugger(ip *Char, port *Char) Boolean + ConnectRemoteDebuggerUsingComPort(port_name *Char, baudrate Dword, pause_after_connection Boolean) Boolean + ConnectRemoteDebuggerUsingNamedPipe(named_pipe *Char, pause_after_connection Boolean) Boolean + ConnectCurrentDebuggerUsingComPort(port_name *Char, baudrate Dword) Boolean + DebugCloseRemoteDebugger() Boolean + GetKernelBase() Uint64 + ReadMemory(target_address Uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid Uint32, size Uint32, get_address_mode Boolean, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store *Byte, return_length *Uint32) Boolean + ShowMemoryOrDisassemble(style DebuggerShowMemoryStyle, address Uint64, memory_type DebuggerReadMemoryType, reading_type DebuggerReadReadingType, pid Uint32, size Uint32, dt_details PdebuggerDtCommandOptions) + WriteMemory(destination_address unsafe.Pointer, memory_type DebuggerEditMemoryType, process_id Uint32, source_address unsafe.Pointer, number_of_bytes Uint32) Boolean + ReadAllRegisters(guest_registers unsafe.Pointer, extra_registers unsafe.Pointer) Boolean + ReadTargetRegister(register_id RegsEnum, target_register *Uint64) Boolean + WriteTargetRegister(register_id RegsEnum, value Uint64) Boolean + ShowAllRegisters() Boolean + ShowTargetRegister(register_id RegsEnum) Boolean + ContinueDebuggee() + PauseDebuggee() + SetBreakpoint(address Uint64, pid Uint32, tid Uint32, core_numer Uint32) + SteppingInstrumentationStepIn() Boolean + SteppingRegularStepIn() Boolean + SteppingStepOver() Boolean + SteppingInstrumentationStepInForTracking() Boolean + SteppingStepOverForGu(last_instruction Boolean) Boolean + StartProcess(path *Wchar) Boolean + StartProcessWithArgs(path *Wchar, arguments *Wchar) Boolean + CommandGetLocalApic(local_apic PlapicPage, is_using_x2apic *Boolean) Boolean + AssembleGetLength(assembly_code *Char, start_address Uint64, length *Uint32) Boolean + Assemble(assembly_code *Char, start_address Uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size Uint32) Boolean + HwdbgScriptRunScript(script *Char, instance_filepath_to_read *Char, hardware_script_file_path_to_save *Char, initial_bram_buffer_size Uint32) Boolean + HwdbgScriptEngineWrapperTestParser(Expr *Char) + HardwareScriptInterpreterShowScriptCapabilities(InstanceInfo *HwdbgInstanceInformation) + HardwareScriptInterpreterCheckScriptBufferWithScriptCapabilities(InstanceInfo *HwdbgInstanceInformation, ScriptBuffer unsafe.Pointer, CountOfScriptSymbolChunks Uint32, NumberOfStages *Uint32, NumberOfOperands *Uint32, NumberOfOperandsImplemented *Uint32) Boolean + HardwareScriptInterpreterCompressBuffer(Buffer *Uint64, BufferLength int32, ScriptVariableLength Uint32, BramDataWidth Uint32, NewBufferSize *int32, NumberOfBytesPerChunk *int32) Boolean + HardwareScriptInterpreterConvertSymbolToHwdbgShortSymbolBuffer(InstanceInfo *HwdbgInstanceInformation, SymbolBuffer unsafe.Pointer, SymbolBufferLength int32, NumberOfStages Uint32, NewShortSymbolBuffer *unsafe.Pointer, NewBufferSize *int32) Boolean + HardwareScriptInterpreterFreeHwdbgShortSymbolBuffer(NewShortSymbolBuffer unsafe.Pointer) + ScriptEngineParse(str *byte) unsafe.Pointer + ScriptEngineSetHwdbgInstanceInfo(InstancInfo *HwdbgInstanceInformation) Boolean + PrintSymbolBuffer(SymbolBuffer unsafe.Pointer) + RemoveSymbolBuffer(SymbolBuffer unsafe.Pointer) + PrintSymbol(Symbol unsafe.Pointer) + ScriptEngineConvertNameToAddress(FunctionOrVariableName *byte, WasFound Pboolean) Uint64 + ScriptEngineLoadFileSymbol(BaseAddress Uint64, PdbFileName *byte, CustomModuleName *byte) Uint32 + ScriptEngineUnloadAllSymbols() Uint32 + ScriptEngineUnloadModuleSymbol(ModuleName *byte) Uint32 + ScriptEngineSearchSymbolForMask(SearchMask *byte) Uint32 + ScriptEngineGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *Uint32) Boolean + ScriptEngineGetDataTypeSize(TypeName *Char, TypeSize *Uint64) Boolean + ScriptEngineCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) Boolean + ScriptEngineConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) Boolean + ScriptEngineConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule Boolean) Boolean + ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength Uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) Boolean + ScriptEngineShowDataBasedOnSymbolTypes(TypeName *byte, Address Uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) Boolean + ScriptEngineSymbolAbortLoading() + ScriptEngineSetTextMessageCallback(Handler unsafe.Pointer) + SymSetTextMessageCallback(Handler unsafe.Pointer) + SymbolAbortLoading() + SymConvertNameToAddress(FunctionOrVariableName *byte, WasFound Pboolean) Uint64 + SymLoadFileSymbol(BaseAddress Uint64, PdbFileName *byte, CustomModuleName *byte) Uint32 + SymUnloadAllSymbols() Uint32 + SymUnloadModuleSymbol(ModuleName *byte) Uint32 + SymSearchSymbolForMask(SearchMask *byte) Uint32 + SymGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *Uint32) Boolean + SymGetDataTypeSize(TypeName *Char, TypeSize *Uint64) Boolean + SymCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) Boolean + SymConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) Boolean + SymConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule Boolean) Boolean + SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength Uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) Boolean + SymShowDataBasedOnSymbolTypes(TypeName *byte, Address Uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) Boolean + SymQuerySizeof(StructNameOrTypeName *byte, SizeOfField *Uint32) Boolean + SymCastingQueryForFiledsAndTypes(StructName *byte, FiledOfStructName *byte, IsStructNamePointerOrNot Pboolean, IsFiledOfStructNamePointerOrNot Pboolean, NewStructOrTypeName **byte, OffsetOfFieldFromTop *Uint32, SizeOfField *Uint32) Boolean +} diff --git a/sdk/sdk_test.go b/sdk/sdk_test.go index 3f2d5c61..2ba5ccd9 100644 --- a/sdk/sdk_test.go +++ b/sdk/sdk_test.go @@ -2,14 +2,44 @@ package sdk import ( "fmt" + "strings" "testing" "unsafe" + "github.com/ddkwork/golibrary/stream" + "github.com/ddkwork/golibrary/assert" "github.com/ddkwork/golibrary/mylog" "github.com/ebitengine/purego" ) +func TestGenInterface(t *testing.T) { + g := stream.NewGeneratedFile() + index := 0 + g.P(`package sdk`) + g.P(`import "unsafe"`) + g.P(`type API interface {`) + for _, s := range stream.ToLines("sdk.go") { + if strings.HasPrefix(s, "func ") { + s = strings.TrimPrefix(s, "func ") + if strings.Contains(s, "{") && strings.Contains(s, "}") { + before, _, found := strings.Cut(s, "{") + if found { + s = before + } + } + s = strings.TrimSuffix(s, "{") + if strings.Contains(s, "Anon") { + continue + } + index++ + g.P(s) + } + } + g.P(`}`) + stream.WriteGoFile("api.go", g.Bytes()) +} + const ( COMMUNICATION_BUFFER_SIZE = 0x100 TCP_END_OF_BUFFER_CHARS_COUNT = 4 @@ -40,9 +70,10 @@ func TestSdk(t *testing.T) { mylog.Trace("LoadVmm", LoadVmm()) // assert.True(t, Boolean2Bool(ConnectRemoteDebuggerUsingNamedPipe(StringToBytePointer("\\\\.\\pipe\\HyperDbgDebug")))) - // assert.True(t, Boolean2Bool(StartProcessWithArgs(&[]rune("path")[0], &[]rune("C:\\Windows\\SysWOW64\\notepad.exe")[0]))) + TargetFilePath = "../testdata/asm.exe" + // todo: // start debugger // read memory @@ -59,6 +90,52 @@ func TestSdk(t *testing.T) { }) } +func Test_x32dbg_GetMainModuleEntry(t *testing.T) { + //stream.RunCommand("netstat -ano | findstr :6589") + //a := New().Connect() + //defer a.Close() + //// a.Restart()//restartadmin todo 重载后服务端被关闭了，还是不方便使用,解决办法是在gui命令栏内输入 restartadmin 重启服务端，这样不用关闭调试器 + //// breakpoints := a.Breakpoints() + //// mylog.Struct("breakpoints", breakpoints) + //a.BreakpointsRemoveAll() + // + ////a.SetBreakpoint(a.GetMainModuleEntry()) + ////$+19 | E9 4E060000 | jmp | + ////$+A7 | E8 99030000 | call | main.c:69 + ////$+10B | E8 70030000 | call | main.c:101 + ////$+50B | 68 34A03800 | push asm.38A034 | 38A034:"asm1 for code3" + //singular := a.DisassemblySingular(a.MainModuleEntry() + 0x19) + //asm1 := getAddressBySingularDisassembly[uint32](singular.Assembly) + //mylog.Hex("asm1", asm1) + //end := asm1 + 0x50B + //a.SetBreakpoint(end) + //a.SetCommentNotes(end, "end trace") + // + //singular = a.DisassemblySingular(asm1 + 0xa7) + //allmul := getAddressBySingularDisassembly[uint32](singular.Assembly) + //mylog.Hex("__allmul", allmul) + //a.SetCommentNotes(allmul, "__allmul") + // + //singular = a.DisassemblySingular(asm1 + 0x10b) + //alldiv := getAddressBySingularDisassembly[uint32](singular.Assembly) + //mylog.Hex("__alldiv", alldiv) + //a.SetCommentNotes(alldiv, "__alldiv") + // + //a.SetBreakpoint(allmul) + //a.SetBreakpoint(alldiv) + // + //bigNumTrace := func() { + // switch a.Eip() { + // case allmul: + // mul(a.PeekStack(1), a.PeekStack(2), a.PeekStack(3), a.PeekStack(4)) + // case alldiv: + // div(a.PeekStack(1), a.PeekStack(2), a.PeekStack(3), a.PeekStack(4)) + // case end: // 如何把这个条件传递到RunCommandWithCount的停止条件呢？这样就不会让程序退出了 + // } + //} + //a.RunCommandWithCount("run", 400, bigNumTrace) +} + /* .connect local load vmm From d03667ccc6a914520f61d17a90bbc6c619deef14 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 24 Nov 2024 22:41:16 +0800 Subject: [PATCH 05/37] fix https://github.com/ddkwork/debuger/issues/10 --- sdk/sdk_test.go | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/sdk/sdk_test.go b/sdk/sdk_test.go index 2ba5ccd9..c57e7221 100644 --- a/sdk/sdk_test.go +++ b/sdk/sdk_test.go @@ -73,8 +73,13 @@ func TestSdk(t *testing.T) { // assert.True(t, Boolean2Bool(StartProcessWithArgs(&[]rune("path")[0], &[]rune("C:\\Windows\\SysWOW64\\notepad.exe")[0]))) TargetFilePath = "../testdata/asm.exe" + RunCommandEx("bc") //BreakpointsRemoveAll // todo: + + //this api`s arg is too more + // SetBreakpoint(address Uint64, pid Uint32, tid Uint32, core_numer Uint32) + // start debugger // read memory // read registers From 443ecd647ea3d56141f57b4b2f1ee7a30ad7ab5d Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 24 Nov 2024 22:50:26 +0800 Subject: [PATCH 06/37] fix https://github.com/ddkwork/debuger/issues/10 --- sdk/sdk_test.go | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) diff --git a/sdk/sdk_test.go b/sdk/sdk_test.go index c57e7221..58985ebc 100644 --- a/sdk/sdk_test.go +++ b/sdk/sdk_test.go @@ -74,6 +74,31 @@ func TestSdk(t *testing.T) { TargetFilePath = "../testdata/asm.exe" RunCommandEx("bc") //BreakpointsRemoveAll + //get function address from symbol name + //PrintSymbol() //? then get function address? + //$+19 | E9 4E060000 | jmp | + //$+A7 | E8 99030000 | call | main.c:69 + //$+10B | E8 70030000 | call | main.c:101 + //$+50B | 68 34A03800 | push asm.38A034 | 38A034:"asm1 for code3" + + //SetBreakpoint(_asm1) + //SetBreakpoint(__allmul) + //SetBreakpoint(__alldiv) + //SetBreakpoint(endTrace) + + //bigNumTrace := func() { + // switch a.Eip() { + // case allmul: + // mul(a.PeekStack(1), a.PeekStack(2), a.PeekStack(3), a.PeekStack(4)) + // case alldiv: + // div(a.PeekStack(1), a.PeekStack(2), a.PeekStack(3), a.PeekStack(4)) + // case end: // 如何把这个条件传递到RunCommandWithCount的停止条件呢？这样就不会让程序退出了 + // } + //} + + for range 20 { + RunCommandEx("run") //todo add callback for data trace + } // todo: From b118fbae9886bab56646de0ac7665fa915bfd39c Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 24 Nov 2024 22:51:43 +0800 Subject: [PATCH 07/37] fix https://github.com/ddkwork/debuger/issues/10 --- sdk/sdk_test.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sdk/sdk_test.go b/sdk/sdk_test.go index 58985ebc..c15e2526 100644 --- a/sdk/sdk_test.go +++ b/sdk/sdk_test.go @@ -100,7 +100,7 @@ func TestSdk(t *testing.T) { RunCommandEx("run") //todo add callback for data trace } - // todo: + // todo: interface signature need clan up //this api`s arg is too more // SetBreakpoint(address Uint64, pid Uint32, tid Uint32, core_numer Uint32) From 95bfe336bc3e8ee8eefd0baf03798f3423ba8b19 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 24 Nov 2024 22:54:32 +0800 Subject: [PATCH 08/37] fix https://github.com/ddkwork/debuger/issues/10 --- sdk/sdk_test.go | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/sdk/sdk_test.go b/sdk/sdk_test.go index c15e2526..5eb57ca5 100644 --- a/sdk/sdk_test.go +++ b/sdk/sdk_test.go @@ -97,9 +97,14 @@ func TestSdk(t *testing.T) { //} for range 20 { - RunCommandEx("run") //todo add callback for data trace + RunCommandEx("start") + //RunCommandEx("run") //todo add callback for data trace } + //ReadAllRegisters() + //ReadMemory() + //ReadTargetRegister(REGISTER_RAX) + // todo: interface signature need clan up //this api`s arg is too more From 929924648def7e50ee6ea89be8dcbd9cb88b351e Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 24 Nov 2024 23:16:37 +0800 Subject: [PATCH 09/37] fix https://github.com/ddkwork/debuger/issues/10 --- sdk/api.go | 483 +++++++++++++++++++++++++++++++++++++++++++++++- sdk/sdk_test.go | 1 + sdk/util.go | 15 -- 3 files changed, 483 insertions(+), 16 deletions(-) diff --git a/sdk/api.go b/sdk/api.go index 6f94ef83..bf0242fc 100644 --- a/sdk/api.go +++ b/sdk/api.go @@ -1,6 +1,10 @@ package sdk -import "unsafe" +import ( + "github.com/ddkwork/golibrary/mylog" + "github.com/ddkwork/golibrary/stream" + "unsafe" +) type API interface { init() @@ -95,3 +99,480 @@ type API interface { SymQuerySizeof(StructNameOrTypeName *byte, SizeOfField *Uint32) Boolean SymCastingQueryForFiledsAndTypes(StructName *byte, FiledOfStructName *byte, IsStructNamePointerOrNot Pboolean, IsFiledOfStructNamePointerOrNot Pboolean, NewStructOrTypeName **byte, OffsetOfFieldFromTop *Uint32, SizeOfField *Uint32) Boolean } + +type hyperDbg struct { +} + +func New() API { + return &hyperDbg{} +} + +func SetCustomDriverPathEx(DriverFilePath string) bool { + b := SetCustomDriverPath(StringToBytePointer(DriverFilePath), StringToBytePointer(stream.BaseName(DriverFilePath))) + return Boolean2Bool(b) +} + +func RunCommandEx(command string) (status string) { + mylog.Info("command", command) + code := RunCommand(StringToBytePointer(command)) + return string(code) +} + +func ConnectRemoteDebuggerEx(ip string, port string) bool { + return ConnectRemoteDebugger(StringToBytePointer(ip), StringToBytePointer(port)) == 0 +} + +func (h *hyperDbg) init() { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) DetectVmxSupport() Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ReadVendorString(arg0 *Char) { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) LoadVmm() Int { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) UnloadVmm() Int { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) InstallVmmDriver() Int { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) UninstallVmmDriver() Int { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) StopVmmDriver() Int { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) TestCommandParser(command *Char, number_of_tokens Uint32, tokens_list **Char, failed_token_num *Uint32, failed_token_position *Uint32) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) TestCommandParserShowTokens(command *Char) { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SetupPathForFilename(filename *Char, file_location *Char, buffer_len Uint32, check_file_existence Boolean) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) RunCommand(command *Char) Int { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ShowSignature() { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SetTextMessageCallback(handler unsafe.Pointer) { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SetTextMessageCallbackUsingSharedBuffer(handler unsafe.Pointer) unsafe.Pointer { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) UnsetTextMessageCallback() { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ScriptReadFileAndExecuteCommandline(argc Int, argv **Char) Int { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ContinuePreviousCommand() Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) CheckMultilineCommand(current_command *Char, reset Boolean) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SetCustomDriverPath(driver_file_path *Char, driver_name *Char) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) UseDefaultDriverPath() { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ConnectLocalDebugger() { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ConnectRemoteDebugger(ip *Char, port *Char) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ConnectRemoteDebuggerUsingComPort(port_name *Char, baudrate Dword, pause_after_connection Boolean) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ConnectRemoteDebuggerUsingNamedPipe(named_pipe *Char, pause_after_connection Boolean) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ConnectCurrentDebuggerUsingComPort(port_name *Char, baudrate Dword) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) DebugCloseRemoteDebugger() Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) GetKernelBase() Uint64 { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ReadMemory(target_address Uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid Uint32, size Uint32, get_address_mode Boolean, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store *Byte, return_length *Uint32) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ShowMemoryOrDisassemble(style DebuggerShowMemoryStyle, address Uint64, memory_type DebuggerReadMemoryType, reading_type DebuggerReadReadingType, pid Uint32, size Uint32, dt_details PdebuggerDtCommandOptions) { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) WriteMemory(destination_address unsafe.Pointer, memory_type DebuggerEditMemoryType, process_id Uint32, source_address unsafe.Pointer, number_of_bytes Uint32) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ReadAllRegisters(guest_registers unsafe.Pointer, extra_registers unsafe.Pointer) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ReadTargetRegister(register_id RegsEnum, target_register *Uint64) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) WriteTargetRegister(register_id RegsEnum, value Uint64) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ShowAllRegisters() Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ShowTargetRegister(register_id RegsEnum) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ContinueDebuggee() { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) PauseDebuggee() { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SetBreakpoint(address Uint64, pid Uint32, tid Uint32, core_numer Uint32) { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SteppingInstrumentationStepIn() Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SteppingRegularStepIn() Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SteppingStepOver() Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SteppingInstrumentationStepInForTracking() Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SteppingStepOverForGu(last_instruction Boolean) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) StartProcess(path *Wchar) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) StartProcessWithArgs(path *Wchar, arguments *Wchar) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) CommandGetLocalApic(local_apic PlapicPage, is_using_x2apic *Boolean) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) AssembleGetLength(assembly_code *Char, start_address Uint64, length *Uint32) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) Assemble(assembly_code *Char, start_address Uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size Uint32) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) HwdbgScriptRunScript(script *Char, instance_filepath_to_read *Char, hardware_script_file_path_to_save *Char, initial_bram_buffer_size Uint32) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) HwdbgScriptEngineWrapperTestParser(Expr *Char) { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) HardwareScriptInterpreterShowScriptCapabilities(InstanceInfo *HwdbgInstanceInformation) { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) HardwareScriptInterpreterCheckScriptBufferWithScriptCapabilities(InstanceInfo *HwdbgInstanceInformation, ScriptBuffer unsafe.Pointer, CountOfScriptSymbolChunks Uint32, NumberOfStages *Uint32, NumberOfOperands *Uint32, NumberOfOperandsImplemented *Uint32) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) HardwareScriptInterpreterCompressBuffer(Buffer *Uint64, BufferLength int32, ScriptVariableLength Uint32, BramDataWidth Uint32, NewBufferSize *int32, NumberOfBytesPerChunk *int32) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) HardwareScriptInterpreterConvertSymbolToHwdbgShortSymbolBuffer(InstanceInfo *HwdbgInstanceInformation, SymbolBuffer unsafe.Pointer, SymbolBufferLength int32, NumberOfStages Uint32, NewShortSymbolBuffer *unsafe.Pointer, NewBufferSize *int32) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) HardwareScriptInterpreterFreeHwdbgShortSymbolBuffer(NewShortSymbolBuffer unsafe.Pointer) { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ScriptEngineParse(str *byte) unsafe.Pointer { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ScriptEngineSetHwdbgInstanceInfo(InstancInfo *HwdbgInstanceInformation) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) PrintSymbolBuffer(SymbolBuffer unsafe.Pointer) { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) RemoveSymbolBuffer(SymbolBuffer unsafe.Pointer) { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) PrintSymbol(Symbol unsafe.Pointer) { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ScriptEngineConvertNameToAddress(FunctionOrVariableName *byte, WasFound Pboolean) Uint64 { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ScriptEngineLoadFileSymbol(BaseAddress Uint64, PdbFileName *byte, CustomModuleName *byte) Uint32 { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ScriptEngineUnloadAllSymbols() Uint32 { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ScriptEngineUnloadModuleSymbol(ModuleName *byte) Uint32 { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ScriptEngineSearchSymbolForMask(SearchMask *byte) Uint32 { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ScriptEngineGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *Uint32) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ScriptEngineGetDataTypeSize(TypeName *Char, TypeSize *Uint64) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ScriptEngineCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ScriptEngineConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ScriptEngineConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule Boolean) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength Uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ScriptEngineShowDataBasedOnSymbolTypes(TypeName *byte, Address Uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ScriptEngineSymbolAbortLoading() { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) ScriptEngineSetTextMessageCallback(Handler unsafe.Pointer) { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SymSetTextMessageCallback(Handler unsafe.Pointer) { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SymbolAbortLoading() { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SymConvertNameToAddress(FunctionOrVariableName *byte, WasFound Pboolean) Uint64 { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SymLoadFileSymbol(BaseAddress Uint64, PdbFileName *byte, CustomModuleName *byte) Uint32 { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SymUnloadAllSymbols() Uint32 { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SymUnloadModuleSymbol(ModuleName *byte) Uint32 { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SymSearchSymbolForMask(SearchMask *byte) Uint32 { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SymGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *Uint32) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SymGetDataTypeSize(TypeName *Char, TypeSize *Uint64) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SymCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SymConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SymConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule Boolean) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength Uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SymShowDataBasedOnSymbolTypes(TypeName *byte, Address Uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SymQuerySizeof(StructNameOrTypeName *byte, SizeOfField *Uint32) Boolean { + //TODO implement me + panic("implement me") +} + +func (h *hyperDbg) SymCastingQueryForFiledsAndTypes(StructName *byte, FiledOfStructName *byte, IsStructNamePointerOrNot Pboolean, IsFiledOfStructNamePointerOrNot Pboolean, NewStructOrTypeName **byte, OffsetOfFieldFromTop *Uint32, SizeOfField *Uint32) Boolean { + //TODO implement me + panic("implement me") +} diff --git a/sdk/sdk_test.go b/sdk/sdk_test.go index 5eb57ca5..dd02554d 100644 --- a/sdk/sdk_test.go +++ b/sdk/sdk_test.go @@ -14,6 +14,7 @@ import ( ) func TestGenInterface(t *testing.T) { + t.Skip() g := stream.NewGeneratedFile() index := 0 g.P(`package sdk`) diff --git a/sdk/util.go b/sdk/util.go index 6058b046..e09e20c0 100644 --- a/sdk/util.go +++ b/sdk/util.go @@ -59,21 +59,6 @@ func Boolean2Bool(b Boolean) bool { return int(b) == True } -func SetCustomDriverPathEx(DriverFilePath string) bool { - b := SetCustomDriverPath(StringToBytePointer(DriverFilePath), StringToBytePointer(stream.BaseName(DriverFilePath))) - return Boolean2Bool(b) -} - -func RunCommandEx(command string) (status string) { - mylog.Info("command", command) - code := RunCommand(StringToBytePointer(command)) - return string(code) -} - -func ConnectRemoteDebuggerEx(ip string, port string) bool { - return ConnectRemoteDebugger(StringToBytePointer(ip), StringToBytePointer(port)) == 0 -} - func AddCurrentDirToPath() { currentPath := mylog.Check2(filepath.Abs(".")) pathEnv := os.Getenv("PATH") From 88bc78b4fcb5e1403c7730bc3ac9d9ac16274884 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 24 Nov 2024 23:23:43 +0800 Subject: [PATCH 10/37] fix https://github.com/ddkwork/debuger/issues/10 --- sdk/api.go | 127 +++++++++++++++++++++++++---------------------------- 1 file changed, 61 insertions(+), 66 deletions(-) diff --git a/sdk/api.go b/sdk/api.go index bf0242fc..6d0b1584 100644 --- a/sdk/api.go +++ b/sdk/api.go @@ -103,7 +103,7 @@ type API interface { type hyperDbg struct { } -func New() API { +func New() *hyperDbg { return &hyperDbg{} } @@ -127,42 +127,42 @@ func (h *hyperDbg) init() { panic("implement me") } -func (h *hyperDbg) DetectVmxSupport() Boolean { +func (h *hyperDbg) DetectVmxSupport() bool { //TODO implement me panic("implement me") } -func (h *hyperDbg) ReadVendorString(arg0 *Char) { +func (h *hyperDbg) ReadVendorString(arg0 string) { //TODO implement me panic("implement me") } -func (h *hyperDbg) LoadVmm() Int { +func (h *hyperDbg) LoadVmm() { //TODO implement me panic("implement me") } -func (h *hyperDbg) UnloadVmm() Int { +func (h *hyperDbg) UnloadVmm() { //TODO implement me panic("implement me") } -func (h *hyperDbg) InstallVmmDriver() Int { +func (h *hyperDbg) InstallVmmDriver() { //TODO implement me panic("implement me") } -func (h *hyperDbg) UninstallVmmDriver() Int { +func (h *hyperDbg) UninstallVmmDriver() { //TODO implement me panic("implement me") } -func (h *hyperDbg) StopVmmDriver() Int { +func (h *hyperDbg) StopVmmDriver() { //TODO implement me panic("implement me") } -func (h *hyperDbg) TestCommandParser(command *Char, number_of_tokens Uint32, tokens_list **Char, failed_token_num *Uint32, failed_token_position *Uint32) Boolean { +func (h *hyperDbg) TestCommandParser(command *Char, number_of_tokens Uint32, tokens_list **Char, failed_token_num *Uint32, failed_token_position *Uint32) { //TODO implement me panic("implement me") } @@ -172,12 +172,12 @@ func (h *hyperDbg) TestCommandParserShowTokens(command *Char) { panic("implement me") } -func (h *hyperDbg) SetupPathForFilename(filename *Char, file_location *Char, buffer_len Uint32, check_file_existence Boolean) Boolean { +func (h *hyperDbg) SetupPathForFilename(filename *Char, file_location *Char, buffer_len Uint32, check_file_existence Boolean) { //TODO implement me panic("implement me") } -func (h *hyperDbg) RunCommand(command *Char) Int { +func (h *hyperDbg) RunCommand(command *Char) { //TODO implement me panic("implement me") } @@ -187,37 +187,32 @@ func (h *hyperDbg) ShowSignature() { panic("implement me") } -func (h *hyperDbg) SetTextMessageCallback(handler unsafe.Pointer) { +func (h *hyperDbg) SetLogCallback(handler func()) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SetTextMessageCallbackUsingSharedBuffer(handler unsafe.Pointer) unsafe.Pointer { +func (h *hyperDbg) UnsetLogCallback() { //TODO implement me panic("implement me") } -func (h *hyperDbg) UnsetTextMessageCallback() { +func (h *hyperDbg) ScriptReadFileAndExecuteCommandline(argc Int, argv **Char) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptReadFileAndExecuteCommandline(argc Int, argv **Char) Int { +func (h *hyperDbg) ContinuePreviousCommand() { //TODO implement me panic("implement me") } -func (h *hyperDbg) ContinuePreviousCommand() Boolean { +func (h *hyperDbg) CheckMultilineCommand(current_command *Char, reset Boolean) { //TODO implement me panic("implement me") } -func (h *hyperDbg) CheckMultilineCommand(current_command *Char, reset Boolean) Boolean { - //TODO implement me - panic("implement me") -} - -func (h *hyperDbg) SetCustomDriverPath(driver_file_path *Char, driver_name *Char) Boolean { +func (h *hyperDbg) SetCustomDriverPath(driver_file_path *Char, driver_name *Char) { //TODO implement me panic("implement me") } @@ -232,37 +227,37 @@ func (h *hyperDbg) ConnectLocalDebugger() { panic("implement me") } -func (h *hyperDbg) ConnectRemoteDebugger(ip *Char, port *Char) Boolean { +func (h *hyperDbg) ConnectRemoteDebugger(ip *Char, port *Char) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ConnectRemoteDebuggerUsingComPort(port_name *Char, baudrate Dword, pause_after_connection Boolean) Boolean { +func (h *hyperDbg) ConnectRemoteDebuggerUsingComPort(port_name *Char, baudrate Dword, pause_after_connection Boolean) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ConnectRemoteDebuggerUsingNamedPipe(named_pipe *Char, pause_after_connection Boolean) Boolean { +func (h *hyperDbg) ConnectRemoteDebuggerUsingNamedPipe(named_pipe *Char, pause_after_connection Boolean) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ConnectCurrentDebuggerUsingComPort(port_name *Char, baudrate Dword) Boolean { +func (h *hyperDbg) ConnectCurrentDebuggerUsingComPort(port_name *Char, baudrate Dword) { //TODO implement me panic("implement me") } -func (h *hyperDbg) DebugCloseRemoteDebugger() Boolean { +func (h *hyperDbg) DebugCloseRemoteDebugger() { //TODO implement me panic("implement me") } -func (h *hyperDbg) GetKernelBase() Uint64 { +func (h *hyperDbg) GetKernelBase() uint64 { //TODO implement me panic("implement me") } -func (h *hyperDbg) ReadMemory(target_address Uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid Uint32, size Uint32, get_address_mode Boolean, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store *Byte, return_length *Uint32) Boolean { +func (h *hyperDbg) ReadMemory(target_address Uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid Uint32, size Uint32, get_address_mode Boolean, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store *Byte, return_length *Uint32) { //TODO implement me panic("implement me") } @@ -272,32 +267,32 @@ func (h *hyperDbg) ShowMemoryOrDisassemble(style DebuggerShowMemoryStyle, addres panic("implement me") } -func (h *hyperDbg) WriteMemory(destination_address unsafe.Pointer, memory_type DebuggerEditMemoryType, process_id Uint32, source_address unsafe.Pointer, number_of_bytes Uint32) Boolean { +func (h *hyperDbg) WriteMemory(destination_address unsafe.Pointer, memory_type DebuggerEditMemoryType, process_id Uint32, source_address unsafe.Pointer, number_of_bytes Uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ReadAllRegisters(guest_registers unsafe.Pointer, extra_registers unsafe.Pointer) Boolean { +func (h *hyperDbg) ReadAllRegisters(guest_registers unsafe.Pointer, extra_registers unsafe.Pointer) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ReadTargetRegister(register_id RegsEnum, target_register *Uint64) Boolean { +func (h *hyperDbg) ReadTargetRegister(register_id RegsEnum, target_register *Uint64) { //TODO implement me panic("implement me") } -func (h *hyperDbg) WriteTargetRegister(register_id RegsEnum, value Uint64) Boolean { +func (h *hyperDbg) WriteTargetRegister(register_id RegsEnum, value Uint64) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ShowAllRegisters() Boolean { +func (h *hyperDbg) ShowAllRegisters() { //TODO implement me panic("implement me") } -func (h *hyperDbg) ShowTargetRegister(register_id RegsEnum) Boolean { +func (h *hyperDbg) ShowTargetRegister(register_id RegsEnum) { //TODO implement me panic("implement me") } @@ -317,57 +312,57 @@ func (h *hyperDbg) SetBreakpoint(address Uint64, pid Uint32, tid Uint32, core_nu panic("implement me") } -func (h *hyperDbg) SteppingInstrumentationStepIn() Boolean { +func (h *hyperDbg) SteppingInstrumentationStepIn() { //TODO implement me panic("implement me") } -func (h *hyperDbg) SteppingRegularStepIn() Boolean { +func (h *hyperDbg) SteppingRegularStepIn() { //TODO implement me panic("implement me") } -func (h *hyperDbg) SteppingStepOver() Boolean { +func (h *hyperDbg) SteppingStepOver() { //TODO implement me panic("implement me") } -func (h *hyperDbg) SteppingInstrumentationStepInForTracking() Boolean { +func (h *hyperDbg) SteppingInstrumentationStepInForTracking() { //TODO implement me panic("implement me") } -func (h *hyperDbg) SteppingStepOverForGu(last_instruction Boolean) Boolean { +func (h *hyperDbg) SteppingStepOverForGu(last_instruction Boolean) { //TODO implement me panic("implement me") } -func (h *hyperDbg) StartProcess(path *Wchar) Boolean { +func (h *hyperDbg) StartProcess(path *Wchar) { //TODO implement me panic("implement me") } -func (h *hyperDbg) StartProcessWithArgs(path *Wchar, arguments *Wchar) Boolean { +func (h *hyperDbg) StartProcessWithArgs(path *Wchar, arguments *Wchar) { //TODO implement me panic("implement me") } -func (h *hyperDbg) CommandGetLocalApic(local_apic PlapicPage, is_using_x2apic *Boolean) Boolean { +func (h *hyperDbg) CommandGetLocalApic(local_apic PlapicPage, is_using_x2apic *Boolean) { //TODO implement me panic("implement me") } -func (h *hyperDbg) AssembleGetLength(assembly_code *Char, start_address Uint64, length *Uint32) Boolean { +func (h *hyperDbg) AssembleGetLength(assembly_code *Char, start_address Uint64, length *Uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) Assemble(assembly_code *Char, start_address Uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size Uint32) Boolean { +func (h *hyperDbg) Assemble(assembly_code *Char, start_address Uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size Uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) HwdbgScriptRunScript(script *Char, instance_filepath_to_read *Char, hardware_script_file_path_to_save *Char, initial_bram_buffer_size Uint32) Boolean { +func (h *hyperDbg) HwdbgScriptRunScript(script *Char, instance_filepath_to_read *Char, hardware_script_file_path_to_save *Char, initial_bram_buffer_size Uint32) { //TODO implement me panic("implement me") } @@ -382,17 +377,17 @@ func (h *hyperDbg) HardwareScriptInterpreterShowScriptCapabilities(InstanceInfo panic("implement me") } -func (h *hyperDbg) HardwareScriptInterpreterCheckScriptBufferWithScriptCapabilities(InstanceInfo *HwdbgInstanceInformation, ScriptBuffer unsafe.Pointer, CountOfScriptSymbolChunks Uint32, NumberOfStages *Uint32, NumberOfOperands *Uint32, NumberOfOperandsImplemented *Uint32) Boolean { +func (h *hyperDbg) HardwareScriptInterpreterCheckScriptBufferWithScriptCapabilities(InstanceInfo *HwdbgInstanceInformation, ScriptBuffer unsafe.Pointer, CountOfScriptSymbolChunks Uint32, NumberOfStages *Uint32, NumberOfOperands *Uint32, NumberOfOperandsImplemented *Uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) HardwareScriptInterpreterCompressBuffer(Buffer *Uint64, BufferLength int32, ScriptVariableLength Uint32, BramDataWidth Uint32, NewBufferSize *int32, NumberOfBytesPerChunk *int32) Boolean { +func (h *hyperDbg) HardwareScriptInterpreterCompressBuffer(Buffer *Uint64, BufferLength int32, ScriptVariableLength Uint32, BramDataWidth Uint32, NewBufferSize *int32, NumberOfBytesPerChunk *int32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) HardwareScriptInterpreterConvertSymbolToHwdbgShortSymbolBuffer(InstanceInfo *HwdbgInstanceInformation, SymbolBuffer unsafe.Pointer, SymbolBufferLength int32, NumberOfStages Uint32, NewShortSymbolBuffer *unsafe.Pointer, NewBufferSize *int32) Boolean { +func (h *hyperDbg) HardwareScriptInterpreterConvertSymbolToHwdbgShortSymbolBuffer(InstanceInfo *HwdbgInstanceInformation, SymbolBuffer unsafe.Pointer, SymbolBufferLength int32, NumberOfStages Uint32, NewShortSymbolBuffer *unsafe.Pointer, NewBufferSize *int32) { //TODO implement me panic("implement me") } @@ -407,7 +402,7 @@ func (h *hyperDbg) ScriptEngineParse(str *byte) unsafe.Pointer { panic("implement me") } -func (h *hyperDbg) ScriptEngineSetHwdbgInstanceInfo(InstancInfo *HwdbgInstanceInformation) Boolean { +func (h *hyperDbg) ScriptEngineSetHwdbgInstanceInfo(InstancInfo *HwdbgInstanceInformation) { //TODO implement me panic("implement me") } @@ -452,37 +447,37 @@ func (h *hyperDbg) ScriptEngineSearchSymbolForMask(SearchMask *byte) Uint32 { panic("implement me") } -func (h *hyperDbg) ScriptEngineGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *Uint32) Boolean { +func (h *hyperDbg) ScriptEngineGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *Uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineGetDataTypeSize(TypeName *Char, TypeSize *Uint64) Boolean { +func (h *hyperDbg) ScriptEngineGetDataTypeSize(TypeName *Char, TypeSize *Uint64) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) Boolean { +func (h *hyperDbg) ScriptEngineCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) Boolean { +func (h *hyperDbg) ScriptEngineConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule Boolean) Boolean { +func (h *hyperDbg) ScriptEngineConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule Boolean) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength Uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) Boolean { +func (h *hyperDbg) ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength Uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineShowDataBasedOnSymbolTypes(TypeName *byte, Address Uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) Boolean { +func (h *hyperDbg) ScriptEngineShowDataBasedOnSymbolTypes(TypeName *byte, Address Uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) { //TODO implement me panic("implement me") } @@ -532,47 +527,47 @@ func (h *hyperDbg) SymSearchSymbolForMask(SearchMask *byte) Uint32 { panic("implement me") } -func (h *hyperDbg) SymGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *Uint32) Boolean { +func (h *hyperDbg) SymGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *Uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymGetDataTypeSize(TypeName *Char, TypeSize *Uint64) Boolean { +func (h *hyperDbg) SymGetDataTypeSize(TypeName *Char, TypeSize *Uint64) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) Boolean { +func (h *hyperDbg) SymCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) Boolean { +func (h *hyperDbg) SymConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule Boolean) Boolean { +func (h *hyperDbg) SymConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule Boolean) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength Uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) Boolean { +func (h *hyperDbg) SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength Uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymShowDataBasedOnSymbolTypes(TypeName *byte, Address Uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) Boolean { +func (h *hyperDbg) SymShowDataBasedOnSymbolTypes(TypeName *byte, Address Uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymQuerySizeof(StructNameOrTypeName *byte, SizeOfField *Uint32) Boolean { +func (h *hyperDbg) SymQuerySizeof(StructNameOrTypeName *byte, SizeOfField *Uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymCastingQueryForFiledsAndTypes(StructName *byte, FiledOfStructName *byte, IsStructNamePointerOrNot Pboolean, IsFiledOfStructNamePointerOrNot Pboolean, NewStructOrTypeName **byte, OffsetOfFieldFromTop *Uint32, SizeOfField *Uint32) Boolean { +func (h *hyperDbg) SymCastingQueryForFiledsAndTypes(StructName *byte, FiledOfStructName *byte, IsStructNamePointerOrNot Pboolean, IsFiledOfStructNamePointerOrNot Pboolean, NewStructOrTypeName **byte, OffsetOfFieldFromTop *Uint32, SizeOfField *Uint32) { //TODO implement me panic("implement me") } From b268fe995adf55a5a92828d54fdae1ea6843c04c Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 24 Nov 2024 23:24:22 +0800 Subject: [PATCH 11/37] fix https://github.com/ddkwork/debuger/issues/10 --- sdk/api.go | 104 ++++++++++++++++++++++++++--------------------------- 1 file changed, 52 insertions(+), 52 deletions(-) diff --git a/sdk/api.go b/sdk/api.go index 6d0b1584..e707c790 100644 --- a/sdk/api.go +++ b/sdk/api.go @@ -15,9 +15,9 @@ type API interface { InstallVmmDriver() Int UninstallVmmDriver() Int StopVmmDriver() Int - TestCommandParser(command *Char, number_of_tokens Uint32, tokens_list **Char, failed_token_num *Uint32, failed_token_position *Uint32) Boolean + TestCommandParser(command *Char, number_of_tokens uint32, tokens_list **Char, failed_token_num *uint32, failed_token_position *uint32) Boolean TestCommandParserShowTokens(command *Char) - SetupPathForFilename(filename *Char, file_location *Char, buffer_len Uint32, check_file_existence Boolean) Boolean + SetupPathForFilename(filename *Char, file_location *Char, buffer_len uint32, check_file_existence Boolean) Boolean RunCommand(command *Char) Int ShowSignature() SetTextMessageCallback(handler unsafe.Pointer) @@ -35,9 +35,9 @@ type API interface { ConnectCurrentDebuggerUsingComPort(port_name *Char, baudrate Dword) Boolean DebugCloseRemoteDebugger() Boolean GetKernelBase() Uint64 - ReadMemory(target_address Uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid Uint32, size Uint32, get_address_mode Boolean, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store *Byte, return_length *Uint32) Boolean - ShowMemoryOrDisassemble(style DebuggerShowMemoryStyle, address Uint64, memory_type DebuggerReadMemoryType, reading_type DebuggerReadReadingType, pid Uint32, size Uint32, dt_details PdebuggerDtCommandOptions) - WriteMemory(destination_address unsafe.Pointer, memory_type DebuggerEditMemoryType, process_id Uint32, source_address unsafe.Pointer, number_of_bytes Uint32) Boolean + ReadMemory(target_address Uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid uint32, size uint32, get_address_mode Boolean, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store *Byte, return_length *uint32) Boolean + ShowMemoryOrDisassemble(style DebuggerShowMemoryStyle, address Uint64, memory_type DebuggerReadMemoryType, reading_type DebuggerReadReadingType, pid uint32, size uint32, dt_details PdebuggerDtCommandOptions) + WriteMemory(destination_address unsafe.Pointer, memory_type DebuggerEditMemoryType, process_id uint32, source_address unsafe.Pointer, number_of_bytes uint32) Boolean ReadAllRegisters(guest_registers unsafe.Pointer, extra_registers unsafe.Pointer) Boolean ReadTargetRegister(register_id RegsEnum, target_register *Uint64) Boolean WriteTargetRegister(register_id RegsEnum, value Uint64) Boolean @@ -45,7 +45,7 @@ type API interface { ShowTargetRegister(register_id RegsEnum) Boolean ContinueDebuggee() PauseDebuggee() - SetBreakpoint(address Uint64, pid Uint32, tid Uint32, core_numer Uint32) + SetBreakpoint(address Uint64, pid uint32, tid uint32, core_numer uint32) SteppingInstrumentationStepIn() Boolean SteppingRegularStepIn() Boolean SteppingStepOver() Boolean @@ -54,14 +54,14 @@ type API interface { StartProcess(path *Wchar) Boolean StartProcessWithArgs(path *Wchar, arguments *Wchar) Boolean CommandGetLocalApic(local_apic PlapicPage, is_using_x2apic *Boolean) Boolean - AssembleGetLength(assembly_code *Char, start_address Uint64, length *Uint32) Boolean - Assemble(assembly_code *Char, start_address Uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size Uint32) Boolean - HwdbgScriptRunScript(script *Char, instance_filepath_to_read *Char, hardware_script_file_path_to_save *Char, initial_bram_buffer_size Uint32) Boolean + AssembleGetLength(assembly_code *Char, start_address Uint64, length *uint32) Boolean + Assemble(assembly_code *Char, start_address Uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size uint32) Boolean + HwdbgScriptRunScript(script *Char, instance_filepath_to_read *Char, hardware_script_file_path_to_save *Char, initial_bram_buffer_size uint32) Boolean HwdbgScriptEngineWrapperTestParser(Expr *Char) HardwareScriptInterpreterShowScriptCapabilities(InstanceInfo *HwdbgInstanceInformation) - HardwareScriptInterpreterCheckScriptBufferWithScriptCapabilities(InstanceInfo *HwdbgInstanceInformation, ScriptBuffer unsafe.Pointer, CountOfScriptSymbolChunks Uint32, NumberOfStages *Uint32, NumberOfOperands *Uint32, NumberOfOperandsImplemented *Uint32) Boolean - HardwareScriptInterpreterCompressBuffer(Buffer *Uint64, BufferLength int32, ScriptVariableLength Uint32, BramDataWidth Uint32, NewBufferSize *int32, NumberOfBytesPerChunk *int32) Boolean - HardwareScriptInterpreterConvertSymbolToHwdbgShortSymbolBuffer(InstanceInfo *HwdbgInstanceInformation, SymbolBuffer unsafe.Pointer, SymbolBufferLength int32, NumberOfStages Uint32, NewShortSymbolBuffer *unsafe.Pointer, NewBufferSize *int32) Boolean + HardwareScriptInterpreterCheckScriptBufferWithScriptCapabilities(InstanceInfo *HwdbgInstanceInformation, ScriptBuffer unsafe.Pointer, CountOfScriptSymbolChunks uint32, NumberOfStages *uint32, NumberOfOperands *uint32, NumberOfOperandsImplemented *uint32) Boolean + HardwareScriptInterpreterCompressBuffer(Buffer *Uint64, BufferLength int32, ScriptVariableLength uint32, BramDataWidth uint32, NewBufferSize *int32, NumberOfBytesPerChunk *int32) Boolean + HardwareScriptInterpreterConvertSymbolToHwdbgShortSymbolBuffer(InstanceInfo *HwdbgInstanceInformation, SymbolBuffer unsafe.Pointer, SymbolBufferLength int32, NumberOfStages uint32, NewShortSymbolBuffer *unsafe.Pointer, NewBufferSize *int32) Boolean HardwareScriptInterpreterFreeHwdbgShortSymbolBuffer(NewShortSymbolBuffer unsafe.Pointer) ScriptEngineParse(str *byte) unsafe.Pointer ScriptEngineSetHwdbgInstanceInfo(InstancInfo *HwdbgInstanceInformation) Boolean @@ -69,35 +69,35 @@ type API interface { RemoveSymbolBuffer(SymbolBuffer unsafe.Pointer) PrintSymbol(Symbol unsafe.Pointer) ScriptEngineConvertNameToAddress(FunctionOrVariableName *byte, WasFound Pboolean) Uint64 - ScriptEngineLoadFileSymbol(BaseAddress Uint64, PdbFileName *byte, CustomModuleName *byte) Uint32 - ScriptEngineUnloadAllSymbols() Uint32 - ScriptEngineUnloadModuleSymbol(ModuleName *byte) Uint32 - ScriptEngineSearchSymbolForMask(SearchMask *byte) Uint32 - ScriptEngineGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *Uint32) Boolean + ScriptEngineLoadFileSymbol(BaseAddress Uint64, PdbFileName *byte, CustomModuleName *byte) uint32 + ScriptEngineUnloadAllSymbols() uint32 + ScriptEngineUnloadModuleSymbol(ModuleName *byte) uint32 + ScriptEngineSearchSymbolForMask(SearchMask *byte) uint32 + ScriptEngineGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *uint32) Boolean ScriptEngineGetDataTypeSize(TypeName *Char, TypeSize *Uint64) Boolean ScriptEngineCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) Boolean ScriptEngineConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) Boolean ScriptEngineConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule Boolean) Boolean - ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength Uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) Boolean + ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) Boolean ScriptEngineShowDataBasedOnSymbolTypes(TypeName *byte, Address Uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) Boolean ScriptEngineSymbolAbortLoading() ScriptEngineSetTextMessageCallback(Handler unsafe.Pointer) SymSetTextMessageCallback(Handler unsafe.Pointer) SymbolAbortLoading() SymConvertNameToAddress(FunctionOrVariableName *byte, WasFound Pboolean) Uint64 - SymLoadFileSymbol(BaseAddress Uint64, PdbFileName *byte, CustomModuleName *byte) Uint32 - SymUnloadAllSymbols() Uint32 - SymUnloadModuleSymbol(ModuleName *byte) Uint32 - SymSearchSymbolForMask(SearchMask *byte) Uint32 - SymGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *Uint32) Boolean + SymLoadFileSymbol(BaseAddress Uint64, PdbFileName *byte, CustomModuleName *byte) uint32 + SymUnloadAllSymbols() uint32 + SymUnloadModuleSymbol(ModuleName *byte) uint32 + SymSearchSymbolForMask(SearchMask *byte) uint32 + SymGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *uint32) Boolean SymGetDataTypeSize(TypeName *Char, TypeSize *Uint64) Boolean SymCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) Boolean SymConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) Boolean SymConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule Boolean) Boolean - SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength Uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) Boolean + SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) Boolean SymShowDataBasedOnSymbolTypes(TypeName *byte, Address Uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) Boolean - SymQuerySizeof(StructNameOrTypeName *byte, SizeOfField *Uint32) Boolean - SymCastingQueryForFiledsAndTypes(StructName *byte, FiledOfStructName *byte, IsStructNamePointerOrNot Pboolean, IsFiledOfStructNamePointerOrNot Pboolean, NewStructOrTypeName **byte, OffsetOfFieldFromTop *Uint32, SizeOfField *Uint32) Boolean + SymQuerySizeof(StructNameOrTypeName *byte, SizeOfField *uint32) Boolean + SymCastingQueryForFiledsAndTypes(StructName *byte, FiledOfStructName *byte, IsStructNamePointerOrNot Pboolean, IsFiledOfStructNamePointerOrNot Pboolean, NewStructOrTypeName **byte, OffsetOfFieldFromTop *uint32, SizeOfField *uint32) Boolean } type hyperDbg struct { @@ -162,7 +162,7 @@ func (h *hyperDbg) StopVmmDriver() { panic("implement me") } -func (h *hyperDbg) TestCommandParser(command *Char, number_of_tokens Uint32, tokens_list **Char, failed_token_num *Uint32, failed_token_position *Uint32) { +func (h *hyperDbg) TestCommandParser(command *Char, number_of_tokens uint32, tokens_list **Char, failed_token_num *uint32, failed_token_position *uint32) { //TODO implement me panic("implement me") } @@ -172,7 +172,7 @@ func (h *hyperDbg) TestCommandParserShowTokens(command *Char) { panic("implement me") } -func (h *hyperDbg) SetupPathForFilename(filename *Char, file_location *Char, buffer_len Uint32, check_file_existence Boolean) { +func (h *hyperDbg) SetupPathForFilename(filename *Char, file_location *Char, buffer_len uint32, check_file_existence Boolean) { //TODO implement me panic("implement me") } @@ -257,17 +257,17 @@ func (h *hyperDbg) GetKernelBase() uint64 { panic("implement me") } -func (h *hyperDbg) ReadMemory(target_address Uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid Uint32, size Uint32, get_address_mode Boolean, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store *Byte, return_length *Uint32) { +func (h *hyperDbg) ReadMemory(target_address Uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid uint32, size uint32, get_address_mode Boolean, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store *Byte, return_length *uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ShowMemoryOrDisassemble(style DebuggerShowMemoryStyle, address Uint64, memory_type DebuggerReadMemoryType, reading_type DebuggerReadReadingType, pid Uint32, size Uint32, dt_details PdebuggerDtCommandOptions) { +func (h *hyperDbg) ShowMemoryOrDisassemble(style DebuggerShowMemoryStyle, address Uint64, memory_type DebuggerReadMemoryType, reading_type DebuggerReadReadingType, pid uint32, size uint32, dt_details PdebuggerDtCommandOptions) { //TODO implement me panic("implement me") } -func (h *hyperDbg) WriteMemory(destination_address unsafe.Pointer, memory_type DebuggerEditMemoryType, process_id Uint32, source_address unsafe.Pointer, number_of_bytes Uint32) { +func (h *hyperDbg) WriteMemory(destination_address unsafe.Pointer, memory_type DebuggerEditMemoryType, process_id uint32, source_address unsafe.Pointer, number_of_bytes uint32) { //TODO implement me panic("implement me") } @@ -307,7 +307,7 @@ func (h *hyperDbg) PauseDebuggee() { panic("implement me") } -func (h *hyperDbg) SetBreakpoint(address Uint64, pid Uint32, tid Uint32, core_numer Uint32) { +func (h *hyperDbg) SetBreakpoint(address Uint64, pid uint32, tid uint32, core_numer uint32) { //TODO implement me panic("implement me") } @@ -352,17 +352,17 @@ func (h *hyperDbg) CommandGetLocalApic(local_apic PlapicPage, is_using_x2apic *B panic("implement me") } -func (h *hyperDbg) AssembleGetLength(assembly_code *Char, start_address Uint64, length *Uint32) { +func (h *hyperDbg) AssembleGetLength(assembly_code *Char, start_address Uint64, length *uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) Assemble(assembly_code *Char, start_address Uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size Uint32) { +func (h *hyperDbg) Assemble(assembly_code *Char, start_address Uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) HwdbgScriptRunScript(script *Char, instance_filepath_to_read *Char, hardware_script_file_path_to_save *Char, initial_bram_buffer_size Uint32) { +func (h *hyperDbg) HwdbgScriptRunScript(script *Char, instance_filepath_to_read *Char, hardware_script_file_path_to_save *Char, initial_bram_buffer_size uint32) { //TODO implement me panic("implement me") } @@ -377,17 +377,17 @@ func (h *hyperDbg) HardwareScriptInterpreterShowScriptCapabilities(InstanceInfo panic("implement me") } -func (h *hyperDbg) HardwareScriptInterpreterCheckScriptBufferWithScriptCapabilities(InstanceInfo *HwdbgInstanceInformation, ScriptBuffer unsafe.Pointer, CountOfScriptSymbolChunks Uint32, NumberOfStages *Uint32, NumberOfOperands *Uint32, NumberOfOperandsImplemented *Uint32) { +func (h *hyperDbg) HardwareScriptInterpreterCheckScriptBufferWithScriptCapabilities(InstanceInfo *HwdbgInstanceInformation, ScriptBuffer unsafe.Pointer, CountOfScriptSymbolChunks uint32, NumberOfStages *uint32, NumberOfOperands *uint32, NumberOfOperandsImplemented *uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) HardwareScriptInterpreterCompressBuffer(Buffer *Uint64, BufferLength int32, ScriptVariableLength Uint32, BramDataWidth Uint32, NewBufferSize *int32, NumberOfBytesPerChunk *int32) { +func (h *hyperDbg) HardwareScriptInterpreterCompressBuffer(Buffer *Uint64, BufferLength int32, ScriptVariableLength uint32, BramDataWidth uint32, NewBufferSize *int32, NumberOfBytesPerChunk *int32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) HardwareScriptInterpreterConvertSymbolToHwdbgShortSymbolBuffer(InstanceInfo *HwdbgInstanceInformation, SymbolBuffer unsafe.Pointer, SymbolBufferLength int32, NumberOfStages Uint32, NewShortSymbolBuffer *unsafe.Pointer, NewBufferSize *int32) { +func (h *hyperDbg) HardwareScriptInterpreterConvertSymbolToHwdbgShortSymbolBuffer(InstanceInfo *HwdbgInstanceInformation, SymbolBuffer unsafe.Pointer, SymbolBufferLength int32, NumberOfStages uint32, NewShortSymbolBuffer *unsafe.Pointer, NewBufferSize *int32) { //TODO implement me panic("implement me") } @@ -427,27 +427,27 @@ func (h *hyperDbg) ScriptEngineConvertNameToAddress(FunctionOrVariableName *byte panic("implement me") } -func (h *hyperDbg) ScriptEngineLoadFileSymbol(BaseAddress Uint64, PdbFileName *byte, CustomModuleName *byte) Uint32 { +func (h *hyperDbg) ScriptEngineLoadFileSymbol(BaseAddress Uint64, PdbFileName *byte, CustomModuleName *byte) uint32 { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineUnloadAllSymbols() Uint32 { +func (h *hyperDbg) ScriptEngineUnloadAllSymbols() uint32 { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineUnloadModuleSymbol(ModuleName *byte) Uint32 { +func (h *hyperDbg) ScriptEngineUnloadModuleSymbol(ModuleName *byte) uint32 { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineSearchSymbolForMask(SearchMask *byte) Uint32 { +func (h *hyperDbg) ScriptEngineSearchSymbolForMask(SearchMask *byte) uint32 { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *Uint32) { +func (h *hyperDbg) ScriptEngineGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *uint32) { //TODO implement me panic("implement me") } @@ -472,7 +472,7 @@ func (h *hyperDbg) ScriptEngineConvertFileToPdbFileAndGuidAndAgeDetails(LocalFil panic("implement me") } -func (h *hyperDbg) ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength Uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) { +func (h *hyperDbg) ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) { //TODO implement me panic("implement me") } @@ -507,27 +507,27 @@ func (h *hyperDbg) SymConvertNameToAddress(FunctionOrVariableName *byte, WasFoun panic("implement me") } -func (h *hyperDbg) SymLoadFileSymbol(BaseAddress Uint64, PdbFileName *byte, CustomModuleName *byte) Uint32 { +func (h *hyperDbg) SymLoadFileSymbol(BaseAddress Uint64, PdbFileName *byte, CustomModuleName *byte) uint32 { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymUnloadAllSymbols() Uint32 { +func (h *hyperDbg) SymUnloadAllSymbols() uint32 { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymUnloadModuleSymbol(ModuleName *byte) Uint32 { +func (h *hyperDbg) SymUnloadModuleSymbol(ModuleName *byte) uint32 { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymSearchSymbolForMask(SearchMask *byte) Uint32 { +func (h *hyperDbg) SymSearchSymbolForMask(SearchMask *byte) uint32 { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *Uint32) { +func (h *hyperDbg) SymGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *uint32) { //TODO implement me panic("implement me") } @@ -552,7 +552,7 @@ func (h *hyperDbg) SymConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *by panic("implement me") } -func (h *hyperDbg) SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength Uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) { +func (h *hyperDbg) SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) { //TODO implement me panic("implement me") } @@ -562,12 +562,12 @@ func (h *hyperDbg) SymShowDataBasedOnSymbolTypes(TypeName *byte, Address Uint64, panic("implement me") } -func (h *hyperDbg) SymQuerySizeof(StructNameOrTypeName *byte, SizeOfField *Uint32) { +func (h *hyperDbg) SymQuerySizeof(StructNameOrTypeName *byte, SizeOfField *uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymCastingQueryForFiledsAndTypes(StructName *byte, FiledOfStructName *byte, IsStructNamePointerOrNot Pboolean, IsFiledOfStructNamePointerOrNot Pboolean, NewStructOrTypeName **byte, OffsetOfFieldFromTop *Uint32, SizeOfField *Uint32) { +func (h *hyperDbg) SymCastingQueryForFiledsAndTypes(StructName *byte, FiledOfStructName *byte, IsStructNamePointerOrNot Pboolean, IsFiledOfStructNamePointerOrNot Pboolean, NewStructOrTypeName **byte, OffsetOfFieldFromTop *uint32, SizeOfField *uint32) { //TODO implement me panic("implement me") } From 5590f41080220a3b96fdb2236c347d415787c5ad Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 24 Nov 2024 23:24:43 +0800 Subject: [PATCH 12/37] fix https://github.com/ddkwork/debuger/issues/10 --- sdk/api.go | 66 +++++++++++++++++++++++++++--------------------------- 1 file changed, 33 insertions(+), 33 deletions(-) diff --git a/sdk/api.go b/sdk/api.go index e707c790..fa75fbf9 100644 --- a/sdk/api.go +++ b/sdk/api.go @@ -34,18 +34,18 @@ type API interface { ConnectRemoteDebuggerUsingNamedPipe(named_pipe *Char, pause_after_connection Boolean) Boolean ConnectCurrentDebuggerUsingComPort(port_name *Char, baudrate Dword) Boolean DebugCloseRemoteDebugger() Boolean - GetKernelBase() Uint64 - ReadMemory(target_address Uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid uint32, size uint32, get_address_mode Boolean, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store *Byte, return_length *uint32) Boolean - ShowMemoryOrDisassemble(style DebuggerShowMemoryStyle, address Uint64, memory_type DebuggerReadMemoryType, reading_type DebuggerReadReadingType, pid uint32, size uint32, dt_details PdebuggerDtCommandOptions) + GetKernelBase() uint64 + ReadMemory(target_address uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid uint32, size uint32, get_address_mode Boolean, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store *Byte, return_length *uint32) Boolean + ShowMemoryOrDisassemble(style DebuggerShowMemoryStyle, address uint64, memory_type DebuggerReadMemoryType, reading_type DebuggerReadReadingType, pid uint32, size uint32, dt_details PdebuggerDtCommandOptions) WriteMemory(destination_address unsafe.Pointer, memory_type DebuggerEditMemoryType, process_id uint32, source_address unsafe.Pointer, number_of_bytes uint32) Boolean ReadAllRegisters(guest_registers unsafe.Pointer, extra_registers unsafe.Pointer) Boolean - ReadTargetRegister(register_id RegsEnum, target_register *Uint64) Boolean - WriteTargetRegister(register_id RegsEnum, value Uint64) Boolean + ReadTargetRegister(register_id RegsEnum, target_register *uint64) Boolean + WriteTargetRegister(register_id RegsEnum, value uint64) Boolean ShowAllRegisters() Boolean ShowTargetRegister(register_id RegsEnum) Boolean ContinueDebuggee() PauseDebuggee() - SetBreakpoint(address Uint64, pid uint32, tid uint32, core_numer uint32) + SetBreakpoint(address uint64, pid uint32, tid uint32, core_numer uint32) SteppingInstrumentationStepIn() Boolean SteppingRegularStepIn() Boolean SteppingStepOver() Boolean @@ -54,13 +54,13 @@ type API interface { StartProcess(path *Wchar) Boolean StartProcessWithArgs(path *Wchar, arguments *Wchar) Boolean CommandGetLocalApic(local_apic PlapicPage, is_using_x2apic *Boolean) Boolean - AssembleGetLength(assembly_code *Char, start_address Uint64, length *uint32) Boolean - Assemble(assembly_code *Char, start_address Uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size uint32) Boolean + AssembleGetLength(assembly_code *Char, start_address uint64, length *uint32) Boolean + Assemble(assembly_code *Char, start_address uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size uint32) Boolean HwdbgScriptRunScript(script *Char, instance_filepath_to_read *Char, hardware_script_file_path_to_save *Char, initial_bram_buffer_size uint32) Boolean HwdbgScriptEngineWrapperTestParser(Expr *Char) HardwareScriptInterpreterShowScriptCapabilities(InstanceInfo *HwdbgInstanceInformation) HardwareScriptInterpreterCheckScriptBufferWithScriptCapabilities(InstanceInfo *HwdbgInstanceInformation, ScriptBuffer unsafe.Pointer, CountOfScriptSymbolChunks uint32, NumberOfStages *uint32, NumberOfOperands *uint32, NumberOfOperandsImplemented *uint32) Boolean - HardwareScriptInterpreterCompressBuffer(Buffer *Uint64, BufferLength int32, ScriptVariableLength uint32, BramDataWidth uint32, NewBufferSize *int32, NumberOfBytesPerChunk *int32) Boolean + HardwareScriptInterpreterCompressBuffer(Buffer *uint64, BufferLength int32, ScriptVariableLength uint32, BramDataWidth uint32, NewBufferSize *int32, NumberOfBytesPerChunk *int32) Boolean HardwareScriptInterpreterConvertSymbolToHwdbgShortSymbolBuffer(InstanceInfo *HwdbgInstanceInformation, SymbolBuffer unsafe.Pointer, SymbolBufferLength int32, NumberOfStages uint32, NewShortSymbolBuffer *unsafe.Pointer, NewBufferSize *int32) Boolean HardwareScriptInterpreterFreeHwdbgShortSymbolBuffer(NewShortSymbolBuffer unsafe.Pointer) ScriptEngineParse(str *byte) unsafe.Pointer @@ -68,34 +68,34 @@ type API interface { PrintSymbolBuffer(SymbolBuffer unsafe.Pointer) RemoveSymbolBuffer(SymbolBuffer unsafe.Pointer) PrintSymbol(Symbol unsafe.Pointer) - ScriptEngineConvertNameToAddress(FunctionOrVariableName *byte, WasFound Pboolean) Uint64 - ScriptEngineLoadFileSymbol(BaseAddress Uint64, PdbFileName *byte, CustomModuleName *byte) uint32 + ScriptEngineConvertNameToAddress(FunctionOrVariableName *byte, WasFound Pboolean) uint64 + ScriptEngineLoadFileSymbol(BaseAddress uint64, PdbFileName *byte, CustomModuleName *byte) uint32 ScriptEngineUnloadAllSymbols() uint32 ScriptEngineUnloadModuleSymbol(ModuleName *byte) uint32 ScriptEngineSearchSymbolForMask(SearchMask *byte) uint32 ScriptEngineGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *uint32) Boolean - ScriptEngineGetDataTypeSize(TypeName *Char, TypeSize *Uint64) Boolean + ScriptEngineGetDataTypeSize(TypeName *Char, TypeSize *uint64) Boolean ScriptEngineCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) Boolean ScriptEngineConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) Boolean ScriptEngineConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule Boolean) Boolean ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) Boolean - ScriptEngineShowDataBasedOnSymbolTypes(TypeName *byte, Address Uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) Boolean + ScriptEngineShowDataBasedOnSymbolTypes(TypeName *byte, Address uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) Boolean ScriptEngineSymbolAbortLoading() ScriptEngineSetTextMessageCallback(Handler unsafe.Pointer) SymSetTextMessageCallback(Handler unsafe.Pointer) SymbolAbortLoading() - SymConvertNameToAddress(FunctionOrVariableName *byte, WasFound Pboolean) Uint64 - SymLoadFileSymbol(BaseAddress Uint64, PdbFileName *byte, CustomModuleName *byte) uint32 + SymConvertNameToAddress(FunctionOrVariableName *byte, WasFound Pboolean) uint64 + SymLoadFileSymbol(BaseAddress uint64, PdbFileName *byte, CustomModuleName *byte) uint32 SymUnloadAllSymbols() uint32 SymUnloadModuleSymbol(ModuleName *byte) uint32 SymSearchSymbolForMask(SearchMask *byte) uint32 SymGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *uint32) Boolean - SymGetDataTypeSize(TypeName *Char, TypeSize *Uint64) Boolean + SymGetDataTypeSize(TypeName *Char, TypeSize *uint64) Boolean SymCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) Boolean SymConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) Boolean SymConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule Boolean) Boolean SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) Boolean - SymShowDataBasedOnSymbolTypes(TypeName *byte, Address Uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) Boolean + SymShowDataBasedOnSymbolTypes(TypeName *byte, Address uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) Boolean SymQuerySizeof(StructNameOrTypeName *byte, SizeOfField *uint32) Boolean SymCastingQueryForFiledsAndTypes(StructName *byte, FiledOfStructName *byte, IsStructNamePointerOrNot Pboolean, IsFiledOfStructNamePointerOrNot Pboolean, NewStructOrTypeName **byte, OffsetOfFieldFromTop *uint32, SizeOfField *uint32) Boolean } @@ -257,12 +257,12 @@ func (h *hyperDbg) GetKernelBase() uint64 { panic("implement me") } -func (h *hyperDbg) ReadMemory(target_address Uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid uint32, size uint32, get_address_mode Boolean, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store *Byte, return_length *uint32) { +func (h *hyperDbg) ReadMemory(target_address uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid uint32, size uint32, get_address_mode Boolean, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store *Byte, return_length *uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ShowMemoryOrDisassemble(style DebuggerShowMemoryStyle, address Uint64, memory_type DebuggerReadMemoryType, reading_type DebuggerReadReadingType, pid uint32, size uint32, dt_details PdebuggerDtCommandOptions) { +func (h *hyperDbg) ShowMemoryOrDisassemble(style DebuggerShowMemoryStyle, address uint64, memory_type DebuggerReadMemoryType, reading_type DebuggerReadReadingType, pid uint32, size uint32, dt_details PdebuggerDtCommandOptions) { //TODO implement me panic("implement me") } @@ -277,12 +277,12 @@ func (h *hyperDbg) ReadAllRegisters(guest_registers unsafe.Pointer, extra_regist panic("implement me") } -func (h *hyperDbg) ReadTargetRegister(register_id RegsEnum, target_register *Uint64) { +func (h *hyperDbg) ReadTargetRegister(register_id RegsEnum, target_register *uint64) { //TODO implement me panic("implement me") } -func (h *hyperDbg) WriteTargetRegister(register_id RegsEnum, value Uint64) { +func (h *hyperDbg) WriteTargetRegister(register_id RegsEnum, value uint64) { //TODO implement me panic("implement me") } @@ -307,7 +307,7 @@ func (h *hyperDbg) PauseDebuggee() { panic("implement me") } -func (h *hyperDbg) SetBreakpoint(address Uint64, pid uint32, tid uint32, core_numer uint32) { +func (h *hyperDbg) SetBreakpoint(address uint64, pid uint32, tid uint32, core_numer uint32) { //TODO implement me panic("implement me") } @@ -352,12 +352,12 @@ func (h *hyperDbg) CommandGetLocalApic(local_apic PlapicPage, is_using_x2apic *B panic("implement me") } -func (h *hyperDbg) AssembleGetLength(assembly_code *Char, start_address Uint64, length *uint32) { +func (h *hyperDbg) AssembleGetLength(assembly_code *Char, start_address uint64, length *uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) Assemble(assembly_code *Char, start_address Uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size uint32) { +func (h *hyperDbg) Assemble(assembly_code *Char, start_address uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size uint32) { //TODO implement me panic("implement me") } @@ -382,7 +382,7 @@ func (h *hyperDbg) HardwareScriptInterpreterCheckScriptBufferWithScriptCapabilit panic("implement me") } -func (h *hyperDbg) HardwareScriptInterpreterCompressBuffer(Buffer *Uint64, BufferLength int32, ScriptVariableLength uint32, BramDataWidth uint32, NewBufferSize *int32, NumberOfBytesPerChunk *int32) { +func (h *hyperDbg) HardwareScriptInterpreterCompressBuffer(Buffer *uint64, BufferLength int32, ScriptVariableLength uint32, BramDataWidth uint32, NewBufferSize *int32, NumberOfBytesPerChunk *int32) { //TODO implement me panic("implement me") } @@ -422,12 +422,12 @@ func (h *hyperDbg) PrintSymbol(Symbol unsafe.Pointer) { panic("implement me") } -func (h *hyperDbg) ScriptEngineConvertNameToAddress(FunctionOrVariableName *byte, WasFound Pboolean) Uint64 { +func (h *hyperDbg) ScriptEngineConvertNameToAddress(FunctionOrVariableName *byte, WasFound Pboolean) uint64 { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineLoadFileSymbol(BaseAddress Uint64, PdbFileName *byte, CustomModuleName *byte) uint32 { +func (h *hyperDbg) ScriptEngineLoadFileSymbol(BaseAddress uint64, PdbFileName *byte, CustomModuleName *byte) uint32 { //TODO implement me panic("implement me") } @@ -452,7 +452,7 @@ func (h *hyperDbg) ScriptEngineGetFieldOffset(TypeName *Char, FieldName *Char, F panic("implement me") } -func (h *hyperDbg) ScriptEngineGetDataTypeSize(TypeName *Char, TypeSize *Uint64) { +func (h *hyperDbg) ScriptEngineGetDataTypeSize(TypeName *Char, TypeSize *uint64) { //TODO implement me panic("implement me") } @@ -477,7 +477,7 @@ func (h *hyperDbg) ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointe panic("implement me") } -func (h *hyperDbg) ScriptEngineShowDataBasedOnSymbolTypes(TypeName *byte, Address Uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) { +func (h *hyperDbg) ScriptEngineShowDataBasedOnSymbolTypes(TypeName *byte, Address uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) { //TODO implement me panic("implement me") } @@ -502,12 +502,12 @@ func (h *hyperDbg) SymbolAbortLoading() { panic("implement me") } -func (h *hyperDbg) SymConvertNameToAddress(FunctionOrVariableName *byte, WasFound Pboolean) Uint64 { +func (h *hyperDbg) SymConvertNameToAddress(FunctionOrVariableName *byte, WasFound Pboolean) uint64 { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymLoadFileSymbol(BaseAddress Uint64, PdbFileName *byte, CustomModuleName *byte) uint32 { +func (h *hyperDbg) SymLoadFileSymbol(BaseAddress uint64, PdbFileName *byte, CustomModuleName *byte) uint32 { //TODO implement me panic("implement me") } @@ -532,7 +532,7 @@ func (h *hyperDbg) SymGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffse panic("implement me") } -func (h *hyperDbg) SymGetDataTypeSize(TypeName *Char, TypeSize *Uint64) { +func (h *hyperDbg) SymGetDataTypeSize(TypeName *Char, TypeSize *uint64) { //TODO implement me panic("implement me") } @@ -557,7 +557,7 @@ func (h *hyperDbg) SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLen panic("implement me") } -func (h *hyperDbg) SymShowDataBasedOnSymbolTypes(TypeName *byte, Address Uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) { +func (h *hyperDbg) SymShowDataBasedOnSymbolTypes(TypeName *byte, Address uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) { //TODO implement me panic("implement me") } From 3675c480597e020381224f8d421c7295f82ba5e6 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 24 Nov 2024 23:25:46 +0800 Subject: [PATCH 13/37] fix https://github.com/ddkwork/debuger/issues/10 --- sdk/api.go | 134 ++++++++++++++++++++++++++--------------------------- 1 file changed, 67 insertions(+), 67 deletions(-) diff --git a/sdk/api.go b/sdk/api.go index fa75fbf9..12c739e6 100644 --- a/sdk/api.go +++ b/sdk/api.go @@ -8,96 +8,96 @@ import ( type API interface { init() - DetectVmxSupport() Boolean + DetectVmxSupport() bool ReadVendorString(arg0 *Char) LoadVmm() Int UnloadVmm() Int InstallVmmDriver() Int UninstallVmmDriver() Int StopVmmDriver() Int - TestCommandParser(command *Char, number_of_tokens uint32, tokens_list **Char, failed_token_num *uint32, failed_token_position *uint32) Boolean + TestCommandParser(command *Char, number_of_tokens uint32, tokens_list **Char, failed_token_num *uint32, failed_token_position *uint32) bool TestCommandParserShowTokens(command *Char) - SetupPathForFilename(filename *Char, file_location *Char, buffer_len uint32, check_file_existence Boolean) Boolean + SetupPathForFilename(filename *Char, file_location *Char, buffer_len uint32, check_file_existence bool) bool RunCommand(command *Char) Int ShowSignature() SetTextMessageCallback(handler unsafe.Pointer) SetTextMessageCallbackUsingSharedBuffer(handler unsafe.Pointer) unsafe.Pointer UnsetTextMessageCallback() ScriptReadFileAndExecuteCommandline(argc Int, argv **Char) Int - ContinuePreviousCommand() Boolean - CheckMultilineCommand(current_command *Char, reset Boolean) Boolean - SetCustomDriverPath(driver_file_path *Char, driver_name *Char) Boolean + ContinuePreviousCommand() bool + CheckMultilineCommand(current_command *Char, reset bool) bool + SetCustomDriverPath(driver_file_path *Char, driver_name *Char) bool UseDefaultDriverPath() ConnectLocalDebugger() - ConnectRemoteDebugger(ip *Char, port *Char) Boolean - ConnectRemoteDebuggerUsingComPort(port_name *Char, baudrate Dword, pause_after_connection Boolean) Boolean - ConnectRemoteDebuggerUsingNamedPipe(named_pipe *Char, pause_after_connection Boolean) Boolean - ConnectCurrentDebuggerUsingComPort(port_name *Char, baudrate Dword) Boolean - DebugCloseRemoteDebugger() Boolean + ConnectRemoteDebugger(ip *Char, port *Char) bool + ConnectRemoteDebuggerUsingComPort(port_name *Char, baudrate Dword, pause_after_connection bool) bool + ConnectRemoteDebuggerUsingNamedPipe(named_pipe *Char, pause_after_connection bool) bool + ConnectCurrentDebuggerUsingComPort(port_name *Char, baudrate Dword) bool + DebugCloseRemoteDebugger() bool GetKernelBase() uint64 - ReadMemory(target_address uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid uint32, size uint32, get_address_mode Boolean, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store *Byte, return_length *uint32) Boolean + ReadMemory(target_address uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid uint32, size uint32, get_address_mode bool, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store *Byte, return_length *uint32) bool ShowMemoryOrDisassemble(style DebuggerShowMemoryStyle, address uint64, memory_type DebuggerReadMemoryType, reading_type DebuggerReadReadingType, pid uint32, size uint32, dt_details PdebuggerDtCommandOptions) - WriteMemory(destination_address unsafe.Pointer, memory_type DebuggerEditMemoryType, process_id uint32, source_address unsafe.Pointer, number_of_bytes uint32) Boolean - ReadAllRegisters(guest_registers unsafe.Pointer, extra_registers unsafe.Pointer) Boolean - ReadTargetRegister(register_id RegsEnum, target_register *uint64) Boolean - WriteTargetRegister(register_id RegsEnum, value uint64) Boolean - ShowAllRegisters() Boolean - ShowTargetRegister(register_id RegsEnum) Boolean + WriteMemory(destination_address unsafe.Pointer, memory_type DebuggerEditMemoryType, process_id uint32, source_address unsafe.Pointer, number_of_bytes uint32) bool + ReadAllRegisters(guest_registers unsafe.Pointer, extra_registers unsafe.Pointer) bool + ReadTargetRegister(register_id RegsEnum, target_register *uint64) bool + WriteTargetRegister(register_id RegsEnum, value uint64) bool + ShowAllRegisters() bool + ShowTargetRegister(register_id RegsEnum) bool ContinueDebuggee() PauseDebuggee() SetBreakpoint(address uint64, pid uint32, tid uint32, core_numer uint32) - SteppingInstrumentationStepIn() Boolean - SteppingRegularStepIn() Boolean - SteppingStepOver() Boolean - SteppingInstrumentationStepInForTracking() Boolean - SteppingStepOverForGu(last_instruction Boolean) Boolean - StartProcess(path *Wchar) Boolean - StartProcessWithArgs(path *Wchar, arguments *Wchar) Boolean - CommandGetLocalApic(local_apic PlapicPage, is_using_x2apic *Boolean) Boolean - AssembleGetLength(assembly_code *Char, start_address uint64, length *uint32) Boolean - Assemble(assembly_code *Char, start_address uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size uint32) Boolean - HwdbgScriptRunScript(script *Char, instance_filepath_to_read *Char, hardware_script_file_path_to_save *Char, initial_bram_buffer_size uint32) Boolean + SteppingInstrumentationStepIn() bool + SteppingRegularStepIn() bool + SteppingStepOver() bool + SteppingInstrumentationStepInForTracking() bool + SteppingStepOverForGu(last_instruction bool) bool + StartProcess(path *Wchar) bool + StartProcessWithArgs(path *Wchar, arguments *Wchar) bool + CommandGetLocalApic(local_apic PlapicPage, is_using_x2apic *bool) bool + AssembleGetLength(assembly_code *Char, start_address uint64, length *uint32) bool + Assemble(assembly_code *Char, start_address uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size uint32) bool + HwdbgScriptRunScript(script *Char, instance_filepath_to_read *Char, hardware_script_file_path_to_save *Char, initial_bram_buffer_size uint32) bool HwdbgScriptEngineWrapperTestParser(Expr *Char) HardwareScriptInterpreterShowScriptCapabilities(InstanceInfo *HwdbgInstanceInformation) - HardwareScriptInterpreterCheckScriptBufferWithScriptCapabilities(InstanceInfo *HwdbgInstanceInformation, ScriptBuffer unsafe.Pointer, CountOfScriptSymbolChunks uint32, NumberOfStages *uint32, NumberOfOperands *uint32, NumberOfOperandsImplemented *uint32) Boolean - HardwareScriptInterpreterCompressBuffer(Buffer *uint64, BufferLength int32, ScriptVariableLength uint32, BramDataWidth uint32, NewBufferSize *int32, NumberOfBytesPerChunk *int32) Boolean - HardwareScriptInterpreterConvertSymbolToHwdbgShortSymbolBuffer(InstanceInfo *HwdbgInstanceInformation, SymbolBuffer unsafe.Pointer, SymbolBufferLength int32, NumberOfStages uint32, NewShortSymbolBuffer *unsafe.Pointer, NewBufferSize *int32) Boolean + HardwareScriptInterpreterCheckScriptBufferWithScriptCapabilities(InstanceInfo *HwdbgInstanceInformation, ScriptBuffer unsafe.Pointer, CountOfScriptSymbolChunks uint32, NumberOfStages *uint32, NumberOfOperands *uint32, NumberOfOperandsImplemented *uint32) bool + HardwareScriptInterpreterCompressBuffer(Buffer *uint64, BufferLength int32, ScriptVariableLength uint32, BramDataWidth uint32, NewBufferSize *int32, NumberOfBytesPerChunk *int32) bool + HardwareScriptInterpreterConvertSymbolToHwdbgShortSymbolBuffer(InstanceInfo *HwdbgInstanceInformation, SymbolBuffer unsafe.Pointer, SymbolBufferLength int32, NumberOfStages uint32, NewShortSymbolBuffer *unsafe.Pointer, NewBufferSize *int32) bool HardwareScriptInterpreterFreeHwdbgShortSymbolBuffer(NewShortSymbolBuffer unsafe.Pointer) ScriptEngineParse(str *byte) unsafe.Pointer - ScriptEngineSetHwdbgInstanceInfo(InstancInfo *HwdbgInstanceInformation) Boolean + ScriptEngineSetHwdbgInstanceInfo(InstancInfo *HwdbgInstanceInformation) bool PrintSymbolBuffer(SymbolBuffer unsafe.Pointer) RemoveSymbolBuffer(SymbolBuffer unsafe.Pointer) PrintSymbol(Symbol unsafe.Pointer) - ScriptEngineConvertNameToAddress(FunctionOrVariableName *byte, WasFound Pboolean) uint64 + ScriptEngineConvertNameToAddress(FunctionOrVariableName *byte, WasFound bool) uint64 ScriptEngineLoadFileSymbol(BaseAddress uint64, PdbFileName *byte, CustomModuleName *byte) uint32 ScriptEngineUnloadAllSymbols() uint32 ScriptEngineUnloadModuleSymbol(ModuleName *byte) uint32 ScriptEngineSearchSymbolForMask(SearchMask *byte) uint32 - ScriptEngineGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *uint32) Boolean - ScriptEngineGetDataTypeSize(TypeName *Char, TypeSize *uint64) Boolean - ScriptEngineCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) Boolean - ScriptEngineConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) Boolean - ScriptEngineConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule Boolean) Boolean - ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) Boolean - ScriptEngineShowDataBasedOnSymbolTypes(TypeName *byte, Address uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) Boolean + ScriptEngineGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *uint32) bool + ScriptEngineGetDataTypeSize(TypeName *Char, TypeSize *uint64) bool + ScriptEngineCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) bool + ScriptEngineConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) bool + ScriptEngineConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule bool) bool + ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable bool, SymbolPath *byte, IsSilentLoad bool) bool + ScriptEngineShowDataBasedOnSymbolTypes(TypeName *byte, Address uint64, IsStruct bool, BufferAddress unsafe.Pointer, AdditionalParameters *byte) bool ScriptEngineSymbolAbortLoading() ScriptEngineSetTextMessageCallback(Handler unsafe.Pointer) SymSetTextMessageCallback(Handler unsafe.Pointer) SymbolAbortLoading() - SymConvertNameToAddress(FunctionOrVariableName *byte, WasFound Pboolean) uint64 + SymConvertNameToAddress(FunctionOrVariableName *byte, WasFound bool) uint64 SymLoadFileSymbol(BaseAddress uint64, PdbFileName *byte, CustomModuleName *byte) uint32 SymUnloadAllSymbols() uint32 SymUnloadModuleSymbol(ModuleName *byte) uint32 SymSearchSymbolForMask(SearchMask *byte) uint32 - SymGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *uint32) Boolean - SymGetDataTypeSize(TypeName *Char, TypeSize *uint64) Boolean - SymCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) Boolean - SymConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) Boolean - SymConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule Boolean) Boolean - SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) Boolean - SymShowDataBasedOnSymbolTypes(TypeName *byte, Address uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) Boolean - SymQuerySizeof(StructNameOrTypeName *byte, SizeOfField *uint32) Boolean - SymCastingQueryForFiledsAndTypes(StructName *byte, FiledOfStructName *byte, IsStructNamePointerOrNot Pboolean, IsFiledOfStructNamePointerOrNot Pboolean, NewStructOrTypeName **byte, OffsetOfFieldFromTop *uint32, SizeOfField *uint32) Boolean + SymGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *uint32) bool + SymGetDataTypeSize(TypeName *Char, TypeSize *uint64) bool + SymCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) bool + SymConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) bool + SymConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule bool) bool + SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable bool, SymbolPath *byte, IsSilentLoad bool) bool + SymShowDataBasedOnSymbolTypes(TypeName *byte, Address uint64, IsStruct bool, BufferAddress unsafe.Pointer, AdditionalParameters *byte) bool + SymQuerySizeof(StructNameOrTypeName *byte, SizeOfField *uint32) bool + SymCastingQueryForFiledsAndTypes(StructName *byte, FiledOfStructName *byte, IsStructNamePointerOrNot bool, IsFiledOfStructNamePointerOrNot bool, NewStructOrTypeName **byte, OffsetOfFieldFromTop *uint32, SizeOfField *uint32) bool } type hyperDbg struct { @@ -172,7 +172,7 @@ func (h *hyperDbg) TestCommandParserShowTokens(command *Char) { panic("implement me") } -func (h *hyperDbg) SetupPathForFilename(filename *Char, file_location *Char, buffer_len uint32, check_file_existence Boolean) { +func (h *hyperDbg) SetupPathForFilename(filename *Char, file_location *Char, buffer_len uint32, check_file_existence bool) { //TODO implement me panic("implement me") } @@ -207,7 +207,7 @@ func (h *hyperDbg) ContinuePreviousCommand() { panic("implement me") } -func (h *hyperDbg) CheckMultilineCommand(current_command *Char, reset Boolean) { +func (h *hyperDbg) CheckMultilineCommand(current_command *Char, reset bool) { //TODO implement me panic("implement me") } @@ -232,12 +232,12 @@ func (h *hyperDbg) ConnectRemoteDebugger(ip *Char, port *Char) { panic("implement me") } -func (h *hyperDbg) ConnectRemoteDebuggerUsingComPort(port_name *Char, baudrate Dword, pause_after_connection Boolean) { +func (h *hyperDbg) ConnectRemoteDebuggerUsingComPort(port_name *Char, baudrate Dword, pause_after_connection bool) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ConnectRemoteDebuggerUsingNamedPipe(named_pipe *Char, pause_after_connection Boolean) { +func (h *hyperDbg) ConnectRemoteDebuggerUsingNamedPipe(named_pipe *Char, pause_after_connection bool) { //TODO implement me panic("implement me") } @@ -257,7 +257,7 @@ func (h *hyperDbg) GetKernelBase() uint64 { panic("implement me") } -func (h *hyperDbg) ReadMemory(target_address uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid uint32, size uint32, get_address_mode Boolean, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store *Byte, return_length *uint32) { +func (h *hyperDbg) ReadMemory(target_address uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid uint32, size uint32, get_address_mode bool, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store *Byte, return_length *uint32) { //TODO implement me panic("implement me") } @@ -332,7 +332,7 @@ func (h *hyperDbg) SteppingInstrumentationStepInForTracking() { panic("implement me") } -func (h *hyperDbg) SteppingStepOverForGu(last_instruction Boolean) { +func (h *hyperDbg) SteppingStepOverForGu(last_instruction bool) { //TODO implement me panic("implement me") } @@ -347,7 +347,7 @@ func (h *hyperDbg) StartProcessWithArgs(path *Wchar, arguments *Wchar) { panic("implement me") } -func (h *hyperDbg) CommandGetLocalApic(local_apic PlapicPage, is_using_x2apic *Boolean) { +func (h *hyperDbg) CommandGetLocalApic(local_apic PlapicPage, is_using_x2apic *bool) { //TODO implement me panic("implement me") } @@ -422,7 +422,7 @@ func (h *hyperDbg) PrintSymbol(Symbol unsafe.Pointer) { panic("implement me") } -func (h *hyperDbg) ScriptEngineConvertNameToAddress(FunctionOrVariableName *byte, WasFound Pboolean) uint64 { +func (h *hyperDbg) ScriptEngineConvertNameToAddress(FunctionOrVariableName *byte, WasFound bool) uint64 { //TODO implement me panic("implement me") } @@ -467,17 +467,17 @@ func (h *hyperDbg) ScriptEngineConvertFileToPdbPath(LocalFilePath *byte, ResultP panic("implement me") } -func (h *hyperDbg) ScriptEngineConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule Boolean) { +func (h *hyperDbg) ScriptEngineConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule bool) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) { +func (h *hyperDbg) ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable bool, SymbolPath *byte, IsSilentLoad bool) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineShowDataBasedOnSymbolTypes(TypeName *byte, Address uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) { +func (h *hyperDbg) ScriptEngineShowDataBasedOnSymbolTypes(TypeName *byte, Address uint64, IsStruct bool, BufferAddress unsafe.Pointer, AdditionalParameters *byte) { //TODO implement me panic("implement me") } @@ -502,7 +502,7 @@ func (h *hyperDbg) SymbolAbortLoading() { panic("implement me") } -func (h *hyperDbg) SymConvertNameToAddress(FunctionOrVariableName *byte, WasFound Pboolean) uint64 { +func (h *hyperDbg) SymConvertNameToAddress(FunctionOrVariableName *byte, WasFound bool) uint64 { //TODO implement me panic("implement me") } @@ -547,17 +547,17 @@ func (h *hyperDbg) SymConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte panic("implement me") } -func (h *hyperDbg) SymConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule Boolean) { +func (h *hyperDbg) SymConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule bool) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable Boolean, SymbolPath *byte, IsSilentLoad Boolean) { +func (h *hyperDbg) SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable bool, SymbolPath *byte, IsSilentLoad bool) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymShowDataBasedOnSymbolTypes(TypeName *byte, Address uint64, IsStruct Boolean, BufferAddress unsafe.Pointer, AdditionalParameters *byte) { +func (h *hyperDbg) SymShowDataBasedOnSymbolTypes(TypeName *byte, Address uint64, IsStruct bool, BufferAddress unsafe.Pointer, AdditionalParameters *byte) { //TODO implement me panic("implement me") } @@ -567,7 +567,7 @@ func (h *hyperDbg) SymQuerySizeof(StructNameOrTypeName *byte, SizeOfField *uint3 panic("implement me") } -func (h *hyperDbg) SymCastingQueryForFiledsAndTypes(StructName *byte, FiledOfStructName *byte, IsStructNamePointerOrNot Pboolean, IsFiledOfStructNamePointerOrNot Pboolean, NewStructOrTypeName **byte, OffsetOfFieldFromTop *uint32, SizeOfField *uint32) { +func (h *hyperDbg) SymCastingQueryForFiledsAndTypes(StructName *byte, FiledOfStructName *byte, IsStructNamePointerOrNot bool, IsFiledOfStructNamePointerOrNot bool, NewStructOrTypeName **byte, OffsetOfFieldFromTop *uint32, SizeOfField *uint32) { //TODO implement me panic("implement me") } From 14c5e0608959703a3d288eb163cea9ba3fdf3745 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 24 Nov 2024 23:26:25 +0800 Subject: [PATCH 14/37] fix https://github.com/ddkwork/debuger/issues/10 --- sdk/api.go | 78 +++++++++++++++++++++++++++--------------------------- 1 file changed, 39 insertions(+), 39 deletions(-) diff --git a/sdk/api.go b/sdk/api.go index 12c739e6..7c59a302 100644 --- a/sdk/api.go +++ b/sdk/api.go @@ -9,30 +9,30 @@ import ( type API interface { init() DetectVmxSupport() bool - ReadVendorString(arg0 *Char) + ReadVendorString(arg0 string) LoadVmm() Int UnloadVmm() Int InstallVmmDriver() Int UninstallVmmDriver() Int StopVmmDriver() Int - TestCommandParser(command *Char, number_of_tokens uint32, tokens_list **Char, failed_token_num *uint32, failed_token_position *uint32) bool - TestCommandParserShowTokens(command *Char) - SetupPathForFilename(filename *Char, file_location *Char, buffer_len uint32, check_file_existence bool) bool - RunCommand(command *Char) Int + TestCommandParser(command string, number_of_tokens uint32, tokens_list *string, failed_token_num *uint32, failed_token_position *uint32) bool + TestCommandParserShowTokens(command string) + SetupPathForFilename(filename string, file_location string, buffer_len uint32, check_file_existence bool) bool + RunCommand(command string) Int ShowSignature() SetTextMessageCallback(handler unsafe.Pointer) SetTextMessageCallbackUsingSharedBuffer(handler unsafe.Pointer) unsafe.Pointer UnsetTextMessageCallback() - ScriptReadFileAndExecuteCommandline(argc Int, argv **Char) Int + ScriptReadFileAndExecuteCommandline(argc Int, argv *string) Int ContinuePreviousCommand() bool - CheckMultilineCommand(current_command *Char, reset bool) bool - SetCustomDriverPath(driver_file_path *Char, driver_name *Char) bool + CheckMultilineCommand(current_command string, reset bool) bool + SetCustomDriverPath(driver_file_path string, driver_name string) bool UseDefaultDriverPath() ConnectLocalDebugger() - ConnectRemoteDebugger(ip *Char, port *Char) bool - ConnectRemoteDebuggerUsingComPort(port_name *Char, baudrate Dword, pause_after_connection bool) bool - ConnectRemoteDebuggerUsingNamedPipe(named_pipe *Char, pause_after_connection bool) bool - ConnectCurrentDebuggerUsingComPort(port_name *Char, baudrate Dword) bool + ConnectRemoteDebugger(ip string, port string) bool + ConnectRemoteDebuggerUsingComPort(port_name string, baudrate Dword, pause_after_connection bool) bool + ConnectRemoteDebuggerUsingNamedPipe(named_pipe string, pause_after_connection bool) bool + ConnectCurrentDebuggerUsingComPort(port_name string, baudrate Dword) bool DebugCloseRemoteDebugger() bool GetKernelBase() uint64 ReadMemory(target_address uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid uint32, size uint32, get_address_mode bool, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store *Byte, return_length *uint32) bool @@ -54,10 +54,10 @@ type API interface { StartProcess(path *Wchar) bool StartProcessWithArgs(path *Wchar, arguments *Wchar) bool CommandGetLocalApic(local_apic PlapicPage, is_using_x2apic *bool) bool - AssembleGetLength(assembly_code *Char, start_address uint64, length *uint32) bool - Assemble(assembly_code *Char, start_address uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size uint32) bool - HwdbgScriptRunScript(script *Char, instance_filepath_to_read *Char, hardware_script_file_path_to_save *Char, initial_bram_buffer_size uint32) bool - HwdbgScriptEngineWrapperTestParser(Expr *Char) + AssembleGetLength(assembly_code string, start_address uint64, length *uint32) bool + Assemble(assembly_code string, start_address uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size uint32) bool + HwdbgScriptRunScript(script string, instance_filepath_to_read string, hardware_script_file_path_to_save string, initial_bram_buffer_size uint32) bool + HwdbgScriptEngineWrapperTestParser(Expr string) HardwareScriptInterpreterShowScriptCapabilities(InstanceInfo *HwdbgInstanceInformation) HardwareScriptInterpreterCheckScriptBufferWithScriptCapabilities(InstanceInfo *HwdbgInstanceInformation, ScriptBuffer unsafe.Pointer, CountOfScriptSymbolChunks uint32, NumberOfStages *uint32, NumberOfOperands *uint32, NumberOfOperandsImplemented *uint32) bool HardwareScriptInterpreterCompressBuffer(Buffer *uint64, BufferLength int32, ScriptVariableLength uint32, BramDataWidth uint32, NewBufferSize *int32, NumberOfBytesPerChunk *int32) bool @@ -73,8 +73,8 @@ type API interface { ScriptEngineUnloadAllSymbols() uint32 ScriptEngineUnloadModuleSymbol(ModuleName *byte) uint32 ScriptEngineSearchSymbolForMask(SearchMask *byte) uint32 - ScriptEngineGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *uint32) bool - ScriptEngineGetDataTypeSize(TypeName *Char, TypeSize *uint64) bool + ScriptEngineGetFieldOffset(TypeName string, FieldName string, FieldOffset *uint32) bool + ScriptEngineGetDataTypeSize(TypeName string, TypeSize *uint64) bool ScriptEngineCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) bool ScriptEngineConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) bool ScriptEngineConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule bool) bool @@ -89,8 +89,8 @@ type API interface { SymUnloadAllSymbols() uint32 SymUnloadModuleSymbol(ModuleName *byte) uint32 SymSearchSymbolForMask(SearchMask *byte) uint32 - SymGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *uint32) bool - SymGetDataTypeSize(TypeName *Char, TypeSize *uint64) bool + SymGetFieldOffset(TypeName string, FieldName string, FieldOffset *uint32) bool + SymGetDataTypeSize(TypeName string, TypeSize *uint64) bool SymCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) bool SymConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) bool SymConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule bool) bool @@ -162,22 +162,22 @@ func (h *hyperDbg) StopVmmDriver() { panic("implement me") } -func (h *hyperDbg) TestCommandParser(command *Char, number_of_tokens uint32, tokens_list **Char, failed_token_num *uint32, failed_token_position *uint32) { +func (h *hyperDbg) TestCommandParser(command string, number_of_tokens uint32, tokens_list *string, failed_token_num *uint32, failed_token_position *uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) TestCommandParserShowTokens(command *Char) { +func (h *hyperDbg) TestCommandParserShowTokens(command string) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SetupPathForFilename(filename *Char, file_location *Char, buffer_len uint32, check_file_existence bool) { +func (h *hyperDbg) SetupPathForFilename(filename string, file_location string, buffer_len uint32, check_file_existence bool) { //TODO implement me panic("implement me") } -func (h *hyperDbg) RunCommand(command *Char) { +func (h *hyperDbg) RunCommand(command string) { //TODO implement me panic("implement me") } @@ -197,7 +197,7 @@ func (h *hyperDbg) UnsetLogCallback() { panic("implement me") } -func (h *hyperDbg) ScriptReadFileAndExecuteCommandline(argc Int, argv **Char) { +func (h *hyperDbg) ScriptReadFileAndExecuteCommandline(argc Int, argv *string) { //TODO implement me panic("implement me") } @@ -207,12 +207,12 @@ func (h *hyperDbg) ContinuePreviousCommand() { panic("implement me") } -func (h *hyperDbg) CheckMultilineCommand(current_command *Char, reset bool) { +func (h *hyperDbg) CheckMultilineCommand(current_command string, reset bool) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SetCustomDriverPath(driver_file_path *Char, driver_name *Char) { +func (h *hyperDbg) SetCustomDriverPath(driver_file_path string, driver_name string) { //TODO implement me panic("implement me") } @@ -227,22 +227,22 @@ func (h *hyperDbg) ConnectLocalDebugger() { panic("implement me") } -func (h *hyperDbg) ConnectRemoteDebugger(ip *Char, port *Char) { +func (h *hyperDbg) ConnectRemoteDebugger(ip string, port string) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ConnectRemoteDebuggerUsingComPort(port_name *Char, baudrate Dword, pause_after_connection bool) { +func (h *hyperDbg) ConnectRemoteDebuggerUsingComPort(port_name string, baudrate Dword, pause_after_connection bool) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ConnectRemoteDebuggerUsingNamedPipe(named_pipe *Char, pause_after_connection bool) { +func (h *hyperDbg) ConnectRemoteDebuggerUsingNamedPipe(named_pipe string, pause_after_connection bool) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ConnectCurrentDebuggerUsingComPort(port_name *Char, baudrate Dword) { +func (h *hyperDbg) ConnectCurrentDebuggerUsingComPort(port_name string, baudrate Dword) { //TODO implement me panic("implement me") } @@ -352,22 +352,22 @@ func (h *hyperDbg) CommandGetLocalApic(local_apic PlapicPage, is_using_x2apic *b panic("implement me") } -func (h *hyperDbg) AssembleGetLength(assembly_code *Char, start_address uint64, length *uint32) { +func (h *hyperDbg) AssembleGetLength(assembly_code string, start_address uint64, length *uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) Assemble(assembly_code *Char, start_address uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size uint32) { +func (h *hyperDbg) Assemble(assembly_code string, start_address uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) HwdbgScriptRunScript(script *Char, instance_filepath_to_read *Char, hardware_script_file_path_to_save *Char, initial_bram_buffer_size uint32) { +func (h *hyperDbg) HwdbgScriptRunScript(script string, instance_filepath_to_read string, hardware_script_file_path_to_save string, initial_bram_buffer_size uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) HwdbgScriptEngineWrapperTestParser(Expr *Char) { +func (h *hyperDbg) HwdbgScriptEngineWrapperTestParser(Expr string) { //TODO implement me panic("implement me") } @@ -447,12 +447,12 @@ func (h *hyperDbg) ScriptEngineSearchSymbolForMask(SearchMask *byte) uint32 { panic("implement me") } -func (h *hyperDbg) ScriptEngineGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *uint32) { +func (h *hyperDbg) ScriptEngineGetFieldOffset(TypeName string, FieldName string, FieldOffset *uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineGetDataTypeSize(TypeName *Char, TypeSize *uint64) { +func (h *hyperDbg) ScriptEngineGetDataTypeSize(TypeName string, TypeSize *uint64) { //TODO implement me panic("implement me") } @@ -527,12 +527,12 @@ func (h *hyperDbg) SymSearchSymbolForMask(SearchMask *byte) uint32 { panic("implement me") } -func (h *hyperDbg) SymGetFieldOffset(TypeName *Char, FieldName *Char, FieldOffset *uint32) { +func (h *hyperDbg) SymGetFieldOffset(TypeName string, FieldName string, FieldOffset *uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymGetDataTypeSize(TypeName *Char, TypeSize *uint64) { +func (h *hyperDbg) SymGetDataTypeSize(TypeName string, TypeSize *uint64) { //TODO implement me panic("implement me") } From 151086da118ba09059db25a52e5780399cb073ec Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 24 Nov 2024 23:27:48 +0800 Subject: [PATCH 15/37] fix https://github.com/ddkwork/debuger/issues/10 --- sdk/api.go | 80 +++++++++++++++++++++++++++--------------------------- 1 file changed, 40 insertions(+), 40 deletions(-) diff --git a/sdk/api.go b/sdk/api.go index 7c59a302..ce9adb7e 100644 --- a/sdk/api.go +++ b/sdk/api.go @@ -35,7 +35,7 @@ type API interface { ConnectCurrentDebuggerUsingComPort(port_name string, baudrate Dword) bool DebugCloseRemoteDebugger() bool GetKernelBase() uint64 - ReadMemory(target_address uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid uint32, size uint32, get_address_mode bool, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store *Byte, return_length *uint32) bool + ReadMemory(target_address uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid uint32, size uint32, get_address_mode bool, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store []byte, return_length *uint32) bool ShowMemoryOrDisassemble(style DebuggerShowMemoryStyle, address uint64, memory_type DebuggerReadMemoryType, reading_type DebuggerReadReadingType, pid uint32, size uint32, dt_details PdebuggerDtCommandOptions) WriteMemory(destination_address unsafe.Pointer, memory_type DebuggerEditMemoryType, process_id uint32, source_address unsafe.Pointer, number_of_bytes uint32) bool ReadAllRegisters(guest_registers unsafe.Pointer, extra_registers unsafe.Pointer) bool @@ -63,41 +63,41 @@ type API interface { HardwareScriptInterpreterCompressBuffer(Buffer *uint64, BufferLength int32, ScriptVariableLength uint32, BramDataWidth uint32, NewBufferSize *int32, NumberOfBytesPerChunk *int32) bool HardwareScriptInterpreterConvertSymbolToHwdbgShortSymbolBuffer(InstanceInfo *HwdbgInstanceInformation, SymbolBuffer unsafe.Pointer, SymbolBufferLength int32, NumberOfStages uint32, NewShortSymbolBuffer *unsafe.Pointer, NewBufferSize *int32) bool HardwareScriptInterpreterFreeHwdbgShortSymbolBuffer(NewShortSymbolBuffer unsafe.Pointer) - ScriptEngineParse(str *byte) unsafe.Pointer + ScriptEngineParse(str []byte) unsafe.Pointer ScriptEngineSetHwdbgInstanceInfo(InstancInfo *HwdbgInstanceInformation) bool PrintSymbolBuffer(SymbolBuffer unsafe.Pointer) RemoveSymbolBuffer(SymbolBuffer unsafe.Pointer) PrintSymbol(Symbol unsafe.Pointer) - ScriptEngineConvertNameToAddress(FunctionOrVariableName *byte, WasFound bool) uint64 - ScriptEngineLoadFileSymbol(BaseAddress uint64, PdbFileName *byte, CustomModuleName *byte) uint32 + ScriptEngineConvertNameToAddress(FunctionOrVariableName []byte, WasFound bool) uint64 + ScriptEngineLoadFileSymbol(BaseAddress uint64, PdbFileName []byte, CustomModuleName []byte) uint32 ScriptEngineUnloadAllSymbols() uint32 - ScriptEngineUnloadModuleSymbol(ModuleName *byte) uint32 - ScriptEngineSearchSymbolForMask(SearchMask *byte) uint32 + ScriptEngineUnloadModuleSymbol(ModuleName []byte) uint32 + ScriptEngineSearchSymbolForMask(SearchMask []byte) uint32 ScriptEngineGetFieldOffset(TypeName string, FieldName string, FieldOffset *uint32) bool ScriptEngineGetDataTypeSize(TypeName string, TypeSize *uint64) bool ScriptEngineCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) bool - ScriptEngineConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) bool - ScriptEngineConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule bool) bool - ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable bool, SymbolPath *byte, IsSilentLoad bool) bool - ScriptEngineShowDataBasedOnSymbolTypes(TypeName *byte, Address uint64, IsStruct bool, BufferAddress unsafe.Pointer, AdditionalParameters *byte) bool + ScriptEngineConvertFileToPdbPath(LocalFilePath []byte, ResultPath []byte) bool + ScriptEngineConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath []byte, PdbFilePath []byte, GuidAndAgeDetails []byte, Is32BitModule bool) bool + ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable bool, SymbolPath []byte, IsSilentLoad bool) bool + ScriptEngineShowDataBasedOnSymbolTypes(TypeName []byte, Address uint64, IsStruct bool, BufferAddress unsafe.Pointer, AdditionalParameters []byte) bool ScriptEngineSymbolAbortLoading() ScriptEngineSetTextMessageCallback(Handler unsafe.Pointer) SymSetTextMessageCallback(Handler unsafe.Pointer) SymbolAbortLoading() - SymConvertNameToAddress(FunctionOrVariableName *byte, WasFound bool) uint64 - SymLoadFileSymbol(BaseAddress uint64, PdbFileName *byte, CustomModuleName *byte) uint32 + SymConvertNameToAddress(FunctionOrVariableName []byte, WasFound bool) uint64 + SymLoadFileSymbol(BaseAddress uint64, PdbFileName []byte, CustomModuleName []byte) uint32 SymUnloadAllSymbols() uint32 - SymUnloadModuleSymbol(ModuleName *byte) uint32 - SymSearchSymbolForMask(SearchMask *byte) uint32 + SymUnloadModuleSymbol(ModuleName []byte) uint32 + SymSearchSymbolForMask(SearchMask []byte) uint32 SymGetFieldOffset(TypeName string, FieldName string, FieldOffset *uint32) bool SymGetDataTypeSize(TypeName string, TypeSize *uint64) bool SymCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) bool - SymConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) bool - SymConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule bool) bool - SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable bool, SymbolPath *byte, IsSilentLoad bool) bool - SymShowDataBasedOnSymbolTypes(TypeName *byte, Address uint64, IsStruct bool, BufferAddress unsafe.Pointer, AdditionalParameters *byte) bool - SymQuerySizeof(StructNameOrTypeName *byte, SizeOfField *uint32) bool - SymCastingQueryForFiledsAndTypes(StructName *byte, FiledOfStructName *byte, IsStructNamePointerOrNot bool, IsFiledOfStructNamePointerOrNot bool, NewStructOrTypeName **byte, OffsetOfFieldFromTop *uint32, SizeOfField *uint32) bool + SymConvertFileToPdbPath(LocalFilePath []byte, ResultPath []byte) bool + SymConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath []byte, PdbFilePath []byte, GuidAndAgeDetails []byte, Is32BitModule bool) bool + SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable bool, SymbolPath []byte, IsSilentLoad bool) bool + SymShowDataBasedOnSymbolTypes(TypeName []byte, Address uint64, IsStruct bool, BufferAddress unsafe.Pointer, AdditionalParameters []byte) bool + SymQuerySizeof(StructNameOrTypeName []byte, SizeOfField *uint32) bool + SymCastingQueryForFiledsAndTypes(StructName []byte, FiledOfStructName []byte, IsStructNamePointerOrNot bool, IsFiledOfStructNamePointerOrNot bool, NewStructOrTypeName *[]byte, OffsetOfFieldFromTop *uint32, SizeOfField *uint32) bool } type hyperDbg struct { @@ -257,7 +257,7 @@ func (h *hyperDbg) GetKernelBase() uint64 { panic("implement me") } -func (h *hyperDbg) ReadMemory(target_address uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid uint32, size uint32, get_address_mode bool, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store *Byte, return_length *uint32) { +func (h *hyperDbg) ReadMemory(target_address uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid uint32, size uint32, get_address_mode bool, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store []byte, return_length *uint32) { //TODO implement me panic("implement me") } @@ -397,7 +397,7 @@ func (h *hyperDbg) HardwareScriptInterpreterFreeHwdbgShortSymbolBuffer(NewShortS panic("implement me") } -func (h *hyperDbg) ScriptEngineParse(str *byte) unsafe.Pointer { +func (h *hyperDbg) ScriptEngineParse(str []byte) unsafe.Pointer { //TODO implement me panic("implement me") } @@ -422,12 +422,12 @@ func (h *hyperDbg) PrintSymbol(Symbol unsafe.Pointer) { panic("implement me") } -func (h *hyperDbg) ScriptEngineConvertNameToAddress(FunctionOrVariableName *byte, WasFound bool) uint64 { +func (h *hyperDbg) ScriptEngineConvertNameToAddress(FunctionOrVariableName []byte, WasFound bool) uint64 { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineLoadFileSymbol(BaseAddress uint64, PdbFileName *byte, CustomModuleName *byte) uint32 { +func (h *hyperDbg) ScriptEngineLoadFileSymbol(BaseAddress uint64, PdbFileName []byte, CustomModuleName []byte) uint32 { //TODO implement me panic("implement me") } @@ -437,12 +437,12 @@ func (h *hyperDbg) ScriptEngineUnloadAllSymbols() uint32 { panic("implement me") } -func (h *hyperDbg) ScriptEngineUnloadModuleSymbol(ModuleName *byte) uint32 { +func (h *hyperDbg) ScriptEngineUnloadModuleSymbol(ModuleName []byte) uint32 { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineSearchSymbolForMask(SearchMask *byte) uint32 { +func (h *hyperDbg) ScriptEngineSearchSymbolForMask(SearchMask []byte) uint32 { //TODO implement me panic("implement me") } @@ -462,22 +462,22 @@ func (h *hyperDbg) ScriptEngineCreateSymbolTableForDisassembler(CallbackFunction panic("implement me") } -func (h *hyperDbg) ScriptEngineConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) { +func (h *hyperDbg) ScriptEngineConvertFileToPdbPath(LocalFilePath []byte, ResultPath []byte) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule bool) { +func (h *hyperDbg) ScriptEngineConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath []byte, PdbFilePath []byte, GuidAndAgeDetails []byte, Is32BitModule bool) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable bool, SymbolPath *byte, IsSilentLoad bool) { +func (h *hyperDbg) ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable bool, SymbolPath []byte, IsSilentLoad bool) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineShowDataBasedOnSymbolTypes(TypeName *byte, Address uint64, IsStruct bool, BufferAddress unsafe.Pointer, AdditionalParameters *byte) { +func (h *hyperDbg) ScriptEngineShowDataBasedOnSymbolTypes(TypeName []byte, Address uint64, IsStruct bool, BufferAddress unsafe.Pointer, AdditionalParameters []byte) { //TODO implement me panic("implement me") } @@ -502,12 +502,12 @@ func (h *hyperDbg) SymbolAbortLoading() { panic("implement me") } -func (h *hyperDbg) SymConvertNameToAddress(FunctionOrVariableName *byte, WasFound bool) uint64 { +func (h *hyperDbg) SymConvertNameToAddress(FunctionOrVariableName []byte, WasFound bool) uint64 { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymLoadFileSymbol(BaseAddress uint64, PdbFileName *byte, CustomModuleName *byte) uint32 { +func (h *hyperDbg) SymLoadFileSymbol(BaseAddress uint64, PdbFileName []byte, CustomModuleName []byte) uint32 { //TODO implement me panic("implement me") } @@ -517,12 +517,12 @@ func (h *hyperDbg) SymUnloadAllSymbols() uint32 { panic("implement me") } -func (h *hyperDbg) SymUnloadModuleSymbol(ModuleName *byte) uint32 { +func (h *hyperDbg) SymUnloadModuleSymbol(ModuleName []byte) uint32 { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymSearchSymbolForMask(SearchMask *byte) uint32 { +func (h *hyperDbg) SymSearchSymbolForMask(SearchMask []byte) uint32 { //TODO implement me panic("implement me") } @@ -542,32 +542,32 @@ func (h *hyperDbg) SymCreateSymbolTableForDisassembler(CallbackFunction unsafe.P panic("implement me") } -func (h *hyperDbg) SymConvertFileToPdbPath(LocalFilePath *byte, ResultPath *byte) { +func (h *hyperDbg) SymConvertFileToPdbPath(LocalFilePath []byte, ResultPath []byte) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath *byte, PdbFilePath *byte, GuidAndAgeDetails *byte, Is32BitModule bool) { +func (h *hyperDbg) SymConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath []byte, PdbFilePath []byte, GuidAndAgeDetails []byte, Is32BitModule bool) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable bool, SymbolPath *byte, IsSilentLoad bool) { +func (h *hyperDbg) SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable bool, SymbolPath []byte, IsSilentLoad bool) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymShowDataBasedOnSymbolTypes(TypeName *byte, Address uint64, IsStruct bool, BufferAddress unsafe.Pointer, AdditionalParameters *byte) { +func (h *hyperDbg) SymShowDataBasedOnSymbolTypes(TypeName []byte, Address uint64, IsStruct bool, BufferAddress unsafe.Pointer, AdditionalParameters []byte) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymQuerySizeof(StructNameOrTypeName *byte, SizeOfField *uint32) { +func (h *hyperDbg) SymQuerySizeof(StructNameOrTypeName []byte, SizeOfField *uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymCastingQueryForFiledsAndTypes(StructName *byte, FiledOfStructName *byte, IsStructNamePointerOrNot bool, IsFiledOfStructNamePointerOrNot bool, NewStructOrTypeName **byte, OffsetOfFieldFromTop *uint32, SizeOfField *uint32) { +func (h *hyperDbg) SymCastingQueryForFiledsAndTypes(StructName []byte, FiledOfStructName []byte, IsStructNamePointerOrNot bool, IsFiledOfStructNamePointerOrNot bool, NewStructOrTypeName *[]byte, OffsetOfFieldFromTop *uint32, SizeOfField *uint32) { //TODO implement me panic("implement me") } From e9d800c490810f8e78033da0e8e55330fd721ad5 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 24 Nov 2024 23:28:31 +0800 Subject: [PATCH 16/37] fix https://github.com/ddkwork/debuger/issues/10 --- sdk/api.go | 77 +++++++++++++++++++++++++++--------------------------- 1 file changed, 38 insertions(+), 39 deletions(-) diff --git a/sdk/api.go b/sdk/api.go index ce9adb7e..a19d8d68 100644 --- a/sdk/api.go +++ b/sdk/api.go @@ -3,7 +3,6 @@ package sdk import ( "github.com/ddkwork/golibrary/mylog" "github.com/ddkwork/golibrary/stream" - "unsafe" ) type API interface { @@ -20,8 +19,8 @@ type API interface { SetupPathForFilename(filename string, file_location string, buffer_len uint32, check_file_existence bool) bool RunCommand(command string) Int ShowSignature() - SetTextMessageCallback(handler unsafe.Pointer) - SetTextMessageCallbackUsingSharedBuffer(handler unsafe.Pointer) unsafe.Pointer + SetTextMessageCallback(handler uint64) + SetTextMessageCallbackUsingSharedBuffer(handler uint64) uint64 UnsetTextMessageCallback() ScriptReadFileAndExecuteCommandline(argc Int, argv *string) Int ContinuePreviousCommand() bool @@ -37,8 +36,8 @@ type API interface { GetKernelBase() uint64 ReadMemory(target_address uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid uint32, size uint32, get_address_mode bool, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store []byte, return_length *uint32) bool ShowMemoryOrDisassemble(style DebuggerShowMemoryStyle, address uint64, memory_type DebuggerReadMemoryType, reading_type DebuggerReadReadingType, pid uint32, size uint32, dt_details PdebuggerDtCommandOptions) - WriteMemory(destination_address unsafe.Pointer, memory_type DebuggerEditMemoryType, process_id uint32, source_address unsafe.Pointer, number_of_bytes uint32) bool - ReadAllRegisters(guest_registers unsafe.Pointer, extra_registers unsafe.Pointer) bool + WriteMemory(destination_address uint64, memory_type DebuggerEditMemoryType, process_id uint32, source_address uint64, number_of_bytes uint32) bool + ReadAllRegisters(guest_registers uint64, extra_registers uint64) bool ReadTargetRegister(register_id RegsEnum, target_register *uint64) bool WriteTargetRegister(register_id RegsEnum, value uint64) bool ShowAllRegisters() bool @@ -55,19 +54,19 @@ type API interface { StartProcessWithArgs(path *Wchar, arguments *Wchar) bool CommandGetLocalApic(local_apic PlapicPage, is_using_x2apic *bool) bool AssembleGetLength(assembly_code string, start_address uint64, length *uint32) bool - Assemble(assembly_code string, start_address uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size uint32) bool + Assemble(assembly_code string, start_address uint64, buffer_to_store_assembled_data uint64, buffer_size uint32) bool HwdbgScriptRunScript(script string, instance_filepath_to_read string, hardware_script_file_path_to_save string, initial_bram_buffer_size uint32) bool HwdbgScriptEngineWrapperTestParser(Expr string) HardwareScriptInterpreterShowScriptCapabilities(InstanceInfo *HwdbgInstanceInformation) - HardwareScriptInterpreterCheckScriptBufferWithScriptCapabilities(InstanceInfo *HwdbgInstanceInformation, ScriptBuffer unsafe.Pointer, CountOfScriptSymbolChunks uint32, NumberOfStages *uint32, NumberOfOperands *uint32, NumberOfOperandsImplemented *uint32) bool + HardwareScriptInterpreterCheckScriptBufferWithScriptCapabilities(InstanceInfo *HwdbgInstanceInformation, ScriptBuffer uint64, CountOfScriptSymbolChunks uint32, NumberOfStages *uint32, NumberOfOperands *uint32, NumberOfOperandsImplemented *uint32) bool HardwareScriptInterpreterCompressBuffer(Buffer *uint64, BufferLength int32, ScriptVariableLength uint32, BramDataWidth uint32, NewBufferSize *int32, NumberOfBytesPerChunk *int32) bool - HardwareScriptInterpreterConvertSymbolToHwdbgShortSymbolBuffer(InstanceInfo *HwdbgInstanceInformation, SymbolBuffer unsafe.Pointer, SymbolBufferLength int32, NumberOfStages uint32, NewShortSymbolBuffer *unsafe.Pointer, NewBufferSize *int32) bool - HardwareScriptInterpreterFreeHwdbgShortSymbolBuffer(NewShortSymbolBuffer unsafe.Pointer) - ScriptEngineParse(str []byte) unsafe.Pointer + HardwareScriptInterpreterConvertSymbolToHwdbgShortSymbolBuffer(InstanceInfo *HwdbgInstanceInformation, SymbolBuffer uint64, SymbolBufferLength int32, NumberOfStages uint32, NewShortSymbolBuffer *uint64, NewBufferSize *int32) bool + HardwareScriptInterpreterFreeHwdbgShortSymbolBuffer(NewShortSymbolBuffer uint64) + ScriptEngineParse(str []byte) uint64 ScriptEngineSetHwdbgInstanceInfo(InstancInfo *HwdbgInstanceInformation) bool - PrintSymbolBuffer(SymbolBuffer unsafe.Pointer) - RemoveSymbolBuffer(SymbolBuffer unsafe.Pointer) - PrintSymbol(Symbol unsafe.Pointer) + PrintSymbolBuffer(SymbolBuffer uint64) + RemoveSymbolBuffer(SymbolBuffer uint64) + PrintSymbol(Symbol uint64) ScriptEngineConvertNameToAddress(FunctionOrVariableName []byte, WasFound bool) uint64 ScriptEngineLoadFileSymbol(BaseAddress uint64, PdbFileName []byte, CustomModuleName []byte) uint32 ScriptEngineUnloadAllSymbols() uint32 @@ -75,14 +74,14 @@ type API interface { ScriptEngineSearchSymbolForMask(SearchMask []byte) uint32 ScriptEngineGetFieldOffset(TypeName string, FieldName string, FieldOffset *uint32) bool ScriptEngineGetDataTypeSize(TypeName string, TypeSize *uint64) bool - ScriptEngineCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) bool + ScriptEngineCreateSymbolTableForDisassembler(CallbackFunction uint64) bool ScriptEngineConvertFileToPdbPath(LocalFilePath []byte, ResultPath []byte) bool ScriptEngineConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath []byte, PdbFilePath []byte, GuidAndAgeDetails []byte, Is32BitModule bool) bool - ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable bool, SymbolPath []byte, IsSilentLoad bool) bool - ScriptEngineShowDataBasedOnSymbolTypes(TypeName []byte, Address uint64, IsStruct bool, BufferAddress unsafe.Pointer, AdditionalParameters []byte) bool + ScriptEngineSymbolInitLoad(BufferToStoreDetails uint64, StoredLength uint32, DownloadIfAvailable bool, SymbolPath []byte, IsSilentLoad bool) bool + ScriptEngineShowDataBasedOnSymbolTypes(TypeName []byte, Address uint64, IsStruct bool, BufferAddress uint64, AdditionalParameters []byte) bool ScriptEngineSymbolAbortLoading() - ScriptEngineSetTextMessageCallback(Handler unsafe.Pointer) - SymSetTextMessageCallback(Handler unsafe.Pointer) + ScriptEngineSetTextMessageCallback(Handler uint64) + SymSetTextMessageCallback(Handler uint64) SymbolAbortLoading() SymConvertNameToAddress(FunctionOrVariableName []byte, WasFound bool) uint64 SymLoadFileSymbol(BaseAddress uint64, PdbFileName []byte, CustomModuleName []byte) uint32 @@ -91,11 +90,11 @@ type API interface { SymSearchSymbolForMask(SearchMask []byte) uint32 SymGetFieldOffset(TypeName string, FieldName string, FieldOffset *uint32) bool SymGetDataTypeSize(TypeName string, TypeSize *uint64) bool - SymCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) bool + SymCreateSymbolTableForDisassembler(CallbackFunction uint64) bool SymConvertFileToPdbPath(LocalFilePath []byte, ResultPath []byte) bool SymConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath []byte, PdbFilePath []byte, GuidAndAgeDetails []byte, Is32BitModule bool) bool - SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable bool, SymbolPath []byte, IsSilentLoad bool) bool - SymShowDataBasedOnSymbolTypes(TypeName []byte, Address uint64, IsStruct bool, BufferAddress unsafe.Pointer, AdditionalParameters []byte) bool + SymbolInitLoad(BufferToStoreDetails uint64, StoredLength uint32, DownloadIfAvailable bool, SymbolPath []byte, IsSilentLoad bool) bool + SymShowDataBasedOnSymbolTypes(TypeName []byte, Address uint64, IsStruct bool, BufferAddress uint64, AdditionalParameters []byte) bool SymQuerySizeof(StructNameOrTypeName []byte, SizeOfField *uint32) bool SymCastingQueryForFiledsAndTypes(StructName []byte, FiledOfStructName []byte, IsStructNamePointerOrNot bool, IsFiledOfStructNamePointerOrNot bool, NewStructOrTypeName *[]byte, OffsetOfFieldFromTop *uint32, SizeOfField *uint32) bool } @@ -267,12 +266,12 @@ func (h *hyperDbg) ShowMemoryOrDisassemble(style DebuggerShowMemoryStyle, addres panic("implement me") } -func (h *hyperDbg) WriteMemory(destination_address unsafe.Pointer, memory_type DebuggerEditMemoryType, process_id uint32, source_address unsafe.Pointer, number_of_bytes uint32) { +func (h *hyperDbg) WriteMemory(destination_address uint64, memory_type DebuggerEditMemoryType, process_id uint32, source_address uint64, number_of_bytes uint32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ReadAllRegisters(guest_registers unsafe.Pointer, extra_registers unsafe.Pointer) { +func (h *hyperDbg) ReadAllRegisters(guest_registers uint64, extra_registers uint64) { //TODO implement me panic("implement me") } @@ -357,7 +356,7 @@ func (h *hyperDbg) AssembleGetLength(assembly_code string, start_address uint64, panic("implement me") } -func (h *hyperDbg) Assemble(assembly_code string, start_address uint64, buffer_to_store_assembled_data unsafe.Pointer, buffer_size uint32) { +func (h *hyperDbg) Assemble(assembly_code string, start_address uint64, buffer_to_store_assembled_data uint64, buffer_size uint32) { //TODO implement me panic("implement me") } @@ -377,7 +376,7 @@ func (h *hyperDbg) HardwareScriptInterpreterShowScriptCapabilities(InstanceInfo panic("implement me") } -func (h *hyperDbg) HardwareScriptInterpreterCheckScriptBufferWithScriptCapabilities(InstanceInfo *HwdbgInstanceInformation, ScriptBuffer unsafe.Pointer, CountOfScriptSymbolChunks uint32, NumberOfStages *uint32, NumberOfOperands *uint32, NumberOfOperandsImplemented *uint32) { +func (h *hyperDbg) HardwareScriptInterpreterCheckScriptBufferWithScriptCapabilities(InstanceInfo *HwdbgInstanceInformation, ScriptBuffer uint64, CountOfScriptSymbolChunks uint32, NumberOfStages *uint32, NumberOfOperands *uint32, NumberOfOperandsImplemented *uint32) { //TODO implement me panic("implement me") } @@ -387,17 +386,17 @@ func (h *hyperDbg) HardwareScriptInterpreterCompressBuffer(Buffer *uint64, Buffe panic("implement me") } -func (h *hyperDbg) HardwareScriptInterpreterConvertSymbolToHwdbgShortSymbolBuffer(InstanceInfo *HwdbgInstanceInformation, SymbolBuffer unsafe.Pointer, SymbolBufferLength int32, NumberOfStages uint32, NewShortSymbolBuffer *unsafe.Pointer, NewBufferSize *int32) { +func (h *hyperDbg) HardwareScriptInterpreterConvertSymbolToHwdbgShortSymbolBuffer(InstanceInfo *HwdbgInstanceInformation, SymbolBuffer uint64, SymbolBufferLength int32, NumberOfStages uint32, NewShortSymbolBuffer *uint64, NewBufferSize *int32) { //TODO implement me panic("implement me") } -func (h *hyperDbg) HardwareScriptInterpreterFreeHwdbgShortSymbolBuffer(NewShortSymbolBuffer unsafe.Pointer) { +func (h *hyperDbg) HardwareScriptInterpreterFreeHwdbgShortSymbolBuffer(NewShortSymbolBuffer uint64) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineParse(str []byte) unsafe.Pointer { +func (h *hyperDbg) ScriptEngineParse(str []byte) uint64 { //TODO implement me panic("implement me") } @@ -407,17 +406,17 @@ func (h *hyperDbg) ScriptEngineSetHwdbgInstanceInfo(InstancInfo *HwdbgInstanceIn panic("implement me") } -func (h *hyperDbg) PrintSymbolBuffer(SymbolBuffer unsafe.Pointer) { +func (h *hyperDbg) PrintSymbolBuffer(SymbolBuffer uint64) { //TODO implement me panic("implement me") } -func (h *hyperDbg) RemoveSymbolBuffer(SymbolBuffer unsafe.Pointer) { +func (h *hyperDbg) RemoveSymbolBuffer(SymbolBuffer uint64) { //TODO implement me panic("implement me") } -func (h *hyperDbg) PrintSymbol(Symbol unsafe.Pointer) { +func (h *hyperDbg) PrintSymbol(Symbol uint64) { //TODO implement me panic("implement me") } @@ -457,7 +456,7 @@ func (h *hyperDbg) ScriptEngineGetDataTypeSize(TypeName string, TypeSize *uint64 panic("implement me") } -func (h *hyperDbg) ScriptEngineCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) { +func (h *hyperDbg) ScriptEngineCreateSymbolTableForDisassembler(CallbackFunction uint64) { //TODO implement me panic("implement me") } @@ -472,12 +471,12 @@ func (h *hyperDbg) ScriptEngineConvertFileToPdbFileAndGuidAndAgeDetails(LocalFil panic("implement me") } -func (h *hyperDbg) ScriptEngineSymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable bool, SymbolPath []byte, IsSilentLoad bool) { +func (h *hyperDbg) ScriptEngineSymbolInitLoad(BufferToStoreDetails uint64, StoredLength uint32, DownloadIfAvailable bool, SymbolPath []byte, IsSilentLoad bool) { //TODO implement me panic("implement me") } -func (h *hyperDbg) ScriptEngineShowDataBasedOnSymbolTypes(TypeName []byte, Address uint64, IsStruct bool, BufferAddress unsafe.Pointer, AdditionalParameters []byte) { +func (h *hyperDbg) ScriptEngineShowDataBasedOnSymbolTypes(TypeName []byte, Address uint64, IsStruct bool, BufferAddress uint64, AdditionalParameters []byte) { //TODO implement me panic("implement me") } @@ -487,12 +486,12 @@ func (h *hyperDbg) ScriptEngineSymbolAbortLoading() { panic("implement me") } -func (h *hyperDbg) ScriptEngineSetTextMessageCallback(Handler unsafe.Pointer) { +func (h *hyperDbg) ScriptEngineSetTextMessageCallback(Handler uint64) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymSetTextMessageCallback(Handler unsafe.Pointer) { +func (h *hyperDbg) SymSetTextMessageCallback(Handler uint64) { //TODO implement me panic("implement me") } @@ -537,7 +536,7 @@ func (h *hyperDbg) SymGetDataTypeSize(TypeName string, TypeSize *uint64) { panic("implement me") } -func (h *hyperDbg) SymCreateSymbolTableForDisassembler(CallbackFunction unsafe.Pointer) { +func (h *hyperDbg) SymCreateSymbolTableForDisassembler(CallbackFunction uint64) { //TODO implement me panic("implement me") } @@ -552,12 +551,12 @@ func (h *hyperDbg) SymConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath []b panic("implement me") } -func (h *hyperDbg) SymbolInitLoad(BufferToStoreDetails unsafe.Pointer, StoredLength uint32, DownloadIfAvailable bool, SymbolPath []byte, IsSilentLoad bool) { +func (h *hyperDbg) SymbolInitLoad(BufferToStoreDetails uint64, StoredLength uint32, DownloadIfAvailable bool, SymbolPath []byte, IsSilentLoad bool) { //TODO implement me panic("implement me") } -func (h *hyperDbg) SymShowDataBasedOnSymbolTypes(TypeName []byte, Address uint64, IsStruct bool, BufferAddress unsafe.Pointer, AdditionalParameters []byte) { +func (h *hyperDbg) SymShowDataBasedOnSymbolTypes(TypeName []byte, Address uint64, IsStruct bool, BufferAddress uint64, AdditionalParameters []byte) { //TODO implement me panic("implement me") } From 149eafa21084dfdc43525c453cea1b0c386be90c Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 24 Nov 2024 23:29:56 +0800 Subject: [PATCH 17/37] fix https://github.com/ddkwork/debuger/issues/10 --- sdk/api.go | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/sdk/api.go b/sdk/api.go index a19d8d68..76308ef3 100644 --- a/sdk/api.go +++ b/sdk/api.go @@ -9,20 +9,20 @@ type API interface { init() DetectVmxSupport() bool ReadVendorString(arg0 string) - LoadVmm() Int - UnloadVmm() Int - InstallVmmDriver() Int - UninstallVmmDriver() Int - StopVmmDriver() Int + LoadVmm() + UnloadVmm() + InstallVmmDriver() + UninstallVmmDriver() + StopVmmDriver() TestCommandParser(command string, number_of_tokens uint32, tokens_list *string, failed_token_num *uint32, failed_token_position *uint32) bool TestCommandParserShowTokens(command string) SetupPathForFilename(filename string, file_location string, buffer_len uint32, check_file_existence bool) bool - RunCommand(command string) Int + RunCommand(command string) ShowSignature() SetTextMessageCallback(handler uint64) SetTextMessageCallbackUsingSharedBuffer(handler uint64) uint64 UnsetTextMessageCallback() - ScriptReadFileAndExecuteCommandline(argc Int, argv *string) Int + ScriptReadFileAndExecuteCommandline(argc Int, argv *string) ContinuePreviousCommand() bool CheckMultilineCommand(current_command string, reset bool) bool SetCustomDriverPath(driver_file_path string, driver_name string) bool From b0b7091ded0800b215ad7120dd942516d44f7c79 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 24 Nov 2024 23:31:51 +0800 Subject: [PATCH 18/37] fix https://github.com/ddkwork/debuger/issues/10 --- sdk/sdk_test.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sdk/sdk_test.go b/sdk/sdk_test.go index dd02554d..b4507303 100644 --- a/sdk/sdk_test.go +++ b/sdk/sdk_test.go @@ -29,7 +29,7 @@ func TestGenInterface(t *testing.T) { s = before } } - s = strings.TrimSuffix(s, "{") + s = strings.ReplaceAll(s, "{", "") if strings.Contains(s, "Anon") { continue } From 7284529f8494a09c74082e1d3ad343a703f1535e Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Mon, 25 Nov 2024 00:16:50 +0800 Subject: [PATCH 19/37] fix https://github.com/ddkwork/debuger/issues/10 --- sdk/api.go | 183 ++++++++++++++++++++++++------------------------ sdk/sdk_test.go | 20 +++--- 2 files changed, 101 insertions(+), 102 deletions(-) diff --git a/sdk/api.go b/sdk/api.go index 76308ef3..db21909b 100644 --- a/sdk/api.go +++ b/sdk/api.go @@ -99,8 +99,7 @@ type API interface { SymCastingQueryForFiledsAndTypes(StructName []byte, FiledOfStructName []byte, IsStructNamePointerOrNot bool, IsFiledOfStructNamePointerOrNot bool, NewStructOrTypeName *[]byte, OffsetOfFieldFromTop *uint32, SizeOfField *uint32) bool } -type hyperDbg struct { -} +type hyperDbg struct{} func New() *hyperDbg { return &hyperDbg{} @@ -122,451 +121,451 @@ func ConnectRemoteDebuggerEx(ip string, port string) bool { } func (h *hyperDbg) init() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) DetectVmxSupport() bool { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ReadVendorString(arg0 string) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) LoadVmm() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) UnloadVmm() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) InstallVmmDriver() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) UninstallVmmDriver() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) StopVmmDriver() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) TestCommandParser(command string, number_of_tokens uint32, tokens_list *string, failed_token_num *uint32, failed_token_position *uint32) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) TestCommandParserShowTokens(command string) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SetupPathForFilename(filename string, file_location string, buffer_len uint32, check_file_existence bool) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) RunCommand(command string) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ShowSignature() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SetLogCallback(handler func()) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) UnsetLogCallback() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ScriptReadFileAndExecuteCommandline(argc Int, argv *string) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ContinuePreviousCommand() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) CheckMultilineCommand(current_command string, reset bool) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SetCustomDriverPath(driver_file_path string, driver_name string) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) UseDefaultDriverPath() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ConnectLocalDebugger() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ConnectRemoteDebugger(ip string, port string) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ConnectRemoteDebuggerUsingComPort(port_name string, baudrate Dword, pause_after_connection bool) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ConnectRemoteDebuggerUsingNamedPipe(named_pipe string, pause_after_connection bool) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ConnectCurrentDebuggerUsingComPort(port_name string, baudrate Dword) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) DebugCloseRemoteDebugger() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) GetKernelBase() uint64 { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ReadMemory(target_address uint64, memory_type DebuggerReadMemoryType, reading_Type DebuggerReadReadingType, pid uint32, size uint32, get_address_mode bool, address_mode *DebuggerReadMemoryAddressMode, target_buffer_to_store []byte, return_length *uint32) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ShowMemoryOrDisassemble(style DebuggerShowMemoryStyle, address uint64, memory_type DebuggerReadMemoryType, reading_type DebuggerReadReadingType, pid uint32, size uint32, dt_details PdebuggerDtCommandOptions) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) WriteMemory(destination_address uint64, memory_type DebuggerEditMemoryType, process_id uint32, source_address uint64, number_of_bytes uint32) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ReadAllRegisters(guest_registers uint64, extra_registers uint64) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ReadTargetRegister(register_id RegsEnum, target_register *uint64) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) WriteTargetRegister(register_id RegsEnum, value uint64) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ShowAllRegisters() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ShowTargetRegister(register_id RegsEnum) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ContinueDebuggee() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) PauseDebuggee() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SetBreakpoint(address uint64, pid uint32, tid uint32, core_numer uint32) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SteppingInstrumentationStepIn() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SteppingRegularStepIn() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SteppingStepOver() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SteppingInstrumentationStepInForTracking() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SteppingStepOverForGu(last_instruction bool) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) StartProcess(path *Wchar) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) StartProcessWithArgs(path *Wchar, arguments *Wchar) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) CommandGetLocalApic(local_apic PlapicPage, is_using_x2apic *bool) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) AssembleGetLength(assembly_code string, start_address uint64, length *uint32) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) Assemble(assembly_code string, start_address uint64, buffer_to_store_assembled_data uint64, buffer_size uint32) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) HwdbgScriptRunScript(script string, instance_filepath_to_read string, hardware_script_file_path_to_save string, initial_bram_buffer_size uint32) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) HwdbgScriptEngineWrapperTestParser(Expr string) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) HardwareScriptInterpreterShowScriptCapabilities(InstanceInfo *HwdbgInstanceInformation) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) HardwareScriptInterpreterCheckScriptBufferWithScriptCapabilities(InstanceInfo *HwdbgInstanceInformation, ScriptBuffer uint64, CountOfScriptSymbolChunks uint32, NumberOfStages *uint32, NumberOfOperands *uint32, NumberOfOperandsImplemented *uint32) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) HardwareScriptInterpreterCompressBuffer(Buffer *uint64, BufferLength int32, ScriptVariableLength uint32, BramDataWidth uint32, NewBufferSize *int32, NumberOfBytesPerChunk *int32) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) HardwareScriptInterpreterConvertSymbolToHwdbgShortSymbolBuffer(InstanceInfo *HwdbgInstanceInformation, SymbolBuffer uint64, SymbolBufferLength int32, NumberOfStages uint32, NewShortSymbolBuffer *uint64, NewBufferSize *int32) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) HardwareScriptInterpreterFreeHwdbgShortSymbolBuffer(NewShortSymbolBuffer uint64) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ScriptEngineParse(str []byte) uint64 { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ScriptEngineSetHwdbgInstanceInfo(InstancInfo *HwdbgInstanceInformation) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) PrintSymbolBuffer(SymbolBuffer uint64) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) RemoveSymbolBuffer(SymbolBuffer uint64) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) PrintSymbol(Symbol uint64) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ScriptEngineConvertNameToAddress(FunctionOrVariableName []byte, WasFound bool) uint64 { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ScriptEngineLoadFileSymbol(BaseAddress uint64, PdbFileName []byte, CustomModuleName []byte) uint32 { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ScriptEngineUnloadAllSymbols() uint32 { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ScriptEngineUnloadModuleSymbol(ModuleName []byte) uint32 { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ScriptEngineSearchSymbolForMask(SearchMask []byte) uint32 { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ScriptEngineGetFieldOffset(TypeName string, FieldName string, FieldOffset *uint32) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ScriptEngineGetDataTypeSize(TypeName string, TypeSize *uint64) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ScriptEngineCreateSymbolTableForDisassembler(CallbackFunction uint64) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ScriptEngineConvertFileToPdbPath(LocalFilePath []byte, ResultPath []byte) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ScriptEngineConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath []byte, PdbFilePath []byte, GuidAndAgeDetails []byte, Is32BitModule bool) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ScriptEngineSymbolInitLoad(BufferToStoreDetails uint64, StoredLength uint32, DownloadIfAvailable bool, SymbolPath []byte, IsSilentLoad bool) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ScriptEngineShowDataBasedOnSymbolTypes(TypeName []byte, Address uint64, IsStruct bool, BufferAddress uint64, AdditionalParameters []byte) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ScriptEngineSymbolAbortLoading() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) ScriptEngineSetTextMessageCallback(Handler uint64) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SymSetTextMessageCallback(Handler uint64) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SymbolAbortLoading() { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SymConvertNameToAddress(FunctionOrVariableName []byte, WasFound bool) uint64 { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SymLoadFileSymbol(BaseAddress uint64, PdbFileName []byte, CustomModuleName []byte) uint32 { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SymUnloadAllSymbols() uint32 { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SymUnloadModuleSymbol(ModuleName []byte) uint32 { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SymSearchSymbolForMask(SearchMask []byte) uint32 { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SymGetFieldOffset(TypeName string, FieldName string, FieldOffset *uint32) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SymGetDataTypeSize(TypeName string, TypeSize *uint64) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SymCreateSymbolTableForDisassembler(CallbackFunction uint64) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SymConvertFileToPdbPath(LocalFilePath []byte, ResultPath []byte) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SymConvertFileToPdbFileAndGuidAndAgeDetails(LocalFilePath []byte, PdbFilePath []byte, GuidAndAgeDetails []byte, Is32BitModule bool) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SymbolInitLoad(BufferToStoreDetails uint64, StoredLength uint32, DownloadIfAvailable bool, SymbolPath []byte, IsSilentLoad bool) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SymShowDataBasedOnSymbolTypes(TypeName []byte, Address uint64, IsStruct bool, BufferAddress uint64, AdditionalParameters []byte) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SymQuerySizeof(StructNameOrTypeName []byte, SizeOfField *uint32) { - //TODO implement me + // TODO implement me panic("implement me") } func (h *hyperDbg) SymCastingQueryForFiledsAndTypes(StructName []byte, FiledOfStructName []byte, IsStructNamePointerOrNot bool, IsFiledOfStructNamePointerOrNot bool, NewStructOrTypeName *[]byte, OffsetOfFieldFromTop *uint32, SizeOfField *uint32) { - //TODO implement me + // TODO implement me panic("implement me") } diff --git a/sdk/sdk_test.go b/sdk/sdk_test.go index b4507303..83558dc1 100644 --- a/sdk/sdk_test.go +++ b/sdk/sdk_test.go @@ -74,7 +74,7 @@ func TestSdk(t *testing.T) { // assert.True(t, Boolean2Bool(StartProcessWithArgs(&[]rune("path")[0], &[]rune("C:\\Windows\\SysWOW64\\notepad.exe")[0]))) TargetFilePath = "../testdata/asm.exe" - RunCommandEx("bc") //BreakpointsRemoveAll + RunCommandEx("bc") // BreakpointsRemoveAll //get function address from symbol name //PrintSymbol() //? then get function address? //$+19 | E9 4E060000 | jmp | @@ -82,10 +82,10 @@ func TestSdk(t *testing.T) { //$+10B | E8 70030000 | call | main.c:101 //$+50B | 68 34A03800 | push asm.38A034 | 38A034:"asm1 for code3" - //SetBreakpoint(_asm1) - //SetBreakpoint(__allmul) - //SetBreakpoint(__alldiv) - //SetBreakpoint(endTrace) + // SetBreakpoint(_asm1) + // SetBreakpoint(__allmul) + // SetBreakpoint(__alldiv) + // SetBreakpoint(endTrace) //bigNumTrace := func() { // switch a.Eip() { @@ -99,16 +99,16 @@ func TestSdk(t *testing.T) { for range 20 { RunCommandEx("start") - //RunCommandEx("run") //todo add callback for data trace + // RunCommandEx("run") //todo add callback for data trace } - //ReadAllRegisters() - //ReadMemory() - //ReadTargetRegister(REGISTER_RAX) + // ReadAllRegisters() + // ReadMemory() + // ReadTargetRegister(REGISTER_RAX) // todo: interface signature need clan up - //this api`s arg is too more + // this api`s arg is too more // SetBreakpoint(address Uint64, pid Uint32, tid Uint32, core_numer Uint32) // start debugger From d65c4f0967e873ce09e36ab359d6d103df778078 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sat, 30 Nov 2024 02:16:31 +0800 Subject: [PATCH 20/37] start binding --- main.go | 1 - ntdll.txt | 980 ++++++++--------- sdk/util.go | 1 - ux/ark/ark.go | 8 +- win32u.txt | 2914 ++++++++++++++++++++++++------------------------- 5 files changed, 1950 insertions(+), 1954 deletions(-) diff --git a/main.go b/main.go index 13d072d7..3e5f13f5 100644 --- a/main.go +++ b/main.go @@ -7,7 +7,6 @@ import ( "github.com/ddkwork/unison" ) -// RtlGenRandom func main() { // testSdkCommands() sdk.TargetFilePath = "testdata/asm.exe" diff --git a/ntdll.txt b/ntdll.txt index 3d639bfc..dde48aaf 100644 --- a/ntdll.txt +++ b/ntdll.txt @@ -1,491 +1,491 @@ Windows 11 v10.0.22621.1928 -┌─────┬───────────────────────────────────────────────────────┬───────┬──────────┐ -│ Id │ Name │ Index │ IndexHex │ -├─────┼───────────────────────────────────────────────────────┼───────┼──────────┤ -│ 1 │ NtAccessCheck │ 0 │ 0x0 │ -│ 2 │ NtWorkerFactoryWorkerReady │ 1 │ 0x1 │ -│ 3 │ NtAcceptConnectPort │ 2 │ 0x2 │ -│ 4 │ NtMapUserPhysicalPagesScatter │ 3 │ 0x3 │ -│ 5 │ NtWaitForSingleObject │ 4 │ 0x4 │ -│ 6 │ NtCallbackReturn │ 5 │ 0x5 │ -│ 7 │ NtReadFile │ 6 │ 0x6 │ -│ 8 │ NtDeviceIoControlFile │ 7 │ 0x7 │ -│ 9 │ NtWriteFile │ 8 │ 0x8 │ -│ 10 │ NtRemoveIoCompletion │ 9 │ 0x9 │ -│ 11 │ NtReleaseSemaphore │ 10 │ 0xa │ -│ 12 │ NtReplyWaitReceivePort │ 11 │ 0xb │ -│ 13 │ NtReplyPort │ 12 │ 0xc │ -│ 14 │ NtSetInformationThread │ 13 │ 0xd │ -│ 15 │ NtSetEvent │ 14 │ 0xe │ -│ 16 │ NtClose │ 15 │ 0xf │ -│ 17 │ NtQueryObject │ 16 │ 0x10 │ -│ 18 │ NtQueryInformationFile │ 17 │ 0x11 │ -│ 19 │ NtOpenKey │ 18 │ 0x12 │ -│ 20 │ NtEnumerateValueKey │ 19 │ 0x13 │ -│ 21 │ NtFindAtom │ 20 │ 0x14 │ -│ 22 │ NtQueryDefaultLocale │ 21 │ 0x15 │ -│ 23 │ NtQueryKey │ 22 │ 0x16 │ -│ 24 │ NtQueryValueKey │ 23 │ 0x17 │ -│ 25 │ NtAllocateVirtualMemory │ 24 │ 0x18 │ -│ 26 │ NtQueryInformationProcess │ 25 │ 0x19 │ -│ 27 │ NtWaitForMultipleObjects32 │ 26 │ 0x1a │ -│ 28 │ NtWriteFileGather │ 27 │ 0x1b │ -│ 29 │ NtSetInformationProcess │ 28 │ 0x1c │ -│ 30 │ NtCreateKey │ 29 │ 0x1d │ -│ 31 │ NtFreeVirtualMemory │ 30 │ 0x1e │ -│ 32 │ NtImpersonateClientOfPort │ 31 │ 0x1f │ -│ 33 │ NtReleaseMutant │ 32 │ 0x20 │ -│ 34 │ NtQueryInformationToken │ 33 │ 0x21 │ -│ 35 │ NtRequestWaitReplyPort │ 34 │ 0x22 │ -│ 36 │ NtQueryVirtualMemory │ 35 │ 0x23 │ -│ 37 │ NtOpenThreadToken │ 36 │ 0x24 │ -│ 38 │ NtQueryInformationThread │ 37 │ 0x25 │ -│ 39 │ NtOpenProcess │ 38 │ 0x26 │ -│ 40 │ NtSetInformationFile │ 39 │ 0x27 │ -│ 41 │ NtMapViewOfSection │ 40 │ 0x28 │ -│ 42 │ NtAccessCheckAndAuditAlarm │ 41 │ 0x29 │ -│ 43 │ NtUnmapViewOfSection │ 42 │ 0x2a │ -│ 44 │ NtReplyWaitReceivePortEx │ 43 │ 0x2b │ -│ 45 │ NtTerminateProcess │ 44 │ 0x2c │ -│ 46 │ NtSetEventBoostPriority │ 45 │ 0x2d │ -│ 47 │ NtReadFileScatter │ 46 │ 0x2e │ -│ 48 │ NtOpenThreadTokenEx │ 47 │ 0x2f │ -│ 49 │ NtOpenProcessTokenEx │ 48 │ 0x30 │ -│ 50 │ NtQueryPerformanceCounter │ 49 │ 0x31 │ -│ 51 │ NtEnumerateKey │ 50 │ 0x32 │ -│ 52 │ NtOpenFile │ 51 │ 0x33 │ -│ 53 │ NtDelayExecution │ 52 │ 0x34 │ -│ 54 │ NtQueryDirectoryFile │ 53 │ 0x35 │ -│ 55 │ NtQuerySystemInformation │ 54 │ 0x36 │ -│ 56 │ NtOpenSection │ 55 │ 0x37 │ -│ 57 │ NtQueryTimer │ 56 │ 0x38 │ -│ 58 │ NtFsControlFile │ 57 │ 0x39 │ -│ 59 │ NtWriteVirtualMemory │ 58 │ 0x3a │ -│ 60 │ NtCloseObjectAuditAlarm │ 59 │ 0x3b │ -│ 61 │ NtDuplicateObject │ 60 │ 0x3c │ -│ 62 │ NtQueryAttributesFile │ 61 │ 0x3d │ -│ 63 │ NtClearEvent │ 62 │ 0x3e │ -│ 64 │ NtReadVirtualMemory │ 63 │ 0x3f │ -│ 65 │ NtOpenEvent │ 64 │ 0x40 │ -│ 66 │ NtAdjustPrivilegesToken │ 65 │ 0x41 │ -│ 67 │ NtDuplicateToken │ 66 │ 0x42 │ -│ 68 │ NtContinue │ 67 │ 0x43 │ -│ 69 │ NtQueryDefaultUILanguage │ 68 │ 0x44 │ -│ 70 │ NtQueueApcThread │ 69 │ 0x45 │ -│ 71 │ NtYieldExecution │ 70 │ 0x46 │ -│ 72 │ NtAddAtom │ 71 │ 0x47 │ -│ 73 │ NtCreateEvent │ 72 │ 0x48 │ -│ 74 │ NtQueryVolumeInformationFile │ 73 │ 0x49 │ -│ 75 │ NtCreateSection │ 74 │ 0x4a │ -│ 76 │ NtFlushBuffersFile │ 75 │ 0x4b │ -│ 77 │ NtApphelpCacheControl │ 76 │ 0x4c │ -│ 78 │ NtCreateProcessEx │ 77 │ 0x4d │ -│ 79 │ NtCreateThread │ 78 │ 0x4e │ -│ 80 │ NtIsProcessInJob │ 79 │ 0x4f │ -│ 81 │ NtProtectVirtualMemory │ 80 │ 0x50 │ -│ 82 │ NtQuerySection │ 81 │ 0x51 │ -│ 83 │ NtResumeThread │ 82 │ 0x52 │ -│ 84 │ NtTerminateThread │ 83 │ 0x53 │ -│ 85 │ NtReadRequestData │ 84 │ 0x54 │ -│ 86 │ NtCreateFile │ 85 │ 0x55 │ -│ 87 │ NtQueryEvent │ 86 │ 0x56 │ -│ 88 │ NtWriteRequestData │ 87 │ 0x57 │ -│ 89 │ NtOpenDirectoryObject │ 88 │ 0x58 │ -│ 90 │ NtAccessCheckByTypeAndAuditAlarm │ 89 │ 0x59 │ -│ 91 │ NtQuerySystemTime │ 91 │ 0x5b │ -│ 92 │ NtWaitForMultipleObjects │ 91 │ 0x5b │ -│ 93 │ NtSetInformationObject │ 92 │ 0x5c │ -│ 94 │ NtCancelIoFile │ 93 │ 0x5d │ -│ 95 │ NtTraceEvent │ 94 │ 0x5e │ -│ 96 │ NtPowerInformation │ 95 │ 0x5f │ -│ 97 │ NtSetValueKey │ 96 │ 0x60 │ -│ 98 │ NtCancelTimer │ 97 │ 0x61 │ -│ 99 │ NtSetTimer │ 98 │ 0x62 │ -│ 100 │ NtAccessCheckByType │ 99 │ 0x63 │ -│ 101 │ NtAccessCheckByTypeResultList │ 100 │ 0x64 │ -│ 102 │ NtAccessCheckByTypeResultListAndAuditAlarm │ 101 │ 0x65 │ -│ 103 │ NtAccessCheckByTypeResultListAndAuditAlarmByHandle │ 102 │ 0x66 │ -│ 104 │ NtAcquireCrossVmMutant │ 103 │ 0x67 │ -│ 105 │ NtAcquireProcessActivityReference │ 104 │ 0x68 │ -│ 106 │ NtAddAtomEx │ 105 │ 0x69 │ -│ 107 │ NtAddBootEntry │ 106 │ 0x6a │ -│ 108 │ NtAddDriverEntry │ 107 │ 0x6b │ -│ 109 │ NtAdjustGroupsToken │ 108 │ 0x6c │ -│ 110 │ NtAdjustTokenClaimsAndDeviceGroups │ 109 │ 0x6d │ -│ 111 │ NtAlertResumeThread │ 110 │ 0x6e │ -│ 112 │ NtAlertThread │ 111 │ 0x6f │ -│ 113 │ NtAlertThreadByThreadId │ 112 │ 0x70 │ -│ 114 │ NtAllocateLocallyUniqueId │ 113 │ 0x71 │ -│ 115 │ NtAllocateReserveObject │ 114 │ 0x72 │ -│ 116 │ NtAllocateUserPhysicalPages │ 115 │ 0x73 │ -│ 117 │ NtAllocateUserPhysicalPagesEx │ 116 │ 0x74 │ -│ 118 │ NtAllocateUuids │ 117 │ 0x75 │ -│ 119 │ NtAllocateVirtualMemoryEx │ 118 │ 0x76 │ -│ 120 │ NtAlpcAcceptConnectPort │ 119 │ 0x77 │ -│ 121 │ NtAlpcCancelMessage │ 120 │ 0x78 │ -│ 122 │ NtAlpcConnectPort │ 121 │ 0x79 │ -│ 123 │ NtAlpcConnectPortEx │ 122 │ 0x7a │ -│ 124 │ NtAlpcCreatePort │ 123 │ 0x7b │ -│ 125 │ NtAlpcCreatePortSection │ 124 │ 0x7c │ -│ 126 │ NtAlpcCreateResourceReserve │ 125 │ 0x7d │ -│ 127 │ NtAlpcCreateSectionView │ 126 │ 0x7e │ -│ 128 │ NtAlpcCreateSecurityContext │ 127 │ 0x7f │ -│ 129 │ NtAlpcDeletePortSection │ 128 │ 0x80 │ -│ 130 │ NtAlpcDeleteResourceReserve │ 129 │ 0x81 │ -│ 131 │ NtAlpcDeleteSectionView │ 130 │ 0x82 │ -│ 132 │ NtAlpcDeleteSecurityContext │ 131 │ 0x83 │ -│ 133 │ NtAlpcDisconnectPort │ 132 │ 0x84 │ -│ 134 │ NtAlpcImpersonateClientContainerOfPort │ 133 │ 0x85 │ -│ 135 │ NtAlpcImpersonateClientOfPort │ 134 │ 0x86 │ -│ 136 │ NtAlpcOpenSenderProcess │ 135 │ 0x87 │ -│ 137 │ NtAlpcOpenSenderThread │ 136 │ 0x88 │ -│ 138 │ NtAlpcQueryInformation │ 137 │ 0x89 │ -│ 139 │ NtAlpcQueryInformationMessage │ 138 │ 0x8a │ -│ 140 │ NtAlpcRevokeSecurityContext │ 139 │ 0x8b │ -│ 141 │ NtAlpcSendWaitReceivePort │ 140 │ 0x8c │ -│ 142 │ NtAlpcSetInformation │ 141 │ 0x8d │ -│ 143 │ NtAreMappedFilesTheSame │ 142 │ 0x8e │ -│ 144 │ NtAssignProcessToJobObject │ 143 │ 0x8f │ -│ 145 │ NtAssociateWaitCompletionPacket │ 144 │ 0x90 │ -│ 146 │ NtCallEnclave │ 145 │ 0x91 │ -│ 147 │ NtCancelIoFileEx │ 146 │ 0x92 │ -│ 148 │ NtCancelSynchronousIoFile │ 147 │ 0x93 │ -│ 149 │ NtCancelTimer2 │ 148 │ 0x94 │ -│ 150 │ NtCancelWaitCompletionPacket │ 149 │ 0x95 │ -│ 151 │ NtChangeProcessState │ 150 │ 0x96 │ -│ 152 │ NtChangeThreadState │ 151 │ 0x97 │ -│ 153 │ NtCommitComplete │ 152 │ 0x98 │ -│ 154 │ NtCommitEnlistment │ 153 │ 0x99 │ -│ 155 │ NtCommitRegistryTransaction │ 154 │ 0x9a │ -│ 156 │ NtCommitTransaction │ 155 │ 0x9b │ -│ 157 │ NtCompactKeys │ 156 │ 0x9c │ -│ 158 │ NtCompareObjects │ 157 │ 0x9d │ -│ 159 │ NtCompareSigningLevels │ 158 │ 0x9e │ -│ 160 │ NtCompareTokens │ 159 │ 0x9f │ -│ 161 │ NtCompleteConnectPort │ 160 │ 0xa0 │ -│ 162 │ NtCompressKey │ 161 │ 0xa1 │ -│ 163 │ NtConnectPort │ 162 │ 0xa2 │ -│ 164 │ NtContinueEx │ 163 │ 0xa3 │ -│ 165 │ NtConvertBetweenAuxiliaryCounterAndPerformanceCounter │ 164 │ 0xa4 │ -│ 166 │ NtCopyFileChunk │ 165 │ 0xa5 │ -│ 167 │ NtCreateCpuPartition │ 166 │ 0xa6 │ -│ 168 │ NtCreateCrossVmEvent │ 167 │ 0xa7 │ -│ 169 │ NtCreateCrossVmMutant │ 168 │ 0xa8 │ -│ 170 │ NtCreateDebugObject │ 169 │ 0xa9 │ -│ 171 │ NtCreateDirectoryObject │ 170 │ 0xaa │ -│ 172 │ NtCreateDirectoryObjectEx │ 171 │ 0xab │ -│ 173 │ NtCreateEnclave │ 172 │ 0xac │ -│ 174 │ NtCreateEnlistment │ 173 │ 0xad │ -│ 175 │ NtCreateEventPair │ 174 │ 0xae │ -│ 176 │ NtCreateIRTimer │ 175 │ 0xaf │ -│ 177 │ NtCreateIoCompletion │ 176 │ 0xb0 │ -│ 178 │ NtCreateIoRing │ 177 │ 0xb1 │ -│ 179 │ NtCreateJobObject │ 178 │ 0xb2 │ -│ 180 │ NtCreateJobSet │ 179 │ 0xb3 │ -│ 181 │ NtCreateKeyTransacted │ 180 │ 0xb4 │ -│ 182 │ NtCreateKeyedEvent │ 181 │ 0xb5 │ -│ 183 │ NtCreateLowBoxToken │ 182 │ 0xb6 │ -│ 184 │ NtCreateMailslotFile │ 183 │ 0xb7 │ -│ 185 │ NtCreateMutant │ 184 │ 0xb8 │ -│ 186 │ NtCreateNamedPipeFile │ 185 │ 0xb9 │ -│ 187 │ NtCreatePagingFile │ 186 │ 0xba │ -│ 188 │ NtCreatePartition │ 187 │ 0xbb │ -│ 189 │ NtCreatePort │ 188 │ 0xbc │ -│ 190 │ NtCreatePrivateNamespace │ 189 │ 0xbd │ -│ 191 │ NtCreateProcess │ 190 │ 0xbe │ -│ 192 │ NtCreateProcessStateChange │ 191 │ 0xbf │ -│ 193 │ NtCreateProfile │ 192 │ 0xc0 │ -│ 194 │ NtCreateProfileEx │ 193 │ 0xc1 │ -│ 195 │ NtCreateRegistryTransaction │ 194 │ 0xc2 │ -│ 196 │ NtCreateResourceManager │ 195 │ 0xc3 │ -│ 197 │ NtCreateSectionEx │ 196 │ 0xc4 │ -│ 198 │ NtCreateSemaphore │ 197 │ 0xc5 │ -│ 199 │ NtCreateSymbolicLinkObject │ 198 │ 0xc6 │ -│ 200 │ NtCreateThreadEx │ 199 │ 0xc7 │ -│ 201 │ NtCreateThreadStateChange │ 200 │ 0xc8 │ -│ 202 │ NtCreateTimer │ 201 │ 0xc9 │ -│ 203 │ NtCreateTimer2 │ 202 │ 0xca │ -│ 204 │ NtCreateToken │ 203 │ 0xcb │ -│ 205 │ NtCreateTokenEx │ 204 │ 0xcc │ -│ 206 │ NtCreateTransaction │ 205 │ 0xcd │ -│ 207 │ NtCreateTransactionManager │ 206 │ 0xce │ -│ 208 │ NtCreateUserProcess │ 207 │ 0xcf │ -│ 209 │ NtCreateWaitCompletionPacket │ 208 │ 0xd0 │ -│ 210 │ NtCreateWaitablePort │ 209 │ 0xd1 │ -│ 211 │ NtCreateWnfStateName │ 210 │ 0xd2 │ -│ 212 │ NtCreateWorkerFactory │ 211 │ 0xd3 │ -│ 213 │ NtDebugActiveProcess │ 212 │ 0xd4 │ -│ 214 │ NtDebugContinue │ 213 │ 0xd5 │ -│ 215 │ NtDeleteAtom │ 214 │ 0xd6 │ -│ 216 │ NtDeleteBootEntry │ 215 │ 0xd7 │ -│ 217 │ NtDeleteDriverEntry │ 216 │ 0xd8 │ -│ 218 │ NtDeleteFile │ 217 │ 0xd9 │ -│ 219 │ NtDeleteKey │ 218 │ 0xda │ -│ 220 │ NtDeleteObjectAuditAlarm │ 219 │ 0xdb │ -│ 221 │ NtDeletePrivateNamespace │ 220 │ 0xdc │ -│ 222 │ NtDeleteValueKey │ 221 │ 0xdd │ -│ 223 │ NtDeleteWnfStateData │ 222 │ 0xde │ -│ 224 │ NtDeleteWnfStateName │ 223 │ 0xdf │ -│ 225 │ NtDirectGraphicsCall │ 224 │ 0xe0 │ -│ 226 │ NtDisableLastKnownGood │ 225 │ 0xe1 │ -│ 227 │ NtDisplayString │ 226 │ 0xe2 │ -│ 228 │ NtDrawText │ 227 │ 0xe3 │ -│ 229 │ NtEnableLastKnownGood │ 228 │ 0xe4 │ -│ 230 │ NtEnumerateBootEntries │ 229 │ 0xe5 │ -│ 231 │ NtEnumerateDriverEntries │ 230 │ 0xe6 │ -│ 232 │ NtEnumerateSystemEnvironmentValuesEx │ 231 │ 0xe7 │ -│ 233 │ NtEnumerateTransactionObject │ 232 │ 0xe8 │ -│ 234 │ NtExtendSection │ 233 │ 0xe9 │ -│ 235 │ NtFilterBootOption │ 234 │ 0xea │ -│ 236 │ NtFilterToken │ 235 │ 0xeb │ -│ 237 │ NtFilterTokenEx │ 236 │ 0xec │ -│ 238 │ NtFlushBuffersFileEx │ 237 │ 0xed │ -│ 239 │ NtFlushInstallUILanguage │ 238 │ 0xee │ -│ 240 │ NtFlushInstructionCache │ 239 │ 0xef │ -│ 241 │ NtFlushKey │ 240 │ 0xf0 │ -│ 242 │ NtFlushProcessWriteBuffers │ 241 │ 0xf1 │ -│ 243 │ NtFlushVirtualMemory │ 242 │ 0xf2 │ -│ 244 │ NtFlushWriteBuffer │ 243 │ 0xf3 │ -│ 245 │ NtFreeUserPhysicalPages │ 244 │ 0xf4 │ -│ 246 │ NtFreezeRegistry │ 245 │ 0xf5 │ -│ 247 │ NtFreezeTransactions │ 246 │ 0xf6 │ -│ 248 │ NtGetCachedSigningLevel │ 247 │ 0xf7 │ -│ 249 │ NtGetCompleteWnfStateSubscription │ 248 │ 0xf8 │ -│ 250 │ NtGetContextThread │ 249 │ 0xf9 │ -│ 251 │ NtGetCurrentProcessorNumber │ 250 │ 0xfa │ -│ 252 │ NtGetCurrentProcessorNumberEx │ 251 │ 0xfb │ -│ 253 │ NtGetDevicePowerState │ 252 │ 0xfc │ -│ 254 │ NtGetMUIRegistryInfo │ 253 │ 0xfd │ -│ 255 │ NtGetNextProcess │ 254 │ 0xfe │ -│ 256 │ NtGetNextThread │ 255 │ 0xff │ -│ 257 │ NtGetNlsSectionPtr │ 256 │ 0x100 │ -│ 258 │ NtGetNotificationResourceManager │ 257 │ 0x101 │ -│ 259 │ NtGetWriteWatch │ 258 │ 0x102 │ -│ 260 │ NtImpersonateAnonymousToken │ 259 │ 0x103 │ -│ 261 │ NtImpersonateThread │ 260 │ 0x104 │ -│ 262 │ NtInitializeEnclave │ 261 │ 0x105 │ -│ 263 │ NtInitializeNlsFiles │ 262 │ 0x106 │ -│ 264 │ NtInitializeRegistry │ 263 │ 0x107 │ -│ 265 │ NtInitiatePowerAction │ 264 │ 0x108 │ -│ 266 │ NtIsSystemResumeAutomatic │ 265 │ 0x109 │ -│ 267 │ NtIsUILanguageComitted │ 266 │ 0x10a │ -│ 268 │ NtListenPort │ 267 │ 0x10b │ -│ 269 │ NtLoadDriver │ 268 │ 0x10c │ -│ 270 │ NtLoadEnclaveData │ 269 │ 0x10d │ -│ 271 │ NtLoadKey │ 270 │ 0x10e │ -│ 272 │ NtLoadKey2 │ 271 │ 0x10f │ -│ 273 │ NtLoadKey3 │ 272 │ 0x110 │ -│ 274 │ NtLoadKeyEx │ 273 │ 0x111 │ -│ 275 │ NtLockFile │ 274 │ 0x112 │ -│ 276 │ NtLockProductActivationKeys │ 275 │ 0x113 │ -│ 277 │ NtLockRegistryKey │ 276 │ 0x114 │ -│ 278 │ NtLockVirtualMemory │ 277 │ 0x115 │ -│ 279 │ NtMakePermanentObject │ 278 │ 0x116 │ -│ 280 │ NtMakeTemporaryObject │ 279 │ 0x117 │ -│ 281 │ NtManageHotPatch │ 280 │ 0x118 │ -│ 282 │ NtManagePartition │ 281 │ 0x119 │ -│ 283 │ NtMapCMFModule │ 282 │ 0x11a │ -│ 284 │ NtMapUserPhysicalPages │ 283 │ 0x11b │ -│ 285 │ NtMapViewOfSectionEx │ 284 │ 0x11c │ -│ 286 │ NtModifyBootEntry │ 285 │ 0x11d │ -│ 287 │ NtModifyDriverEntry │ 286 │ 0x11e │ -│ 288 │ NtNotifyChangeDirectoryFile │ 287 │ 0x11f │ -│ 289 │ NtNotifyChangeDirectoryFileEx │ 288 │ 0x120 │ -│ 290 │ NtNotifyChangeKey │ 289 │ 0x121 │ -│ 291 │ NtNotifyChangeMultipleKeys │ 290 │ 0x122 │ -│ 292 │ NtNotifyChangeSession │ 291 │ 0x123 │ -│ 293 │ NtOpenCpuPartition │ 292 │ 0x124 │ -│ 294 │ NtOpenEnlistment │ 293 │ 0x125 │ -│ 295 │ NtOpenEventPair │ 294 │ 0x126 │ -│ 296 │ NtOpenIoCompletion │ 295 │ 0x127 │ -│ 297 │ NtOpenJobObject │ 296 │ 0x128 │ -│ 298 │ NtOpenKeyEx │ 297 │ 0x129 │ -│ 299 │ NtOpenKeyTransacted │ 298 │ 0x12a │ -│ 300 │ NtOpenKeyTransactedEx │ 299 │ 0x12b │ -│ 301 │ NtOpenKeyedEvent │ 300 │ 0x12c │ -│ 302 │ NtOpenMutant │ 301 │ 0x12d │ -│ 303 │ NtOpenObjectAuditAlarm │ 302 │ 0x12e │ -│ 304 │ NtOpenPartition │ 303 │ 0x12f │ -│ 305 │ NtOpenPrivateNamespace │ 304 │ 0x130 │ -│ 306 │ NtOpenProcessToken │ 305 │ 0x131 │ -│ 307 │ NtOpenRegistryTransaction │ 306 │ 0x132 │ -│ 308 │ NtOpenResourceManager │ 307 │ 0x133 │ -│ 309 │ NtOpenSemaphore │ 308 │ 0x134 │ -│ 310 │ NtOpenSession │ 309 │ 0x135 │ -│ 311 │ NtOpenSymbolicLinkObject │ 310 │ 0x136 │ -│ 312 │ NtOpenThread │ 311 │ 0x137 │ -│ 313 │ NtOpenTimer │ 312 │ 0x138 │ -│ 314 │ NtOpenTransaction │ 313 │ 0x139 │ -│ 315 │ NtOpenTransactionManager │ 314 │ 0x13a │ -│ 316 │ NtPlugPlayControl │ 315 │ 0x13b │ -│ 317 │ NtPrePrepareComplete │ 316 │ 0x13c │ -│ 318 │ NtPrePrepareEnlistment │ 317 │ 0x13d │ -│ 319 │ NtPrepareComplete │ 318 │ 0x13e │ -│ 320 │ NtPrepareEnlistment │ 319 │ 0x13f │ -│ 321 │ NtPrivilegeCheck │ 320 │ 0x140 │ -│ 322 │ NtPrivilegeObjectAuditAlarm │ 321 │ 0x141 │ -│ 323 │ NtPrivilegedServiceAuditAlarm │ 322 │ 0x142 │ -│ 324 │ NtPropagationComplete │ 323 │ 0x143 │ -│ 325 │ NtPropagationFailed │ 324 │ 0x144 │ -│ 326 │ NtPssCaptureVaSpaceBulk │ 325 │ 0x145 │ -│ 327 │ NtPulseEvent │ 326 │ 0x146 │ -│ 328 │ NtQueryAuxiliaryCounterFrequency │ 327 │ 0x147 │ -│ 329 │ NtQueryBootEntryOrder │ 328 │ 0x148 │ -│ 330 │ NtQueryBootOptions │ 329 │ 0x149 │ -│ 331 │ NtQueryDebugFilterState │ 330 │ 0x14a │ -│ 332 │ NtQueryDirectoryFileEx │ 331 │ 0x14b │ -│ 333 │ NtQueryDirectoryObject │ 332 │ 0x14c │ -│ 334 │ NtQueryDriverEntryOrder │ 333 │ 0x14d │ -│ 335 │ NtQueryEaFile │ 334 │ 0x14e │ -│ 336 │ NtQueryFullAttributesFile │ 335 │ 0x14f │ -│ 337 │ NtQueryInformationAtom │ 336 │ 0x150 │ -│ 338 │ NtQueryInformationByName │ 337 │ 0x151 │ -│ 339 │ NtQueryInformationCpuPartition │ 338 │ 0x152 │ -│ 340 │ NtQueryInformationEnlistment │ 339 │ 0x153 │ -│ 341 │ NtQueryInformationJobObject │ 340 │ 0x154 │ -│ 342 │ NtQueryInformationPort │ 341 │ 0x155 │ -│ 343 │ NtQueryInformationResourceManager │ 342 │ 0x156 │ -│ 344 │ NtQueryInformationTransaction │ 343 │ 0x157 │ -│ 345 │ NtQueryInformationTransactionManager │ 344 │ 0x158 │ -│ 346 │ NtQueryInformationWorkerFactory │ 345 │ 0x159 │ -│ 347 │ NtQueryInstallUILanguage │ 346 │ 0x15a │ -│ 348 │ NtQueryIntervalProfile │ 347 │ 0x15b │ -│ 349 │ NtQueryIoCompletion │ 348 │ 0x15c │ -│ 350 │ NtQueryIoRingCapabilities │ 349 │ 0x15d │ -│ 351 │ NtQueryLicenseValue │ 350 │ 0x15e │ -│ 352 │ NtQueryMultipleValueKey │ 351 │ 0x15f │ -│ 353 │ NtQueryMutant │ 352 │ 0x160 │ -│ 354 │ NtQueryOpenSubKeys │ 353 │ 0x161 │ -│ 355 │ NtQueryOpenSubKeysEx │ 354 │ 0x162 │ -│ 356 │ NtQueryPortInformationProcess │ 355 │ 0x163 │ -│ 357 │ NtQueryQuotaInformationFile │ 356 │ 0x164 │ -│ 358 │ NtQuerySecurityAttributesToken │ 357 │ 0x165 │ -│ 359 │ NtQuerySecurityObject │ 358 │ 0x166 │ -│ 360 │ NtQuerySecurityPolicy │ 359 │ 0x167 │ -│ 361 │ NtQuerySemaphore │ 360 │ 0x168 │ -│ 362 │ NtQuerySymbolicLinkObject │ 361 │ 0x169 │ -│ 363 │ NtQuerySystemEnvironmentValue │ 362 │ 0x16a │ -│ 364 │ NtQuerySystemEnvironmentValueEx │ 363 │ 0x16b │ -│ 365 │ NtQuerySystemInformationEx │ 364 │ 0x16c │ -│ 366 │ NtQueryTimerResolution │ 365 │ 0x16d │ -│ 367 │ NtQueryWnfStateData │ 366 │ 0x16e │ -│ 368 │ NtQueryWnfStateNameInformation │ 367 │ 0x16f │ -│ 369 │ NtQueueApcThreadEx │ 368 │ 0x170 │ -│ 370 │ NtQueueApcThreadEx2 │ 369 │ 0x171 │ -│ 371 │ NtRaiseException │ 370 │ 0x172 │ -│ 372 │ NtRaiseHardError │ 371 │ 0x173 │ -│ 373 │ NtReadOnlyEnlistment │ 372 │ 0x174 │ -│ 374 │ NtReadVirtualMemoryEx │ 373 │ 0x175 │ -│ 375 │ NtRecoverEnlistment │ 374 │ 0x176 │ -│ 376 │ NtRecoverResourceManager │ 375 │ 0x177 │ -│ 377 │ NtRecoverTransactionManager │ 376 │ 0x178 │ -│ 378 │ NtRegisterProtocolAddressInformation │ 377 │ 0x179 │ -│ 379 │ NtRegisterThreadTerminatePort │ 378 │ 0x17a │ -│ 380 │ NtReleaseKeyedEvent │ 379 │ 0x17b │ -│ 381 │ NtReleaseWorkerFactoryWorker │ 380 │ 0x17c │ -│ 382 │ NtRemoveIoCompletionEx │ 381 │ 0x17d │ -│ 383 │ NtRemoveProcessDebug │ 382 │ 0x17e │ -│ 384 │ NtRenameKey │ 383 │ 0x17f │ -│ 385 │ NtRenameTransactionManager │ 384 │ 0x180 │ -│ 386 │ NtReplaceKey │ 385 │ 0x181 │ -│ 387 │ NtReplacePartitionUnit │ 386 │ 0x182 │ -│ 388 │ NtReplyWaitReplyPort │ 387 │ 0x183 │ -│ 389 │ NtRequestPort │ 388 │ 0x184 │ -│ 390 │ NtResetEvent │ 389 │ 0x185 │ -│ 391 │ NtResetWriteWatch │ 390 │ 0x186 │ -│ 392 │ NtRestoreKey │ 391 │ 0x187 │ -│ 393 │ NtResumeProcess │ 392 │ 0x188 │ -│ 394 │ NtRevertContainerImpersonation │ 393 │ 0x189 │ -│ 395 │ NtRollbackComplete │ 394 │ 0x18a │ -│ 396 │ NtRollbackEnlistment │ 395 │ 0x18b │ -│ 397 │ NtRollbackRegistryTransaction │ 396 │ 0x18c │ -│ 398 │ NtRollbackTransaction │ 397 │ 0x18d │ -│ 399 │ NtRollforwardTransactionManager │ 398 │ 0x18e │ -│ 400 │ NtSaveKey │ 399 │ 0x18f │ -│ 401 │ NtSaveKeyEx │ 400 │ 0x190 │ -│ 402 │ NtSaveMergedKeys │ 401 │ 0x191 │ -│ 403 │ NtSecureConnectPort │ 402 │ 0x192 │ -│ 404 │ NtSerializeBoot │ 403 │ 0x193 │ -│ 405 │ NtSetBootEntryOrder │ 404 │ 0x194 │ -│ 406 │ NtSetBootOptions │ 405 │ 0x195 │ -│ 407 │ NtSetCachedSigningLevel │ 406 │ 0x196 │ -│ 408 │ NtSetCachedSigningLevel2 │ 407 │ 0x197 │ -│ 409 │ NtSetContextThread │ 408 │ 0x198 │ -│ 410 │ NtSetDebugFilterState │ 409 │ 0x199 │ -│ 411 │ NtSetDefaultHardErrorPort │ 410 │ 0x19a │ -│ 412 │ NtSetDefaultLocale │ 411 │ 0x19b │ -│ 413 │ NtSetDefaultUILanguage │ 412 │ 0x19c │ -│ 414 │ NtSetDriverEntryOrder │ 413 │ 0x19d │ -│ 415 │ NtSetEaFile │ 414 │ 0x19e │ -│ 416 │ NtSetHighEventPair │ 415 │ 0x19f │ -│ 417 │ NtSetHighWaitLowEventPair │ 416 │ 0x1a0 │ -│ 418 │ NtSetIRTimer │ 417 │ 0x1a1 │ -│ 419 │ NtSetInformationCpuPartition │ 418 │ 0x1a2 │ -│ 420 │ NtSetInformationDebugObject │ 419 │ 0x1a3 │ -│ 421 │ NtSetInformationEnlistment │ 420 │ 0x1a4 │ -│ 422 │ NtSetInformationIoRing │ 421 │ 0x1a5 │ -│ 423 │ NtSetInformationJobObject │ 422 │ 0x1a6 │ -│ 424 │ NtSetInformationKey │ 423 │ 0x1a7 │ -│ 425 │ NtSetInformationResourceManager │ 424 │ 0x1a8 │ -│ 426 │ NtSetInformationSymbolicLink │ 425 │ 0x1a9 │ -│ 427 │ NtSetInformationToken │ 426 │ 0x1aa │ -│ 428 │ NtSetInformationTransaction │ 427 │ 0x1ab │ -│ 429 │ NtSetInformationTransactionManager │ 428 │ 0x1ac │ -│ 430 │ NtSetInformationVirtualMemory │ 429 │ 0x1ad │ -│ 431 │ NtSetInformationWorkerFactory │ 430 │ 0x1ae │ -│ 432 │ NtSetIntervalProfile │ 431 │ 0x1af │ -│ 433 │ NtSetIoCompletion │ 432 │ 0x1b0 │ -│ 434 │ NtSetIoCompletionEx │ 433 │ 0x1b1 │ -│ 435 │ NtSetLdtEntries │ 434 │ 0x1b2 │ -│ 436 │ NtSetLowEventPair │ 435 │ 0x1b3 │ -│ 437 │ NtSetLowWaitHighEventPair │ 436 │ 0x1b4 │ -│ 438 │ NtSetQuotaInformationFile │ 437 │ 0x1b5 │ -│ 439 │ NtSetSecurityObject │ 438 │ 0x1b6 │ -│ 440 │ NtSetSystemEnvironmentValue │ 439 │ 0x1b7 │ -│ 441 │ NtSetSystemEnvironmentValueEx │ 440 │ 0x1b8 │ -│ 442 │ NtSetSystemInformation │ 441 │ 0x1b9 │ -│ 443 │ NtSetSystemPowerState │ 442 │ 0x1ba │ -│ 444 │ NtSetSystemTime │ 443 │ 0x1bb │ -│ 445 │ NtSetThreadExecutionState │ 444 │ 0x1bc │ -│ 446 │ NtSetTimer2 │ 445 │ 0x1bd │ -│ 447 │ NtSetTimerEx │ 446 │ 0x1be │ -│ 448 │ NtSetTimerResolution │ 447 │ 0x1bf │ -│ 449 │ NtSetUuidSeed │ 448 │ 0x1c0 │ -│ 450 │ NtSetVolumeInformationFile │ 449 │ 0x1c1 │ -│ 451 │ NtSetWnfProcessNotificationEvent │ 450 │ 0x1c2 │ -│ 452 │ NtShutdownSystem │ 451 │ 0x1c3 │ -│ 453 │ NtShutdownWorkerFactory │ 452 │ 0x1c4 │ -│ 454 │ NtSignalAndWaitForSingleObject │ 453 │ 0x1c5 │ -│ 455 │ NtSinglePhaseReject │ 454 │ 0x1c6 │ -│ 456 │ NtStartProfile │ 455 │ 0x1c7 │ -│ 457 │ NtStopProfile │ 456 │ 0x1c8 │ -│ 458 │ NtSubmitIoRing │ 457 │ 0x1c9 │ -│ 459 │ NtSubscribeWnfStateChange │ 458 │ 0x1ca │ -│ 460 │ NtSuspendProcess │ 459 │ 0x1cb │ -│ 461 │ NtSuspendThread │ 460 │ 0x1cc │ -│ 462 │ NtSystemDebugControl │ 461 │ 0x1cd │ -│ 463 │ NtTerminateEnclave │ 462 │ 0x1ce │ -│ 464 │ NtTerminateJobObject │ 463 │ 0x1cf │ -│ 465 │ NtTestAlert │ 464 │ 0x1d0 │ -│ 466 │ NtThawRegistry │ 465 │ 0x1d1 │ -│ 467 │ NtThawTransactions │ 466 │ 0x1d2 │ -│ 468 │ NtTraceControl │ 467 │ 0x1d3 │ -│ 469 │ NtTranslateFilePath │ 468 │ 0x1d4 │ -│ 470 │ NtUmsThreadYield │ 469 │ 0x1d5 │ -│ 471 │ NtUnloadDriver │ 470 │ 0x1d6 │ -│ 472 │ NtUnloadKey │ 471 │ 0x1d7 │ -│ 473 │ NtUnloadKey2 │ 472 │ 0x1d8 │ -│ 474 │ NtUnloadKeyEx │ 473 │ 0x1d9 │ -│ 475 │ NtUnlockFile │ 474 │ 0x1da │ -│ 476 │ NtUnlockVirtualMemory │ 475 │ 0x1db │ -│ 477 │ NtUnmapViewOfSectionEx │ 476 │ 0x1dc │ -│ 478 │ NtUnsubscribeWnfStateChange │ 477 │ 0x1dd │ -│ 479 │ NtUpdateWnfStateData │ 478 │ 0x1de │ -│ 480 │ NtVdmControl │ 479 │ 0x1df │ -│ 481 │ NtWaitForAlertByThreadId │ 480 │ 0x1e0 │ -│ 482 │ NtWaitForDebugEvent │ 481 │ 0x1e1 │ -│ 483 │ NtWaitForKeyedEvent │ 482 │ 0x1e2 │ -│ 484 │ NtWaitForWorkViaWorkerFactory │ 483 │ 0x1e3 │ -│ 485 │ NtWaitHighEventPair │ 484 │ 0x1e4 │ -│ 486 │ NtWaitLowEventPair │ 485 │ 0x1e5 │ -└─────┴───────────────────────────────────────────────────────┴───────┴──────────┘ +┌─────┬───────────────────────────────────────────────────────┬──────────────────┐ +│ Id │ Name │ Index │ +├─────┼───────────────────────────────────────────────────────┼──────────────────┤ +│ 1 │ NtAccessCheck │ 0x00000000 / 0 │ +│ 2 │ NtWorkerFactoryWorkerReady │ 0x00000001 / 1 │ +│ 3 │ NtAcceptConnectPort │ 0x00000002 / 2 │ +│ 4 │ NtMapUserPhysicalPagesScatter │ 0x00000003 / 3 │ +│ 5 │ NtWaitForSingleObject │ 0x00000004 / 4 │ +│ 6 │ NtCallbackReturn │ 0x00000005 / 5 │ +│ 7 │ NtReadFile │ 0x00000006 / 6 │ +│ 8 │ NtDeviceIoControlFile │ 0x00000007 / 7 │ +│ 9 │ NtWriteFile │ 0x00000008 / 8 │ +│ 10 │ NtRemoveIoCompletion │ 0x00000009 / 9 │ +│ 11 │ NtReleaseSemaphore │ 0x0000000A / 10 │ +│ 12 │ NtReplyWaitReceivePort │ 0x0000000B / 11 │ +│ 13 │ NtReplyPort │ 0x0000000C / 12 │ +│ 14 │ NtSetInformationThread │ 0x0000000D / 13 │ +│ 15 │ NtSetEvent │ 0x0000000E / 14 │ +│ 16 │ NtClose │ 0x0000000F / 15 │ +│ 17 │ NtQueryObject │ 0x00000010 / 16 │ +│ 18 │ NtQueryInformationFile │ 0x00000011 / 17 │ +│ 19 │ NtOpenKey │ 0x00000012 / 18 │ +│ 20 │ NtEnumerateValueKey │ 0x00000013 / 19 │ +│ 21 │ NtFindAtom │ 0x00000014 / 20 │ +│ 22 │ NtQueryDefaultLocale │ 0x00000015 / 21 │ +│ 23 │ NtQueryKey │ 0x00000016 / 22 │ +│ 24 │ NtQueryValueKey │ 0x00000017 / 23 │ +│ 25 │ NtAllocateVirtualMemory │ 0x00000018 / 24 │ +│ 26 │ NtQueryInformationProcess │ 0x00000019 / 25 │ +│ 27 │ NtWaitForMultipleObjects32 │ 0x0000001A / 26 │ +│ 28 │ NtWriteFileGather │ 0x0000001B / 27 │ +│ 29 │ NtSetInformationProcess │ 0x0000001C / 28 │ +│ 30 │ NtCreateKey │ 0x0000001D / 29 │ +│ 31 │ NtFreeVirtualMemory │ 0x0000001E / 30 │ +│ 32 │ NtImpersonateClientOfPort │ 0x0000001F / 31 │ +│ 33 │ NtReleaseMutant │ 0x00000020 / 32 │ +│ 34 │ NtQueryInformationToken │ 0x00000021 / 33 │ +│ 35 │ NtRequestWaitReplyPort │ 0x00000022 / 34 │ +│ 36 │ NtQueryVirtualMemory │ 0x00000023 / 35 │ +│ 37 │ NtOpenThreadToken │ 0x00000024 / 36 │ +│ 38 │ NtQueryInformationThread │ 0x00000025 / 37 │ +│ 39 │ NtOpenProcess │ 0x00000026 / 38 │ +│ 40 │ NtSetInformationFile │ 0x00000027 / 39 │ +│ 41 │ NtMapViewOfSection │ 0x00000028 / 40 │ +│ 42 │ NtAccessCheckAndAuditAlarm │ 0x00000029 / 41 │ +│ 43 │ NtUnmapViewOfSection │ 0x0000002A / 42 │ +│ 44 │ NtReplyWaitReceivePortEx │ 0x0000002B / 43 │ +│ 45 │ NtTerminateProcess │ 0x0000002C / 44 │ +│ 46 │ NtSetEventBoostPriority │ 0x0000002D / 45 │ +│ 47 │ NtReadFileScatter │ 0x0000002E / 46 │ +│ 48 │ NtOpenThreadTokenEx │ 0x0000002F / 47 │ +│ 49 │ NtOpenProcessTokenEx │ 0x00000030 / 48 │ +│ 50 │ NtQueryPerformanceCounter │ 0x00000031 / 49 │ +│ 51 │ NtEnumerateKey │ 0x00000032 / 50 │ +│ 52 │ NtOpenFile │ 0x00000033 / 51 │ +│ 53 │ NtDelayExecution │ 0x00000034 / 52 │ +│ 54 │ NtQueryDirectoryFile │ 0x00000035 / 53 │ +│ 55 │ NtQuerySystemInformation │ 0x00000036 / 54 │ +│ 56 │ NtOpenSection │ 0x00000037 / 55 │ +│ 57 │ NtQueryTimer │ 0x00000038 / 56 │ +│ 58 │ NtFsControlFile │ 0x00000039 / 57 │ +│ 59 │ NtWriteVirtualMemory │ 0x0000003A / 58 │ +│ 60 │ NtCloseObjectAuditAlarm │ 0x0000003B / 59 │ +│ 61 │ NtDuplicateObject │ 0x0000003C / 60 │ +│ 62 │ NtQueryAttributesFile │ 0x0000003D / 61 │ +│ 63 │ NtClearEvent │ 0x0000003E / 62 │ +│ 64 │ NtReadVirtualMemory │ 0x0000003F / 63 │ +│ 65 │ NtOpenEvent │ 0x00000040 / 64 │ +│ 66 │ NtAdjustPrivilegesToken │ 0x00000041 / 65 │ +│ 67 │ NtDuplicateToken │ 0x00000042 / 66 │ +│ 68 │ NtContinue │ 0x00000043 / 67 │ +│ 69 │ NtQueryDefaultUILanguage │ 0x00000044 / 68 │ +│ 70 │ NtQueueApcThread │ 0x00000045 / 69 │ +│ 71 │ NtYieldExecution │ 0x00000046 / 70 │ +│ 72 │ NtAddAtom │ 0x00000047 / 71 │ +│ 73 │ NtCreateEvent │ 0x00000048 / 72 │ +│ 74 │ NtQueryVolumeInformationFile │ 0x00000049 / 73 │ +│ 75 │ NtCreateSection │ 0x0000004A / 74 │ +│ 76 │ NtFlushBuffersFile │ 0x0000004B / 75 │ +│ 77 │ NtApphelpCacheControl │ 0x0000004C / 76 │ +│ 78 │ NtCreateProcessEx │ 0x0000004D / 77 │ +│ 79 │ NtCreateThread │ 0x0000004E / 78 │ +│ 80 │ NtIsProcessInJob │ 0x0000004F / 79 │ +│ 81 │ NtProtectVirtualMemory │ 0x00000050 / 80 │ +│ 82 │ NtQuerySection │ 0x00000051 / 81 │ +│ 83 │ NtResumeThread │ 0x00000052 / 82 │ +│ 84 │ NtTerminateThread │ 0x00000053 / 83 │ +│ 85 │ NtReadRequestData │ 0x00000054 / 84 │ +│ 86 │ NtCreateFile │ 0x00000055 / 85 │ +│ 87 │ NtQueryEvent │ 0x00000056 / 86 │ +│ 88 │ NtWriteRequestData │ 0x00000057 / 87 │ +│ 89 │ NtOpenDirectoryObject │ 0x00000058 / 88 │ +│ 90 │ NtAccessCheckByTypeAndAuditAlarm │ 0x00000059 / 89 │ +│ 91 │ NtQuerySystemTime │ 0x0000005B / 91 │ +│ 92 │ NtWaitForMultipleObjects │ 0x0000005B / 91 │ +│ 93 │ NtSetInformationObject │ 0x0000005C / 92 │ +│ 94 │ NtCancelIoFile │ 0x0000005D / 93 │ +│ 95 │ NtTraceEvent │ 0x0000005E / 94 │ +│ 96 │ NtPowerInformation │ 0x0000005F / 95 │ +│ 97 │ NtSetValueKey │ 0x00000060 / 96 │ +│ 98 │ NtCancelTimer │ 0x00000061 / 97 │ +│ 99 │ NtSetTimer │ 0x00000062 / 98 │ +│ 100 │ NtAccessCheckByType │ 0x00000063 / 99 │ +│ 101 │ NtAccessCheckByTypeResultList │ 0x00000064 / 100 │ +│ 102 │ NtAccessCheckByTypeResultListAndAuditAlarm │ 0x00000065 / 101 │ +│ 103 │ NtAccessCheckByTypeResultListAndAuditAlarmByHandle │ 0x00000066 / 102 │ +│ 104 │ NtAcquireCrossVmMutant │ 0x00000067 / 103 │ +│ 105 │ NtAcquireProcessActivityReference │ 0x00000068 / 104 │ +│ 106 │ NtAddAtomEx │ 0x00000069 / 105 │ +│ 107 │ NtAddBootEntry │ 0x0000006A / 106 │ +│ 108 │ NtAddDriverEntry │ 0x0000006B / 107 │ +│ 109 │ NtAdjustGroupsToken │ 0x0000006C / 108 │ +│ 110 │ NtAdjustTokenClaimsAndDeviceGroups │ 0x0000006D / 109 │ +│ 111 │ NtAlertResumeThread │ 0x0000006E / 110 │ +│ 112 │ NtAlertThread │ 0x0000006F / 111 │ +│ 113 │ NtAlertThreadByThreadId │ 0x00000070 / 112 │ +│ 114 │ NtAllocateLocallyUniqueId │ 0x00000071 / 113 │ +│ 115 │ NtAllocateReserveObject │ 0x00000072 / 114 │ +│ 116 │ NtAllocateUserPhysicalPages │ 0x00000073 / 115 │ +│ 117 │ NtAllocateUserPhysicalPagesEx │ 0x00000074 / 116 │ +│ 118 │ NtAllocateUuids │ 0x00000075 / 117 │ +│ 119 │ NtAllocateVirtualMemoryEx │ 0x00000076 / 118 │ +│ 120 │ NtAlpcAcceptConnectPort │ 0x00000077 / 119 │ +│ 121 │ NtAlpcCancelMessage │ 0x00000078 / 120 │ +│ 122 │ NtAlpcConnectPort │ 0x00000079 / 121 │ +│ 123 │ NtAlpcConnectPortEx │ 0x0000007A / 122 │ +│ 124 │ NtAlpcCreatePort │ 0x0000007B / 123 │ +│ 125 │ NtAlpcCreatePortSection │ 0x0000007C / 124 │ +│ 126 │ NtAlpcCreateResourceReserve │ 0x0000007D / 125 │ +│ 127 │ NtAlpcCreateSectionView │ 0x0000007E / 126 │ +│ 128 │ NtAlpcCreateSecurityContext │ 0x0000007F / 127 │ +│ 129 │ NtAlpcDeletePortSection │ 0x00000080 / 128 │ +│ 130 │ NtAlpcDeleteResourceReserve │ 0x00000081 / 129 │ +│ 131 │ NtAlpcDeleteSectionView │ 0x00000082 / 130 │ +│ 132 │ NtAlpcDeleteSecurityContext │ 0x00000083 / 131 │ +│ 133 │ NtAlpcDisconnectPort │ 0x00000084 / 132 │ +│ 134 │ NtAlpcImpersonateClientContainerOfPort │ 0x00000085 / 133 │ +│ 135 │ NtAlpcImpersonateClientOfPort │ 0x00000086 / 134 │ +│ 136 │ NtAlpcOpenSenderProcess │ 0x00000087 / 135 │ +│ 137 │ NtAlpcOpenSenderThread │ 0x00000088 / 136 │ +│ 138 │ NtAlpcQueryInformation │ 0x00000089 / 137 │ +│ 139 │ NtAlpcQueryInformationMessage │ 0x0000008A / 138 │ +│ 140 │ NtAlpcRevokeSecurityContext │ 0x0000008B / 139 │ +│ 141 │ NtAlpcSendWaitReceivePort │ 0x0000008C / 140 │ +│ 142 │ NtAlpcSetInformation │ 0x0000008D / 141 │ +│ 143 │ NtAreMappedFilesTheSame │ 0x0000008E / 142 │ +│ 144 │ NtAssignProcessToJobObject │ 0x0000008F / 143 │ +│ 145 │ NtAssociateWaitCompletionPacket │ 0x00000090 / 144 │ +│ 146 │ NtCallEnclave │ 0x00000091 / 145 │ +│ 147 │ NtCancelIoFileEx │ 0x00000092 / 146 │ +│ 148 │ NtCancelSynchronousIoFile │ 0x00000093 / 147 │ +│ 149 │ NtCancelTimer2 │ 0x00000094 / 148 │ +│ 150 │ NtCancelWaitCompletionPacket │ 0x00000095 / 149 │ +│ 151 │ NtChangeProcessState │ 0x00000096 / 150 │ +│ 152 │ NtChangeThreadState │ 0x00000097 / 151 │ +│ 153 │ NtCommitComplete │ 0x00000098 / 152 │ +│ 154 │ NtCommitEnlistment │ 0x00000099 / 153 │ +│ 155 │ NtCommitRegistryTransaction │ 0x0000009A / 154 │ +│ 156 │ NtCommitTransaction │ 0x0000009B / 155 │ +│ 157 │ NtCompactKeys │ 0x0000009C / 156 │ +│ 158 │ NtCompareObjects │ 0x0000009D / 157 │ +│ 159 │ NtCompareSigningLevels │ 0x0000009E / 158 │ +│ 160 │ NtCompareTokens │ 0x0000009F / 159 │ +│ 161 │ NtCompleteConnectPort │ 0x000000A0 / 160 │ +│ 162 │ NtCompressKey │ 0x000000A1 / 161 │ +│ 163 │ NtConnectPort │ 0x000000A2 / 162 │ +│ 164 │ NtContinueEx │ 0x000000A3 / 163 │ +│ 165 │ NtConvertBetweenAuxiliaryCounterAndPerformanceCounter │ 0x000000A4 / 164 │ +│ 166 │ NtCopyFileChunk │ 0x000000A5 / 165 │ +│ 167 │ NtCreateCpuPartition │ 0x000000A6 / 166 │ +│ 168 │ NtCreateCrossVmEvent │ 0x000000A7 / 167 │ +│ 169 │ NtCreateCrossVmMutant │ 0x000000A8 / 168 │ +│ 170 │ NtCreateDebugObject │ 0x000000A9 / 169 │ +│ 171 │ NtCreateDirectoryObject │ 0x000000AA / 170 │ +│ 172 │ NtCreateDirectoryObjectEx │ 0x000000AB / 171 │ +│ 173 │ NtCreateEnclave │ 0x000000AC / 172 │ +│ 174 │ NtCreateEnlistment │ 0x000000AD / 173 │ +│ 175 │ NtCreateEventPair │ 0x000000AE / 174 │ +│ 176 │ NtCreateIRTimer │ 0x000000AF / 175 │ +│ 177 │ NtCreateIoCompletion │ 0x000000B0 / 176 │ +│ 178 │ NtCreateIoRing │ 0x000000B1 / 177 │ +│ 179 │ NtCreateJobObject │ 0x000000B2 / 178 │ +│ 180 │ NtCreateJobSet │ 0x000000B3 / 179 │ +│ 181 │ NtCreateKeyTransacted │ 0x000000B4 / 180 │ +│ 182 │ NtCreateKeyedEvent │ 0x000000B5 / 181 │ +│ 183 │ NtCreateLowBoxToken │ 0x000000B6 / 182 │ +│ 184 │ NtCreateMailslotFile │ 0x000000B7 / 183 │ +│ 185 │ NtCreateMutant │ 0x000000B8 / 184 │ +│ 186 │ NtCreateNamedPipeFile │ 0x000000B9 / 185 │ +│ 187 │ NtCreatePagingFile │ 0x000000BA / 186 │ +│ 188 │ NtCreatePartition │ 0x000000BB / 187 │ +│ 189 │ NtCreatePort │ 0x000000BC / 188 │ +│ 190 │ NtCreatePrivateNamespace │ 0x000000BD / 189 │ +│ 191 │ NtCreateProcess │ 0x000000BE / 190 │ +│ 192 │ NtCreateProcessStateChange │ 0x000000BF / 191 │ +│ 193 │ NtCreateProfile │ 0x000000C0 / 192 │ +│ 194 │ NtCreateProfileEx │ 0x000000C1 / 193 │ +│ 195 │ NtCreateRegistryTransaction │ 0x000000C2 / 194 │ +│ 196 │ NtCreateResourceManager │ 0x000000C3 / 195 │ +│ 197 │ NtCreateSectionEx │ 0x000000C4 / 196 │ +│ 198 │ NtCreateSemaphore │ 0x000000C5 / 197 │ +│ 199 │ NtCreateSymbolicLinkObject │ 0x000000C6 / 198 │ +│ 200 │ NtCreateThreadEx │ 0x000000C7 / 199 │ +│ 201 │ NtCreateThreadStateChange │ 0x000000C8 / 200 │ +│ 202 │ NtCreateTimer │ 0x000000C9 / 201 │ +│ 203 │ NtCreateTimer2 │ 0x000000CA / 202 │ +│ 204 │ NtCreateToken │ 0x000000CB / 203 │ +│ 205 │ NtCreateTokenEx │ 0x000000CC / 204 │ +│ 206 │ NtCreateTransaction │ 0x000000CD / 205 │ +│ 207 │ NtCreateTransactionManager │ 0x000000CE / 206 │ +│ 208 │ NtCreateUserProcess │ 0x000000CF / 207 │ +│ 209 │ NtCreateWaitCompletionPacket │ 0x000000D0 / 208 │ +│ 210 │ NtCreateWaitablePort │ 0x000000D1 / 209 │ +│ 211 │ NtCreateWnfStateName │ 0x000000D2 / 210 │ +│ 212 │ NtCreateWorkerFactory │ 0x000000D3 / 211 │ +│ 213 │ NtDebugActiveProcess │ 0x000000D4 / 212 │ +│ 214 │ NtDebugContinue │ 0x000000D5 / 213 │ +│ 215 │ NtDeleteAtom │ 0x000000D6 / 214 │ +│ 216 │ NtDeleteBootEntry │ 0x000000D7 / 215 │ +│ 217 │ NtDeleteDriverEntry │ 0x000000D8 / 216 │ +│ 218 │ NtDeleteFile │ 0x000000D9 / 217 │ +│ 219 │ NtDeleteKey │ 0x000000DA / 218 │ +│ 220 │ NtDeleteObjectAuditAlarm │ 0x000000DB / 219 │ +│ 221 │ NtDeletePrivateNamespace │ 0x000000DC / 220 │ +│ 222 │ NtDeleteValueKey │ 0x000000DD / 221 │ +│ 223 │ NtDeleteWnfStateData │ 0x000000DE / 222 │ +│ 224 │ NtDeleteWnfStateName │ 0x000000DF / 223 │ +│ 225 │ NtDirectGraphicsCall │ 0x000000E0 / 224 │ +│ 226 │ NtDisableLastKnownGood │ 0x000000E1 / 225 │ +│ 227 │ NtDisplayString │ 0x000000E2 / 226 │ +│ 228 │ NtDrawText │ 0x000000E3 / 227 │ +│ 229 │ NtEnableLastKnownGood │ 0x000000E4 / 228 │ +│ 230 │ NtEnumerateBootEntries │ 0x000000E5 / 229 │ +│ 231 │ NtEnumerateDriverEntries │ 0x000000E6 / 230 │ +│ 232 │ NtEnumerateSystemEnvironmentValuesEx │ 0x000000E7 / 231 │ +│ 233 │ NtEnumerateTransactionObject │ 0x000000E8 / 232 │ +│ 234 │ NtExtendSection │ 0x000000E9 / 233 │ +│ 235 │ NtFilterBootOption │ 0x000000EA / 234 │ +│ 236 │ NtFilterToken │ 0x000000EB / 235 │ +│ 237 │ NtFilterTokenEx │ 0x000000EC / 236 │ +│ 238 │ NtFlushBuffersFileEx │ 0x000000ED / 237 │ +│ 239 │ NtFlushInstallUILanguage │ 0x000000EE / 238 │ +│ 240 │ NtFlushInstructionCache │ 0x000000EF / 239 │ +│ 241 │ NtFlushKey │ 0x000000F0 / 240 │ +│ 242 │ NtFlushProcessWriteBuffers │ 0x000000F1 / 241 │ +│ 243 │ NtFlushVirtualMemory │ 0x000000F2 / 242 │ +│ 244 │ NtFlushWriteBuffer │ 0x000000F3 / 243 │ +│ 245 │ NtFreeUserPhysicalPages │ 0x000000F4 / 244 │ +│ 246 │ NtFreezeRegistry │ 0x000000F5 / 245 │ +│ 247 │ NtFreezeTransactions │ 0x000000F6 / 246 │ +│ 248 │ NtGetCachedSigningLevel │ 0x000000F7 / 247 │ +│ 249 │ NtGetCompleteWnfStateSubscription │ 0x000000F8 / 248 │ +│ 250 │ NtGetContextThread │ 0x000000F9 / 249 │ +│ 251 │ NtGetCurrentProcessorNumber │ 0x000000FA / 250 │ +│ 252 │ NtGetCurrentProcessorNumberEx │ 0x000000FB / 251 │ +│ 253 │ NtGetDevicePowerState │ 0x000000FC / 252 │ +│ 254 │ NtGetMUIRegistryInfo │ 0x000000FD / 253 │ +│ 255 │ NtGetNextProcess │ 0x000000FE / 254 │ +│ 256 │ NtGetNextThread │ 0x000000FF / 255 │ +│ 257 │ NtGetNlsSectionPtr │ 0x00000100 / 256 │ +│ 258 │ NtGetNotificationResourceManager │ 0x00000101 / 257 │ +│ 259 │ NtGetWriteWatch │ 0x00000102 / 258 │ +│ 260 │ NtImpersonateAnonymousToken │ 0x00000103 / 259 │ +│ 261 │ NtImpersonateThread │ 0x00000104 / 260 │ +│ 262 │ NtInitializeEnclave │ 0x00000105 / 261 │ +│ 263 │ NtInitializeNlsFiles │ 0x00000106 / 262 │ +│ 264 │ NtInitializeRegistry │ 0x00000107 / 263 │ +│ 265 │ NtInitiatePowerAction │ 0x00000108 / 264 │ +│ 266 │ NtIsSystemResumeAutomatic │ 0x00000109 / 265 │ +│ 267 │ NtIsUILanguageComitted │ 0x0000010A / 266 │ +│ 268 │ NtListenPort │ 0x0000010B / 267 │ +│ 269 │ NtLoadDriver │ 0x0000010C / 268 │ +│ 270 │ NtLoadEnclaveData │ 0x0000010D / 269 │ +│ 271 │ NtLoadKey │ 0x0000010E / 270 │ +│ 272 │ NtLoadKey2 │ 0x0000010F / 271 │ +│ 273 │ NtLoadKey3 │ 0x00000110 / 272 │ +│ 274 │ NtLoadKeyEx │ 0x00000111 / 273 │ +│ 275 │ NtLockFile │ 0x00000112 / 274 │ +│ 276 │ NtLockProductActivationKeys │ 0x00000113 / 275 │ +│ 277 │ NtLockRegistryKey │ 0x00000114 / 276 │ +│ 278 │ NtLockVirtualMemory │ 0x00000115 / 277 │ +│ 279 │ NtMakePermanentObject │ 0x00000116 / 278 │ +│ 280 │ NtMakeTemporaryObject │ 0x00000117 / 279 │ +│ 281 │ NtManageHotPatch │ 0x00000118 / 280 │ +│ 282 │ NtManagePartition │ 0x00000119 / 281 │ +│ 283 │ NtMapCMFModule │ 0x0000011A / 282 │ +│ 284 │ NtMapUserPhysicalPages │ 0x0000011B / 283 │ +│ 285 │ NtMapViewOfSectionEx │ 0x0000011C / 284 │ +│ 286 │ NtModifyBootEntry │ 0x0000011D / 285 │ +│ 287 │ NtModifyDriverEntry │ 0x0000011E / 286 │ +│ 288 │ NtNotifyChangeDirectoryFile │ 0x0000011F / 287 │ +│ 289 │ NtNotifyChangeDirectoryFileEx │ 0x00000120 / 288 │ +│ 290 │ NtNotifyChangeKey │ 0x00000121 / 289 │ +│ 291 │ NtNotifyChangeMultipleKeys │ 0x00000122 / 290 │ +│ 292 │ NtNotifyChangeSession │ 0x00000123 / 291 │ +│ 293 │ NtOpenCpuPartition │ 0x00000124 / 292 │ +│ 294 │ NtOpenEnlistment │ 0x00000125 / 293 │ +│ 295 │ NtOpenEventPair │ 0x00000126 / 294 │ +│ 296 │ NtOpenIoCompletion │ 0x00000127 / 295 │ +│ 297 │ NtOpenJobObject │ 0x00000128 / 296 │ +│ 298 │ NtOpenKeyEx │ 0x00000129 / 297 │ +│ 299 │ NtOpenKeyTransacted │ 0x0000012A / 298 │ +│ 300 │ NtOpenKeyTransactedEx │ 0x0000012B / 299 │ +│ 301 │ NtOpenKeyedEvent │ 0x0000012C / 300 │ +│ 302 │ NtOpenMutant │ 0x0000012D / 301 │ +│ 303 │ NtOpenObjectAuditAlarm │ 0x0000012E / 302 │ +│ 304 │ NtOpenPartition │ 0x0000012F / 303 │ +│ 305 │ NtOpenPrivateNamespace │ 0x00000130 / 304 │ +│ 306 │ NtOpenProcessToken │ 0x00000131 / 305 │ +│ 307 │ NtOpenRegistryTransaction │ 0x00000132 / 306 │ +│ 308 │ NtOpenResourceManager │ 0x00000133 / 307 │ +│ 309 │ NtOpenSemaphore │ 0x00000134 / 308 │ +│ 310 │ NtOpenSession │ 0x00000135 / 309 │ +│ 311 │ NtOpenSymbolicLinkObject │ 0x00000136 / 310 │ +│ 312 │ NtOpenThread │ 0x00000137 / 311 │ +│ 313 │ NtOpenTimer │ 0x00000138 / 312 │ +│ 314 │ NtOpenTransaction │ 0x00000139 / 313 │ +│ 315 │ NtOpenTransactionManager │ 0x0000013A / 314 │ +│ 316 │ NtPlugPlayControl │ 0x0000013B / 315 │ +│ 317 │ NtPrePrepareComplete │ 0x0000013C / 316 │ +│ 318 │ NtPrePrepareEnlistment │ 0x0000013D / 317 │ +│ 319 │ NtPrepareComplete │ 0x0000013E / 318 │ +│ 320 │ NtPrepareEnlistment │ 0x0000013F / 319 │ +│ 321 │ NtPrivilegeCheck │ 0x00000140 / 320 │ +│ 322 │ NtPrivilegeObjectAuditAlarm │ 0x00000141 / 321 │ +│ 323 │ NtPrivilegedServiceAuditAlarm │ 0x00000142 / 322 │ +│ 324 │ NtPropagationComplete │ 0x00000143 / 323 │ +│ 325 │ NtPropagationFailed │ 0x00000144 / 324 │ +│ 326 │ NtPssCaptureVaSpaceBulk │ 0x00000145 / 325 │ +│ 327 │ NtPulseEvent │ 0x00000146 / 326 │ +│ 328 │ NtQueryAuxiliaryCounterFrequency │ 0x00000147 / 327 │ +│ 329 │ NtQueryBootEntryOrder │ 0x00000148 / 328 │ +│ 330 │ NtQueryBootOptions │ 0x00000149 / 329 │ +│ 331 │ NtQueryDebugFilterState │ 0x0000014A / 330 │ +│ 332 │ NtQueryDirectoryFileEx │ 0x0000014B / 331 │ +│ 333 │ NtQueryDirectoryObject │ 0x0000014C / 332 │ +│ 334 │ NtQueryDriverEntryOrder │ 0x0000014D / 333 │ +│ 335 │ NtQueryEaFile │ 0x0000014E / 334 │ +│ 336 │ NtQueryFullAttributesFile │ 0x0000014F / 335 │ +│ 337 │ NtQueryInformationAtom │ 0x00000150 / 336 │ +│ 338 │ NtQueryInformationByName │ 0x00000151 / 337 │ +│ 339 │ NtQueryInformationCpuPartition │ 0x00000152 / 338 │ +│ 340 │ NtQueryInformationEnlistment │ 0x00000153 / 339 │ +│ 341 │ NtQueryInformationJobObject │ 0x00000154 / 340 │ +│ 342 │ NtQueryInformationPort │ 0x00000155 / 341 │ +│ 343 │ NtQueryInformationResourceManager │ 0x00000156 / 342 │ +│ 344 │ NtQueryInformationTransaction │ 0x00000157 / 343 │ +│ 345 │ NtQueryInformationTransactionManager │ 0x00000158 / 344 │ +│ 346 │ NtQueryInformationWorkerFactory │ 0x00000159 / 345 │ +│ 347 │ NtQueryInstallUILanguage │ 0x0000015A / 346 │ +│ 348 │ NtQueryIntervalProfile │ 0x0000015B / 347 │ +│ 349 │ NtQueryIoCompletion │ 0x0000015C / 348 │ +│ 350 │ NtQueryIoRingCapabilities │ 0x0000015D / 349 │ +│ 351 │ NtQueryLicenseValue │ 0x0000015E / 350 │ +│ 352 │ NtQueryMultipleValueKey │ 0x0000015F / 351 │ +│ 353 │ NtQueryMutant │ 0x00000160 / 352 │ +│ 354 │ NtQueryOpenSubKeys │ 0x00000161 / 353 │ +│ 355 │ NtQueryOpenSubKeysEx │ 0x00000162 / 354 │ +│ 356 │ NtQueryPortInformationProcess │ 0x00000163 / 355 │ +│ 357 │ NtQueryQuotaInformationFile │ 0x00000164 / 356 │ +│ 358 │ NtQuerySecurityAttributesToken │ 0x00000165 / 357 │ +│ 359 │ NtQuerySecurityObject │ 0x00000166 / 358 │ +│ 360 │ NtQuerySecurityPolicy │ 0x00000167 / 359 │ +│ 361 │ NtQuerySemaphore │ 0x00000168 / 360 │ +│ 362 │ NtQuerySymbolicLinkObject │ 0x00000169 / 361 │ +│ 363 │ NtQuerySystemEnvironmentValue │ 0x0000016A / 362 │ +│ 364 │ NtQuerySystemEnvironmentValueEx │ 0x0000016B / 363 │ +│ 365 │ NtQuerySystemInformationEx │ 0x0000016C / 364 │ +│ 366 │ NtQueryTimerResolution │ 0x0000016D / 365 │ +│ 367 │ NtQueryWnfStateData │ 0x0000016E / 366 │ +│ 368 │ NtQueryWnfStateNameInformation │ 0x0000016F / 367 │ +│ 369 │ NtQueueApcThreadEx │ 0x00000170 / 368 │ +│ 370 │ NtQueueApcThreadEx2 │ 0x00000171 / 369 │ +│ 371 │ NtRaiseException │ 0x00000172 / 370 │ +│ 372 │ NtRaiseHardError │ 0x00000173 / 371 │ +│ 373 │ NtReadOnlyEnlistment │ 0x00000174 / 372 │ +│ 374 │ NtReadVirtualMemoryEx │ 0x00000175 / 373 │ +│ 375 │ NtRecoverEnlistment │ 0x00000176 / 374 │ +│ 376 │ NtRecoverResourceManager │ 0x00000177 / 375 │ +│ 377 │ NtRecoverTransactionManager │ 0x00000178 / 376 │ +│ 378 │ NtRegisterProtocolAddressInformation │ 0x00000179 / 377 │ +│ 379 │ NtRegisterThreadTerminatePort │ 0x0000017A / 378 │ +│ 380 │ NtReleaseKeyedEvent │ 0x0000017B / 379 │ +│ 381 │ NtReleaseWorkerFactoryWorker │ 0x0000017C / 380 │ +│ 382 │ NtRemoveIoCompletionEx │ 0x0000017D / 381 │ +│ 383 │ NtRemoveProcessDebug │ 0x0000017E / 382 │ +│ 384 │ NtRenameKey │ 0x0000017F / 383 │ +│ 385 │ NtRenameTransactionManager │ 0x00000180 / 384 │ +│ 386 │ NtReplaceKey │ 0x00000181 / 385 │ +│ 387 │ NtReplacePartitionUnit │ 0x00000182 / 386 │ +│ 388 │ NtReplyWaitReplyPort │ 0x00000183 / 387 │ +│ 389 │ NtRequestPort │ 0x00000184 / 388 │ +│ 390 │ NtResetEvent │ 0x00000185 / 389 │ +│ 391 │ NtResetWriteWatch │ 0x00000186 / 390 │ +│ 392 │ NtRestoreKey │ 0x00000187 / 391 │ +│ 393 │ NtResumeProcess │ 0x00000188 / 392 │ +│ 394 │ NtRevertContainerImpersonation │ 0x00000189 / 393 │ +│ 395 │ NtRollbackComplete │ 0x0000018A / 394 │ +│ 396 │ NtRollbackEnlistment │ 0x0000018B / 395 │ +│ 397 │ NtRollbackRegistryTransaction │ 0x0000018C / 396 │ +│ 398 │ NtRollbackTransaction │ 0x0000018D / 397 │ +│ 399 │ NtRollforwardTransactionManager │ 0x0000018E / 398 │ +│ 400 │ NtSaveKey │ 0x0000018F / 399 │ +│ 401 │ NtSaveKeyEx │ 0x00000190 / 400 │ +│ 402 │ NtSaveMergedKeys │ 0x00000191 / 401 │ +│ 403 │ NtSecureConnectPort │ 0x00000192 / 402 │ +│ 404 │ NtSerializeBoot │ 0x00000193 / 403 │ +│ 405 │ NtSetBootEntryOrder │ 0x00000194 / 404 │ +│ 406 │ NtSetBootOptions │ 0x00000195 / 405 │ +│ 407 │ NtSetCachedSigningLevel │ 0x00000196 / 406 │ +│ 408 │ NtSetCachedSigningLevel2 │ 0x00000197 / 407 │ +│ 409 │ NtSetContextThread │ 0x00000198 / 408 │ +│ 410 │ NtSetDebugFilterState │ 0x00000199 / 409 │ +│ 411 │ NtSetDefaultHardErrorPort │ 0x0000019A / 410 │ +│ 412 │ NtSetDefaultLocale │ 0x0000019B / 411 │ +│ 413 │ NtSetDefaultUILanguage │ 0x0000019C / 412 │ +│ 414 │ NtSetDriverEntryOrder │ 0x0000019D / 413 │ +│ 415 │ NtSetEaFile │ 0x0000019E / 414 │ +│ 416 │ NtSetHighEventPair │ 0x0000019F / 415 │ +│ 417 │ NtSetHighWaitLowEventPair │ 0x000001A0 / 416 │ +│ 418 │ NtSetIRTimer │ 0x000001A1 / 417 │ +│ 419 │ NtSetInformationCpuPartition │ 0x000001A2 / 418 │ +│ 420 │ NtSetInformationDebugObject │ 0x000001A3 / 419 │ +│ 421 │ NtSetInformationEnlistment │ 0x000001A4 / 420 │ +│ 422 │ NtSetInformationIoRing │ 0x000001A5 / 421 │ +│ 423 │ NtSetInformationJobObject │ 0x000001A6 / 422 │ +│ 424 │ NtSetInformationKey │ 0x000001A7 / 423 │ +│ 425 │ NtSetInformationResourceManager │ 0x000001A8 / 424 │ +│ 426 │ NtSetInformationSymbolicLink │ 0x000001A9 / 425 │ +│ 427 │ NtSetInformationToken │ 0x000001AA / 426 │ +│ 428 │ NtSetInformationTransaction │ 0x000001AB / 427 │ +│ 429 │ NtSetInformationTransactionManager │ 0x000001AC / 428 │ +│ 430 │ NtSetInformationVirtualMemory │ 0x000001AD / 429 │ +│ 431 │ NtSetInformationWorkerFactory │ 0x000001AE / 430 │ +│ 432 │ NtSetIntervalProfile │ 0x000001AF / 431 │ +│ 433 │ NtSetIoCompletion │ 0x000001B0 / 432 │ +│ 434 │ NtSetIoCompletionEx │ 0x000001B1 / 433 │ +│ 435 │ NtSetLdtEntries │ 0x000001B2 / 434 │ +│ 436 │ NtSetLowEventPair │ 0x000001B3 / 435 │ +│ 437 │ NtSetLowWaitHighEventPair │ 0x000001B4 / 436 │ +│ 438 │ NtSetQuotaInformationFile │ 0x000001B5 / 437 │ +│ 439 │ NtSetSecurityObject │ 0x000001B6 / 438 │ +│ 440 │ NtSetSystemEnvironmentValue │ 0x000001B7 / 439 │ +│ 441 │ NtSetSystemEnvironmentValueEx │ 0x000001B8 / 440 │ +│ 442 │ NtSetSystemInformation │ 0x000001B9 / 441 │ +│ 443 │ NtSetSystemPowerState │ 0x000001BA / 442 │ +│ 444 │ NtSetSystemTime │ 0x000001BB / 443 │ +│ 445 │ NtSetThreadExecutionState │ 0x000001BC / 444 │ +│ 446 │ NtSetTimer2 │ 0x000001BD / 445 │ +│ 447 │ NtSetTimerEx │ 0x000001BE / 446 │ +│ 448 │ NtSetTimerResolution │ 0x000001BF / 447 │ +│ 449 │ NtSetUuidSeed │ 0x000001C0 / 448 │ +│ 450 │ NtSetVolumeInformationFile │ 0x000001C1 / 449 │ +│ 451 │ NtSetWnfProcessNotificationEvent │ 0x000001C2 / 450 │ +│ 452 │ NtShutdownSystem │ 0x000001C3 / 451 │ +│ 453 │ NtShutdownWorkerFactory │ 0x000001C4 / 452 │ +│ 454 │ NtSignalAndWaitForSingleObject │ 0x000001C5 / 453 │ +│ 455 │ NtSinglePhaseReject │ 0x000001C6 / 454 │ +│ 456 │ NtStartProfile │ 0x000001C7 / 455 │ +│ 457 │ NtStopProfile │ 0x000001C8 / 456 │ +│ 458 │ NtSubmitIoRing │ 0x000001C9 / 457 │ +│ 459 │ NtSubscribeWnfStateChange │ 0x000001CA / 458 │ +│ 460 │ NtSuspendProcess │ 0x000001CB / 459 │ +│ 461 │ NtSuspendThread │ 0x000001CC / 460 │ +│ 462 │ NtSystemDebugControl │ 0x000001CD / 461 │ +│ 463 │ NtTerminateEnclave │ 0x000001CE / 462 │ +│ 464 │ NtTerminateJobObject │ 0x000001CF / 463 │ +│ 465 │ NtTestAlert │ 0x000001D0 / 464 │ +│ 466 │ NtThawRegistry │ 0x000001D1 / 465 │ +│ 467 │ NtThawTransactions │ 0x000001D2 / 466 │ +│ 468 │ NtTraceControl │ 0x000001D3 / 467 │ +│ 469 │ NtTranslateFilePath │ 0x000001D4 / 468 │ +│ 470 │ NtUmsThreadYield │ 0x000001D5 / 469 │ +│ 471 │ NtUnloadDriver │ 0x000001D6 / 470 │ +│ 472 │ NtUnloadKey │ 0x000001D7 / 471 │ +│ 473 │ NtUnloadKey2 │ 0x000001D8 / 472 │ +│ 474 │ NtUnloadKeyEx │ 0x000001D9 / 473 │ +│ 475 │ NtUnlockFile │ 0x000001DA / 474 │ +│ 476 │ NtUnlockVirtualMemory │ 0x000001DB / 475 │ +│ 477 │ NtUnmapViewOfSectionEx │ 0x000001DC / 476 │ +│ 478 │ NtUnsubscribeWnfStateChange │ 0x000001DD / 477 │ +│ 479 │ NtUpdateWnfStateData │ 0x000001DE / 478 │ +│ 480 │ NtVdmControl │ 0x000001DF / 479 │ +│ 481 │ NtWaitForAlertByThreadId │ 0x000001E0 / 480 │ +│ 482 │ NtWaitForDebugEvent │ 0x000001E1 / 481 │ +│ 483 │ NtWaitForKeyedEvent │ 0x000001E2 / 482 │ +│ 484 │ NtWaitForWorkViaWorkerFactory │ 0x000001E3 / 483 │ +│ 485 │ NtWaitHighEventPair │ 0x000001E4 / 484 │ +│ 486 │ NtWaitLowEventPair │ 0x000001E5 / 485 │ +└─────┴───────────────────────────────────────────────────────┴──────────────────┘ diff --git a/sdk/util.go b/sdk/util.go index e09e20c0..6ec84cbf 100644 --- a/sdk/util.go +++ b/sdk/util.go @@ -9,7 +9,6 @@ import ( "github.com/ddkwork/app/ms/hardwareIndo" "github.com/ddkwork/golibrary/mylog" - "github.com/ddkwork/golibrary/stream" "github.com/ddkwork/golibrary/stream/bitfield" ) diff --git a/ux/ark/ark.go b/ux/ark/ark.go index f76c9d4e..ca08678c 100644 --- a/ux/ark/ark.go +++ b/ux/ark/ark.go @@ -1,8 +1,6 @@ package ark import ( - "fmt" - "github.com/ddkwork/HyperDbg/sdk" "github.com/ddkwork/app" "github.com/ddkwork/app/ms" @@ -72,15 +70,15 @@ func Layout() *unison.Panel { table, header := widget.NewTable(ms.NtApi{}, widget.TableContext[ms.NtApi]{ ContextMenuItems: nil, MarshalRow: func(node *widget.Node[ms.NtApi]) (cells []widget.CellData) { - KernelBase := fmt.Sprintf("%016X", node.Data.KernelBase) + KernelBase := stream.FormatIntegerHex(node.Data.KernelBase) if node.Container() { KernelBase = node.Sum() } return []widget.CellData{ {Text: KernelBase}, - {Text: fmt.Sprintf("%016X", node.Data.ArgValue)}, + {Text: stream.FormatIntegerHex(node.Data.ArgValue)}, {Text: node.Data.Name}, - {Text: fmt.Sprintf("%04d / %08X", node.Data.Index, node.Data.Index)}, + {Text: stream.FormatInteger(node.Data.Index)}, } }, UnmarshalRow: func(node *widget.Node[ms.NtApi], values []string) { diff --git a/win32u.txt b/win32u.txt index c4d58224..74cc9aa4 100644 --- a/win32u.txt +++ b/win32u.txt @@ -1,1458 +1,1458 @@ Windows 11 v10.0.22621.1928 -┌──────┬─────────────────────────────────────────────────────────┬───────┬──────────┐ -│ Id │ Name │ Index │ IndexHex │ -├──────┼─────────────────────────────────────────────────────────┼───────┼──────────┤ -│ 1 │ NtUserGetThreadState │ 0 │ 0x0 │ -│ 2 │ NtUserPeekMessage │ 1 │ 0x1 │ -│ 3 │ NtUserGetKeyState │ 2 │ 0x2 │ -│ 4 │ NtUserInvalidateRect │ 3 │ 0x3 │ -│ 5 │ NtUserGetMessage │ 4 │ 0x4 │ -│ 6 │ NtUserMessageCall │ 5 │ 0x5 │ -│ 7 │ NtGdiBitBlt │ 6 │ 0x6 │ -│ 8 │ NtGdiGetCharSet │ 7 │ 0x7 │ -│ 9 │ NtUserGetDC │ 8 │ 0x8 │ -│ 10 │ NtGdiSelectBitmap │ 9 │ 0x9 │ -│ 11 │ NtUserWaitMessage │ 10 │ 0xa │ -│ 12 │ NtUserTranslateMessage │ 11 │ 0xb │ -│ 13 │ NtUserGetProp │ 12 │ 0xc │ -│ 14 │ NtUserPostMessage │ 13 │ 0xd │ -│ 15 │ NtUserQueryWindow │ 14 │ 0xe │ -│ 16 │ NtUserTranslateAccelerator │ 15 │ 0xf │ -│ 17 │ NtGdiFlush │ 16 │ 0x10 │ -│ 18 │ NtUserRedrawWindow │ 17 │ 0x11 │ -│ 19 │ NtUserWindowFromPoint │ 18 │ 0x12 │ -│ 20 │ NtUserCallMsgFilter │ 19 │ 0x13 │ -│ 21 │ NtUserValidateTimerCallback │ 20 │ 0x14 │ -│ 22 │ NtUserBeginPaint │ 21 │ 0x15 │ -│ 23 │ NtUserSetTimer │ 22 │ 0x16 │ -│ 24 │ NtUserEndPaint │ 23 │ 0x17 │ -│ 25 │ NtUserSetCursor │ 24 │ 0x18 │ -│ 26 │ NtUserKillTimer │ 25 │ 0x19 │ -│ 27 │ NtUserBuildHwndList │ 26 │ 0x1a │ -│ 28 │ NtUserSelectPalette │ 27 │ 0x1b │ -│ 29 │ NtUserCallNextHookEx │ 28 │ 0x1c │ -│ 30 │ NtUserHideCaret │ 29 │ 0x1d │ -│ 31 │ NtGdiIntersectClipRect │ 30 │ 0x1e │ -│ 32 │ NtUserGetProcessWindowStation │ 31 │ 0x1f │ -│ 33 │ NtGdiDeleteObjectApp │ 32 │ 0x20 │ -│ 34 │ NtUserSetWindowPos │ 33 │ 0x21 │ -│ 35 │ NtUserShowCaret │ 34 │ 0x22 │ -│ 36 │ NtUserEndDeferWindowPosEx │ 35 │ 0x23 │ -│ 37 │ NtUserVkKeyScanEx │ 36 │ 0x24 │ -│ 38 │ NtGdiSetDIBitsToDeviceInternal │ 37 │ 0x25 │ -│ 39 │ NtGdiGetRandomRgn │ 38 │ 0x26 │ -│ 40 │ NtUserCopyAcceleratorTable │ 39 │ 0x27 │ -│ 41 │ NtUserNotifyWinEvent │ 40 │ 0x28 │ -│ 42 │ NtGdiExtSelectClipRgn │ 41 │ 0x29 │ -│ 43 │ NtUserIsClipboardFormatAvailable │ 42 │ 0x2a │ -│ 44 │ NtUserSetScrollInfo │ 43 │ 0x2b │ -│ 45 │ NtGdiStretchBlt │ 44 │ 0x2c │ -│ 46 │ NtUserCreateCaret │ 45 │ 0x2d │ -│ 47 │ NtGdiRectVisible │ 46 │ 0x2e │ -│ 48 │ NtGdiCombineRgn │ 47 │ 0x2f │ -│ 49 │ NtGdiGetDCObject │ 48 │ 0x30 │ -│ 50 │ NtUserDispatchMessage │ 49 │ 0x31 │ -│ 51 │ NtUserRegisterWindowMessage │ 50 │ 0x32 │ -│ 52 │ NtGdiExtTextOutW │ 51 │ 0x33 │ -│ 53 │ NtGdiSelectFont │ 52 │ 0x34 │ -│ 54 │ NtGdiRestoreDC │ 53 │ 0x35 │ -│ 55 │ NtGdiSaveDC │ 54 │ 0x36 │ -│ 56 │ NtUserGetForegroundWindow │ 55 │ 0x37 │ -│ 57 │ NtUserShowScrollBar │ 56 │ 0x38 │ -│ 58 │ NtUserFindExistingCursorIcon │ 57 │ 0x39 │ -│ 59 │ NtGdiGetDCDword │ 58 │ 0x3a │ -│ 60 │ NtGdiGetRegionData │ 59 │ 0x3b │ -│ 61 │ NtGdiLineTo │ 60 │ 0x3c │ -│ 62 │ NtUserSystemParametersInfo │ 61 │ 0x3d │ -│ 63 │ NtGdiGetAppClipBox │ 62 │ 0x3e │ -│ 64 │ NtUserGetAsyncKeyState │ 63 │ 0x3f │ -│ 65 │ NtUserGetCPD │ 64 │ 0x40 │ -│ 66 │ NtUserRemoveProp │ 65 │ 0x41 │ -│ 67 │ NtGdiDoPalette │ 66 │ 0x42 │ -│ 68 │ NtGdiPolyPolyDraw │ 67 │ 0x43 │ -│ 69 │ NtUserSetCapture │ 68 │ 0x44 │ -│ 70 │ NtUserEnumDisplayMonitors │ 69 │ 0x45 │ -│ 71 │ NtGdiCreateCompatibleBitmap │ 70 │ 0x46 │ -│ 72 │ NtUserSetProp │ 71 │ 0x47 │ -│ 73 │ NtGdiGetTextCharsetInfo │ 72 │ 0x48 │ -│ 74 │ NtUserSBGetParms │ 73 │ 0x49 │ -│ 75 │ NtUserGetIconInfo │ 74 │ 0x4a │ -│ 76 │ NtUserExcludeUpdateRgn │ 75 │ 0x4b │ -│ 77 │ NtUserSetFocus │ 76 │ 0x4c │ -│ 78 │ NtGdiExtGetObjectW │ 77 │ 0x4d │ -│ 79 │ NtUserGetUpdateRect │ 78 │ 0x4e │ -│ 80 │ NtGdiCreateCompatibleDC │ 79 │ 0x4f │ -│ 81 │ NtUserGetClipboardSequenceNumber │ 80 │ 0x50 │ -│ 82 │ NtGdiCreatePen │ 81 │ 0x51 │ -│ 83 │ NtUserShowWindow │ 82 │ 0x52 │ -│ 84 │ NtUserGetKeyboardLayoutList │ 83 │ 0x53 │ -│ 85 │ NtGdiPatBlt │ 84 │ 0x54 │ -│ 86 │ NtUserMapVirtualKeyEx │ 85 │ 0x55 │ -│ 87 │ NtUserSetWindowLong │ 86 │ 0x56 │ -│ 88 │ NtGdiHfontCreate │ 87 │ 0x57 │ -│ 89 │ NtUserMoveWindow │ 88 │ 0x58 │ -│ 90 │ NtUserPostThreadMessage │ 89 │ 0x59 │ -│ 91 │ NtUserDrawIconEx │ 90 │ 0x5a │ -│ 92 │ NtUserGetSystemMenu │ 91 │ 0x5b │ -│ 93 │ NtGdiDrawStream │ 92 │ 0x5c │ -│ 94 │ NtUserInternalGetWindowText │ 93 │ 0x5d │ -│ 95 │ NtUserGetWindowDC │ 94 │ 0x5e │ -│ 96 │ NtGdiInvertRgn │ 95 │ 0x5f │ -│ 97 │ NtGdiGetRgnBox │ 96 │ 0x60 │ -│ 98 │ NtGdiGetAndSetDCDword │ 97 │ 0x61 │ -│ 99 │ NtGdiMaskBlt │ 98 │ 0x62 │ -│ 100 │ NtGdiGetWidthTable │ 99 │ 0x63 │ -│ 101 │ NtUserScrollDC │ 100 │ 0x64 │ -│ 102 │ NtUserGetObjectInformation │ 101 │ 0x65 │ -│ 103 │ NtGdiCreateBitmap │ 102 │ 0x66 │ -│ 104 │ NtUserFindWindowEx │ 103 │ 0x67 │ -│ 105 │ NtGdiPolyPatBlt │ 104 │ 0x68 │ -│ 106 │ NtUserUnhookWindowsHookEx │ 105 │ 0x69 │ -│ 107 │ NtGdiGetNearestColor │ 106 │ 0x6a │ -│ 108 │ NtGdiTransformPoints │ 107 │ 0x6b │ -│ 109 │ NtGdiGetDCPoint │ 108 │ 0x6c │ -│ 110 │ NtGdiCreateDIBBrush │ 109 │ 0x6d │ -│ 111 │ NtGdiGetTextMetricsW │ 110 │ 0x6e │ -│ 112 │ NtUserCreateWindowEx │ 111 │ 0x6f │ -│ 113 │ NtUserSetParent │ 112 │ 0x70 │ -│ 114 │ NtUserGetKeyboardState │ 113 │ 0x71 │ -│ 115 │ NtUserToUnicodeEx │ 114 │ 0x72 │ -│ 116 │ NtUserGetControlBrush │ 115 │ 0x73 │ -│ 117 │ NtUserGetClassName │ 116 │ 0x74 │ -│ 118 │ NtGdiAlphaBlend │ 117 │ 0x75 │ -│ 119 │ NtGdiOffsetRgn │ 118 │ 0x76 │ -│ 120 │ NtUserDefSetText │ 119 │ 0x77 │ -│ 121 │ NtGdiGetTextFaceW │ 120 │ 0x78 │ -│ 122 │ NtGdiStretchDIBitsInternal │ 121 │ 0x79 │ -│ 123 │ NtUserSendInput │ 122 │ 0x7a │ -│ 124 │ NtUserGetThreadDesktop │ 123 │ 0x7b │ -│ 125 │ NtGdiCreateRectRgn │ 124 │ 0x7c │ -│ 126 │ NtGdiGetDIBitsInternal │ 125 │ 0x7d │ -│ 127 │ NtUserGetUpdateRgn │ 126 │ 0x7e │ -│ 128 │ NtGdiDeleteClientObj │ 127 │ 0x7f │ -│ 129 │ NtUserGetIconSize │ 128 │ 0x80 │ -│ 130 │ NtUserFillWindow │ 129 │ 0x81 │ -│ 131 │ NtGdiExtCreateRegion │ 130 │ 0x82 │ -│ 132 │ NtGdiComputeXformCoefficients │ 131 │ 0x83 │ -│ 133 │ NtUserSetWindowsHookEx │ 132 │ 0x84 │ -│ 134 │ NtUserNotifyProcessCreate │ 133 │ 0x85 │ -│ 135 │ NtGdiUnrealizeObject │ 134 │ 0x86 │ -│ 136 │ NtUserGetTitleBarInfo │ 135 │ 0x87 │ -│ 137 │ NtGdiRectangle │ 136 │ 0x88 │ -│ 138 │ NtUserSetThreadDesktop │ 137 │ 0x89 │ -│ 139 │ NtUserGetDCEx │ 138 │ 0x8a │ -│ 140 │ NtUserGetScrollBarInfo │ 139 │ 0x8b │ -│ 141 │ NtGdiGetTextExtent │ 140 │ 0x8c │ -│ 142 │ NtUserSetWindowFNID │ 141 │ 0x8d │ -│ 143 │ NtGdiSetLayout │ 142 │ 0x8e │ -│ 144 │ NtUserCalcMenuBar │ 143 │ 0x8f │ -│ 145 │ NtUserThunkedMenuItemInfo │ 144 │ 0x90 │ -│ 146 │ NtGdiExcludeClipRect │ 145 │ 0x91 │ -│ 147 │ NtGdiCreateDIBSection │ 146 │ 0x92 │ -│ 148 │ NtGdiGetDCforBitmap │ 147 │ 0x93 │ -│ 149 │ NtUserDestroyCursor │ 148 │ 0x94 │ -│ 150 │ NtUserDestroyWindow │ 149 │ 0x95 │ -│ 151 │ NtGdiCreateDIBitmapInternal │ 150 │ 0x96 │ -│ 152 │ NtUserOpenWindowStation │ 151 │ 0x97 │ -│ 153 │ NtUserSetCursorIconData │ 152 │ 0x98 │ -│ 154 │ NtUserCloseDesktop │ 153 │ 0x99 │ -│ 155 │ NtUserOpenDesktop │ 154 │ 0x9a │ -│ 156 │ NtUserSetProcessWindowStation │ 155 │ 0x9b │ -│ 157 │ NtUserGetAtomName │ 156 │ 0x9c │ -│ 158 │ NtGdiExtCreatePen │ 157 │ 0x9d │ -│ 159 │ NtGdiCreatePaletteInternal │ 158 │ 0x9e │ -│ 160 │ NtGdiSetBrushOrg │ 159 │ 0x9f │ -│ 161 │ NtUserBuildNameList │ 160 │ 0xa0 │ -│ 162 │ NtGdiSetPixel │ 161 │ 0xa1 │ -│ 163 │ NtUserRegisterClassExWOW │ 162 │ 0xa2 │ -│ 164 │ NtGdiCreatePatternBrushInternal │ 163 │ 0xa3 │ -│ 165 │ NtUserGetAncestor │ 164 │ 0xa4 │ -│ 166 │ NtGdiGetOutlineTextMetricsInternalW │ 165 │ 0xa5 │ -│ 167 │ NtGdiSetBitmapBits │ 166 │ 0xa6 │ -│ 168 │ NtUserCloseWindowStation │ 167 │ 0xa7 │ -│ 169 │ NtUserGetDoubleClickTime │ 168 │ 0xa8 │ -│ 170 │ NtUserEnableScrollBar │ 169 │ 0xa9 │ -│ 171 │ NtGdiCreateSolidBrush │ 170 │ 0xaa │ -│ 172 │ NtUserGetClassInfoEx │ 171 │ 0xab │ -│ 173 │ NtGdiCreateClientObj │ 172 │ 0xac │ -│ 174 │ NtUserUnregisterClass │ 173 │ 0xad │ -│ 175 │ NtUserDeleteMenu │ 174 │ 0xae │ -│ 176 │ NtGdiRectInRegion │ 175 │ 0xaf │ -│ 177 │ NtUserScrollWindowEx │ 176 │ 0xb0 │ -│ 178 │ NtGdiGetPixel │ 177 │ 0xb1 │ -│ 179 │ NtUserSetClassLong │ 178 │ 0xb2 │ -│ 180 │ NtUserGetMenuBarInfo │ 179 │ 0xb3 │ -│ 181 │ NtGdiGetNearestPaletteIndex │ 180 │ 0xb4 │ -│ 182 │ NtGdiGetCharWidthW │ 181 │ 0xb5 │ -│ 183 │ NtUserInvalidateRgn │ 182 │ 0xb6 │ -│ 184 │ NtUserGetClipboardOwner │ 183 │ 0xb7 │ -│ 185 │ NtUserSetWindowRgn │ 184 │ 0xb8 │ -│ 186 │ NtUserBitBltSysBmp │ 185 │ 0xb9 │ -│ 187 │ NtGdiGetCharWidthInfo │ 186 │ 0xba │ -│ 188 │ NtUserValidateRect │ 187 │ 0xbb │ -│ 189 │ NtUserCloseClipboard │ 188 │ 0xbc │ -│ 190 │ NtUserOpenClipboard │ 189 │ 0xbd │ -│ 191 │ NtUserSetClipboardData │ 190 │ 0xbe │ -│ 192 │ NtUserEnableMenuItem │ 191 │ 0xbf │ -│ 193 │ NtUserAlterWindowStyle │ 192 │ 0xc0 │ -│ 194 │ NtGdiFillRgn │ 193 │ 0xc1 │ -│ 195 │ NtUserGetWindowPlacement │ 194 │ 0xc2 │ -│ 196 │ NtGdiModifyWorldTransform │ 195 │ 0xc3 │ -│ 197 │ NtGdiGetFontData │ 196 │ 0xc4 │ -│ 198 │ NtUserGetOpenClipboardWindow │ 197 │ 0xc5 │ -│ 199 │ NtUserSetThreadState │ 198 │ 0xc6 │ -│ 200 │ NtGdiOpenDCW │ 199 │ 0xc7 │ -│ 201 │ NtUserTrackMouseEvent │ 200 │ 0xc8 │ -│ 202 │ NtGdiGetTransform │ 201 │ 0xc9 │ -│ 203 │ NtUserDestroyMenu │ 202 │ 0xca │ -│ 204 │ NtGdiGetBitmapBits │ 203 │ 0xcb │ -│ 205 │ NtUserConsoleControl │ 204 │ 0xcc │ -│ 206 │ NtUserSetActiveWindow │ 205 │ 0xcd │ -│ 207 │ NtUserSetInformationThread │ 206 │ 0xce │ -│ 208 │ NtUserSetWindowPlacement │ 207 │ 0xcf │ -│ 209 │ NtUserGetControlColor │ 208 │ 0xd0 │ -│ 210 │ NtGdiSetMetaRgn │ 209 │ 0xd1 │ -│ 211 │ NtGdiSetMiterLimit │ 210 │ 0xd2 │ -│ 212 │ NtGdiSetVirtualResolution │ 211 │ 0xd3 │ -│ 213 │ NtGdiGetRasterizerCaps │ 212 │ 0xd4 │ -│ 214 │ NtUserSetWindowWord │ 213 │ 0xd5 │ -│ 215 │ NtUserGetClipboardFormatName │ 214 │ 0xd6 │ -│ 216 │ NtUserRealInternalGetMessage │ 215 │ 0xd7 │ -│ 217 │ NtUserCreateLocalMemHandle │ 216 │ 0xd8 │ -│ 218 │ NtUserAttachThreadInput │ 217 │ 0xd9 │ -│ 219 │ NtGdiCreateHalftonePalette │ 218 │ 0xda │ -│ 220 │ NtUserPaintMenuBar │ 219 │ 0xdb │ -│ 221 │ NtUserSetKeyboardState │ 220 │ 0xdc │ -│ 222 │ NtGdiCombineTransform │ 221 │ 0xdd │ -│ 223 │ NtUserCreateAcceleratorTable │ 222 │ 0xde │ -│ 224 │ NtUserGetCursorFrameInfo │ 223 │ 0xdf │ -│ 225 │ NtUserGetAltTabInfo │ 224 │ 0xe0 │ -│ 226 │ NtUserGetCaretBlinkTime │ 225 │ 0xe1 │ -│ 227 │ NtGdiQueryFontAssocInfo │ 226 │ 0xe2 │ -│ 228 │ NtUserProcessConnect │ 227 │ 0xe3 │ -│ 229 │ NtUserEnumDisplayDevices │ 228 │ 0xe4 │ -│ 230 │ NtUserEmptyClipboard │ 229 │ 0xe5 │ -│ 231 │ NtUserGetClipboardData │ 230 │ 0xe6 │ -│ 232 │ NtUserRemoveMenu │ 231 │ 0xe7 │ -│ 233 │ NtGdiSetBoundsRect │ 232 │ 0xe8 │ -│ 234 │ NtGdiGetBitmapDimension │ 233 │ 0xe9 │ -│ 235 │ NtUserConvertMemHandle │ 234 │ 0xea │ -│ 236 │ NtUserDestroyAcceleratorTable │ 235 │ 0xeb │ -│ 237 │ NtUserGetGUIThreadInfo │ 236 │ 0xec │ -│ 238 │ NtGdiCloseFigure │ 237 │ 0xed │ -│ 239 │ NtUserSetWindowsHookAW │ 238 │ 0xee │ -│ 240 │ NtUserSetMenuDefaultItem │ 239 │ 0xef │ -│ 241 │ NtUserCheckMenuItem │ 240 │ 0xf0 │ -│ 242 │ NtUserSetWinEventHook │ 241 │ 0xf1 │ -│ 243 │ NtUserUnhookWinEvent │ 242 │ 0xf2 │ -│ 244 │ NtUserLockWindowUpdate │ 243 │ 0xf3 │ -│ 245 │ NtUserSetSystemMenu │ 244 │ 0xf4 │ -│ 246 │ NtUserThunkedMenuInfo │ 245 │ 0xf5 │ -│ 247 │ NtGdiBeginPath │ 246 │ 0xf6 │ -│ 248 │ NtGdiEndPath │ 247 │ 0xf7 │ -│ 249 │ NtGdiFillPath │ 248 │ 0xf8 │ -│ 250 │ NtUserDdeInitialize │ 249 │ 0xf9 │ -│ 251 │ NtUserModifyUserStartupInfoFlags │ 250 │ 0xfa │ -│ 252 │ NtUserCountClipboardFormats │ 251 │ 0xfb │ -│ 253 │ NtGdiAddFontMemResourceEx │ 252 │ 0xfc │ -│ 254 │ NtGdiEqualRgn │ 253 │ 0xfd │ -│ 255 │ NtGdiGetSystemPaletteUse │ 254 │ 0xfe │ -│ 256 │ NtGdiRemoveFontMemResourceEx │ 255 │ 0xff │ -│ 257 │ NtUserEnumDisplaySettings │ 256 │ 0x100 │ -│ 258 │ NtUserPaintDesktop │ 257 │ 0x101 │ -│ 259 │ NtGdiExtEscape │ 258 │ 0x102 │ -│ 260 │ NtGdiSetBitmapDimension │ 259 │ 0x103 │ -│ 261 │ NtGdiSetFontEnumeration │ 260 │ 0x104 │ -│ 262 │ NtUserChangeClipboardChain │ 261 │ 0x105 │ -│ 263 │ NtUserSetClipboardViewer │ 262 │ 0x106 │ -│ 264 │ NtUserShowWindowAsync │ 263 │ 0x107 │ -│ 265 │ NtGdiCreateColorSpace │ 264 │ 0x108 │ -│ 266 │ NtGdiDeleteColorSpace │ 265 │ 0x109 │ -│ 267 │ NtUserActivateKeyboardLayout │ 266 │ 0x10a │ -│ 268 │ NtBindCompositionSurface │ 267 │ 0x10b │ -│ 269 │ NtCloseCompositionInputSink │ 268 │ 0x10c │ -│ 270 │ NtCompositionInputThread │ 269 │ 0x10d │ -│ 271 │ NtCompositionSetDropTarget │ 270 │ 0x10e │ -│ 272 │ NtCompositorNotifyExitWindows │ 271 │ 0x10f │ -│ 273 │ NtConfigureInputSpace │ 272 │ 0x110 │ -│ 274 │ NtCreateCompositionInputSink │ 273 │ 0x111 │ -│ 275 │ NtCreateCompositionSurfaceHandle │ 274 │ 0x112 │ -│ 276 │ NtCreateImplicitCompositionInputSink │ 275 │ 0x113 │ -│ 277 │ NtDCompositionAddCrossDeviceVisualChild │ 276 │ 0x114 │ -│ 278 │ NtDCompositionBeginFrame │ 277 │ 0x115 │ -│ 279 │ NtDCompositionBoostCompositorClock │ 278 │ 0x116 │ -│ 280 │ NtDCompositionCommitChannel │ 279 │ 0x117 │ -│ 281 │ NtDCompositionCommitSynchronizationObject │ 280 │ 0x118 │ -│ 282 │ NtDCompositionConfirmFrame │ 281 │ 0x119 │ -│ 283 │ NtDCompositionConnectPipe │ 282 │ 0x11a │ -│ 284 │ NtDCompositionCreateAndBindSharedSection │ 283 │ 0x11b │ -│ 285 │ NtDCompositionCreateChannel │ 284 │ 0x11c │ -│ 286 │ NtDCompositionCreateConnection │ 285 │ 0x11d │ -│ 287 │ NtDCompositionCreateDwmChannel │ 286 │ 0x11e │ -│ 288 │ NtDCompositionCreateSharedResourceHandle │ 287 │ 0x11f │ -│ 289 │ NtDCompositionCreateSynchronizationObject │ 288 │ 0x120 │ -│ 290 │ NtDCompositionDestroyChannel │ 289 │ 0x121 │ -│ 291 │ NtDCompositionDestroyConnection │ 290 │ 0x122 │ -│ 292 │ NtDCompositionDuplicateHandleToProcess │ 291 │ 0x123 │ -│ 293 │ NtDCompositionDuplicateSwapchainHandleToDwm │ 292 │ 0x124 │ -│ 294 │ NtDCompositionEnableMMCSS │ 293 │ 0x125 │ -│ 295 │ NtDCompositionGetBatchId │ 294 │ 0x126 │ -│ 296 │ NtDCompositionGetChannels │ 295 │ 0x127 │ -│ 297 │ NtDCompositionGetConnectionBatch │ 296 │ 0x128 │ -│ 298 │ NtDCompositionGetDeletedResources │ 297 │ 0x129 │ -│ 299 │ NtDCompositionGetFrameId │ 298 │ 0x12a │ -│ 300 │ NtDCompositionGetFrameIdFromBatchId │ 299 │ 0x12b │ -│ 301 │ NtDCompositionGetFrameLegacyTokens │ 300 │ 0x12c │ -│ 302 │ NtDCompositionGetFrameStatistics │ 301 │ 0x12d │ -│ 303 │ NtDCompositionGetFrameSurfaceUpdates │ 302 │ 0x12e │ -│ 304 │ NtDCompositionGetMaterialProperty │ 303 │ 0x12f │ -│ 305 │ NtDCompositionGetStatistics │ 304 │ 0x130 │ -│ 306 │ NtDCompositionGetTargetStatistics │ 305 │ 0x131 │ -│ 307 │ NtDCompositionNotifySuperWetInkWork │ 306 │ 0x132 │ -│ 308 │ NtDCompositionProcessChannelBatchBuffer │ 307 │ 0x133 │ -│ 309 │ NtDCompositionReferenceSharedResourceOnDwmChannel │ 308 │ 0x134 │ -│ 310 │ NtDCompositionRegisterThumbnailVisual │ 309 │ 0x135 │ -│ 311 │ NtDCompositionRegisterVirtualDesktopVisual │ 310 │ 0x136 │ -│ 312 │ NtDCompositionReleaseAllResources │ 311 │ 0x137 │ -│ 313 │ NtDCompositionRemoveCrossDeviceVisualChild │ 312 │ 0x138 │ -│ 314 │ NtDCompositionSetBlurredWallpaperSurface │ 313 │ 0x139 │ -│ 315 │ NtDCompositionSetChannelCommitCompletionEvent │ 314 │ 0x13a │ -│ 316 │ NtDCompositionSetChannelConnectionId │ 315 │ 0x13b │ -│ 317 │ NtDCompositionSetChildRootVisual │ 316 │ 0x13c │ -│ 318 │ NtDCompositionSetDebugCounter │ 317 │ 0x13d │ -│ 319 │ NtDCompositionSetMaterialProperty │ 318 │ 0x13e │ -│ 320 │ NtDCompositionSubmitDWMBatch │ 319 │ 0x13f │ -│ 321 │ NtDCompositionSuspendAnimations │ 320 │ 0x140 │ -│ 322 │ NtDCompositionSynchronize │ 321 │ 0x141 │ -│ 323 │ NtDCompositionTelemetrySetApplicationId │ 322 │ 0x142 │ -│ 324 │ NtDCompositionUpdatePointerCapture │ 323 │ 0x143 │ -│ 325 │ NtDCompositionWaitForChannel │ 324 │ 0x144 │ -│ 326 │ NtDCompositionWaitForCompositorClock │ 325 │ 0x145 │ -│ 327 │ NtDesktopCaptureBits │ 326 │ 0x146 │ -│ 328 │ NtDuplicateCompositionInputSink │ 327 │ 0x147 │ -│ 329 │ NtDxgkCancelPresents │ 328 │ 0x148 │ -│ 330 │ NtDxgkCheckSinglePlaneForMultiPlaneOverlaySupport │ 329 │ 0x149 │ -│ 331 │ NtDxgkConnectDoorbell │ 330 │ 0x14a │ -│ 332 │ NtDxgkCreateDoorbell │ 331 │ 0x14b │ -│ 333 │ NtDxgkCreateNativeFence │ 332 │ 0x14c │ -│ 334 │ NtDxgkCreateTrackedWorkload │ 333 │ 0x14d │ -│ 335 │ NtDxgkDestroyDoorbell │ 334 │ 0x14e │ -│ 336 │ NtDxgkDestroyTrackedWorkload │ 335 │ 0x14f │ -│ 337 │ NtDxgkDispMgrOperation │ 336 │ 0x150 │ -│ 338 │ NtDxgkDisplayPortOperation │ 337 │ 0x151 │ -│ 339 │ NtDxgkDuplicateHandle │ 338 │ 0x152 │ -│ 340 │ NtDxgkEnumAdapters3 │ 339 │ 0x153 │ -│ 341 │ NtDxgkEnumProcesses │ 340 │ 0x154 │ -│ 342 │ NtDxgkGetAvailableTrackedWorkloadIndex │ 341 │ 0x155 │ -│ 343 │ NtDxgkGetProcessList │ 342 │ 0x156 │ -│ 344 │ NtDxgkGetProperties │ 343 │ 0x157 │ -│ 345 │ NtDxgkGetTrackedWorkloadStatistics │ 344 │ 0x158 │ -│ 346 │ NtDxgkNotifyWorkSubmission │ 345 │ 0x159 │ -│ 347 │ NtDxgkOpenNativeFenceFromNtHandle │ 346 │ 0x15a │ -│ 348 │ NtDxgkOutputDuplPresentToHwQueue │ 347 │ 0x15b │ -│ 349 │ NtDxgkPinResources │ 348 │ 0x15c │ -│ 350 │ NtDxgkRegisterVailProcess │ 349 │ 0x15d │ -│ 351 │ NtDxgkResetTrackedWorkloadStatistics │ 350 │ 0x15e │ -│ 352 │ NtDxgkSetProperties │ 351 │ 0x15f │ -│ 353 │ NtDxgkSubmitPresentBltToHwQueue │ 352 │ 0x160 │ -│ 354 │ NtDxgkSubmitPresentToHwQueue │ 353 │ 0x161 │ -│ 355 │ NtDxgkUnpinResources │ 354 │ 0x162 │ -│ 356 │ NtDxgkUpdateTrackedWorkload │ 355 │ 0x163 │ -│ 357 │ NtDxgkVailConnect │ 356 │ 0x164 │ -│ 358 │ NtDxgkVailDisconnect │ 357 │ 0x165 │ -│ 359 │ NtDxgkVailPromoteCompositionSurface │ 358 │ 0x166 │ -│ 360 │ NtEnableOneCoreTransformMode │ 359 │ 0x167 │ -│ 361 │ NtFlipObjectAddContent │ 360 │ 0x168 │ -│ 362 │ NtFlipObjectAddPoolBuffer │ 361 │ 0x169 │ -│ 363 │ NtFlipObjectConsumerAcquirePresent │ 362 │ 0x16a │ -│ 364 │ NtFlipObjectConsumerAdjustUsageReference │ 363 │ 0x16b │ -│ 365 │ NtFlipObjectConsumerBeginProcessPresent │ 364 │ 0x16c │ -│ 366 │ NtFlipObjectConsumerEndProcessPresent │ 365 │ 0x16d │ -│ 367 │ NtFlipObjectConsumerPostMessage │ 366 │ 0x16e │ -│ 368 │ NtFlipObjectConsumerQueryBufferInfo │ 367 │ 0x16f │ -│ 369 │ NtFlipObjectCreate │ 368 │ 0x170 │ -│ 370 │ NtFlipObjectDisconnectEndpoint │ 369 │ 0x171 │ -│ 371 │ NtFlipObjectEnablePresentStatisticsType │ 370 │ 0x172 │ -│ 372 │ NtFlipObjectOpen │ 371 │ 0x173 │ -│ 373 │ NtFlipObjectPresentCancel │ 372 │ 0x174 │ -│ 374 │ NtFlipObjectQueryBufferAvailableEvent │ 373 │ 0x175 │ -│ 375 │ NtFlipObjectQueryEndpointConnected │ 374 │ 0x176 │ -│ 376 │ NtFlipObjectQueryLostEvent │ 375 │ 0x177 │ -│ 377 │ NtFlipObjectQueryNextMessageToProducer │ 376 │ 0x178 │ -│ 378 │ NtFlipObjectReadNextMessageToProducer │ 377 │ 0x179 │ -│ 379 │ NtFlipObjectRemoveContent │ 378 │ 0x17a │ -│ 380 │ NtFlipObjectRemovePoolBuffer │ 379 │ 0x17b │ -│ 381 │ NtFlipObjectSetContent │ 380 │ 0x17c │ -│ 382 │ NtGdiAbortDoc │ 381 │ 0x17d │ -│ 383 │ NtGdiAbortPath │ 382 │ 0x17e │ -│ 384 │ NtGdiAddEmbFontToDC │ 383 │ 0x17f │ -│ 385 │ NtGdiAddFontResourceW │ 384 │ 0x180 │ -│ 386 │ NtGdiAddInitialFonts │ 385 │ 0x181 │ -│ 387 │ NtGdiAddRemoteFontToDC │ 386 │ 0x182 │ -│ 388 │ NtGdiAddRemoteMMInstanceToDC │ 387 │ 0x183 │ -│ 389 │ NtGdiAngleArc │ 388 │ 0x184 │ -│ 390 │ NtGdiAnyLinkedFonts │ 389 │ 0x185 │ -│ 391 │ NtGdiArcInternal │ 390 │ 0x186 │ -│ 392 │ NtGdiBRUSHOBJ_DeleteRbrush │ 391 │ 0x187 │ -│ 393 │ NtGdiBRUSHOBJ_hGetColorTransform │ 392 │ 0x188 │ -│ 394 │ NtGdiBRUSHOBJ_pvAllocRbrush │ 393 │ 0x189 │ -│ 395 │ NtGdiBRUSHOBJ_pvGetRbrush │ 394 │ 0x18a │ -│ 396 │ NtGdiBRUSHOBJ_ulGetBrushColor │ 395 │ 0x18b │ -│ 397 │ NtGdiBeginGdiRendering │ 396 │ 0x18c │ -│ 398 │ NtGdiCLIPOBJ_bEnum │ 397 │ 0x18d │ -│ 399 │ NtGdiCLIPOBJ_cEnumStart │ 398 │ 0x18e │ -│ 400 │ NtGdiCLIPOBJ_ppoGetPath │ 399 │ 0x18f │ -│ 401 │ NtGdiCancelDC │ 400 │ 0x190 │ -│ 402 │ NtGdiChangeGhostFont │ 401 │ 0x191 │ -│ 403 │ NtGdiCheckBitmapBits │ 402 │ 0x192 │ -│ 404 │ NtGdiClearBitmapAttributes │ 403 │ 0x193 │ -│ 405 │ NtGdiClearBrushAttributes │ 404 │ 0x194 │ -│ 406 │ NtGdiColorCorrectPalette │ 405 │ 0x195 │ -│ 407 │ NtGdiConfigureOPMProtectedOutput │ 406 │ 0x196 │ -│ 408 │ NtGdiConvertMetafileRect │ 407 │ 0x197 │ -│ 409 │ NtGdiCreateBitmapFromDxSurface │ 408 │ 0x198 │ -│ 410 │ NtGdiCreateBitmapFromDxSurface2 │ 409 │ 0x199 │ -│ 411 │ NtGdiCreateColorTransform │ 410 │ 0x19a │ -│ 412 │ NtGdiCreateEllipticRgn │ 411 │ 0x19b │ -│ 413 │ NtGdiCreateHatchBrushInternal │ 412 │ 0x19c │ -│ 414 │ NtGdiCreateMetafileDC │ 413 │ 0x19d │ -│ 415 │ NtGdiCreateOPMProtectedOutput │ 414 │ 0x19e │ -│ 416 │ NtGdiCreateOPMProtectedOutputs │ 415 │ 0x19f │ -│ 417 │ NtGdiCreateRoundRectRgn │ 416 │ 0x1a0 │ -│ 418 │ NtGdiCreateServerMetaFile │ 417 │ 0x1a1 │ -│ 419 │ NtGdiCreateSessionMappedDIBSection │ 418 │ 0x1a2 │ -│ 420 │ NtGdiDDCCIGetCapabilitiesString │ 419 │ 0x1a3 │ -│ 421 │ NtGdiDDCCIGetCapabilitiesStringLength │ 420 │ 0x1a4 │ -│ 422 │ NtGdiDDCCIGetTimingReport │ 421 │ 0x1a5 │ -│ 423 │ NtGdiDDCCIGetVCPFeature │ 422 │ 0x1a6 │ -│ 424 │ NtGdiDDCCISaveCurrentSettings │ 423 │ 0x1a7 │ -│ 425 │ NtGdiDDCCISetVCPFeature │ 424 │ 0x1a8 │ -│ 426 │ NtGdiDdCreateFullscreenSprite │ 425 │ 0x1a9 │ -│ 427 │ NtGdiDdDDIAbandonSwapChain │ 426 │ 0x1aa │ -│ 428 │ NtGdiDdDDIAcquireKeyedMutex │ 427 │ 0x1ab │ -│ 429 │ NtGdiDdDDIAcquireKeyedMutex2 │ 428 │ 0x1ac │ -│ 430 │ NtGdiDdDDIAcquireSwapChain │ 429 │ 0x1ad │ -│ 431 │ NtGdiDdDDIAddSurfaceToSwapChain │ 430 │ 0x1ae │ -│ 432 │ NtGdiDdDDIAdjustFullscreenGamma │ 431 │ 0x1af │ -│ 433 │ NtGdiDdDDICacheHybridQueryValue │ 432 │ 0x1b0 │ -│ 434 │ NtGdiDdDDIChangeVideoMemoryReservation │ 433 │ 0x1b1 │ -│ 435 │ NtGdiDdDDICheckExclusiveOwnership │ 434 │ 0x1b2 │ -│ 436 │ NtGdiDdDDICheckMonitorPowerState │ 435 │ 0x1b3 │ -│ 437 │ NtGdiDdDDICheckMultiPlaneOverlaySupport │ 436 │ 0x1b4 │ -│ 438 │ NtGdiDdDDICheckMultiPlaneOverlaySupport2 │ 437 │ 0x1b5 │ -│ 439 │ NtGdiDdDDICheckMultiPlaneOverlaySupport3 │ 438 │ 0x1b6 │ -│ 440 │ NtGdiDdDDICheckOcclusion │ 439 │ 0x1b7 │ -│ 441 │ NtGdiDdDDICheckSharedResourceAccess │ 440 │ 0x1b8 │ -│ 442 │ NtGdiDdDDICheckVidPnExclusiveOwnership │ 441 │ 0x1b9 │ -│ 443 │ NtGdiDdDDICloseAdapter │ 442 │ 0x1ba │ -│ 444 │ NtGdiDdDDIConfigureSharedResource │ 443 │ 0x1bb │ -│ 445 │ NtGdiDdDDICreateAllocation │ 444 │ 0x1bc │ -│ 446 │ NtGdiDdDDICreateBundleObject │ 445 │ 0x1bd │ -│ 447 │ NtGdiDdDDICreateContext │ 446 │ 0x1be │ -│ 448 │ NtGdiDdDDICreateContextVirtual │ 447 │ 0x1bf │ -│ 449 │ NtGdiDdDDICreateDCFromMemory │ 448 │ 0x1c0 │ -│ 450 │ NtGdiDdDDICreateDevice │ 449 │ 0x1c1 │ -│ 451 │ NtGdiDdDDICreateHwContext │ 450 │ 0x1c2 │ -│ 452 │ NtGdiDdDDICreateHwQueue │ 451 │ 0x1c3 │ -│ 453 │ NtGdiDdDDICreateKeyedMutex │ 452 │ 0x1c4 │ -│ 454 │ NtGdiDdDDICreateKeyedMutex2 │ 453 │ 0x1c5 │ -│ 455 │ NtGdiDdDDICreateOutputDupl │ 454 │ 0x1c6 │ -│ 456 │ NtGdiDdDDICreateOverlay │ 455 │ 0x1c7 │ -│ 457 │ NtGdiDdDDICreatePagingQueue │ 456 │ 0x1c8 │ -│ 458 │ NtGdiDdDDICreateProtectedSession │ 457 │ 0x1c9 │ -│ 459 │ NtGdiDdDDICreateSwapChain │ 458 │ 0x1ca │ -│ 460 │ NtGdiDdDDICreateSynchronizationObject │ 459 │ 0x1cb │ -│ 461 │ NtGdiDdDDIDDisplayEnum │ 460 │ 0x1cc │ -│ 462 │ NtGdiDdDDIDestroyAllocation │ 461 │ 0x1cd │ -│ 463 │ NtGdiDdDDIDestroyAllocation2 │ 462 │ 0x1ce │ -│ 464 │ NtGdiDdDDIDestroyContext │ 463 │ 0x1cf │ -│ 465 │ NtGdiDdDDIDestroyDCFromMemory │ 464 │ 0x1d0 │ -│ 466 │ NtGdiDdDDIDestroyDevice │ 465 │ 0x1d1 │ -│ 467 │ NtGdiDdDDIDestroyHwContext │ 466 │ 0x1d2 │ -│ 468 │ NtGdiDdDDIDestroyHwQueue │ 467 │ 0x1d3 │ -│ 469 │ NtGdiDdDDIDestroyKeyedMutex │ 468 │ 0x1d4 │ -│ 470 │ NtGdiDdDDIDestroyOutputDupl │ 469 │ 0x1d5 │ -│ 471 │ NtGdiDdDDIDestroyOverlay │ 470 │ 0x1d6 │ -│ 472 │ NtGdiDdDDIDestroyPagingQueue │ 471 │ 0x1d7 │ -│ 473 │ NtGdiDdDDIDestroyProtectedSession │ 472 │ 0x1d8 │ -│ 474 │ NtGdiDdDDIDestroySynchronizationObject │ 473 │ 0x1d9 │ -│ 475 │ NtGdiDdDDIDispMgrCreate │ 474 │ 0x1da │ -│ 476 │ NtGdiDdDDIDispMgrSourceOperation │ 475 │ 0x1db │ -│ 477 │ NtGdiDdDDIDispMgrTargetOperation │ 476 │ 0x1dc │ -│ 478 │ NtGdiDdDDIEnumAdapters │ 477 │ 0x1dd │ -│ 479 │ NtGdiDdDDIEnumAdapters2 │ 478 │ 0x1de │ -│ 480 │ NtGdiDdDDIEscape │ 479 │ 0x1df │ -│ 481 │ NtGdiDdDDIEvict │ 480 │ 0x1e0 │ -│ 482 │ NtGdiDdDDIExtractBundleObject │ 481 │ 0x1e1 │ -│ 483 │ NtGdiDdDDIFlipOverlay │ 482 │ 0x1e2 │ -│ 484 │ NtGdiDdDDIFlushHeapTransitions │ 483 │ 0x1e3 │ -│ 485 │ NtGdiDdDDIFreeGpuVirtualAddress │ 484 │ 0x1e4 │ -│ 486 │ NtGdiDdDDIGetAllocationPriority │ 485 │ 0x1e5 │ -│ 487 │ NtGdiDdDDIGetCachedHybridQueryValue │ 486 │ 0x1e6 │ -│ 488 │ NtGdiDdDDIGetContextInProcessSchedulingPriority │ 487 │ 0x1e7 │ -│ 489 │ NtGdiDdDDIGetContextSchedulingPriority │ 488 │ 0x1e8 │ -│ 490 │ NtGdiDdDDIGetDWMVerticalBlankEvent │ 489 │ 0x1e9 │ -│ 491 │ NtGdiDdDDIGetDeviceState │ 490 │ 0x1ea │ -│ 492 │ NtGdiDdDDIGetDisplayModeList │ 491 │ 0x1eb │ -│ 493 │ NtGdiDdDDIGetMemoryBudgetTarget │ 492 │ 0x1ec │ -│ 494 │ NtGdiDdDDIGetMultiPlaneOverlayCaps │ 493 │ 0x1ed │ -│ 495 │ NtGdiDdDDIGetMultisampleMethodList │ 494 │ 0x1ee │ -│ 496 │ NtGdiDdDDIGetOverlayState │ 495 │ 0x1ef │ -│ 497 │ NtGdiDdDDIGetPostCompositionCaps │ 496 │ 0x1f0 │ -│ 498 │ NtGdiDdDDIGetPresentHistory │ 497 │ 0x1f1 │ -│ 499 │ NtGdiDdDDIGetPresentQueueEvent │ 498 │ 0x1f2 │ -│ 500 │ NtGdiDdDDIGetProcessDeviceRemovalSupport │ 499 │ 0x1f3 │ -│ 501 │ NtGdiDdDDIGetProcessSchedulingPriorityBand │ 500 │ 0x1f4 │ -│ 502 │ NtGdiDdDDIGetProcessSchedulingPriorityClass │ 501 │ 0x1f5 │ -│ 503 │ NtGdiDdDDIGetResourcePresentPrivateDriverData │ 502 │ 0x1f6 │ -│ 504 │ NtGdiDdDDIGetRuntimeData │ 503 │ 0x1f7 │ -│ 505 │ NtGdiDdDDIGetScanLine │ 504 │ 0x1f8 │ -│ 506 │ NtGdiDdDDIGetSetSwapChainMetadata │ 505 │ 0x1f9 │ -│ 507 │ NtGdiDdDDIGetSharedPrimaryHandle │ 506 │ 0x1fa │ -│ 508 │ NtGdiDdDDIGetSharedResourceAdapterLuid │ 507 │ 0x1fb │ -│ 509 │ NtGdiDdDDIGetSharedResourceAdapterLuidFlipManager │ 508 │ 0x1fc │ -│ 510 │ NtGdiDdDDIGetSwapChainSurfacePhysicalAddress │ 509 │ 0x1fd │ -│ 511 │ NtGdiDdDDIGetYieldPercentage │ 510 │ 0x1fe │ -│ 512 │ NtGdiDdDDIInvalidateActiveVidPn │ 511 │ 0x1ff │ -│ 513 │ NtGdiDdDDIInvalidateCache │ 512 │ 0x200 │ -│ 514 │ NtGdiDdDDILock │ 513 │ 0x201 │ -│ 515 │ NtGdiDdDDILock2 │ 514 │ 0x202 │ -│ 516 │ NtGdiDdDDIMakeResident │ 515 │ 0x203 │ -│ 517 │ NtGdiDdDDIMapGpuVirtualAddress │ 516 │ 0x204 │ -│ 518 │ NtGdiDdDDIMarkDeviceAsError │ 517 │ 0x205 │ -│ 519 │ NtGdiDdDDINetDispGetNextChunkInfo │ 518 │ 0x206 │ -│ 520 │ NtGdiDdDDINetDispQueryMiracastDisplayDeviceStatus │ 519 │ 0x207 │ -│ 521 │ NtGdiDdDDINetDispQueryMiracastDisplayDeviceSupport │ 520 │ 0x208 │ -│ 522 │ NtGdiDdDDINetDispStartMiracastDisplayDevice │ 521 │ 0x209 │ -│ 523 │ NtGdiDdDDINetDispStopMiracastDisplayDevice │ 522 │ 0x20a │ -│ 524 │ NtGdiDdDDIOfferAllocations │ 523 │ 0x20b │ -│ 525 │ NtGdiDdDDIOpenAdapterFromDeviceName │ 524 │ 0x20c │ -│ 526 │ NtGdiDdDDIOpenAdapterFromHdc │ 525 │ 0x20d │ -│ 527 │ NtGdiDdDDIOpenAdapterFromLuid │ 526 │ 0x20e │ -│ 528 │ NtGdiDdDDIOpenBundleObjectNtHandleFromName │ 527 │ 0x20f │ -│ 529 │ NtGdiDdDDIOpenKeyedMutex │ 528 │ 0x210 │ -│ 530 │ NtGdiDdDDIOpenKeyedMutex2 │ 529 │ 0x211 │ -│ 531 │ NtGdiDdDDIOpenKeyedMutexFromNtHandle │ 530 │ 0x212 │ -│ 532 │ NtGdiDdDDIOpenNtHandleFromName │ 531 │ 0x213 │ -│ 533 │ NtGdiDdDDIOpenProtectedSessionFromNtHandle │ 532 │ 0x214 │ -│ 534 │ NtGdiDdDDIOpenResource │ 533 │ 0x215 │ -│ 535 │ NtGdiDdDDIOpenResourceFromNtHandle │ 534 │ 0x216 │ -│ 536 │ NtGdiDdDDIOpenSwapChain │ 535 │ 0x217 │ -│ 537 │ NtGdiDdDDIOpenSyncObjectFromNtHandle │ 536 │ 0x218 │ -│ 538 │ NtGdiDdDDIOpenSyncObjectFromNtHandle2 │ 537 │ 0x219 │ -│ 539 │ NtGdiDdDDIOpenSyncObjectNtHandleFromName │ 538 │ 0x21a │ -│ 540 │ NtGdiDdDDIOpenSynchronizationObject │ 539 │ 0x21b │ -│ 541 │ NtGdiDdDDIOutputDuplGetFrameInfo │ 540 │ 0x21c │ -│ 542 │ NtGdiDdDDIOutputDuplGetMetaData │ 541 │ 0x21d │ -│ 543 │ NtGdiDdDDIOutputDuplGetPointerShapeData │ 542 │ 0x21e │ -│ 544 │ NtGdiDdDDIOutputDuplPresent │ 543 │ 0x21f │ -│ 545 │ NtGdiDdDDIOutputDuplReleaseFrame │ 544 │ 0x220 │ -│ 546 │ NtGdiDdDDIPollDisplayChildren │ 545 │ 0x221 │ -│ 547 │ NtGdiDdDDIPresent │ 546 │ 0x222 │ -│ 548 │ NtGdiDdDDIPresentMultiPlaneOverlay │ 547 │ 0x223 │ -│ 549 │ NtGdiDdDDIPresentMultiPlaneOverlay2 │ 548 │ 0x224 │ -│ 550 │ NtGdiDdDDIPresentMultiPlaneOverlay3 │ 549 │ 0x225 │ -│ 551 │ NtGdiDdDDIPresentRedirected │ 550 │ 0x226 │ -│ 552 │ NtGdiDdDDIQueryAdapterInfo │ 551 │ 0x227 │ -│ 553 │ NtGdiDdDDIQueryAllocationResidency │ 552 │ 0x228 │ -│ 554 │ NtGdiDdDDIQueryClockCalibration │ 553 │ 0x229 │ -│ 555 │ NtGdiDdDDIQueryFSEBlock │ 554 │ 0x22a │ -│ 556 │ NtGdiDdDDIQueryProcessOfferInfo │ 555 │ 0x22b │ -│ 557 │ NtGdiDdDDIQueryProtectedSessionInfoFromNtHandle │ 556 │ 0x22c │ -│ 558 │ NtGdiDdDDIQueryProtectedSessionStatus │ 557 │ 0x22d │ -│ 559 │ NtGdiDdDDIQueryRemoteVidPnSourceFromGdiDisplayName │ 558 │ 0x22e │ -│ 560 │ NtGdiDdDDIQueryResourceInfo │ 559 │ 0x22f │ -│ 561 │ NtGdiDdDDIQueryResourceInfoFromNtHandle │ 560 │ 0x230 │ -│ 562 │ NtGdiDdDDIQueryStatistics │ 561 │ 0x231 │ -│ 563 │ NtGdiDdDDIQueryVidPnExclusiveOwnership │ 562 │ 0x232 │ -│ 564 │ NtGdiDdDDIQueryVideoMemoryInfo │ 563 │ 0x233 │ -│ 565 │ NtGdiDdDDIReclaimAllocations │ 564 │ 0x234 │ -│ 566 │ NtGdiDdDDIReclaimAllocations2 │ 565 │ 0x235 │ -│ 567 │ NtGdiDdDDIReleaseKeyedMutex │ 566 │ 0x236 │ -│ 568 │ NtGdiDdDDIReleaseKeyedMutex2 │ 567 │ 0x237 │ -│ 569 │ NtGdiDdDDIReleaseProcessVidPnSourceOwners │ 568 │ 0x238 │ -│ 570 │ NtGdiDdDDIReleaseSwapChain │ 569 │ 0x239 │ -│ 571 │ NtGdiDdDDIRemoveSurfaceFromSwapChain │ 570 │ 0x23a │ -│ 572 │ NtGdiDdDDIRender │ 571 │ 0x23b │ -│ 573 │ NtGdiDdDDIReserveGpuVirtualAddress │ 572 │ 0x23c │ -│ 574 │ NtGdiDdDDISetAllocationPriority │ 573 │ 0x23d │ -│ 575 │ NtGdiDdDDISetContextInProcessSchedulingPriority │ 574 │ 0x23e │ -│ 576 │ NtGdiDdDDISetContextSchedulingPriority │ 575 │ 0x23f │ -│ 577 │ NtGdiDdDDISetDisplayMode │ 576 │ 0x240 │ -│ 578 │ NtGdiDdDDISetDodIndirectSwapchain │ 577 │ 0x241 │ -│ 579 │ NtGdiDdDDISetFSEBlock │ 578 │ 0x242 │ -│ 580 │ NtGdiDdDDISetGammaRamp │ 579 │ 0x243 │ -│ 581 │ NtGdiDdDDISetHwProtectionTeardownRecovery │ 580 │ 0x244 │ -│ 582 │ NtGdiDdDDISetMemoryBudgetTarget │ 581 │ 0x245 │ -│ 583 │ NtGdiDdDDISetMonitorColorSpaceTransform │ 582 │ 0x246 │ -│ 584 │ NtGdiDdDDISetProcessDeviceRemovalSupport │ 583 │ 0x247 │ -│ 585 │ NtGdiDdDDISetProcessSchedulingPriorityBand │ 584 │ 0x248 │ -│ 586 │ NtGdiDdDDISetProcessSchedulingPriorityClass │ 585 │ 0x249 │ -│ 587 │ NtGdiDdDDISetQueuedLimit │ 586 │ 0x24a │ -│ 588 │ NtGdiDdDDISetStablePowerState │ 587 │ 0x24b │ -│ 589 │ NtGdiDdDDISetStereoEnabled │ 588 │ 0x24c │ -│ 590 │ NtGdiDdDDISetSyncRefreshCountWaitTarget │ 589 │ 0x24d │ -│ 591 │ NtGdiDdDDISetVidPnSourceHwProtection │ 590 │ 0x24e │ -│ 592 │ NtGdiDdDDISetVidPnSourceOwner │ 591 │ 0x24f │ -│ 593 │ NtGdiDdDDISetYieldPercentage │ 592 │ 0x250 │ -│ 594 │ NtGdiDdDDIShareObjects │ 593 │ 0x251 │ -│ 595 │ NtGdiDdDDISharedPrimaryLockNotification │ 594 │ 0x252 │ -│ 596 │ NtGdiDdDDISharedPrimaryUnLockNotification │ 595 │ 0x253 │ -│ 597 │ NtGdiDdDDISignalSynchronizationObject │ 596 │ 0x254 │ -│ 598 │ NtGdiDdDDISignalSynchronizationObjectFromCpu │ 597 │ 0x255 │ -│ 599 │ NtGdiDdDDISignalSynchronizationObjectFromGpu │ 598 │ 0x256 │ -│ 600 │ NtGdiDdDDISignalSynchronizationObjectFromGpu2 │ 599 │ 0x257 │ -│ 601 │ NtGdiDdDDISubmitCommand │ 600 │ 0x258 │ -│ 602 │ NtGdiDdDDISubmitCommandToHwQueue │ 601 │ 0x259 │ -│ 603 │ NtGdiDdDDISubmitSignalSyncObjectsToHwQueue │ 602 │ 0x25a │ -│ 604 │ NtGdiDdDDISubmitWaitForSyncObjectsToHwQueue │ 603 │ 0x25b │ -│ 605 │ NtGdiDdDDITrimProcessCommitment │ 604 │ 0x25c │ -│ 606 │ NtGdiDdDDIUnOrderedPresentSwapChain │ 605 │ 0x25d │ -│ 607 │ NtGdiDdDDIUnlock │ 606 │ 0x25e │ -│ 608 │ NtGdiDdDDIUnlock2 │ 607 │ 0x25f │ -│ 609 │ NtGdiDdDDIUpdateAllocationProperty │ 608 │ 0x260 │ -│ 610 │ NtGdiDdDDIUpdateGpuVirtualAddress │ 609 │ 0x261 │ -│ 611 │ NtGdiDdDDIUpdateOverlay │ 610 │ 0x262 │ -│ 612 │ NtGdiDdDDIWaitForIdle │ 611 │ 0x263 │ -│ 613 │ NtGdiDdDDIWaitForSynchronizationObject │ 612 │ 0x264 │ -│ 614 │ NtGdiDdDDIWaitForSynchronizationObjectFromCpu │ 613 │ 0x265 │ -│ 615 │ NtGdiDdDDIWaitForSynchronizationObjectFromGpu │ 614 │ 0x266 │ -│ 616 │ NtGdiDdDDIWaitForVerticalBlankEvent │ 615 │ 0x267 │ -│ 617 │ NtGdiDdDDIWaitForVerticalBlankEvent2 │ 616 │ 0x268 │ -│ 618 │ NtGdiDdDestroyFullscreenSprite │ 617 │ 0x269 │ -│ 619 │ NtGdiDdNotifyFullscreenSpriteUpdate │ 618 │ 0x26a │ -│ 620 │ NtGdiDdQueryVisRgnUniqueness │ 619 │ 0x26b │ -│ 621 │ NtGdiDeleteColorTransform │ 620 │ 0x26c │ -│ 622 │ NtGdiDescribePixelFormat │ 621 │ 0x26d │ -│ 623 │ NtGdiDestroyOPMProtectedOutput │ 622 │ 0x26e │ -│ 624 │ NtGdiDestroyPhysicalMonitor │ 623 │ 0x26f │ -│ 625 │ NtGdiDoBanding │ 624 │ 0x270 │ -│ 626 │ NtGdiDrawEscape │ 625 │ 0x271 │ -│ 627 │ NtGdiDwmCreatedBitmapRemotingOutput │ 626 │ 0x272 │ -│ 628 │ NtGdiEllipse │ 627 │ 0x273 │ -│ 629 │ NtGdiEnableEudc │ 628 │ 0x274 │ -│ 630 │ NtGdiEndDoc │ 629 │ 0x275 │ -│ 631 │ NtGdiEndGdiRendering │ 630 │ 0x276 │ -│ 632 │ NtGdiEndPage │ 631 │ 0x277 │ -│ 633 │ NtGdiEngAlphaBlend │ 632 │ 0x278 │ -│ 634 │ NtGdiEngAssociateSurface │ 633 │ 0x279 │ -│ 635 │ NtGdiEngBitBlt │ 634 │ 0x27a │ -│ 636 │ NtGdiEngCheckAbort │ 635 │ 0x27b │ -│ 637 │ NtGdiEngComputeGlyphSet │ 636 │ 0x27c │ -│ 638 │ NtGdiEngCopyBits │ 637 │ 0x27d │ -│ 639 │ NtGdiEngCreateBitmap │ 638 │ 0x27e │ -│ 640 │ NtGdiEngCreateClip │ 639 │ 0x27f │ -│ 641 │ NtGdiEngCreateDeviceBitmap │ 640 │ 0x280 │ -│ 642 │ NtGdiEngCreateDeviceSurface │ 641 │ 0x281 │ -│ 643 │ NtGdiEngCreatePalette │ 642 │ 0x282 │ -│ 644 │ NtGdiEngDeleteClip │ 643 │ 0x283 │ -│ 645 │ NtGdiEngDeletePalette │ 644 │ 0x284 │ -│ 646 │ NtGdiEngDeletePath │ 645 │ 0x285 │ -│ 647 │ NtGdiEngDeleteSurface │ 646 │ 0x286 │ -│ 648 │ NtGdiEngEraseSurface │ 647 │ 0x287 │ -│ 649 │ NtGdiEngFillPath │ 648 │ 0x288 │ -│ 650 │ NtGdiEngGradientFill │ 649 │ 0x289 │ -│ 651 │ NtGdiEngLineTo │ 650 │ 0x28a │ -│ 652 │ NtGdiEngLockSurface │ 651 │ 0x28b │ -│ 653 │ NtGdiEngMarkBandingSurface │ 652 │ 0x28c │ -│ 654 │ NtGdiEngPaint │ 653 │ 0x28d │ -│ 655 │ NtGdiEngPlgBlt │ 654 │ 0x28e │ -│ 656 │ NtGdiEngStretchBlt │ 655 │ 0x28f │ -│ 657 │ NtGdiEngStretchBltROP │ 656 │ 0x290 │ -│ 658 │ NtGdiEngStrokeAndFillPath │ 657 │ 0x291 │ -│ 659 │ NtGdiEngStrokePath │ 658 │ 0x292 │ -│ 660 │ NtGdiEngTextOut │ 659 │ 0x293 │ -│ 661 │ NtGdiEngTransparentBlt │ 660 │ 0x294 │ -│ 662 │ NtGdiEngUnlockSurface │ 661 │ 0x295 │ -│ 663 │ NtGdiEnsureDpiDepDefaultGuiFontForPlateau │ 662 │ 0x296 │ -│ 664 │ NtGdiEnumFonts │ 663 │ 0x297 │ -│ 665 │ NtGdiEnumObjects │ 664 │ 0x298 │ -│ 666 │ NtGdiEudcLoadUnloadLink │ 665 │ 0x299 │ -│ 667 │ NtGdiExtFloodFill │ 666 │ 0x29a │ -│ 668 │ NtGdiFONTOBJ_cGetAllGlyphHandles │ 667 │ 0x29b │ -│ 669 │ NtGdiFONTOBJ_cGetGlyphs │ 668 │ 0x29c │ -│ 670 │ NtGdiFONTOBJ_pQueryGlyphAttrs │ 669 │ 0x29d │ -│ 671 │ NtGdiFONTOBJ_pfdg │ 670 │ 0x29e │ -│ 672 │ NtGdiFONTOBJ_pifi │ 671 │ 0x29f │ -│ 673 │ NtGdiFONTOBJ_pvTrueTypeFontFile │ 672 │ 0x2a0 │ -│ 674 │ NtGdiFONTOBJ_pxoGetXform │ 673 │ 0x2a1 │ -│ 675 │ NtGdiFONTOBJ_vGetInfo │ 674 │ 0x2a2 │ -│ 676 │ NtGdiFlattenPath │ 675 │ 0x2a3 │ -│ 677 │ NtGdiFontIsLinked │ 676 │ 0x2a4 │ -│ 678 │ NtGdiForceUFIMapping │ 677 │ 0x2a5 │ -│ 679 │ NtGdiFrameRgn │ 678 │ 0x2a6 │ -│ 680 │ NtGdiFullscreenControl │ 679 │ 0x2a7 │ -│ 681 │ NtGdiGetBitmapDpiScaleValue │ 680 │ 0x2a8 │ -│ 682 │ NtGdiGetBoundsRect │ 681 │ 0x2a9 │ -│ 683 │ NtGdiGetCOPPCompatibleOPMInformation │ 682 │ 0x2aa │ -│ 684 │ NtGdiGetCertificate │ 683 │ 0x2ab │ -│ 685 │ NtGdiGetCertificateByHandle │ 684 │ 0x2ac │ -│ 686 │ NtGdiGetCertificateSize │ 685 │ 0x2ad │ -│ 687 │ NtGdiGetCertificateSizeByHandle │ 686 │ 0x2ae │ -│ 688 │ NtGdiGetCharABCWidthsW │ 687 │ 0x2af │ -│ 689 │ NtGdiGetCharacterPlacementW │ 688 │ 0x2b0 │ -│ 690 │ NtGdiGetColorAdjustment │ 689 │ 0x2b1 │ -│ 691 │ NtGdiGetColorSpaceforBitmap │ 690 │ 0x2b2 │ -│ 692 │ NtGdiGetCurrentDpiInfo │ 691 │ 0x2b3 │ -│ 693 │ NtGdiGetDCDpiScaleValue │ 692 │ 0x2b4 │ -│ 694 │ NtGdiGetDeviceCaps │ 693 │ 0x2b5 │ -│ 695 │ NtGdiGetDeviceCapsAll │ 694 │ 0x2b6 │ -│ 696 │ NtGdiGetDeviceWidth │ 695 │ 0x2b7 │ -│ 697 │ NtGdiGetDhpdev │ 696 │ 0x2b8 │ -│ 698 │ NtGdiGetETM │ 697 │ 0x2b9 │ -│ 699 │ NtGdiGetEmbUFI │ 698 │ 0x2ba │ -│ 700 │ NtGdiGetEmbedFonts │ 699 │ 0x2bb │ -│ 701 │ NtGdiGetEntry │ 700 │ 0x2bc │ -│ 702 │ NtGdiGetEudcTimeStampEx │ 701 │ 0x2bd │ -│ 703 │ NtGdiGetFontFileData │ 702 │ 0x2be │ -│ 704 │ NtGdiGetFontFileInfo │ 703 │ 0x2bf │ -│ 705 │ NtGdiGetFontResourceInfoInternalW │ 704 │ 0x2c0 │ -│ 706 │ NtGdiGetFontUnicodeRanges │ 705 │ 0x2c1 │ -│ 707 │ NtGdiGetGlyphIndicesW │ 706 │ 0x2c2 │ -│ 708 │ NtGdiGetGlyphIndicesWInternal │ 707 │ 0x2c3 │ -│ 709 │ NtGdiGetGlyphOutline │ 708 │ 0x2c4 │ -│ 710 │ NtGdiGetKerningPairs │ 709 │ 0x2c5 │ -│ 711 │ NtGdiGetLinkedUFIs │ 710 │ 0x2c6 │ -│ 712 │ NtGdiGetMiterLimit │ 711 │ 0x2c7 │ -│ 713 │ NtGdiGetMonitorID │ 712 │ 0x2c8 │ -│ 714 │ NtGdiGetNumberOfPhysicalMonitors │ 713 │ 0x2c9 │ -│ 715 │ NtGdiGetOPMInformation │ 714 │ 0x2ca │ -│ 716 │ NtGdiGetOPMRandomNumber │ 715 │ 0x2cb │ -│ 717 │ NtGdiGetObjectBitmapHandle │ 716 │ 0x2cc │ -│ 718 │ NtGdiGetPath │ 717 │ 0x2cd │ -│ 719 │ NtGdiGetPerBandInfo │ 718 │ 0x2ce │ -│ 720 │ NtGdiGetPhysicalMonitorDescription │ 719 │ 0x2cf │ -│ 721 │ NtGdiGetPhysicalMonitors │ 720 │ 0x2d0 │ -│ 722 │ NtGdiGetProcessSessionFonts │ 721 │ 0x2d1 │ -│ 723 │ NtGdiGetPublicFontTableChangeCookie │ 722 │ 0x2d2 │ -│ 724 │ NtGdiGetRealizationInfo │ 723 │ 0x2d3 │ -│ 725 │ NtGdiGetServerMetaFileBits │ 724 │ 0x2d4 │ -│ 726 │ NtGdiGetSpoolMessage │ 725 │ 0x2d5 │ -│ 727 │ NtGdiGetStats │ 726 │ 0x2d6 │ -│ 728 │ NtGdiGetStringBitmapW │ 727 │ 0x2d7 │ -│ 729 │ NtGdiGetSuggestedOPMProtectedOutputArraySize │ 728 │ 0x2d8 │ -│ 730 │ NtGdiGetTextExtentExW │ 729 │ 0x2d9 │ -│ 731 │ NtGdiGetUFI │ 730 │ 0x2da │ -│ 732 │ NtGdiGetUFIPathname │ 731 │ 0x2db │ -│ 733 │ NtGdiGradientFill │ 732 │ 0x2dc │ -│ 734 │ NtGdiHLSurfGetInformation │ 733 │ 0x2dd │ -│ 735 │ NtGdiHLSurfSetInformation │ 734 │ 0x2de │ -│ 736 │ NtGdiHT_Get8BPPFormatPalette │ 735 │ 0x2df │ -│ 737 │ NtGdiHT_Get8BPPMaskPalette │ 736 │ 0x2e0 │ -│ 738 │ NtGdiIcmBrushInfo │ 737 │ 0x2e1 │ -│ 739 │ NtGdiInit │ 738 │ 0x2e2 │ -│ 740 │ NtGdiInitSpool │ 739 │ 0x2e3 │ -│ 741 │ NtGdiMakeFontDir │ 740 │ 0x2e4 │ -│ 742 │ NtGdiMakeInfoDC │ 741 │ 0x2e5 │ -│ 743 │ NtGdiMakeObjectUnXferable │ 742 │ 0x2e6 │ -│ 744 │ NtGdiMakeObjectXferable │ 743 │ 0x2e7 │ -│ 745 │ NtGdiMirrorWindowOrg │ 744 │ 0x2e8 │ -│ 746 │ NtGdiMonoBitmap │ 745 │ 0x2e9 │ -│ 747 │ NtGdiMoveTo │ 746 │ 0x2ea │ -│ 748 │ NtGdiOffsetClipRgn │ 747 │ 0x2eb │ -│ 749 │ NtGdiPATHOBJ_bEnum │ 748 │ 0x2ec │ -│ 750 │ NtGdiPATHOBJ_bEnumClipLines │ 749 │ 0x2ed │ -│ 751 │ NtGdiPATHOBJ_vEnumStart │ 750 │ 0x2ee │ -│ 752 │ NtGdiPATHOBJ_vEnumStartClipLines │ 751 │ 0x2ef │ -│ 753 │ NtGdiPATHOBJ_vGetBounds │ 752 │ 0x2f0 │ -│ 754 │ NtGdiPathToRegion │ 753 │ 0x2f1 │ -│ 755 │ NtGdiPlgBlt │ 754 │ 0x2f2 │ -│ 756 │ NtGdiPolyDraw │ 755 │ 0x2f3 │ -│ 757 │ NtGdiPolyTextOutW │ 756 │ 0x2f4 │ -│ 758 │ NtGdiPtInRegion │ 757 │ 0x2f5 │ -│ 759 │ NtGdiPtVisible │ 758 │ 0x2f6 │ -│ 760 │ NtGdiQueryFonts │ 759 │ 0x2f7 │ -│ 761 │ NtGdiRemoveFontResourceW │ 760 │ 0x2f8 │ -│ 762 │ NtGdiRemoveMergeFont │ 761 │ 0x2f9 │ -│ 763 │ NtGdiResetDC │ 762 │ 0x2fa │ -│ 764 │ NtGdiResizePalette │ 763 │ 0x2fb │ -│ 765 │ NtGdiRoundRect │ 764 │ 0x2fc │ -│ 766 │ NtGdiSTROBJ_bEnum │ 765 │ 0x2fd │ -│ 767 │ NtGdiSTROBJ_bEnumPositionsOnly │ 766 │ 0x2fe │ -│ 768 │ NtGdiSTROBJ_bGetAdvanceWidths │ 767 │ 0x2ff │ -│ 769 │ NtGdiSTROBJ_dwGetCodePage │ 768 │ 0x300 │ -│ 770 │ NtGdiSTROBJ_vEnumStart │ 769 │ 0x301 │ -│ 771 │ NtGdiScaleRgn │ 770 │ 0x302 │ -│ 772 │ NtGdiScaleValues │ 771 │ 0x303 │ -│ 773 │ NtGdiScaleViewportExtEx │ 772 │ 0x304 │ -│ 774 │ NtGdiScaleWindowExtEx │ 773 │ 0x305 │ -│ 775 │ NtGdiSelectBrush │ 774 │ 0x306 │ -│ 776 │ NtGdiSelectClipPath │ 775 │ 0x307 │ -│ 777 │ NtGdiSelectPen │ 776 │ 0x308 │ -│ 778 │ NtGdiSetBitmapAttributes │ 777 │ 0x309 │ -│ 779 │ NtGdiSetBrushAttributes │ 778 │ 0x30a │ -│ 780 │ NtGdiSetColorAdjustment │ 779 │ 0x30b │ -│ 781 │ NtGdiSetColorSpace │ 780 │ 0x30c │ -│ 782 │ NtGdiSetFontXform │ 781 │ 0x30d │ -│ 783 │ NtGdiSetIcmMode │ 782 │ 0x30e │ -│ 784 │ NtGdiSetLinkedUFIs │ 783 │ 0x30f │ -│ 785 │ NtGdiSetMagicColors │ 784 │ 0x310 │ -│ 786 │ NtGdiSetOPMSigningKeyAndSequenceNumbers │ 785 │ 0x311 │ -│ 787 │ NtGdiSetPUMPDOBJ │ 786 │ 0x312 │ -│ 788 │ NtGdiSetPixelFormat │ 787 │ 0x313 │ -│ 789 │ NtGdiSetRectRgn │ 788 │ 0x314 │ -│ 790 │ NtGdiSetSizeDevice │ 789 │ 0x315 │ -│ 791 │ NtGdiSetSystemPaletteUse │ 790 │ 0x316 │ -│ 792 │ NtGdiSetTextJustification │ 791 │ 0x317 │ -│ 793 │ NtGdiSetUMPDSandboxState │ 792 │ 0x318 │ -│ 794 │ NtGdiStartDoc │ 793 │ 0x319 │ -│ 795 │ NtGdiStartPage │ 794 │ 0x31a │ -│ 796 │ NtGdiStrokeAndFillPath │ 795 │ 0x31b │ -│ 797 │ NtGdiStrokePath │ 796 │ 0x31c │ -│ 798 │ NtGdiSwapBuffers │ 797 │ 0x31d │ -│ 799 │ NtGdiTransparentBlt │ 798 │ 0x31e │ -│ 800 │ NtGdiUMPDEngFreeUserMem │ 799 │ 0x31f │ -│ 801 │ NtGdiUnloadPrinterDriver │ 800 │ 0x320 │ -│ 802 │ NtGdiUnmapMemFont │ 801 │ 0x321 │ -│ 803 │ NtGdiUpdateColors │ 802 │ 0x322 │ -│ 804 │ NtGdiUpdateTransform │ 803 │ 0x323 │ -│ 805 │ NtGdiWaitForTextReady │ 804 │ 0x324 │ -│ 806 │ NtGdiWidenPath │ 805 │ 0x325 │ -│ 807 │ NtGdiXFORMOBJ_bApplyXform │ 806 │ 0x326 │ -│ 808 │ NtGdiXFORMOBJ_iGetXform │ 807 │ 0x327 │ -│ 809 │ NtGdiXLATEOBJ_cGetPalette │ 808 │ 0x328 │ -│ 810 │ NtGdiXLATEOBJ_hGetColorTransform │ 809 │ 0x329 │ -│ 811 │ NtGdiXLATEOBJ_iXlate │ 810 │ 0x32a │ -│ 812 │ NtUserGetOwnerTransformedMonitorRect │ 811 │ 0x32b │ -│ 813 │ NtHWCursorUpdatePointer │ 812 │ 0x32c │ -│ 814 │ NtInputSpaceRegionFromPoint │ 813 │ 0x32d │ -│ 815 │ NtIsOneCoreTransformMode │ 814 │ 0x32e │ -│ 816 │ NtKSTInitialize │ 815 │ 0x32f │ -│ 817 │ NtKSTWait │ 816 │ 0x330 │ -│ 818 │ NtMITAccessibilityTimerNotification │ 817 │ 0x331 │ -│ 819 │ NtMITActivateInputProcessing │ 818 │ 0x332 │ -│ 820 │ NtMITConfigureVirtualTouchpad │ 819 │ 0x333 │ -│ 821 │ NtMITCoreMsgKOpenConnectionTo │ 820 │ 0x334 │ -│ 822 │ NtMITDeactivateInputProcessing │ 821 │ 0x335 │ -│ 823 │ NtMITDisableMouseIntercept │ 822 │ 0x336 │ -│ 824 │ NtMITDispatchCompletion │ 823 │ 0x337 │ -│ 825 │ NtMITEnableMouseIntercept │ 824 │ 0x338 │ -│ 826 │ NtMITGetCursorUpdateHandle │ 825 │ 0x339 │ -│ 827 │ NtMITInitMinuserThread │ 826 │ 0x33a │ -│ 828 │ NtMITMinuserSetInputTransformOffset │ 827 │ 0x33b │ -│ 829 │ NtMITMinuserWindowDestroyed │ 828 │ 0x33c │ -│ 830 │ NtMITPostMouseInputMessage │ 829 │ 0x33d │ -│ 831 │ NtMITPostThreadEventMessage │ 830 │ 0x33e │ -│ 832 │ NtMITPostWindowEventMessage │ 831 │ 0x33f │ -│ 833 │ NtMITPrepareReceiveInputMessage │ 832 │ 0x340 │ -│ 834 │ NtMITPrepareSendInputMessage │ 833 │ 0x341 │ -│ 835 │ NtMITProcessDelegateCapturedPointers │ 834 │ 0x342 │ -│ 836 │ NtMITSetInputCallbacks │ 835 │ 0x343 │ -│ 837 │ NtMITSetInputDelegationMode │ 836 │ 0x344 │ -│ 838 │ NtMITSetInputObservationState │ 837 │ 0x345 │ -│ 839 │ NtMITSetKeyboardInputRoutingPolicy │ 838 │ 0x346 │ -│ 840 │ NtMITSetKeyboardOverriderState │ 839 │ 0x347 │ -│ 841 │ NtMITSetLastInputRecipient │ 840 │ 0x348 │ -│ 842 │ NtMITSynthesizeKeyboardInput │ 841 │ 0x349 │ -│ 843 │ NtMITSynthesizeMouseInput │ 842 │ 0x34a │ -│ 844 │ NtMITSynthesizeTouchInput │ 843 │ 0x34b │ -│ 845 │ NtMITUninitMinuserThread │ 844 │ 0x34c │ -│ 846 │ NtMITUpdateInputGlobals │ 845 │ 0x34d │ -│ 847 │ NtMapVisualRelativePoints │ 846 │ 0x34e │ -│ 848 │ NtMinGetInputTransform │ 847 │ 0x34f │ -│ 849 │ NtMinInteropCoreMessagingWithInput │ 848 │ 0x350 │ -│ 850 │ NtMinQPeekForInput │ 849 │ 0x351 │ -│ 851 │ NtMinQSuspendInputProcessing │ 850 │ 0x352 │ -│ 852 │ NtMinQUpdateWakeMask │ 851 │ 0x353 │ -│ 853 │ NtModerncoreBeginLayoutUpdate │ 852 │ 0x354 │ -│ 854 │ NtModerncoreCreateDCompositionHwndTarget │ 853 │ 0x355 │ -│ 855 │ NtModerncoreCreateGDIHwndTarget │ 854 │ 0x356 │ -│ 856 │ NtModerncoreDestroyDCompositionHwndTarget │ 855 │ 0x357 │ -│ 857 │ NtModerncoreDestroyGDIHwndTarget │ 856 │ 0x358 │ -│ 858 │ NtModerncoreEnableResizeLayoutSynchronization │ 857 │ 0x359 │ -│ 859 │ NtModerncoreGetNavigationWindowVisual │ 858 │ 0x35a │ -│ 860 │ NtModerncoreGetResizeDCompositionSynchronizationObject │ 859 │ 0x35b │ -│ 861 │ NtModerncoreGetWindowContentVisual │ 860 │ 0x35c │ -│ 862 │ NtModerncoreIdleTimerThread │ 861 │ 0x35d │ -│ 863 │ NtModerncoreIsResizeLayoutSynchronizationEnabled │ 862 │ 0x35e │ -│ 864 │ NtModerncoreProcessConnect │ 863 │ 0x35f │ -│ 865 │ NtModerncoreRegisterEnhancedNavigationWindowHandle │ 864 │ 0x360 │ -│ 866 │ NtModerncoreRegisterNavigationWindowHandle │ 865 │ 0x361 │ -│ 867 │ NtModerncoreSetNavigationServiceSid │ 866 │ 0x362 │ -│ 868 │ NtModerncoreUnregisterNavigationWindowHandle │ 867 │ 0x363 │ -│ 869 │ NtNotifyPresentToCompositionSurface │ 868 │ 0x364 │ -│ 870 │ NtOpenCompositionSurfaceDirtyRegion │ 869 │ 0x365 │ -│ 871 │ NtOpenCompositionSurfaceRealizationInfo │ 870 │ 0x366 │ -│ 872 │ NtOpenCompositionSurfaceSectionInfo │ 871 │ 0x367 │ -│ 873 │ NtQueryCompositionInputIsImplicit │ 872 │ 0x368 │ -│ 874 │ NtQueryCompositionInputQueueAndTransform │ 873 │ 0x369 │ -│ 875 │ NtQueryCompositionInputSink │ 874 │ 0x36a │ -│ 876 │ NtQueryCompositionInputSinkLuid │ 875 │ 0x36b │ -│ 877 │ NtQueryCompositionInputSinkViewId │ 876 │ 0x36c │ -│ 878 │ NtQueryCompositionSurfaceBinding │ 877 │ 0x36d │ -│ 879 │ NtQueryCompositionSurfaceFrameRate │ 878 │ 0x36e │ -│ 880 │ NtQueryCompositionSurfaceHDRMetaData │ 879 │ 0x36f │ -│ 881 │ NtQueryCompositionSurfaceRenderingRealization │ 880 │ 0x370 │ -│ 882 │ NtQueryCompositionSurfaceStatistics │ 881 │ 0x371 │ -│ 883 │ NtRIMAddInputObserver │ 882 │ 0x372 │ -│ 884 │ NtRIMAreSiblingDevices │ 883 │ 0x373 │ -│ 885 │ NtRIMDeviceIoControl │ 884 │ 0x374 │ -│ 886 │ NtRIMEnableMonitorMappingForDevice │ 885 │ 0x375 │ -│ 887 │ NtRIMFreeInputBuffer │ 886 │ 0x376 │ -│ 888 │ NtRIMGetDevicePreparsedData │ 887 │ 0x377 │ -│ 889 │ NtRIMGetDevicePreparsedDataLockfree │ 888 │ 0x378 │ -│ 890 │ NtRIMGetDeviceProperties │ 889 │ 0x379 │ -│ 891 │ NtRIMGetDevicePropertiesLockfree │ 890 │ 0x37a │ -│ 892 │ NtRIMGetPhysicalDeviceRect │ 891 │ 0x37b │ -│ 893 │ NtRIMGetSourceProcessId │ 892 │ 0x37c │ -│ 894 │ NtRIMObserveNextInput │ 893 │ 0x37d │ -│ 895 │ NtRIMOnAsyncPnpWorkNotification │ 894 │ 0x37e │ -│ 896 │ NtRIMOnPnpNotification │ 895 │ 0x37f │ -│ 897 │ NtRIMOnTimerNotification │ 896 │ 0x380 │ -│ 898 │ NtRIMQueryDevicePath │ 897 │ 0x381 │ -│ 899 │ NtRIMReadInput │ 898 │ 0x382 │ -│ 900 │ NtRIMRegisterForInputEx │ 899 │ 0x383 │ -│ 901 │ NtRIMRemoveInputObserver │ 900 │ 0x384 │ -│ 902 │ NtRIMSetDeadzoneRotation │ 901 │ 0x385 │ -│ 903 │ NtRIMSetExtendedDeviceProperty │ 902 │ 0x386 │ -│ 904 │ NtRIMSetTestModeStatus │ 903 │ 0x387 │ -│ 905 │ NtRIMUnregisterForInput │ 904 │ 0x388 │ -│ 906 │ NtRIMUpdateInputObserverRegistration │ 905 │ 0x389 │ -│ 907 │ NtSetCompositionSurfaceAnalogExclusive │ 906 │ 0x38a │ -│ 908 │ NtSetCompositionSurfaceBufferUsage │ 907 │ 0x38b │ -│ 909 │ NtSetCompositionSurfaceDirectFlipState │ 908 │ 0x38c │ -│ 910 │ NtSetCompositionSurfaceIndependentFlipInfo │ 909 │ 0x38d │ -│ 911 │ NtSetCompositionSurfaceStatistics │ 910 │ 0x38e │ -│ 912 │ NtSetCursorInputSpace │ 911 │ 0x38f │ -│ 913 │ NtSetPointerDeviceInputSpace │ 912 │ 0x390 │ -│ 914 │ NtSetShellCursorState │ 913 │ 0x391 │ -│ 915 │ NtTokenManagerConfirmOutstandingAnalogToken │ 914 │ 0x392 │ -│ 916 │ NtTokenManagerCreateCompositionTokenHandle │ 915 │ 0x393 │ -│ 917 │ NtTokenManagerCreateFlipObjectReturnTokenHandle │ 916 │ 0x394 │ -│ 918 │ NtTokenManagerCreateFlipObjectTokenHandle │ 917 │ 0x395 │ -│ 919 │ NtTokenManagerGetAnalogExclusiveSurfaceUpdates │ 918 │ 0x396 │ -│ 920 │ NtTokenManagerGetAnalogExclusiveTokenEvent │ 919 │ 0x397 │ -│ 921 │ NtTokenManagerOpenSectionAndEvents │ 920 │ 0x398 │ -│ 922 │ NtTokenManagerThread │ 921 │ 0x399 │ -│ 923 │ NtUnBindCompositionSurface │ 922 │ 0x39a │ -│ 924 │ NtUpdateInputSinkTransforms │ 923 │ 0x39b │ -│ 925 │ NtUserAcquireIAMKey │ 924 │ 0x39c │ -│ 926 │ NtUserAcquireInteractiveControlBackgroundAccess │ 925 │ 0x39d │ -│ 927 │ NtUserAddClipboardFormatListener │ 926 │ 0x39e │ -│ 928 │ NtUserAddVisualIdentifier │ 927 │ 0x39f │ -│ 929 │ NtUserAllowSetForegroundWindow │ 928 │ 0x3a0 │ -│ 930 │ NtUserArrangeIconicWindows │ 929 │ 0x3a1 │ -│ 931 │ NtUserAssociateInputContext │ 930 │ 0x3a2 │ -│ 932 │ NtUserAutoPromoteMouseInPointer │ 931 │ 0x3a3 │ -│ 933 │ NtUserAutoRotateScreen │ 932 │ 0x3a4 │ -│ 934 │ NtUserBeginDeferWindowPos │ 933 │ 0x3a5 │ -│ 935 │ NtUserBeginLayoutUpdate │ 934 │ 0x3a6 │ -│ 936 │ NtUserBlockInput │ 935 │ 0x3a7 │ -│ 937 │ NtUserBroadcastImeShowStatusChange │ 936 │ 0x3a8 │ -│ 938 │ NtUserBroadcastThemeChangeEvent │ 937 │ 0x3a9 │ -│ 939 │ NtUserBuildHimcList │ 938 │ 0x3aa │ -│ 940 │ NtUserBuildPropList │ 939 │ 0x3ab │ -│ 941 │ NtUserCalculatePopupWindowPosition │ 940 │ 0x3ac │ -│ 942 │ NtUserCanBrokerForceForeground │ 941 │ 0x3ad │ -│ 943 │ NtUserCancelQueueEventCompletionPacket │ 942 │ 0x3ae │ -│ 944 │ NtUserChangeDisplaySettings │ 943 │ 0x3af │ -│ 945 │ NtUserChangeWindowMessageFilter │ 944 │ 0x3b0 │ -│ 946 │ NtUserChangeWindowMessageFilterEx │ 945 │ 0x3b1 │ -│ 947 │ NtUserCheckAccessForIntegrityLevel │ 946 │ 0x3b2 │ -│ 948 │ NtUserCheckImeShowStatusInThread │ 947 │ 0x3b3 │ -│ 949 │ NtUserCheckProcessForClipboardAccess │ 948 │ 0x3b4 │ -│ 950 │ NtUserCheckProcessSession │ 949 │ 0x3b5 │ -│ 951 │ NtUserCheckWindowThreadDesktop │ 950 │ 0x3b6 │ -│ 952 │ NtUserChildWindowFromPointEx │ 951 │ 0x3b7 │ -│ 953 │ NtUserCitSetInfo │ 952 │ 0x3b8 │ -│ 954 │ NtUserClearForeground │ 953 │ 0x3b9 │ -│ 955 │ NtUserClearRunWakeBit │ 954 │ 0x3ba │ -│ 956 │ NtUserClearWakeMask │ 955 │ 0x3bb │ -│ 957 │ NtUserClearWindowState │ 956 │ 0x3bc │ -│ 958 │ NtUserClipCursor │ 957 │ 0x3bd │ -│ 959 │ NtUserCompositionInputSinkLuidFromPoint │ 958 │ 0x3be │ -│ 960 │ NtUserCompositionInputSinkViewInstanceIdFromPoint │ 959 │ 0x3bf │ -│ 961 │ NtUserConfigureActivationObject │ 960 │ 0x3c0 │ -│ 962 │ NtUserConfirmResizeCommit │ 961 │ 0x3c1 │ -│ 963 │ NtUserCreateActivationObject │ 962 │ 0x3c2 │ -│ 964 │ NtUserCreateBaseWindow │ 963 │ 0x3c3 │ -│ 965 │ NtUserCreateDCompositionHwndTarget │ 964 │ 0x3c4 │ -│ 966 │ NtUserCreateDesktopEx │ 965 │ 0x3c5 │ -│ 967 │ NtUserCreateEmptyCursorObject │ 966 │ 0x3c6 │ -│ 968 │ NtUserCreateInputContext │ 967 │ 0x3c7 │ -│ 969 │ NtUserCreateMenu │ 968 │ 0x3c8 │ -│ 970 │ NtUserCreatePalmRejectionDelayZone │ 969 │ 0x3c9 │ -│ 971 │ NtUserCreatePopupMenu │ 970 │ 0x3ca │ -│ 972 │ NtUserCreateSystemThreads │ 971 │ 0x3cb │ -│ 973 │ NtUserCreateWindowStation │ 972 │ 0x3cc │ -│ 974 │ NtUserCsDdeUninitialize │ 973 │ 0x3cd │ -│ 975 │ NtUserCtxDisplayIOCtl │ 974 │ 0x3ce │ -│ 976 │ NtUserDWP_GetEnabledPopupOffset │ 975 │ 0x3cf │ -│ 977 │ NtUserDeferWindowDpiChanges │ 976 │ 0x3d0 │ -│ 978 │ NtUserDeferWindowPosAndBand │ 977 │ 0x3d1 │ -│ 979 │ NtUserDeferredDesktopRotation │ 978 │ 0x3d2 │ -│ 980 │ NtUserDelegateCapturePointers │ 979 │ 0x3d3 │ -│ 981 │ NtUserDelegateInput │ 980 │ 0x3d4 │ -│ 982 │ NtUserDeregisterShellHookWindow │ 981 │ 0x3d5 │ -│ 983 │ NtUserDestroyActivationObject │ 982 │ 0x3d6 │ -│ 984 │ NtUserDestroyCaret │ 983 │ 0x3d7 │ -│ 985 │ NtUserDestroyDCompositionHwndTarget │ 984 │ 0x3d8 │ -│ 986 │ NtUserDestroyInputContext │ 985 │ 0x3d9 │ -│ 987 │ NtUserDestroyPalmRejectionDelayZone │ 986 │ 0x3da │ -│ 988 │ NtUserDisableImmersiveOwner │ 987 │ 0x3db │ -│ 989 │ NtUserDisableProcessWindowFiltering │ 988 │ 0x3dc │ -│ 990 │ NtUserDisableProcessWindowsGhosting │ 989 │ 0x3dd │ -│ 991 │ NtUserDisableThreadIme │ 990 │ 0x3de │ -│ 992 │ NtUserDiscardPointerFrameMessages │ 991 │ 0x3df │ -│ 993 │ NtUserDisplayConfigGetDeviceInfo │ 992 │ 0x3e0 │ -│ 994 │ NtUserDisplayConfigSetDeviceInfo │ 993 │ 0x3e1 │ -│ 995 │ NtUserDoInitMessagePumpHook │ 994 │ 0x3e2 │ -│ 996 │ NtUserDoSoundConnect │ 995 │ 0x3e3 │ -│ 997 │ NtUserDoSoundDisconnect │ 996 │ 0x3e4 │ -│ 998 │ NtUserDoUninitMessagePumpHook │ 997 │ 0x3e5 │ -│ 999 │ NtUserDownlevelTouchpad │ 998 │ 0x3e6 │ -│ 1000 │ NtUserDragDetect │ 999 │ 0x3e7 │ -│ 1001 │ NtUserDragObject │ 1000 │ 0x3e8 │ -│ 1002 │ NtUserDrainThreadCoreMessagingCompletions │ 1001 │ 0x3e9 │ -│ 1003 │ NtUserDrawAnimatedRects │ 1002 │ 0x3ea │ -│ 1004 │ NtUserDrawCaption │ 1003 │ 0x3eb │ -│ 1005 │ NtUserDrawCaptionTemp │ 1004 │ 0x3ec │ -│ 1006 │ NtUserDrawMenuBar │ 1005 │ 0x3ed │ -│ 1007 │ NtUserDrawMenuBarTemp │ 1006 │ 0x3ee │ -│ 1008 │ NtUserDwmGetRemoteSessionOcclusionEvent │ 1007 │ 0x3ef │ -│ 1009 │ NtUserDwmGetRemoteSessionOcclusionState │ 1008 │ 0x3f0 │ -│ 1010 │ NtUserDwmKernelShutdown │ 1009 │ 0x3f1 │ -│ 1011 │ NtUserDwmKernelStartup │ 1010 │ 0x3f2 │ -│ 1012 │ NtUserDwmLockScreenUpdates │ 1011 │ 0x3f3 │ -│ 1013 │ NtUserDwmValidateWindow │ 1012 │ 0x3f4 │ -│ 1014 │ NtUserEnableChildWindowDpiMessage │ 1013 │ 0x3f5 │ -│ 1015 │ NtUserEnableIAMAccess │ 1014 │ 0x3f6 │ -│ 1016 │ NtUserEnableModernAppWindowKeyboardIntercept │ 1015 │ 0x3f7 │ -│ 1017 │ NtUserEnableMouseInPointer │ 1016 │ 0x3f8 │ -│ 1018 │ NtUserEnableMouseInPointerForThread │ 1017 │ 0x3f9 │ -│ 1019 │ NtUserEnableMouseInPointerForWindow │ 1018 │ 0x3fa │ -│ 1020 │ NtUserEnableMouseInputForCursorSuppression │ 1019 │ 0x3fb │ -│ 1021 │ NtUserEnableNonClientDpiScaling │ 1020 │ 0x3fc │ -│ 1022 │ NtUserEnableResizeLayoutSynchronization │ 1021 │ 0x3fd │ -│ 1023 │ NtUserEnableSessionForMMCSS │ 1022 │ 0x3fe │ -│ 1024 │ NtUserEnableShellWindowManagementBehavior │ 1023 │ 0x3ff │ -│ 1025 │ NtUserEnableSoftwareCursorForScreenCapture │ 1024 │ 0x400 │ -│ 1026 │ NtUserEnableTouchPad │ 1025 │ 0x401 │ -│ 1027 │ NtUserEnableWindow │ 1026 │ 0x402 │ -│ 1028 │ NtUserEnableWindowGDIScaledDpiMessage │ 1027 │ 0x403 │ -│ 1029 │ NtUserEnableWindowResizeOptimization │ 1028 │ 0x404 │ -│ 1030 │ NtUserEndMenu │ 1029 │ 0x405 │ -│ 1031 │ NtUserEnsureDpiDepSysMetCacheForPlateau │ 1030 │ 0x406 │ -│ 1032 │ NtUserEnumClipboardFormats │ 1031 │ 0x407 │ -│ 1033 │ NtUserEvent │ 1032 │ 0x408 │ -│ 1034 │ NtUserFlashWindowEx │ 1033 │ 0x409 │ -│ 1035 │ NtUserForceEnableNumpadTranslation │ 1034 │ 0x40a │ -│ 1036 │ NtUserForceWindowToDpiForTest │ 1035 │ 0x40b │ -│ 1037 │ NtUserFrostCrashedWindow │ 1036 │ 0x40c │ -│ 1038 │ NtUserSetSensorPresence │ 1037 │ 0x40d │ -│ 1039 │ NtUserFunctionalizeDisplayConfig │ 1038 │ 0x40e │ -│ 1040 │ NtUserGetActiveProcessesDpis │ 1039 │ 0x40f │ -│ 1041 │ NtUserGetAppImeLevel │ 1040 │ 0x410 │ -│ 1042 │ NtUserGetAutoRotationState │ 1041 │ 0x411 │ -│ 1043 │ NtUserGetCIMSSM │ 1042 │ 0x412 │ -│ 1044 │ NtUserGetCaretPos │ 1043 │ 0x413 │ -│ 1045 │ NtUserGetClassIcoCur │ 1044 │ 0x414 │ -│ 1046 │ NtUserGetClipCursor │ 1045 │ 0x415 │ -│ 1047 │ NtUserGetClipboardAccessToken │ 1046 │ 0x416 │ -│ 1048 │ NtUserGetClipboardMetadata │ 1047 │ 0x417 │ -│ 1049 │ NtUserGetClipboardViewer │ 1048 │ 0x418 │ -│ 1050 │ NtUserGetComboBoxInfo │ 1049 │ 0x419 │ -│ 1051 │ NtUserGetCurrentDpiInfoForWindow │ 1050 │ 0x41a │ -│ 1052 │ NtUserGetCurrentInputMessageSource │ 1051 │ 0x41b │ -│ 1053 │ NtUserGetCursor │ 1052 │ 0x41c │ -│ 1054 │ NtUserGetCursorInfo │ 1053 │ 0x41d │ -│ 1055 │ NtUserGetCursorPos │ 1054 │ 0x41e │ -│ 1056 │ NtUserGetDCompositionHwndBitmap │ 1055 │ 0x41f │ -│ 1057 │ NtUserGetDManipHookInitFunction │ 1056 │ 0x420 │ -│ 1058 │ NtUserGetDesktopID │ 1057 │ 0x421 │ -│ 1059 │ NtUserGetDesktopVisualTransform │ 1058 │ 0x422 │ -│ 1060 │ NtUserGetDeviceChangeInfo │ 1059 │ 0x423 │ -│ 1061 │ NtUserGetDisplayAutoRotationPreferences │ 1060 │ 0x424 │ -│ 1062 │ NtUserGetDisplayAutoRotationPreferencesByProcessId │ 1061 │ 0x425 │ -│ 1063 │ NtUserGetDisplayConfigBufferSizes │ 1062 │ 0x426 │ -│ 1064 │ NtUserGetDpiForCurrentProcess │ 1063 │ 0x427 │ -│ 1065 │ NtUserGetDpiForMonitor │ 1064 │ 0x428 │ -│ 1066 │ NtUserGetExtendedPointerDeviceProperty │ 1065 │ 0x429 │ -│ 1067 │ NtUserGetGestureConfig │ 1066 │ 0x42a │ -│ 1068 │ NtUserGetGestureExtArgs │ 1067 │ 0x42b │ -│ 1069 │ NtUserGetGestureInfo │ 1068 │ 0x42c │ -│ 1070 │ NtUserGetGuiResources │ 1069 │ 0x42d │ -│ 1071 │ NtUserGetHDevName │ 1070 │ 0x42e │ -│ 1072 │ NtUserGetHimetricScaleFactorFromPixelLocation │ 1071 │ 0x42f │ -│ 1073 │ NtUserGetIMEShowStatus │ 1072 │ 0x430 │ -│ 1074 │ NtUserGetImeHotKey │ 1073 │ 0x431 │ -│ 1075 │ NtUserGetImeInfoEx │ 1074 │ 0x432 │ -│ 1076 │ NtUserGetInputContainerId │ 1075 │ 0x433 │ -│ 1077 │ NtUserGetInputDesktop │ 1076 │ 0x434 │ -│ 1078 │ NtUserGetInputEvent │ 1077 │ 0x435 │ -│ 1079 │ NtUserGetInputLocaleInfo │ 1078 │ 0x436 │ -│ 1080 │ NtUserGetInteractiveControlDeviceInfo │ 1079 │ 0x437 │ -│ 1081 │ NtUserGetInteractiveControlInfo │ 1080 │ 0x438 │ -│ 1082 │ NtUserGetInteractiveCtrlSupportedWaveforms │ 1081 │ 0x439 │ -│ 1083 │ NtUserGetInternalWindowPos │ 1082 │ 0x43a │ -│ 1084 │ NtUserGetKeyNameText │ 1083 │ 0x43b │ -│ 1085 │ NtUserGetKeyboardLayout │ 1084 │ 0x43c │ -│ 1086 │ NtUserGetKeyboardLayoutName │ 1085 │ 0x43d │ -│ 1087 │ NtUserGetKeyboardType │ 1086 │ 0x43e │ -│ 1088 │ NtUserGetLayeredWindowAttributes │ 1087 │ 0x43f │ -│ 1089 │ NtUserGetListBoxInfo │ 1088 │ 0x440 │ -│ 1090 │ NtUserGetMenuIndex │ 1089 │ 0x441 │ -│ 1091 │ NtUserGetMenuItemRect │ 1090 │ 0x442 │ -│ 1092 │ NtUserGetMessagePos │ 1091 │ 0x443 │ -│ 1093 │ NtUserGetMinuserIdForBaseWindow │ 1092 │ 0x444 │ -│ 1094 │ NtUserGetModernAppWindow │ 1093 │ 0x445 │ -│ 1095 │ NtUserGetMouseMovePointsEx │ 1094 │ 0x446 │ -│ 1096 │ NtUserGetOemBitmapSize │ 1095 │ 0x447 │ -│ 1097 │ NtUserGetPhysicalDeviceRect │ 1096 │ 0x448 │ -│ 1098 │ NtUserGetPointerCursorId │ 1097 │ 0x449 │ -│ 1099 │ NtUserGetPointerDevice │ 1098 │ 0x44a │ -│ 1100 │ NtUserGetPointerDeviceCursors │ 1099 │ 0x44b │ -│ 1101 │ NtUserGetPointerDeviceInputSpace │ 1100 │ 0x44c │ -│ 1102 │ NtUserGetPointerDeviceOrientation │ 1101 │ 0x44d │ -│ 1103 │ NtUserGetPointerDeviceProperties │ 1102 │ 0x44e │ -│ 1104 │ NtUserGetPointerDeviceRects │ 1103 │ 0x44f │ -│ 1105 │ NtUserGetPointerDevices │ 1104 │ 0x450 │ -│ 1106 │ NtUserGetPointerFrameTimes │ 1105 │ 0x451 │ -│ 1107 │ NtUserGetPointerInfoList │ 1106 │ 0x452 │ -│ 1108 │ NtUserGetPointerInputTransform │ 1107 │ 0x453 │ -│ 1109 │ NtUserGetPointerProprietaryId │ 1108 │ 0x454 │ -│ 1110 │ NtUserGetPointerType │ 1109 │ 0x455 │ -│ 1111 │ NtUserGetPrecisionTouchPadConfiguration │ 1110 │ 0x456 │ -│ 1112 │ NtUserGetPriorityClipboardFormat │ 1111 │ 0x457 │ -│ 1113 │ NtUserGetProcessDefaultLayout │ 1112 │ 0x458 │ -│ 1114 │ NtUserGetProcessDpiAwarenessContext │ 1113 │ 0x459 │ -│ 1115 │ NtUserGetProcessUIContextInformation │ 1114 │ 0x45a │ -│ 1116 │ NtUserGetQueueIocp │ 1115 │ 0x45b │ -│ 1117 │ NtUserGetQueueStatus │ 1116 │ 0x45c │ -│ 1118 │ NtUserGetQueueStatusReadonly │ 1117 │ 0x45d │ -│ 1119 │ NtUserGetRawInputBuffer │ 1118 │ 0x45e │ -│ 1120 │ NtUserGetRawInputData │ 1119 │ 0x45f │ -│ 1121 │ NtUserGetRawInputDeviceInfo │ 1120 │ 0x460 │ -│ 1122 │ NtUserGetRawInputDeviceList │ 1121 │ 0x461 │ -│ 1123 │ NtUserGetRawPointerDeviceData │ 1122 │ 0x462 │ -│ 1124 │ NtUserGetRegisteredRawInputDevices │ 1123 │ 0x463 │ -│ 1125 │ NtUserGetRequiredCursorSizes │ 1124 │ 0x464 │ -│ 1126 │ NtUserGetResizeDCompositionSynchronizationObject │ 1125 │ 0x465 │ -│ 1127 │ NtUserGetSendMessageReceiver │ 1126 │ 0x466 │ -│ 1128 │ NtUserGetSharedWindowData │ 1127 │ 0x467 │ -│ 1129 │ NtUserGetSysMenuOffset │ 1128 │ 0x468 │ -│ 1130 │ NtUserGetSystemContentRects │ 1129 │ 0x469 │ -│ 1131 │ NtUserGetSystemDpiForProcess │ 1130 │ 0x46a │ -│ 1132 │ NtUserGetTopLevelWindow │ 1131 │ 0x46b │ -│ 1133 │ NtUserGetTouchInputInfo │ 1132 │ 0x46c │ -│ 1134 │ NtUserGetTouchValidationStatus │ 1133 │ 0x46d │ -│ 1135 │ NtUserGetUniformSpaceMapping │ 1134 │ 0x46e │ -│ 1136 │ NtUserGetUnpredictedMessagePos │ 1135 │ 0x46f │ -│ 1137 │ NtUserGetUpdatedClipboardFormats │ 1136 │ 0x470 │ -│ 1138 │ NtUserGetWOWClass │ 1137 │ 0x471 │ -│ 1139 │ NtUserGetWinStationInfo │ 1138 │ 0x472 │ -│ 1140 │ NtUserGetWindowBand │ 1139 │ 0x473 │ -│ 1141 │ NtUserGetWindowCompositionAttribute │ 1140 │ 0x474 │ -│ 1142 │ NtUserGetWindowCompositionInfo │ 1141 │ 0x475 │ -│ 1143 │ NtUserGetWindowContextHelpId │ 1142 │ 0x476 │ -│ 1144 │ NtUserGetWindowDisplayAffinity │ 1143 │ 0x477 │ -│ 1145 │ NtUserGetWindowFeedbackSetting │ 1144 │ 0x478 │ -│ 1146 │ NtUserGetWindowMinimizeRect │ 1145 │ 0x479 │ -│ 1147 │ NtUserGetWindowProcessHandle │ 1146 │ 0x47a │ -│ 1148 │ NtUserGetWindowRgnEx │ 1147 │ 0x47b │ -│ 1149 │ NtUserGetWindowThreadProcessId │ 1148 │ 0x47c │ -│ 1150 │ NtUserGetWindowTrackInfoAsync │ 1149 │ 0x47d │ -│ 1151 │ NtUserGhostWindowFromHungWindow │ 1150 │ 0x47e │ -│ 1152 │ NtUserHandleDelegatedInput │ 1151 │ 0x47f │ -│ 1153 │ NtUserHandleSystemThreadCreationFailure │ 1152 │ 0x480 │ -│ 1154 │ NtUserHardErrorControl │ 1153 │ 0x481 │ -│ 1155 │ NtUserHideCursorNoCapture │ 1154 │ 0x482 │ -│ 1156 │ NtUserHidePointerContactVisualization │ 1155 │ 0x483 │ -│ 1157 │ NtUserHiliteMenuItem │ 1156 │ 0x484 │ -│ 1158 │ NtUserHungWindowFromGhostWindow │ 1157 │ 0x485 │ -│ 1159 │ NtUserHwndQueryRedirectionInfo │ 1158 │ 0x486 │ -│ 1160 │ NtUserHwndSetRedirectionInfo │ 1159 │ 0x487 │ -│ 1161 │ NtUserImpersonateDdeClientWindow │ 1160 │ 0x488 │ -│ 1162 │ NtUserInheritWindowMonitor │ 1161 │ 0x489 │ -│ 1163 │ NtUserInitAnsiOem │ 1162 │ 0x48a │ -│ 1164 │ NtUserInitRunThread │ 1163 │ 0x48b │ -│ 1165 │ NtUserInitThreadCoreMessagingIocp │ 1164 │ 0x48c │ -│ 1166 │ NtUserInitialize │ 1165 │ 0x48d │ -│ 1167 │ NtUserInitializeClientPfnArrays │ 1166 │ 0x48e │ -│ 1168 │ NtUserInitializeGenericHidInjection │ 1167 │ 0x48f │ -│ 1169 │ NtUserInitializeInputDeviceInjection │ 1168 │ 0x490 │ -│ 1170 │ NtUserInitializePointerDeviceInjection │ 1169 │ 0x491 │ -│ 1171 │ NtUserInitializePointerDeviceInjectionEx │ 1170 │ 0x492 │ -│ 1172 │ NtUserInitializeTouchInjection │ 1171 │ 0x493 │ -│ 1173 │ NtUserInjectDeviceInput │ 1172 │ 0x494 │ -│ 1174 │ NtUserInjectGenericHidInput │ 1173 │ 0x495 │ -│ 1175 │ NtUserInjectGesture │ 1174 │ 0x496 │ -│ 1176 │ NtUserInjectKeyboardInput │ 1175 │ 0x497 │ -│ 1177 │ NtUserInjectMouseInput │ 1176 │ 0x498 │ -│ 1178 │ NtUserInjectPointerInput │ 1177 │ 0x499 │ -│ 1179 │ NtUserInjectTouchInput │ 1178 │ 0x49a │ -│ 1180 │ NtUserInteractiveControlQueryUsage │ 1179 │ 0x49b │ -│ 1181 │ NtUserInternalGetWindowIcon │ 1180 │ 0x49c │ -│ 1182 │ NtUserInternalToUnicode │ 1181 │ 0x49d │ -│ 1183 │ NtUserIsChildWindowDpiMessageEnabled │ 1182 │ 0x49e │ -│ 1184 │ NtUserIsMouseInPointerEnabled │ 1183 │ 0x49f │ -│ 1185 │ NtUserIsMouseInputEnabled │ 1184 │ 0x4a0 │ -│ 1186 │ NtUserIsNonClientDpiScalingEnabled │ 1185 │ 0x4a1 │ -│ 1187 │ NtUserIsResizeLayoutSynchronizationEnabled │ 1186 │ 0x4a2 │ -│ 1188 │ NtUserIsTopLevelWindow │ 1187 │ 0x4a3 │ -│ 1189 │ NtUserIsTouchWindow │ 1188 │ 0x4a4 │ -│ 1190 │ NtUserIsWindowBroadcastingDpiToChildren │ 1189 │ 0x4a5 │ -│ 1191 │ NtUserIsWindowGDIScaledDpiMessageEnabled │ 1190 │ 0x4a6 │ -│ 1192 │ NtUserKillSystemTimer │ 1191 │ 0x4a7 │ -│ 1193 │ NtUserLW_LoadFonts │ 1192 │ 0x4a8 │ -│ 1194 │ NtUserLayoutCompleted │ 1193 │ 0x4a9 │ -│ 1195 │ NtUserLinkDpiCursor │ 1194 │ 0x4aa │ -│ 1196 │ NtUserLoadCursorsAndIcons │ 1195 │ 0x4ab │ -│ 1197 │ NtUserLoadKeyboardLayoutEx │ 1196 │ 0x4ac │ -│ 1198 │ NtUserLoadUserApiHook │ 1197 │ 0x4ad │ -│ 1199 │ NtUserLockCursor │ 1198 │ 0x4ae │ -│ 1200 │ NtUserLockSetForegroundWindow │ 1199 │ 0x4af │ -│ 1201 │ NtUserLockWindowStation │ 1200 │ 0x4b0 │ -│ 1202 │ NtUserLockWorkStation │ 1201 │ 0x4b1 │ -│ 1203 │ NtUserLogicalToPerMonitorDPIPhysicalPoint │ 1202 │ 0x4b2 │ -│ 1204 │ NtUserLogicalToPhysicalDpiPointForWindow │ 1203 │ 0x4b3 │ -│ 1205 │ NtUserLogicalToPhysicalPoint │ 1204 │ 0x4b4 │ -│ 1206 │ NtUserMNDragLeave │ 1205 │ 0x4b5 │ -│ 1207 │ NtUserMNDragOver │ 1206 │ 0x4b6 │ -│ 1208 │ NtUserMagControl │ 1207 │ 0x4b7 │ -│ 1209 │ NtUserMagGetContextInformation │ 1208 │ 0x4b8 │ -│ 1210 │ NtUserMagSetContextInformation │ 1209 │ 0x4b9 │ -│ 1211 │ NtUserMapDesktopObject │ 1210 │ 0x4ba │ -│ 1212 │ NtUserMapPointsByVisualIdentifier │ 1211 │ 0x4bb │ -│ 1213 │ NtUserMarkWindowForRawMouse │ 1212 │ 0x4bc │ -│ 1214 │ NtUserMenuItemFromPoint │ 1213 │ 0x4bd │ -│ 1215 │ NtUserMessageBeep │ 1214 │ 0x4be │ -│ 1216 │ NtUserMinInitialize │ 1215 │ 0x4bf │ -│ 1217 │ NtUserMinMaximize │ 1216 │ 0x4c0 │ -│ 1218 │ NtUserModifyWindowTouchCapability │ 1217 │ 0x4c1 │ -│ 1219 │ NtUserMsgWaitForMultipleObjectsEx │ 1218 │ 0x4c2 │ -│ 1220 │ NtUserNavigateFocus │ 1219 │ 0x4c3 │ -│ 1221 │ NtUserNlsKbdSendIMENotification │ 1220 │ 0x4c4 │ -│ 1222 │ NtUserNotifyIMEStatus │ 1221 │ 0x4c5 │ -│ 1223 │ NtUserNotifyOverlayWindow │ 1222 │ 0x4c6 │ -│ 1224 │ NtUserOpenInputDesktop │ 1223 │ 0x4c7 │ -│ 1225 │ NtUserOpenThreadDesktop │ 1224 │ 0x4c8 │ -│ 1226 │ NtUserPaintMonitor │ 1225 │ 0x4c9 │ -│ 1227 │ NtUserPerMonitorDPIPhysicalToLogicalPoint │ 1226 │ 0x4ca │ -│ 1228 │ NtUserPhysicalToLogicalDpiPointForWindow │ 1227 │ 0x4cb │ -│ 1229 │ NtUserPhysicalToLogicalPoint │ 1228 │ 0x4cc │ -│ 1230 │ NtUserPlayEventSound │ 1229 │ 0x4cd │ -│ 1231 │ NtUserPostKeyboardInputMessage │ 1230 │ 0x4ce │ -│ 1232 │ NtUserPostQuitMessage │ 1231 │ 0x4cf │ -│ 1233 │ NtUserPrepareForLogoff │ 1232 │ 0x4d0 │ -│ 1234 │ NtUserPrintWindow │ 1233 │ 0x4d1 │ -│ 1235 │ NtUserProcessInkFeedbackCommand │ 1234 │ 0x4d2 │ -│ 1236 │ NtUserPromoteMouseInPointer │ 1235 │ 0x4d3 │ -│ 1237 │ NtUserPromotePointer │ 1236 │ 0x4d4 │ -│ 1238 │ NtUserQueryBSDRWindow │ 1237 │ 0x4d5 │ -│ 1239 │ NtUserQueryDisplayConfig │ 1238 │ 0x4d6 │ -│ 1240 │ NtUserQueryInformationThread │ 1239 │ 0x4d7 │ -│ 1241 │ NtUserQueryInputContext │ 1240 │ 0x4d8 │ -│ 1242 │ NtUserQuerySendMessage │ 1241 │ 0x4d9 │ -│ 1243 │ NtUserRealChildWindowFromPoint │ 1242 │ 0x4da │ -│ 1244 │ NtUserRealWaitMessageEx │ 1243 │ 0x4db │ -│ 1245 │ NtUserRealizePalette │ 1244 │ 0x4dc │ -│ 1246 │ NtUserReassociateQueueEventCompletionPacket │ 1245 │ 0x4dd │ -│ 1247 │ NtUserRedrawFrame │ 1246 │ 0x4de │ -│ 1248 │ NtUserRedrawFrameAndHook │ 1247 │ 0x4df │ -│ 1249 │ NtUserRedrawTitle │ 1248 │ 0x4e0 │ -│ 1250 │ NtUserRegisterBSDRWindow │ 1249 │ 0x4e1 │ -│ 1251 │ NtUserRegisterDManipHook │ 1250 │ 0x4e2 │ -│ 1252 │ NtUserRegisterEdgy │ 1251 │ 0x4e3 │ -│ 1253 │ NtUserRegisterErrorReportingDialog │ 1252 │ 0x4e4 │ -│ 1254 │ NtUserRegisterForCustomDockTargets │ 1253 │ 0x4e5 │ -│ 1255 │ NtUserRegisterForTooltipDismissNotification │ 1254 │ 0x4e6 │ -│ 1256 │ NtUserRegisterGhostWindow │ 1255 │ 0x4e7 │ -│ 1257 │ NtUserRegisterHotKey │ 1256 │ 0x4e8 │ -│ 1258 │ NtUserRegisterLPK │ 1257 │ 0x4e9 │ -│ 1259 │ NtUserRegisterLogonProcess │ 1258 │ 0x4ea │ -│ 1260 │ NtUserRegisterManipulationThread │ 1259 │ 0x4eb │ -│ 1261 │ NtUserRegisterPointerDeviceNotifications │ 1260 │ 0x4ec │ -│ 1262 │ NtUserRegisterPointerInputTarget │ 1261 │ 0x4ed │ -│ 1263 │ NtUserRegisterRawInputDevices │ 1262 │ 0x4ee │ -│ 1264 │ NtUserRegisterServicesProcess │ 1263 │ 0x4ef │ -│ 1265 │ NtUserRegisterSessionPort │ 1264 │ 0x4f0 │ -│ 1266 │ NtUserRegisterShellHookWindow │ 1265 │ 0x4f1 │ -│ 1267 │ NtUserRegisterShellPTPListener │ 1266 │ 0x4f2 │ -│ 1268 │ NtUserRegisterSiblingFrostWindow │ 1267 │ 0x4f3 │ -│ 1269 │ NtUserRegisterSystemThread │ 1268 │ 0x4f4 │ -│ 1270 │ NtUserRegisterTasklist │ 1269 │ 0x4f5 │ -│ 1271 │ NtUserRegisterTouchHitTestingWindow │ 1270 │ 0x4f6 │ -│ 1272 │ NtUserRegisterTouchPadCapable │ 1271 │ 0x4f7 │ -│ 1273 │ NtUserRegisterUserApiHook │ 1272 │ 0x4f8 │ -│ 1274 │ NtUserRegisterWindowArrangementCallout │ 1273 │ 0x4f9 │ -│ 1275 │ NtUserReleaseCapture │ 1274 │ 0x4fa │ -│ 1276 │ NtUserReleaseDC │ 1275 │ 0x4fb │ -│ 1277 │ NtUserReleaseDwmHitTestWaiters │ 1276 │ 0x4fc │ -│ 1278 │ NtUserRemoteConnect │ 1277 │ 0x4fd │ -│ 1279 │ NtUserRemoteConnectState │ 1278 │ 0x4fe │ -│ 1280 │ NtUserRemoteConsoleShadowStop │ 1279 │ 0x4ff │ -│ 1281 │ NtUserRemoteDisconnect │ 1280 │ 0x500 │ -│ 1282 │ NtUserRemoteNotify │ 1281 │ 0x501 │ -│ 1283 │ NtUserRemotePassthruDisable │ 1282 │ 0x502 │ -│ 1284 │ NtUserRemotePassthruEnable │ 1283 │ 0x503 │ -│ 1285 │ NtUserRemoteReconnect │ 1284 │ 0x504 │ -│ 1286 │ NtUserRemoteRedrawRectangle │ 1285 │ 0x505 │ -│ 1287 │ NtUserRemoteRedrawScreen │ 1286 │ 0x506 │ -│ 1288 │ NtUserRemoteShadowCleanup │ 1287 │ 0x507 │ -│ 1289 │ NtUserRemoteShadowSetup │ 1288 │ 0x508 │ -│ 1290 │ NtUserRemoteShadowStart │ 1289 │ 0x509 │ -│ 1291 │ NtUserRemoteShadowStop │ 1290 │ 0x50a │ -│ 1292 │ NtUserRemoteStopScreenUpdates │ 1291 │ 0x50b │ -│ 1293 │ NtUserRemoteThinwireStats │ 1292 │ 0x50c │ -│ 1294 │ NtUserRemoveClipboardFormatListener │ 1293 │ 0x50d │ -│ 1295 │ NtUserRemoveInjectionDevice │ 1294 │ 0x50e │ -│ 1296 │ NtUserRemoveQueueCompletion │ 1295 │ 0x50f │ -│ 1297 │ NtUserRemoveVisualIdentifier │ 1296 │ 0x510 │ -│ 1298 │ NtUserReplyMessage │ 1297 │ 0x511 │ -│ 1299 │ NtUserReportInertia │ 1298 │ 0x512 │ -│ 1300 │ NtUserResetDblClk │ 1299 │ 0x513 │ -│ 1301 │ NtUserResolveDesktopForWOW │ 1300 │ 0x514 │ -│ 1302 │ NtUserRestoreWindowDpiChanges │ 1301 │ 0x515 │ -│ 1303 │ NtUserScaleSystemMetricForDPIWithoutCache │ 1302 │ 0x516 │ -│ 1304 │ NtUserScheduleDispatchNotification │ 1303 │ 0x517 │ -│ 1305 │ NtUserSendEventMessage │ 1304 │ 0x518 │ -│ 1306 │ NtUserSendInteractiveControlHapticsReport │ 1305 │ 0x519 │ -│ 1307 │ NtUserSetActivationFilter │ 1306 │ 0x51a │ -│ 1308 │ NtUserSetActiveProcessForMonitor │ 1307 │ 0x51b │ -│ 1309 │ NtUserSetAdditionalForegroundBoostProcesses │ 1308 │ 0x51c │ -│ 1310 │ NtUserSetAppImeLevel │ 1309 │ 0x51d │ -│ 1311 │ NtUserSetAutoRotation │ 1310 │ 0x51e │ -│ 1312 │ NtUserSetBridgeWindowChild │ 1311 │ 0x51f │ -│ 1313 │ NtUserSetBrokeredForeground │ 1312 │ 0x520 │ -│ 1314 │ NtUserSetCalibrationData │ 1313 │ 0x521 │ -│ 1315 │ NtUserSetCancelRotationDelayHintWindow │ 1314 │ 0x522 │ -│ 1316 │ NtUserSetCaretBlinkTime │ 1315 │ 0x523 │ -│ 1317 │ NtUserSetCaretPos │ 1316 │ 0x524 │ -│ 1318 │ NtUserSetChildWindowNoActivate │ 1317 │ 0x525 │ -│ 1319 │ NtUserSetClassWord │ 1318 │ 0x526 │ -│ 1320 │ NtUserSetCoreWindow │ 1319 │ 0x527 │ -│ 1321 │ NtUserSetCoreWindowPartner │ 1320 │ 0x528 │ -│ 1322 │ NtUserSetCursorIconDataEx │ 1321 │ 0x529 │ -│ 1323 │ NtUserSetCursorPos │ 1322 │ 0x52a │ -│ 1324 │ NtUserSetDesktopColorTransform │ 1323 │ 0x52b │ -│ 1325 │ NtUserSetDesktopVisualInputSink │ 1324 │ 0x52c │ -│ 1326 │ NtUserSetDialogControlDpiChangeBehavior │ 1325 │ 0x52d │ -│ 1327 │ NtUserSetDialogPointer │ 1326 │ 0x52e │ -│ 1328 │ NtUserSetDialogSystemMenu │ 1327 │ 0x52f │ -│ 1329 │ NtUserSetDisplayAutoRotationPreferences │ 1328 │ 0x530 │ -│ 1330 │ NtUserSetDisplayConfig │ 1329 │ 0x531 │ -│ 1331 │ NtUserSetDisplayMapping │ 1330 │ 0x532 │ -│ 1332 │ NtUserSetDoubleClickTime │ 1331 │ 0x533 │ -│ 1333 │ NtUserSetDpiForWindow │ 1332 │ 0x534 │ -│ 1334 │ NtUserSetFallbackForeground │ 1333 │ 0x535 │ -│ 1335 │ NtUserSetFeatureReportResponse │ 1334 │ 0x536 │ -│ 1336 │ NtUserSetForegroundRedirectionForActivationObject │ 1335 │ 0x537 │ -│ 1337 │ NtUserSetForegroundWindow │ 1336 │ 0x538 │ -│ 1338 │ NtUserSetForegroundWindowForApplication │ 1337 │ 0x539 │ -│ 1339 │ NtUserSetFullscreenMagnifierOffsetsDWMUpdated │ 1338 │ 0x53a │ -│ 1340 │ NtUserSetGestureConfig │ 1339 │ 0x53b │ -│ 1341 │ NtUserSetImeHotKey │ 1340 │ 0x53c │ -│ 1342 │ NtUserSetImeInfoEx │ 1341 │ 0x53d │ -│ 1343 │ NtUserSetImeOwnerWindow │ 1342 │ 0x53e │ -│ 1344 │ NtUserSetInputServiceState │ 1343 │ 0x53f │ -│ 1345 │ NtUserSetInteractiveControlFocus │ 1344 │ 0x540 │ -│ 1346 │ NtUserSetInteractiveCtrlRotationAngle │ 1345 │ 0x541 │ -│ 1347 │ NtUserSetInternalWindowPos │ 1346 │ 0x542 │ -│ 1348 │ NtUserSetLayeredWindowAttributes │ 1347 │ 0x543 │ -│ 1349 │ NtUserSetMagnificationDesktopMagnifierOffsetsDWMUpdated │ 1348 │ 0x544 │ -│ 1350 │ NtUserSetManipulationInputTarget │ 1349 │ 0x545 │ -│ 1351 │ NtUserSetMenu │ 1350 │ 0x546 │ -│ 1352 │ NtUserSetMenuContextHelpId │ 1351 │ 0x547 │ -│ 1353 │ NtUserSetMenuFlagRtoL │ 1352 │ 0x548 │ -│ 1354 │ NtUserSetMessageExtraInfo │ 1353 │ 0x549 │ -│ 1355 │ NtUserSetMirrorRendering │ 1354 │ 0x54a │ -│ 1356 │ NtUserSetModernAppWindow │ 1355 │ 0x54b │ -│ 1357 │ NtUserSetMonitorWorkArea │ 1356 │ 0x54c │ -│ 1358 │ NtUserSetMouseInputRateLimitingTimer │ 1357 │ 0x54d │ -│ 1359 │ NtUserSetMsgBox │ 1358 │ 0x54e │ -│ 1360 │ NtUserSetObjectInformation │ 1359 │ 0x54f │ -│ 1361 │ NtUserSetPrecisionTouchPadConfiguration │ 1360 │ 0x550 │ -│ 1362 │ NtUserSetProcessDefaultLayout │ 1361 │ 0x551 │ -│ 1363 │ NtUserSetProcessDpiAwarenessContext │ 1362 │ 0x552 │ -│ 1364 │ NtUserSetProcessInteractionFlags │ 1363 │ 0x553 │ -│ 1365 │ NtUserSetProcessLaunchForegroundPolicy │ 1364 │ 0x554 │ -│ 1366 │ NtUserSetProcessMousewheelRoutingMode │ 1365 │ 0x555 │ -│ 1367 │ NtUserSetProcessRestrictionExemption │ 1366 │ 0x556 │ -│ 1368 │ NtUserSetProcessUIAccessZorder │ 1367 │ 0x557 │ -│ 1369 │ NtUserSetProgmanWindow │ 1368 │ 0x558 │ -│ 1370 │ NtUserSetSharedWindowData │ 1369 │ 0x559 │ -│ 1371 │ NtUserSetShellChangeNotifyHWND │ 1370 │ 0x55a │ -│ 1372 │ NtUserSetShellWindowEx │ 1371 │ 0x55b │ -│ 1373 │ NtUserSetSysColors │ 1372 │ 0x55c │ -│ 1374 │ NtUserSetSysMenu │ 1373 │ 0x55d │ -│ 1375 │ NtUserSetSystemContentRects │ 1374 │ 0x55e │ -│ 1376 │ NtUserSetSystemCursor │ 1375 │ 0x55f │ -│ 1377 │ NtUserSetSystemTimer │ 1376 │ 0x560 │ -│ 1378 │ NtUserSetTSFEventState │ 1377 │ 0x561 │ -│ 1379 │ NtUserSetTargetForResourceBrokering │ 1378 │ 0x562 │ -│ 1380 │ NtUserSetTaskmanWindow │ 1379 │ 0x563 │ -│ 1381 │ NtUserSetThreadInputBlocked │ 1380 │ 0x564 │ -│ 1382 │ NtUserSetThreadLayoutHandles │ 1381 │ 0x565 │ -│ 1383 │ NtUserSetThreadQueueMergeSetting │ 1382 │ 0x566 │ -│ 1384 │ NtUserSetVisible │ 1383 │ 0x567 │ -│ 1385 │ NtUserSetWaitForQueueAttach │ 1384 │ 0x568 │ -│ 1386 │ NtUserSetWatermarkStrings │ 1385 │ 0x569 │ -│ 1387 │ NtUserSetWindowBand │ 1386 │ 0x56a │ -│ 1388 │ NtUserSetWindowCompositionAttribute │ 1387 │ 0x56b │ -│ 1389 │ NtUserSetWindowCompositionTransition │ 1388 │ 0x56c │ -│ 1390 │ NtUserSetWindowContextHelpId │ 1389 │ 0x56d │ -│ 1391 │ NtUserSetWindowDisplayAffinity │ 1390 │ 0x56e │ -│ 1392 │ NtUserSetWindowFeedbackSetting │ 1391 │ 0x56f │ -│ 1393 │ NtUserSetWindowRgnEx │ 1392 │ 0x570 │ -│ 1394 │ NtUserSetWindowShowState │ 1393 │ 0x571 │ -│ 1395 │ NtUserSetWindowState │ 1394 │ 0x572 │ -│ 1396 │ NtUserSetWindowStationUser │ 1395 │ 0x573 │ -│ 1397 │ NtUserShellMigrateWindow │ 1396 │ 0x574 │ -│ 1398 │ NtUserShellRegisterHotKey │ 1397 │ 0x575 │ -│ 1399 │ NtUserShellSetWindowPos │ 1398 │ 0x576 │ -│ 1400 │ NtUserShowCursor │ 1399 │ 0x577 │ -│ 1401 │ NtUserShowOwnedPopups │ 1400 │ 0x578 │ -│ 1402 │ NtUserShowStartGlass │ 1401 │ 0x579 │ -│ 1403 │ NtUserShowSystemCursor │ 1402 │ 0x57a │ -│ 1404 │ NtUserShutdownBlockReasonCreate │ 1403 │ 0x57b │ -│ 1405 │ NtUserShutdownBlockReasonQuery │ 1404 │ 0x57c │ -│ 1406 │ NtUserShutdownReasonDestroy │ 1405 │ 0x57d │ -│ 1407 │ NtUserSignalRedirectionStartComplete │ 1406 │ 0x57e │ -│ 1408 │ NtUserSlicerControl │ 1407 │ 0x57f │ -│ 1409 │ NtUserSoundSentry │ 1408 │ 0x580 │ -│ 1410 │ NtUserStopAndEndInertia │ 1409 │ 0x581 │ -│ 1411 │ NtUserSwapMouseButton │ 1410 │ 0x582 │ -│ 1412 │ NtUserSwitchDesktop │ 1411 │ 0x583 │ -│ 1413 │ NtUserSwitchToThisWindow │ 1412 │ 0x584 │ -│ 1414 │ NtUserSystemParametersInfoForDpi │ 1413 │ 0x585 │ -│ 1415 │ NtUserTestForInteractiveUser │ 1414 │ 0x586 │ -│ 1416 │ NtUserThreadMessageQueueAttached │ 1415 │ 0x587 │ -│ 1417 │ NtUserTraceLoggingSendMixedModeTelemetry │ 1416 │ 0x588 │ -│ 1418 │ NtUserTrackPopupMenuEx │ 1417 │ 0x589 │ -│ 1419 │ NtUserTransformPoint │ 1418 │ 0x58a │ -│ 1420 │ NtUserTransformRect │ 1419 │ 0x58b │ -│ 1421 │ NtUserUndelegateInput │ 1420 │ 0x58c │ -│ 1422 │ NtUserUnhookWindowsHook │ 1421 │ 0x58d │ -│ 1423 │ NtUserUnloadKeyboardLayout │ 1422 │ 0x58e │ -│ 1424 │ NtUserUnlockWindowStation │ 1423 │ 0x58f │ -│ 1425 │ NtUserUnregisterHotKey │ 1424 │ 0x590 │ -│ 1426 │ NtUserUnregisterSessionPort │ 1425 │ 0x591 │ -│ 1427 │ NtUserUnregisterUserApiHook │ 1426 │ 0x592 │ -│ 1428 │ NtUserUpdateClientRect │ 1427 │ 0x593 │ -│ 1429 │ NtUserUpdateDefaultDesktopThumbnail │ 1428 │ 0x594 │ -│ 1430 │ NtUserUpdateInputContext │ 1429 │ 0x595 │ -│ 1431 │ NtUserUpdateInstance │ 1430 │ 0x596 │ -│ 1432 │ NtUserUpdateLayeredWindow │ 1431 │ 0x597 │ -│ 1433 │ NtUserUpdatePerUserImmEnabling │ 1432 │ 0x598 │ -│ 1434 │ NtUserUpdatePerUserSystemParameters │ 1433 │ 0x599 │ -│ 1435 │ NtUserUpdateWindow │ 1434 │ 0x59a │ -│ 1436 │ NtUserUpdateWindowInputSinkHints │ 1435 │ 0x59b │ -│ 1437 │ NtUserUpdateWindowTrackingInfo │ 1436 │ 0x59c │ -│ 1438 │ NtUserUpdateWindows │ 1437 │ 0x59d │ -│ 1439 │ NtUserUserHandleGrantAccess │ 1438 │ 0x59e │ -│ 1440 │ NtUserUserPowerCalloutWorker │ 1439 │ 0x59f │ -│ 1441 │ NtUserValidateHandleSecure │ 1440 │ 0x5a0 │ -│ 1442 │ NtUserValidateRgn │ 1441 │ 0x5a1 │ -│ 1443 │ NtUserWaitAvailableMessageEx │ 1442 │ 0x5a2 │ -│ 1444 │ NtUserWaitForInputIdle │ 1443 │ 0x5a3 │ -│ 1445 │ NtUserWaitForRedirectionStartComplete │ 1444 │ 0x5a4 │ -│ 1446 │ NtUserWakeRITForShutdown │ 1445 │ 0x5a5 │ -│ 1447 │ NtUserWindowFromDC │ 1446 │ 0x5a6 │ -│ 1448 │ NtUserWindowFromPhysicalPoint │ 1447 │ 0x5a7 │ -│ 1449 │ NtUserZapActiveAndFocus │ 1448 │ 0x5a8 │ -│ 1450 │ NtValidateCompositionSurfaceHandle │ 1449 │ 0x5a9 │ -│ 1451 │ NtVisualCaptureBits │ 1450 │ 0x5aa │ -│ 1452 │ NtUserSetClassLongPtr │ 1451 │ 0x5ab │ -│ 1453 │ NtUserSetWindowLongPtr │ 1452 │ 0x5ac │ -└──────┴─────────────────────────────────────────────────────────┴───────┴──────────┘ +┌──────┬─────────────────────────────────────────────────────────┬───────────────────┐ +│ Id │ Name │ Index │ +├──────┼─────────────────────────────────────────────────────────┼───────────────────┤ +│ 1 │ NtUserGetThreadState │ 0x00000000 / 0 │ +│ 2 │ NtUserPeekMessage │ 0x00000001 / 1 │ +│ 3 │ NtUserGetKeyState │ 0x00000002 / 2 │ +│ 4 │ NtUserInvalidateRect │ 0x00000003 / 3 │ +│ 5 │ NtUserGetMessage │ 0x00000004 / 4 │ +│ 6 │ NtUserMessageCall │ 0x00000005 / 5 │ +│ 7 │ NtGdiBitBlt │ 0x00000006 / 6 │ +│ 8 │ NtGdiGetCharSet │ 0x00000007 / 7 │ +│ 9 │ NtUserGetDC │ 0x00000008 / 8 │ +│ 10 │ NtGdiSelectBitmap │ 0x00000009 / 9 │ +│ 11 │ NtUserWaitMessage │ 0x0000000A / 10 │ +│ 12 │ NtUserTranslateMessage │ 0x0000000B / 11 │ +│ 13 │ NtUserGetProp │ 0x0000000C / 12 │ +│ 14 │ NtUserPostMessage │ 0x0000000D / 13 │ +│ 15 │ NtUserQueryWindow │ 0x0000000E / 14 │ +│ 16 │ NtUserTranslateAccelerator │ 0x0000000F / 15 │ +│ 17 │ NtGdiFlush │ 0x00000010 / 16 │ +│ 18 │ NtUserRedrawWindow │ 0x00000011 / 17 │ +│ 19 │ NtUserWindowFromPoint │ 0x00000012 / 18 │ +│ 20 │ NtUserCallMsgFilter │ 0x00000013 / 19 │ +│ 21 │ NtUserValidateTimerCallback │ 0x00000014 / 20 │ +│ 22 │ NtUserBeginPaint │ 0x00000015 / 21 │ +│ 23 │ NtUserSetTimer │ 0x00000016 / 22 │ +│ 24 │ NtUserEndPaint │ 0x00000017 / 23 │ +│ 25 │ NtUserSetCursor │ 0x00000018 / 24 │ +│ 26 │ NtUserKillTimer │ 0x00000019 / 25 │ +│ 27 │ NtUserBuildHwndList │ 0x0000001A / 26 │ +│ 28 │ NtUserSelectPalette │ 0x0000001B / 27 │ +│ 29 │ NtUserCallNextHookEx │ 0x0000001C / 28 │ +│ 30 │ NtUserHideCaret │ 0x0000001D / 29 │ +│ 31 │ NtGdiIntersectClipRect │ 0x0000001E / 30 │ +│ 32 │ NtUserGetProcessWindowStation │ 0x0000001F / 31 │ +│ 33 │ NtGdiDeleteObjectApp │ 0x00000020 / 32 │ +│ 34 │ NtUserSetWindowPos │ 0x00000021 / 33 │ +│ 35 │ NtUserShowCaret │ 0x00000022 / 34 │ +│ 36 │ NtUserEndDeferWindowPosEx │ 0x00000023 / 35 │ +│ 37 │ NtUserVkKeyScanEx │ 0x00000024 / 36 │ +│ 38 │ NtGdiSetDIBitsToDeviceInternal │ 0x00000025 / 37 │ +│ 39 │ NtGdiGetRandomRgn │ 0x00000026 / 38 │ +│ 40 │ NtUserCopyAcceleratorTable │ 0x00000027 / 39 │ +│ 41 │ NtUserNotifyWinEvent │ 0x00000028 / 40 │ +│ 42 │ NtGdiExtSelectClipRgn │ 0x00000029 / 41 │ +│ 43 │ NtUserIsClipboardFormatAvailable │ 0x0000002A / 42 │ +│ 44 │ NtUserSetScrollInfo │ 0x0000002B / 43 │ +│ 45 │ NtGdiStretchBlt │ 0x0000002C / 44 │ +│ 46 │ NtUserCreateCaret │ 0x0000002D / 45 │ +│ 47 │ NtGdiRectVisible │ 0x0000002E / 46 │ +│ 48 │ NtGdiCombineRgn │ 0x0000002F / 47 │ +│ 49 │ NtGdiGetDCObject │ 0x00000030 / 48 │ +│ 50 │ NtUserDispatchMessage │ 0x00000031 / 49 │ +│ 51 │ NtUserRegisterWindowMessage │ 0x00000032 / 50 │ +│ 52 │ NtGdiExtTextOutW │ 0x00000033 / 51 │ +│ 53 │ NtGdiSelectFont │ 0x00000034 / 52 │ +│ 54 │ NtGdiRestoreDC │ 0x00000035 / 53 │ +│ 55 │ NtGdiSaveDC │ 0x00000036 / 54 │ +│ 56 │ NtUserGetForegroundWindow │ 0x00000037 / 55 │ +│ 57 │ NtUserShowScrollBar │ 0x00000038 / 56 │ +│ 58 │ NtUserFindExistingCursorIcon │ 0x00000039 / 57 │ +│ 59 │ NtGdiGetDCDword │ 0x0000003A / 58 │ +│ 60 │ NtGdiGetRegionData │ 0x0000003B / 59 │ +│ 61 │ NtGdiLineTo │ 0x0000003C / 60 │ +│ 62 │ NtUserSystemParametersInfo │ 0x0000003D / 61 │ +│ 63 │ NtGdiGetAppClipBox │ 0x0000003E / 62 │ +│ 64 │ NtUserGetAsyncKeyState │ 0x0000003F / 63 │ +│ 65 │ NtUserGetCPD │ 0x00000040 / 64 │ +│ 66 │ NtUserRemoveProp │ 0x00000041 / 65 │ +│ 67 │ NtGdiDoPalette │ 0x00000042 / 66 │ +│ 68 │ NtGdiPolyPolyDraw │ 0x00000043 / 67 │ +│ 69 │ NtUserSetCapture │ 0x00000044 / 68 │ +│ 70 │ NtUserEnumDisplayMonitors │ 0x00000045 / 69 │ +│ 71 │ NtGdiCreateCompatibleBitmap │ 0x00000046 / 70 │ +│ 72 │ NtUserSetProp │ 0x00000047 / 71 │ +│ 73 │ NtGdiGetTextCharsetInfo │ 0x00000048 / 72 │ +│ 74 │ NtUserSBGetParms │ 0x00000049 / 73 │ +│ 75 │ NtUserGetIconInfo │ 0x0000004A / 74 │ +│ 76 │ NtUserExcludeUpdateRgn │ 0x0000004B / 75 │ +│ 77 │ NtUserSetFocus │ 0x0000004C / 76 │ +│ 78 │ NtGdiExtGetObjectW │ 0x0000004D / 77 │ +│ 79 │ NtUserGetUpdateRect │ 0x0000004E / 78 │ +│ 80 │ NtGdiCreateCompatibleDC │ 0x0000004F / 79 │ +│ 81 │ NtUserGetClipboardSequenceNumber │ 0x00000050 / 80 │ +│ 82 │ NtGdiCreatePen │ 0x00000051 / 81 │ +│ 83 │ NtUserShowWindow │ 0x00000052 / 82 │ +│ 84 │ NtUserGetKeyboardLayoutList │ 0x00000053 / 83 │ +│ 85 │ NtGdiPatBlt │ 0x00000054 / 84 │ +│ 86 │ NtUserMapVirtualKeyEx │ 0x00000055 / 85 │ +│ 87 │ NtUserSetWindowLong │ 0x00000056 / 86 │ +│ 88 │ NtGdiHfontCreate │ 0x00000057 / 87 │ +│ 89 │ NtUserMoveWindow │ 0x00000058 / 88 │ +│ 90 │ NtUserPostThreadMessage │ 0x00000059 / 89 │ +│ 91 │ NtUserDrawIconEx │ 0x0000005A / 90 │ +│ 92 │ NtUserGetSystemMenu │ 0x0000005B / 91 │ +│ 93 │ NtGdiDrawStream │ 0x0000005C / 92 │ +│ 94 │ NtUserInternalGetWindowText │ 0x0000005D / 93 │ +│ 95 │ NtUserGetWindowDC │ 0x0000005E / 94 │ +│ 96 │ NtGdiInvertRgn │ 0x0000005F / 95 │ +│ 97 │ NtGdiGetRgnBox │ 0x00000060 / 96 │ +│ 98 │ NtGdiGetAndSetDCDword │ 0x00000061 / 97 │ +│ 99 │ NtGdiMaskBlt │ 0x00000062 / 98 │ +│ 100 │ NtGdiGetWidthTable │ 0x00000063 / 99 │ +│ 101 │ NtUserScrollDC │ 0x00000064 / 100 │ +│ 102 │ NtUserGetObjectInformation │ 0x00000065 / 101 │ +│ 103 │ NtGdiCreateBitmap │ 0x00000066 / 102 │ +│ 104 │ NtUserFindWindowEx │ 0x00000067 / 103 │ +│ 105 │ NtGdiPolyPatBlt │ 0x00000068 / 104 │ +│ 106 │ NtUserUnhookWindowsHookEx │ 0x00000069 / 105 │ +│ 107 │ NtGdiGetNearestColor │ 0x0000006A / 106 │ +│ 108 │ NtGdiTransformPoints │ 0x0000006B / 107 │ +│ 109 │ NtGdiGetDCPoint │ 0x0000006C / 108 │ +│ 110 │ NtGdiCreateDIBBrush │ 0x0000006D / 109 │ +│ 111 │ NtGdiGetTextMetricsW │ 0x0000006E / 110 │ +│ 112 │ NtUserCreateWindowEx │ 0x0000006F / 111 │ +│ 113 │ NtUserSetParent │ 0x00000070 / 112 │ +│ 114 │ NtUserGetKeyboardState │ 0x00000071 / 113 │ +│ 115 │ NtUserToUnicodeEx │ 0x00000072 / 114 │ +│ 116 │ NtUserGetControlBrush │ 0x00000073 / 115 │ +│ 117 │ NtUserGetClassName │ 0x00000074 / 116 │ +│ 118 │ NtGdiAlphaBlend │ 0x00000075 / 117 │ +│ 119 │ NtGdiOffsetRgn │ 0x00000076 / 118 │ +│ 120 │ NtUserDefSetText │ 0x00000077 / 119 │ +│ 121 │ NtGdiGetTextFaceW │ 0x00000078 / 120 │ +│ 122 │ NtGdiStretchDIBitsInternal │ 0x00000079 / 121 │ +│ 123 │ NtUserSendInput │ 0x0000007A / 122 │ +│ 124 │ NtUserGetThreadDesktop │ 0x0000007B / 123 │ +│ 125 │ NtGdiCreateRectRgn │ 0x0000007C / 124 │ +│ 126 │ NtGdiGetDIBitsInternal │ 0x0000007D / 125 │ +│ 127 │ NtUserGetUpdateRgn │ 0x0000007E / 126 │ +│ 128 │ NtGdiDeleteClientObj │ 0x0000007F / 127 │ +│ 129 │ NtUserGetIconSize │ 0x00000080 / 128 │ +│ 130 │ NtUserFillWindow │ 0x00000081 / 129 │ +│ 131 │ NtGdiExtCreateRegion │ 0x00000082 / 130 │ +│ 132 │ NtGdiComputeXformCoefficients │ 0x00000083 / 131 │ +│ 133 │ NtUserSetWindowsHookEx │ 0x00000084 / 132 │ +│ 134 │ NtUserNotifyProcessCreate │ 0x00000085 / 133 │ +│ 135 │ NtGdiUnrealizeObject │ 0x00000086 / 134 │ +│ 136 │ NtUserGetTitleBarInfo │ 0x00000087 / 135 │ +│ 137 │ NtGdiRectangle │ 0x00000088 / 136 │ +│ 138 │ NtUserSetThreadDesktop │ 0x00000089 / 137 │ +│ 139 │ NtUserGetDCEx │ 0x0000008A / 138 │ +│ 140 │ NtUserGetScrollBarInfo │ 0x0000008B / 139 │ +│ 141 │ NtGdiGetTextExtent │ 0x0000008C / 140 │ +│ 142 │ NtUserSetWindowFNID │ 0x0000008D / 141 │ +│ 143 │ NtGdiSetLayout │ 0x0000008E / 142 │ +│ 144 │ NtUserCalcMenuBar │ 0x0000008F / 143 │ +│ 145 │ NtUserThunkedMenuItemInfo │ 0x00000090 / 144 │ +│ 146 │ NtGdiExcludeClipRect │ 0x00000091 / 145 │ +│ 147 │ NtGdiCreateDIBSection │ 0x00000092 / 146 │ +│ 148 │ NtGdiGetDCforBitmap │ 0x00000093 / 147 │ +│ 149 │ NtUserDestroyCursor │ 0x00000094 / 148 │ +│ 150 │ NtUserDestroyWindow │ 0x00000095 / 149 │ +│ 151 │ NtGdiCreateDIBitmapInternal │ 0x00000096 / 150 │ +│ 152 │ NtUserOpenWindowStation │ 0x00000097 / 151 │ +│ 153 │ NtUserSetCursorIconData │ 0x00000098 / 152 │ +│ 154 │ NtUserCloseDesktop │ 0x00000099 / 153 │ +│ 155 │ NtUserOpenDesktop │ 0x0000009A / 154 │ +│ 156 │ NtUserSetProcessWindowStation │ 0x0000009B / 155 │ +│ 157 │ NtUserGetAtomName │ 0x0000009C / 156 │ +│ 158 │ NtGdiExtCreatePen │ 0x0000009D / 157 │ +│ 159 │ NtGdiCreatePaletteInternal │ 0x0000009E / 158 │ +│ 160 │ NtGdiSetBrushOrg │ 0x0000009F / 159 │ +│ 161 │ NtUserBuildNameList │ 0x000000A0 / 160 │ +│ 162 │ NtGdiSetPixel │ 0x000000A1 / 161 │ +│ 163 │ NtUserRegisterClassExWOW │ 0x000000A2 / 162 │ +│ 164 │ NtGdiCreatePatternBrushInternal │ 0x000000A3 / 163 │ +│ 165 │ NtUserGetAncestor │ 0x000000A4 / 164 │ +│ 166 │ NtGdiGetOutlineTextMetricsInternalW │ 0x000000A5 / 165 │ +│ 167 │ NtGdiSetBitmapBits │ 0x000000A6 / 166 │ +│ 168 │ NtUserCloseWindowStation │ 0x000000A7 / 167 │ +│ 169 │ NtUserGetDoubleClickTime │ 0x000000A8 / 168 │ +│ 170 │ NtUserEnableScrollBar │ 0x000000A9 / 169 │ +│ 171 │ NtGdiCreateSolidBrush │ 0x000000AA / 170 │ +│ 172 │ NtUserGetClassInfoEx │ 0x000000AB / 171 │ +│ 173 │ NtGdiCreateClientObj │ 0x000000AC / 172 │ +│ 174 │ NtUserUnregisterClass │ 0x000000AD / 173 │ +│ 175 │ NtUserDeleteMenu │ 0x000000AE / 174 │ +│ 176 │ NtGdiRectInRegion │ 0x000000AF / 175 │ +│ 177 │ NtUserScrollWindowEx │ 0x000000B0 / 176 │ +│ 178 │ NtGdiGetPixel │ 0x000000B1 / 177 │ +│ 179 │ NtUserSetClassLong │ 0x000000B2 / 178 │ +│ 180 │ NtUserGetMenuBarInfo │ 0x000000B3 / 179 │ +│ 181 │ NtGdiGetNearestPaletteIndex │ 0x000000B4 / 180 │ +│ 182 │ NtGdiGetCharWidthW │ 0x000000B5 / 181 │ +│ 183 │ NtUserInvalidateRgn │ 0x000000B6 / 182 │ +│ 184 │ NtUserGetClipboardOwner │ 0x000000B7 / 183 │ +│ 185 │ NtUserSetWindowRgn │ 0x000000B8 / 184 │ +│ 186 │ NtUserBitBltSysBmp │ 0x000000B9 / 185 │ +│ 187 │ NtGdiGetCharWidthInfo │ 0x000000BA / 186 │ +│ 188 │ NtUserValidateRect │ 0x000000BB / 187 │ +│ 189 │ NtUserCloseClipboard │ 0x000000BC / 188 │ +│ 190 │ NtUserOpenClipboard │ 0x000000BD / 189 │ +│ 191 │ NtUserSetClipboardData │ 0x000000BE / 190 │ +│ 192 │ NtUserEnableMenuItem │ 0x000000BF / 191 │ +│ 193 │ NtUserAlterWindowStyle │ 0x000000C0 / 192 │ +│ 194 │ NtGdiFillRgn │ 0x000000C1 / 193 │ +│ 195 │ NtUserGetWindowPlacement │ 0x000000C2 / 194 │ +│ 196 │ NtGdiModifyWorldTransform │ 0x000000C3 / 195 │ +│ 197 │ NtGdiGetFontData │ 0x000000C4 / 196 │ +│ 198 │ NtUserGetOpenClipboardWindow │ 0x000000C5 / 197 │ +│ 199 │ NtUserSetThreadState │ 0x000000C6 / 198 │ +│ 200 │ NtGdiOpenDCW │ 0x000000C7 / 199 │ +│ 201 │ NtUserTrackMouseEvent │ 0x000000C8 / 200 │ +│ 202 │ NtGdiGetTransform │ 0x000000C9 / 201 │ +│ 203 │ NtUserDestroyMenu │ 0x000000CA / 202 │ +│ 204 │ NtGdiGetBitmapBits │ 0x000000CB / 203 │ +│ 205 │ NtUserConsoleControl │ 0x000000CC / 204 │ +│ 206 │ NtUserSetActiveWindow │ 0x000000CD / 205 │ +│ 207 │ NtUserSetInformationThread │ 0x000000CE / 206 │ +│ 208 │ NtUserSetWindowPlacement │ 0x000000CF / 207 │ +│ 209 │ NtUserGetControlColor │ 0x000000D0 / 208 │ +│ 210 │ NtGdiSetMetaRgn │ 0x000000D1 / 209 │ +│ 211 │ NtGdiSetMiterLimit │ 0x000000D2 / 210 │ +│ 212 │ NtGdiSetVirtualResolution │ 0x000000D3 / 211 │ +│ 213 │ NtGdiGetRasterizerCaps │ 0x000000D4 / 212 │ +│ 214 │ NtUserSetWindowWord │ 0x000000D5 / 213 │ +│ 215 │ NtUserGetClipboardFormatName │ 0x000000D6 / 214 │ +│ 216 │ NtUserRealInternalGetMessage │ 0x000000D7 / 215 │ +│ 217 │ NtUserCreateLocalMemHandle │ 0x000000D8 / 216 │ +│ 218 │ NtUserAttachThreadInput │ 0x000000D9 / 217 │ +│ 219 │ NtGdiCreateHalftonePalette │ 0x000000DA / 218 │ +│ 220 │ NtUserPaintMenuBar │ 0x000000DB / 219 │ +│ 221 │ NtUserSetKeyboardState │ 0x000000DC / 220 │ +│ 222 │ NtGdiCombineTransform │ 0x000000DD / 221 │ +│ 223 │ NtUserCreateAcceleratorTable │ 0x000000DE / 222 │ +│ 224 │ NtUserGetCursorFrameInfo │ 0x000000DF / 223 │ +│ 225 │ NtUserGetAltTabInfo │ 0x000000E0 / 224 │ +│ 226 │ NtUserGetCaretBlinkTime │ 0x000000E1 / 225 │ +│ 227 │ NtGdiQueryFontAssocInfo │ 0x000000E2 / 226 │ +│ 228 │ NtUserProcessConnect │ 0x000000E3 / 227 │ +│ 229 │ NtUserEnumDisplayDevices │ 0x000000E4 / 228 │ +│ 230 │ NtUserEmptyClipboard │ 0x000000E5 / 229 │ +│ 231 │ NtUserGetClipboardData │ 0x000000E6 / 230 │ +│ 232 │ NtUserRemoveMenu │ 0x000000E7 / 231 │ +│ 233 │ NtGdiSetBoundsRect │ 0x000000E8 / 232 │ +│ 234 │ NtGdiGetBitmapDimension │ 0x000000E9 / 233 │ +│ 235 │ NtUserConvertMemHandle │ 0x000000EA / 234 │ +│ 236 │ NtUserDestroyAcceleratorTable │ 0x000000EB / 235 │ +│ 237 │ NtUserGetGUIThreadInfo │ 0x000000EC / 236 │ +│ 238 │ NtGdiCloseFigure │ 0x000000ED / 237 │ +│ 239 │ NtUserSetWindowsHookAW │ 0x000000EE / 238 │ +│ 240 │ NtUserSetMenuDefaultItem │ 0x000000EF / 239 │ +│ 241 │ NtUserCheckMenuItem │ 0x000000F0 / 240 │ +│ 242 │ NtUserSetWinEventHook │ 0x000000F1 / 241 │ +│ 243 │ NtUserUnhookWinEvent │ 0x000000F2 / 242 │ +│ 244 │ NtUserLockWindowUpdate │ 0x000000F3 / 243 │ +│ 245 │ NtUserSetSystemMenu │ 0x000000F4 / 244 │ +│ 246 │ NtUserThunkedMenuInfo │ 0x000000F5 / 245 │ +│ 247 │ NtGdiBeginPath │ 0x000000F6 / 246 │ +│ 248 │ NtGdiEndPath │ 0x000000F7 / 247 │ +│ 249 │ NtGdiFillPath │ 0x000000F8 / 248 │ +│ 250 │ NtUserDdeInitialize │ 0x000000F9 / 249 │ +│ 251 │ NtUserModifyUserStartupInfoFlags │ 0x000000FA / 250 │ +│ 252 │ NtUserCountClipboardFormats │ 0x000000FB / 251 │ +│ 253 │ NtGdiAddFontMemResourceEx │ 0x000000FC / 252 │ +│ 254 │ NtGdiEqualRgn │ 0x000000FD / 253 │ +│ 255 │ NtGdiGetSystemPaletteUse │ 0x000000FE / 254 │ +│ 256 │ NtGdiRemoveFontMemResourceEx │ 0x000000FF / 255 │ +│ 257 │ NtUserEnumDisplaySettings │ 0x00000100 / 256 │ +│ 258 │ NtUserPaintDesktop │ 0x00000101 / 257 │ +│ 259 │ NtGdiExtEscape │ 0x00000102 / 258 │ +│ 260 │ NtGdiSetBitmapDimension │ 0x00000103 / 259 │ +│ 261 │ NtGdiSetFontEnumeration │ 0x00000104 / 260 │ +│ 262 │ NtUserChangeClipboardChain │ 0x00000105 / 261 │ +│ 263 │ NtUserSetClipboardViewer │ 0x00000106 / 262 │ +│ 264 │ NtUserShowWindowAsync │ 0x00000107 / 263 │ +│ 265 │ NtGdiCreateColorSpace │ 0x00000108 / 264 │ +│ 266 │ NtGdiDeleteColorSpace │ 0x00000109 / 265 │ +│ 267 │ NtUserActivateKeyboardLayout │ 0x0000010A / 266 │ +│ 268 │ NtBindCompositionSurface │ 0x0000010B / 267 │ +│ 269 │ NtCloseCompositionInputSink │ 0x0000010C / 268 │ +│ 270 │ NtCompositionInputThread │ 0x0000010D / 269 │ +│ 271 │ NtCompositionSetDropTarget │ 0x0000010E / 270 │ +│ 272 │ NtCompositorNotifyExitWindows │ 0x0000010F / 271 │ +│ 273 │ NtConfigureInputSpace │ 0x00000110 / 272 │ +│ 274 │ NtCreateCompositionInputSink │ 0x00000111 / 273 │ +│ 275 │ NtCreateCompositionSurfaceHandle │ 0x00000112 / 274 │ +│ 276 │ NtCreateImplicitCompositionInputSink │ 0x00000113 / 275 │ +│ 277 │ NtDCompositionAddCrossDeviceVisualChild │ 0x00000114 / 276 │ +│ 278 │ NtDCompositionBeginFrame │ 0x00000115 / 277 │ +│ 279 │ NtDCompositionBoostCompositorClock │ 0x00000116 / 278 │ +│ 280 │ NtDCompositionCommitChannel │ 0x00000117 / 279 │ +│ 281 │ NtDCompositionCommitSynchronizationObject │ 0x00000118 / 280 │ +│ 282 │ NtDCompositionConfirmFrame │ 0x00000119 / 281 │ +│ 283 │ NtDCompositionConnectPipe │ 0x0000011A / 282 │ +│ 284 │ NtDCompositionCreateAndBindSharedSection │ 0x0000011B / 283 │ +│ 285 │ NtDCompositionCreateChannel │ 0x0000011C / 284 │ +│ 286 │ NtDCompositionCreateConnection │ 0x0000011D / 285 │ +│ 287 │ NtDCompositionCreateDwmChannel │ 0x0000011E / 286 │ +│ 288 │ NtDCompositionCreateSharedResourceHandle │ 0x0000011F / 287 │ +│ 289 │ NtDCompositionCreateSynchronizationObject │ 0x00000120 / 288 │ +│ 290 │ NtDCompositionDestroyChannel │ 0x00000121 / 289 │ +│ 291 │ NtDCompositionDestroyConnection │ 0x00000122 / 290 │ +│ 292 │ NtDCompositionDuplicateHandleToProcess │ 0x00000123 / 291 │ +│ 293 │ NtDCompositionDuplicateSwapchainHandleToDwm │ 0x00000124 / 292 │ +│ 294 │ NtDCompositionEnableMMCSS │ 0x00000125 / 293 │ +│ 295 │ NtDCompositionGetBatchId │ 0x00000126 / 294 │ +│ 296 │ NtDCompositionGetChannels │ 0x00000127 / 295 │ +│ 297 │ NtDCompositionGetConnectionBatch │ 0x00000128 / 296 │ +│ 298 │ NtDCompositionGetDeletedResources │ 0x00000129 / 297 │ +│ 299 │ NtDCompositionGetFrameId │ 0x0000012A / 298 │ +│ 300 │ NtDCompositionGetFrameIdFromBatchId │ 0x0000012B / 299 │ +│ 301 │ NtDCompositionGetFrameLegacyTokens │ 0x0000012C / 300 │ +│ 302 │ NtDCompositionGetFrameStatistics │ 0x0000012D / 301 │ +│ 303 │ NtDCompositionGetFrameSurfaceUpdates │ 0x0000012E / 302 │ +│ 304 │ NtDCompositionGetMaterialProperty │ 0x0000012F / 303 │ +│ 305 │ NtDCompositionGetStatistics │ 0x00000130 / 304 │ +│ 306 │ NtDCompositionGetTargetStatistics │ 0x00000131 / 305 │ +│ 307 │ NtDCompositionNotifySuperWetInkWork │ 0x00000132 / 306 │ +│ 308 │ NtDCompositionProcessChannelBatchBuffer │ 0x00000133 / 307 │ +│ 309 │ NtDCompositionReferenceSharedResourceOnDwmChannel │ 0x00000134 / 308 │ +│ 310 │ NtDCompositionRegisterThumbnailVisual │ 0x00000135 / 309 │ +│ 311 │ NtDCompositionRegisterVirtualDesktopVisual │ 0x00000136 / 310 │ +│ 312 │ NtDCompositionReleaseAllResources │ 0x00000137 / 311 │ +│ 313 │ NtDCompositionRemoveCrossDeviceVisualChild │ 0x00000138 / 312 │ +│ 314 │ NtDCompositionSetBlurredWallpaperSurface │ 0x00000139 / 313 │ +│ 315 │ NtDCompositionSetChannelCommitCompletionEvent │ 0x0000013A / 314 │ +│ 316 │ NtDCompositionSetChannelConnectionId │ 0x0000013B / 315 │ +│ 317 │ NtDCompositionSetChildRootVisual │ 0x0000013C / 316 │ +│ 318 │ NtDCompositionSetDebugCounter │ 0x0000013D / 317 │ +│ 319 │ NtDCompositionSetMaterialProperty │ 0x0000013E / 318 │ +│ 320 │ NtDCompositionSubmitDWMBatch │ 0x0000013F / 319 │ +│ 321 │ NtDCompositionSuspendAnimations │ 0x00000140 / 320 │ +│ 322 │ NtDCompositionSynchronize │ 0x00000141 / 321 │ +│ 323 │ NtDCompositionTelemetrySetApplicationId │ 0x00000142 / 322 │ +│ 324 │ NtDCompositionUpdatePointerCapture │ 0x00000143 / 323 │ +│ 325 │ NtDCompositionWaitForChannel │ 0x00000144 / 324 │ +│ 326 │ NtDCompositionWaitForCompositorClock │ 0x00000145 / 325 │ +│ 327 │ NtDesktopCaptureBits │ 0x00000146 / 326 │ +│ 328 │ NtDuplicateCompositionInputSink │ 0x00000147 / 327 │ +│ 329 │ NtDxgkCancelPresents │ 0x00000148 / 328 │ +│ 330 │ NtDxgkCheckSinglePlaneForMultiPlaneOverlaySupport │ 0x00000149 / 329 │ +│ 331 │ NtDxgkConnectDoorbell │ 0x0000014A / 330 │ +│ 332 │ NtDxgkCreateDoorbell │ 0x0000014B / 331 │ +│ 333 │ NtDxgkCreateNativeFence │ 0x0000014C / 332 │ +│ 334 │ NtDxgkCreateTrackedWorkload │ 0x0000014D / 333 │ +│ 335 │ NtDxgkDestroyDoorbell │ 0x0000014E / 334 │ +│ 336 │ NtDxgkDestroyTrackedWorkload │ 0x0000014F / 335 │ +│ 337 │ NtDxgkDispMgrOperation │ 0x00000150 / 336 │ +│ 338 │ NtDxgkDisplayPortOperation │ 0x00000151 / 337 │ +│ 339 │ NtDxgkDuplicateHandle │ 0x00000152 / 338 │ +│ 340 │ NtDxgkEnumAdapters3 │ 0x00000153 / 339 │ +│ 341 │ NtDxgkEnumProcesses │ 0x00000154 / 340 │ +│ 342 │ NtDxgkGetAvailableTrackedWorkloadIndex │ 0x00000155 / 341 │ +│ 343 │ NtDxgkGetProcessList │ 0x00000156 / 342 │ +│ 344 │ NtDxgkGetProperties │ 0x00000157 / 343 │ +│ 345 │ NtDxgkGetTrackedWorkloadStatistics │ 0x00000158 / 344 │ +│ 346 │ NtDxgkNotifyWorkSubmission │ 0x00000159 / 345 │ +│ 347 │ NtDxgkOpenNativeFenceFromNtHandle │ 0x0000015A / 346 │ +│ 348 │ NtDxgkOutputDuplPresentToHwQueue │ 0x0000015B / 347 │ +│ 349 │ NtDxgkPinResources │ 0x0000015C / 348 │ +│ 350 │ NtDxgkRegisterVailProcess │ 0x0000015D / 349 │ +│ 351 │ NtDxgkResetTrackedWorkloadStatistics │ 0x0000015E / 350 │ +│ 352 │ NtDxgkSetProperties │ 0x0000015F / 351 │ +│ 353 │ NtDxgkSubmitPresentBltToHwQueue │ 0x00000160 / 352 │ +│ 354 │ NtDxgkSubmitPresentToHwQueue │ 0x00000161 / 353 │ +│ 355 │ NtDxgkUnpinResources │ 0x00000162 / 354 │ +│ 356 │ NtDxgkUpdateTrackedWorkload │ 0x00000163 / 355 │ +│ 357 │ NtDxgkVailConnect │ 0x00000164 / 356 │ +│ 358 │ NtDxgkVailDisconnect │ 0x00000165 / 357 │ +│ 359 │ NtDxgkVailPromoteCompositionSurface │ 0x00000166 / 358 │ +│ 360 │ NtEnableOneCoreTransformMode │ 0x00000167 / 359 │ +│ 361 │ NtFlipObjectAddContent │ 0x00000168 / 360 │ +│ 362 │ NtFlipObjectAddPoolBuffer │ 0x00000169 / 361 │ +│ 363 │ NtFlipObjectConsumerAcquirePresent │ 0x0000016A / 362 │ +│ 364 │ NtFlipObjectConsumerAdjustUsageReference │ 0x0000016B / 363 │ +│ 365 │ NtFlipObjectConsumerBeginProcessPresent │ 0x0000016C / 364 │ +│ 366 │ NtFlipObjectConsumerEndProcessPresent │ 0x0000016D / 365 │ +│ 367 │ NtFlipObjectConsumerPostMessage │ 0x0000016E / 366 │ +│ 368 │ NtFlipObjectConsumerQueryBufferInfo │ 0x0000016F / 367 │ +│ 369 │ NtFlipObjectCreate │ 0x00000170 / 368 │ +│ 370 │ NtFlipObjectDisconnectEndpoint │ 0x00000171 / 369 │ +│ 371 │ NtFlipObjectEnablePresentStatisticsType │ 0x00000172 / 370 │ +│ 372 │ NtFlipObjectOpen │ 0x00000173 / 371 │ +│ 373 │ NtFlipObjectPresentCancel │ 0x00000174 / 372 │ +│ 374 │ NtFlipObjectQueryBufferAvailableEvent │ 0x00000175 / 373 │ +│ 375 │ NtFlipObjectQueryEndpointConnected │ 0x00000176 / 374 │ +│ 376 │ NtFlipObjectQueryLostEvent │ 0x00000177 / 375 │ +│ 377 │ NtFlipObjectQueryNextMessageToProducer │ 0x00000178 / 376 │ +│ 378 │ NtFlipObjectReadNextMessageToProducer │ 0x00000179 / 377 │ +│ 379 │ NtFlipObjectRemoveContent │ 0x0000017A / 378 │ +│ 380 │ NtFlipObjectRemovePoolBuffer │ 0x0000017B / 379 │ +│ 381 │ NtFlipObjectSetContent │ 0x0000017C / 380 │ +│ 382 │ NtGdiAbortDoc │ 0x0000017D / 381 │ +│ 383 │ NtGdiAbortPath │ 0x0000017E / 382 │ +│ 384 │ NtGdiAddEmbFontToDC │ 0x0000017F / 383 │ +│ 385 │ NtGdiAddFontResourceW │ 0x00000180 / 384 │ +│ 386 │ NtGdiAddInitialFonts │ 0x00000181 / 385 │ +│ 387 │ NtGdiAddRemoteFontToDC │ 0x00000182 / 386 │ +│ 388 │ NtGdiAddRemoteMMInstanceToDC │ 0x00000183 / 387 │ +│ 389 │ NtGdiAngleArc │ 0x00000184 / 388 │ +│ 390 │ NtGdiAnyLinkedFonts │ 0x00000185 / 389 │ +│ 391 │ NtGdiArcInternal │ 0x00000186 / 390 │ +│ 392 │ NtGdiBRUSHOBJ_DeleteRbrush │ 0x00000187 / 391 │ +│ 393 │ NtGdiBRUSHOBJ_hGetColorTransform │ 0x00000188 / 392 │ +│ 394 │ NtGdiBRUSHOBJ_pvAllocRbrush │ 0x00000189 / 393 │ +│ 395 │ NtGdiBRUSHOBJ_pvGetRbrush │ 0x0000018A / 394 │ +│ 396 │ NtGdiBRUSHOBJ_ulGetBrushColor │ 0x0000018B / 395 │ +│ 397 │ NtGdiBeginGdiRendering │ 0x0000018C / 396 │ +│ 398 │ NtGdiCLIPOBJ_bEnum │ 0x0000018D / 397 │ +│ 399 │ NtGdiCLIPOBJ_cEnumStart │ 0x0000018E / 398 │ +│ 400 │ NtGdiCLIPOBJ_ppoGetPath │ 0x0000018F / 399 │ +│ 401 │ NtGdiCancelDC │ 0x00000190 / 400 │ +│ 402 │ NtGdiChangeGhostFont │ 0x00000191 / 401 │ +│ 403 │ NtGdiCheckBitmapBits │ 0x00000192 / 402 │ +│ 404 │ NtGdiClearBitmapAttributes │ 0x00000193 / 403 │ +│ 405 │ NtGdiClearBrushAttributes │ 0x00000194 / 404 │ +│ 406 │ NtGdiColorCorrectPalette │ 0x00000195 / 405 │ +│ 407 │ NtGdiConfigureOPMProtectedOutput │ 0x00000196 / 406 │ +│ 408 │ NtGdiConvertMetafileRect │ 0x00000197 / 407 │ +│ 409 │ NtGdiCreateBitmapFromDxSurface │ 0x00000198 / 408 │ +│ 410 │ NtGdiCreateBitmapFromDxSurface2 │ 0x00000199 / 409 │ +│ 411 │ NtGdiCreateColorTransform │ 0x0000019A / 410 │ +│ 412 │ NtGdiCreateEllipticRgn │ 0x0000019B / 411 │ +│ 413 │ NtGdiCreateHatchBrushInternal │ 0x0000019C / 412 │ +│ 414 │ NtGdiCreateMetafileDC │ 0x0000019D / 413 │ +│ 415 │ NtGdiCreateOPMProtectedOutput │ 0x0000019E / 414 │ +│ 416 │ NtGdiCreateOPMProtectedOutputs │ 0x0000019F / 415 │ +│ 417 │ NtGdiCreateRoundRectRgn │ 0x000001A0 / 416 │ +│ 418 │ NtGdiCreateServerMetaFile │ 0x000001A1 / 417 │ +│ 419 │ NtGdiCreateSessionMappedDIBSection │ 0x000001A2 / 418 │ +│ 420 │ NtGdiDDCCIGetCapabilitiesString │ 0x000001A3 / 419 │ +│ 421 │ NtGdiDDCCIGetCapabilitiesStringLength │ 0x000001A4 / 420 │ +│ 422 │ NtGdiDDCCIGetTimingReport │ 0x000001A5 / 421 │ +│ 423 │ NtGdiDDCCIGetVCPFeature │ 0x000001A6 / 422 │ +│ 424 │ NtGdiDDCCISaveCurrentSettings │ 0x000001A7 / 423 │ +│ 425 │ NtGdiDDCCISetVCPFeature │ 0x000001A8 / 424 │ +│ 426 │ NtGdiDdCreateFullscreenSprite │ 0x000001A9 / 425 │ +│ 427 │ NtGdiDdDDIAbandonSwapChain │ 0x000001AA / 426 │ +│ 428 │ NtGdiDdDDIAcquireKeyedMutex │ 0x000001AB / 427 │ +│ 429 │ NtGdiDdDDIAcquireKeyedMutex2 │ 0x000001AC / 428 │ +│ 430 │ NtGdiDdDDIAcquireSwapChain │ 0x000001AD / 429 │ +│ 431 │ NtGdiDdDDIAddSurfaceToSwapChain │ 0x000001AE / 430 │ +│ 432 │ NtGdiDdDDIAdjustFullscreenGamma │ 0x000001AF / 431 │ +│ 433 │ NtGdiDdDDICacheHybridQueryValue │ 0x000001B0 / 432 │ +│ 434 │ NtGdiDdDDIChangeVideoMemoryReservation │ 0x000001B1 / 433 │ +│ 435 │ NtGdiDdDDICheckExclusiveOwnership │ 0x000001B2 / 434 │ +│ 436 │ NtGdiDdDDICheckMonitorPowerState │ 0x000001B3 / 435 │ +│ 437 │ NtGdiDdDDICheckMultiPlaneOverlaySupport │ 0x000001B4 / 436 │ +│ 438 │ NtGdiDdDDICheckMultiPlaneOverlaySupport2 │ 0x000001B5 / 437 │ +│ 439 │ NtGdiDdDDICheckMultiPlaneOverlaySupport3 │ 0x000001B6 / 438 │ +│ 440 │ NtGdiDdDDICheckOcclusion │ 0x000001B7 / 439 │ +│ 441 │ NtGdiDdDDICheckSharedResourceAccess │ 0x000001B8 / 440 │ +│ 442 │ NtGdiDdDDICheckVidPnExclusiveOwnership │ 0x000001B9 / 441 │ +│ 443 │ NtGdiDdDDICloseAdapter │ 0x000001BA / 442 │ +│ 444 │ NtGdiDdDDIConfigureSharedResource │ 0x000001BB / 443 │ +│ 445 │ NtGdiDdDDICreateAllocation │ 0x000001BC / 444 │ +│ 446 │ NtGdiDdDDICreateBundleObject │ 0x000001BD / 445 │ +│ 447 │ NtGdiDdDDICreateContext │ 0x000001BE / 446 │ +│ 448 │ NtGdiDdDDICreateContextVirtual │ 0x000001BF / 447 │ +│ 449 │ NtGdiDdDDICreateDCFromMemory │ 0x000001C0 / 448 │ +│ 450 │ NtGdiDdDDICreateDevice │ 0x000001C1 / 449 │ +│ 451 │ NtGdiDdDDICreateHwContext │ 0x000001C2 / 450 │ +│ 452 │ NtGdiDdDDICreateHwQueue │ 0x000001C3 / 451 │ +│ 453 │ NtGdiDdDDICreateKeyedMutex │ 0x000001C4 / 452 │ +│ 454 │ NtGdiDdDDICreateKeyedMutex2 │ 0x000001C5 / 453 │ +│ 455 │ NtGdiDdDDICreateOutputDupl │ 0x000001C6 / 454 │ +│ 456 │ NtGdiDdDDICreateOverlay │ 0x000001C7 / 455 │ +│ 457 │ NtGdiDdDDICreatePagingQueue │ 0x000001C8 / 456 │ +│ 458 │ NtGdiDdDDICreateProtectedSession │ 0x000001C9 / 457 │ +│ 459 │ NtGdiDdDDICreateSwapChain │ 0x000001CA / 458 │ +│ 460 │ NtGdiDdDDICreateSynchronizationObject │ 0x000001CB / 459 │ +│ 461 │ NtGdiDdDDIDDisplayEnum │ 0x000001CC / 460 │ +│ 462 │ NtGdiDdDDIDestroyAllocation │ 0x000001CD / 461 │ +│ 463 │ NtGdiDdDDIDestroyAllocation2 │ 0x000001CE / 462 │ +│ 464 │ NtGdiDdDDIDestroyContext │ 0x000001CF / 463 │ +│ 465 │ NtGdiDdDDIDestroyDCFromMemory │ 0x000001D0 / 464 │ +│ 466 │ NtGdiDdDDIDestroyDevice │ 0x000001D1 / 465 │ +│ 467 │ NtGdiDdDDIDestroyHwContext │ 0x000001D2 / 466 │ +│ 468 │ NtGdiDdDDIDestroyHwQueue │ 0x000001D3 / 467 │ +│ 469 │ NtGdiDdDDIDestroyKeyedMutex │ 0x000001D4 / 468 │ +│ 470 │ NtGdiDdDDIDestroyOutputDupl │ 0x000001D5 / 469 │ +│ 471 │ NtGdiDdDDIDestroyOverlay │ 0x000001D6 / 470 │ +│ 472 │ NtGdiDdDDIDestroyPagingQueue │ 0x000001D7 / 471 │ +│ 473 │ NtGdiDdDDIDestroyProtectedSession │ 0x000001D8 / 472 │ +│ 474 │ NtGdiDdDDIDestroySynchronizationObject │ 0x000001D9 / 473 │ +│ 475 │ NtGdiDdDDIDispMgrCreate │ 0x000001DA / 474 │ +│ 476 │ NtGdiDdDDIDispMgrSourceOperation │ 0x000001DB / 475 │ +│ 477 │ NtGdiDdDDIDispMgrTargetOperation │ 0x000001DC / 476 │ +│ 478 │ NtGdiDdDDIEnumAdapters │ 0x000001DD / 477 │ +│ 479 │ NtGdiDdDDIEnumAdapters2 │ 0x000001DE / 478 │ +│ 480 │ NtGdiDdDDIEscape │ 0x000001DF / 479 │ +│ 481 │ NtGdiDdDDIEvict │ 0x000001E0 / 480 │ +│ 482 │ NtGdiDdDDIExtractBundleObject │ 0x000001E1 / 481 │ +│ 483 │ NtGdiDdDDIFlipOverlay │ 0x000001E2 / 482 │ +│ 484 │ NtGdiDdDDIFlushHeapTransitions │ 0x000001E3 / 483 │ +│ 485 │ NtGdiDdDDIFreeGpuVirtualAddress │ 0x000001E4 / 484 │ +│ 486 │ NtGdiDdDDIGetAllocationPriority │ 0x000001E5 / 485 │ +│ 487 │ NtGdiDdDDIGetCachedHybridQueryValue │ 0x000001E6 / 486 │ +│ 488 │ NtGdiDdDDIGetContextInProcessSchedulingPriority │ 0x000001E7 / 487 │ +│ 489 │ NtGdiDdDDIGetContextSchedulingPriority │ 0x000001E8 / 488 │ +│ 490 │ NtGdiDdDDIGetDWMVerticalBlankEvent │ 0x000001E9 / 489 │ +│ 491 │ NtGdiDdDDIGetDeviceState │ 0x000001EA / 490 │ +│ 492 │ NtGdiDdDDIGetDisplayModeList │ 0x000001EB / 491 │ +│ 493 │ NtGdiDdDDIGetMemoryBudgetTarget │ 0x000001EC / 492 │ +│ 494 │ NtGdiDdDDIGetMultiPlaneOverlayCaps │ 0x000001ED / 493 │ +│ 495 │ NtGdiDdDDIGetMultisampleMethodList │ 0x000001EE / 494 │ +│ 496 │ NtGdiDdDDIGetOverlayState │ 0x000001EF / 495 │ +│ 497 │ NtGdiDdDDIGetPostCompositionCaps │ 0x000001F0 / 496 │ +│ 498 │ NtGdiDdDDIGetPresentHistory │ 0x000001F1 / 497 │ +│ 499 │ NtGdiDdDDIGetPresentQueueEvent │ 0x000001F2 / 498 │ +│ 500 │ NtGdiDdDDIGetProcessDeviceRemovalSupport │ 0x000001F3 / 499 │ +│ 501 │ NtGdiDdDDIGetProcessSchedulingPriorityBand │ 0x000001F4 / 500 │ +│ 502 │ NtGdiDdDDIGetProcessSchedulingPriorityClass │ 0x000001F5 / 501 │ +│ 503 │ NtGdiDdDDIGetResourcePresentPrivateDriverData │ 0x000001F6 / 502 │ +│ 504 │ NtGdiDdDDIGetRuntimeData │ 0x000001F7 / 503 │ +│ 505 │ NtGdiDdDDIGetScanLine │ 0x000001F8 / 504 │ +│ 506 │ NtGdiDdDDIGetSetSwapChainMetadata │ 0x000001F9 / 505 │ +│ 507 │ NtGdiDdDDIGetSharedPrimaryHandle │ 0x000001FA / 506 │ +│ 508 │ NtGdiDdDDIGetSharedResourceAdapterLuid │ 0x000001FB / 507 │ +│ 509 │ NtGdiDdDDIGetSharedResourceAdapterLuidFlipManager │ 0x000001FC / 508 │ +│ 510 │ NtGdiDdDDIGetSwapChainSurfacePhysicalAddress │ 0x000001FD / 509 │ +│ 511 │ NtGdiDdDDIGetYieldPercentage │ 0x000001FE / 510 │ +│ 512 │ NtGdiDdDDIInvalidateActiveVidPn │ 0x000001FF / 511 │ +│ 513 │ NtGdiDdDDIInvalidateCache │ 0x00000200 / 512 │ +│ 514 │ NtGdiDdDDILock │ 0x00000201 / 513 │ +│ 515 │ NtGdiDdDDILock2 │ 0x00000202 / 514 │ +│ 516 │ NtGdiDdDDIMakeResident │ 0x00000203 / 515 │ +│ 517 │ NtGdiDdDDIMapGpuVirtualAddress │ 0x00000204 / 516 │ +│ 518 │ NtGdiDdDDIMarkDeviceAsError │ 0x00000205 / 517 │ +│ 519 │ NtGdiDdDDINetDispGetNextChunkInfo │ 0x00000206 / 518 │ +│ 520 │ NtGdiDdDDINetDispQueryMiracastDisplayDeviceStatus │ 0x00000207 / 519 │ +│ 521 │ NtGdiDdDDINetDispQueryMiracastDisplayDeviceSupport │ 0x00000208 / 520 │ +│ 522 │ NtGdiDdDDINetDispStartMiracastDisplayDevice │ 0x00000209 / 521 │ +│ 523 │ NtGdiDdDDINetDispStopMiracastDisplayDevice │ 0x0000020A / 522 │ +│ 524 │ NtGdiDdDDIOfferAllocations │ 0x0000020B / 523 │ +│ 525 │ NtGdiDdDDIOpenAdapterFromDeviceName │ 0x0000020C / 524 │ +│ 526 │ NtGdiDdDDIOpenAdapterFromHdc │ 0x0000020D / 525 │ +│ 527 │ NtGdiDdDDIOpenAdapterFromLuid │ 0x0000020E / 526 │ +│ 528 │ NtGdiDdDDIOpenBundleObjectNtHandleFromName │ 0x0000020F / 527 │ +│ 529 │ NtGdiDdDDIOpenKeyedMutex │ 0x00000210 / 528 │ +│ 530 │ NtGdiDdDDIOpenKeyedMutex2 │ 0x00000211 / 529 │ +│ 531 │ NtGdiDdDDIOpenKeyedMutexFromNtHandle │ 0x00000212 / 530 │ +│ 532 │ NtGdiDdDDIOpenNtHandleFromName │ 0x00000213 / 531 │ +│ 533 │ NtGdiDdDDIOpenProtectedSessionFromNtHandle │ 0x00000214 / 532 │ +│ 534 │ NtGdiDdDDIOpenResource │ 0x00000215 / 533 │ +│ 535 │ NtGdiDdDDIOpenResourceFromNtHandle │ 0x00000216 / 534 │ +│ 536 │ NtGdiDdDDIOpenSwapChain │ 0x00000217 / 535 │ +│ 537 │ NtGdiDdDDIOpenSyncObjectFromNtHandle │ 0x00000218 / 536 │ +│ 538 │ NtGdiDdDDIOpenSyncObjectFromNtHandle2 │ 0x00000219 / 537 │ +│ 539 │ NtGdiDdDDIOpenSyncObjectNtHandleFromName │ 0x0000021A / 538 │ +│ 540 │ NtGdiDdDDIOpenSynchronizationObject │ 0x0000021B / 539 │ +│ 541 │ NtGdiDdDDIOutputDuplGetFrameInfo │ 0x0000021C / 540 │ +│ 542 │ NtGdiDdDDIOutputDuplGetMetaData │ 0x0000021D / 541 │ +│ 543 │ NtGdiDdDDIOutputDuplGetPointerShapeData │ 0x0000021E / 542 │ +│ 544 │ NtGdiDdDDIOutputDuplPresent │ 0x0000021F / 543 │ +│ 545 │ NtGdiDdDDIOutputDuplReleaseFrame │ 0x00000220 / 544 │ +│ 546 │ NtGdiDdDDIPollDisplayChildren │ 0x00000221 / 545 │ +│ 547 │ NtGdiDdDDIPresent │ 0x00000222 / 546 │ +│ 548 │ NtGdiDdDDIPresentMultiPlaneOverlay │ 0x00000223 / 547 │ +│ 549 │ NtGdiDdDDIPresentMultiPlaneOverlay2 │ 0x00000224 / 548 │ +│ 550 │ NtGdiDdDDIPresentMultiPlaneOverlay3 │ 0x00000225 / 549 │ +│ 551 │ NtGdiDdDDIPresentRedirected │ 0x00000226 / 550 │ +│ 552 │ NtGdiDdDDIQueryAdapterInfo │ 0x00000227 / 551 │ +│ 553 │ NtGdiDdDDIQueryAllocationResidency │ 0x00000228 / 552 │ +│ 554 │ NtGdiDdDDIQueryClockCalibration │ 0x00000229 / 553 │ +│ 555 │ NtGdiDdDDIQueryFSEBlock │ 0x0000022A / 554 │ +│ 556 │ NtGdiDdDDIQueryProcessOfferInfo │ 0x0000022B / 555 │ +│ 557 │ NtGdiDdDDIQueryProtectedSessionInfoFromNtHandle │ 0x0000022C / 556 │ +│ 558 │ NtGdiDdDDIQueryProtectedSessionStatus │ 0x0000022D / 557 │ +│ 559 │ NtGdiDdDDIQueryRemoteVidPnSourceFromGdiDisplayName │ 0x0000022E / 558 │ +│ 560 │ NtGdiDdDDIQueryResourceInfo │ 0x0000022F / 559 │ +│ 561 │ NtGdiDdDDIQueryResourceInfoFromNtHandle │ 0x00000230 / 560 │ +│ 562 │ NtGdiDdDDIQueryStatistics │ 0x00000231 / 561 │ +│ 563 │ NtGdiDdDDIQueryVidPnExclusiveOwnership │ 0x00000232 / 562 │ +│ 564 │ NtGdiDdDDIQueryVideoMemoryInfo │ 0x00000233 / 563 │ +│ 565 │ NtGdiDdDDIReclaimAllocations │ 0x00000234 / 564 │ +│ 566 │ NtGdiDdDDIReclaimAllocations2 │ 0x00000235 / 565 │ +│ 567 │ NtGdiDdDDIReleaseKeyedMutex │ 0x00000236 / 566 │ +│ 568 │ NtGdiDdDDIReleaseKeyedMutex2 │ 0x00000237 / 567 │ +│ 569 │ NtGdiDdDDIReleaseProcessVidPnSourceOwners │ 0x00000238 / 568 │ +│ 570 │ NtGdiDdDDIReleaseSwapChain │ 0x00000239 / 569 │ +│ 571 │ NtGdiDdDDIRemoveSurfaceFromSwapChain │ 0x0000023A / 570 │ +│ 572 │ NtGdiDdDDIRender │ 0x0000023B / 571 │ +│ 573 │ NtGdiDdDDIReserveGpuVirtualAddress │ 0x0000023C / 572 │ +│ 574 │ NtGdiDdDDISetAllocationPriority │ 0x0000023D / 573 │ +│ 575 │ NtGdiDdDDISetContextInProcessSchedulingPriority │ 0x0000023E / 574 │ +│ 576 │ NtGdiDdDDISetContextSchedulingPriority │ 0x0000023F / 575 │ +│ 577 │ NtGdiDdDDISetDisplayMode │ 0x00000240 / 576 │ +│ 578 │ NtGdiDdDDISetDodIndirectSwapchain │ 0x00000241 / 577 │ +│ 579 │ NtGdiDdDDISetFSEBlock │ 0x00000242 / 578 │ +│ 580 │ NtGdiDdDDISetGammaRamp │ 0x00000243 / 579 │ +│ 581 │ NtGdiDdDDISetHwProtectionTeardownRecovery │ 0x00000244 / 580 │ +│ 582 │ NtGdiDdDDISetMemoryBudgetTarget │ 0x00000245 / 581 │ +│ 583 │ NtGdiDdDDISetMonitorColorSpaceTransform │ 0x00000246 / 582 │ +│ 584 │ NtGdiDdDDISetProcessDeviceRemovalSupport │ 0x00000247 / 583 │ +│ 585 │ NtGdiDdDDISetProcessSchedulingPriorityBand │ 0x00000248 / 584 │ +│ 586 │ NtGdiDdDDISetProcessSchedulingPriorityClass │ 0x00000249 / 585 │ +│ 587 │ NtGdiDdDDISetQueuedLimit │ 0x0000024A / 586 │ +│ 588 │ NtGdiDdDDISetStablePowerState │ 0x0000024B / 587 │ +│ 589 │ NtGdiDdDDISetStereoEnabled │ 0x0000024C / 588 │ +│ 590 │ NtGdiDdDDISetSyncRefreshCountWaitTarget │ 0x0000024D / 589 │ +│ 591 │ NtGdiDdDDISetVidPnSourceHwProtection │ 0x0000024E / 590 │ +│ 592 │ NtGdiDdDDISetVidPnSourceOwner │ 0x0000024F / 591 │ +│ 593 │ NtGdiDdDDISetYieldPercentage │ 0x00000250 / 592 │ +│ 594 │ NtGdiDdDDIShareObjects │ 0x00000251 / 593 │ +│ 595 │ NtGdiDdDDISharedPrimaryLockNotification │ 0x00000252 / 594 │ +│ 596 │ NtGdiDdDDISharedPrimaryUnLockNotification │ 0x00000253 / 595 │ +│ 597 │ NtGdiDdDDISignalSynchronizationObject │ 0x00000254 / 596 │ +│ 598 │ NtGdiDdDDISignalSynchronizationObjectFromCpu │ 0x00000255 / 597 │ +│ 599 │ NtGdiDdDDISignalSynchronizationObjectFromGpu │ 0x00000256 / 598 │ +│ 600 │ NtGdiDdDDISignalSynchronizationObjectFromGpu2 │ 0x00000257 / 599 │ +│ 601 │ NtGdiDdDDISubmitCommand │ 0x00000258 / 600 │ +│ 602 │ NtGdiDdDDISubmitCommandToHwQueue │ 0x00000259 / 601 │ +│ 603 │ NtGdiDdDDISubmitSignalSyncObjectsToHwQueue │ 0x0000025A / 602 │ +│ 604 │ NtGdiDdDDISubmitWaitForSyncObjectsToHwQueue │ 0x0000025B / 603 │ +│ 605 │ NtGdiDdDDITrimProcessCommitment │ 0x0000025C / 604 │ +│ 606 │ NtGdiDdDDIUnOrderedPresentSwapChain │ 0x0000025D / 605 │ +│ 607 │ NtGdiDdDDIUnlock │ 0x0000025E / 606 │ +│ 608 │ NtGdiDdDDIUnlock2 │ 0x0000025F / 607 │ +│ 609 │ NtGdiDdDDIUpdateAllocationProperty │ 0x00000260 / 608 │ +│ 610 │ NtGdiDdDDIUpdateGpuVirtualAddress │ 0x00000261 / 609 │ +│ 611 │ NtGdiDdDDIUpdateOverlay │ 0x00000262 / 610 │ +│ 612 │ NtGdiDdDDIWaitForIdle │ 0x00000263 / 611 │ +│ 613 │ NtGdiDdDDIWaitForSynchronizationObject │ 0x00000264 / 612 │ +│ 614 │ NtGdiDdDDIWaitForSynchronizationObjectFromCpu │ 0x00000265 / 613 │ +│ 615 │ NtGdiDdDDIWaitForSynchronizationObjectFromGpu │ 0x00000266 / 614 │ +│ 616 │ NtGdiDdDDIWaitForVerticalBlankEvent │ 0x00000267 / 615 │ +│ 617 │ NtGdiDdDDIWaitForVerticalBlankEvent2 │ 0x00000268 / 616 │ +│ 618 │ NtGdiDdDestroyFullscreenSprite │ 0x00000269 / 617 │ +│ 619 │ NtGdiDdNotifyFullscreenSpriteUpdate │ 0x0000026A / 618 │ +│ 620 │ NtGdiDdQueryVisRgnUniqueness │ 0x0000026B / 619 │ +│ 621 │ NtGdiDeleteColorTransform │ 0x0000026C / 620 │ +│ 622 │ NtGdiDescribePixelFormat │ 0x0000026D / 621 │ +│ 623 │ NtGdiDestroyOPMProtectedOutput │ 0x0000026E / 622 │ +│ 624 │ NtGdiDestroyPhysicalMonitor │ 0x0000026F / 623 │ +│ 625 │ NtGdiDoBanding │ 0x00000270 / 624 │ +│ 626 │ NtGdiDrawEscape │ 0x00000271 / 625 │ +│ 627 │ NtGdiDwmCreatedBitmapRemotingOutput │ 0x00000272 / 626 │ +│ 628 │ NtGdiEllipse │ 0x00000273 / 627 │ +│ 629 │ NtGdiEnableEudc │ 0x00000274 / 628 │ +│ 630 │ NtGdiEndDoc │ 0x00000275 / 629 │ +│ 631 │ NtGdiEndGdiRendering │ 0x00000276 / 630 │ +│ 632 │ NtGdiEndPage │ 0x00000277 / 631 │ +│ 633 │ NtGdiEngAlphaBlend │ 0x00000278 / 632 │ +│ 634 │ NtGdiEngAssociateSurface │ 0x00000279 / 633 │ +│ 635 │ NtGdiEngBitBlt │ 0x0000027A / 634 │ +│ 636 │ NtGdiEngCheckAbort │ 0x0000027B / 635 │ +│ 637 │ NtGdiEngComputeGlyphSet │ 0x0000027C / 636 │ +│ 638 │ NtGdiEngCopyBits │ 0x0000027D / 637 │ +│ 639 │ NtGdiEngCreateBitmap │ 0x0000027E / 638 │ +│ 640 │ NtGdiEngCreateClip │ 0x0000027F / 639 │ +│ 641 │ NtGdiEngCreateDeviceBitmap │ 0x00000280 / 640 │ +│ 642 │ NtGdiEngCreateDeviceSurface │ 0x00000281 / 641 │ +│ 643 │ NtGdiEngCreatePalette │ 0x00000282 / 642 │ +│ 644 │ NtGdiEngDeleteClip │ 0x00000283 / 643 │ +│ 645 │ NtGdiEngDeletePalette │ 0x00000284 / 644 │ +│ 646 │ NtGdiEngDeletePath │ 0x00000285 / 645 │ +│ 647 │ NtGdiEngDeleteSurface │ 0x00000286 / 646 │ +│ 648 │ NtGdiEngEraseSurface │ 0x00000287 / 647 │ +│ 649 │ NtGdiEngFillPath │ 0x00000288 / 648 │ +│ 650 │ NtGdiEngGradientFill │ 0x00000289 / 649 │ +│ 651 │ NtGdiEngLineTo │ 0x0000028A / 650 │ +│ 652 │ NtGdiEngLockSurface │ 0x0000028B / 651 │ +│ 653 │ NtGdiEngMarkBandingSurface │ 0x0000028C / 652 │ +│ 654 │ NtGdiEngPaint │ 0x0000028D / 653 │ +│ 655 │ NtGdiEngPlgBlt │ 0x0000028E / 654 │ +│ 656 │ NtGdiEngStretchBlt │ 0x0000028F / 655 │ +│ 657 │ NtGdiEngStretchBltROP │ 0x00000290 / 656 │ +│ 658 │ NtGdiEngStrokeAndFillPath │ 0x00000291 / 657 │ +│ 659 │ NtGdiEngStrokePath │ 0x00000292 / 658 │ +│ 660 │ NtGdiEngTextOut │ 0x00000293 / 659 │ +│ 661 │ NtGdiEngTransparentBlt │ 0x00000294 / 660 │ +│ 662 │ NtGdiEngUnlockSurface │ 0x00000295 / 661 │ +│ 663 │ NtGdiEnsureDpiDepDefaultGuiFontForPlateau │ 0x00000296 / 662 │ +│ 664 │ NtGdiEnumFonts │ 0x00000297 / 663 │ +│ 665 │ NtGdiEnumObjects │ 0x00000298 / 664 │ +│ 666 │ NtGdiEudcLoadUnloadLink │ 0x00000299 / 665 │ +│ 667 │ NtGdiExtFloodFill │ 0x0000029A / 666 │ +│ 668 │ NtGdiFONTOBJ_cGetAllGlyphHandles │ 0x0000029B / 667 │ +│ 669 │ NtGdiFONTOBJ_cGetGlyphs │ 0x0000029C / 668 │ +│ 670 │ NtGdiFONTOBJ_pQueryGlyphAttrs │ 0x0000029D / 669 │ +│ 671 │ NtGdiFONTOBJ_pfdg │ 0x0000029E / 670 │ +│ 672 │ NtGdiFONTOBJ_pifi │ 0x0000029F / 671 │ +│ 673 │ NtGdiFONTOBJ_pvTrueTypeFontFile │ 0x000002A0 / 672 │ +│ 674 │ NtGdiFONTOBJ_pxoGetXform │ 0x000002A1 / 673 │ +│ 675 │ NtGdiFONTOBJ_vGetInfo │ 0x000002A2 / 674 │ +│ 676 │ NtGdiFlattenPath │ 0x000002A3 / 675 │ +│ 677 │ NtGdiFontIsLinked │ 0x000002A4 / 676 │ +│ 678 │ NtGdiForceUFIMapping │ 0x000002A5 / 677 │ +│ 679 │ NtGdiFrameRgn │ 0x000002A6 / 678 │ +│ 680 │ NtGdiFullscreenControl │ 0x000002A7 / 679 │ +│ 681 │ NtGdiGetBitmapDpiScaleValue │ 0x000002A8 / 680 │ +│ 682 │ NtGdiGetBoundsRect │ 0x000002A9 / 681 │ +│ 683 │ NtGdiGetCOPPCompatibleOPMInformation │ 0x000002AA / 682 │ +│ 684 │ NtGdiGetCertificate │ 0x000002AB / 683 │ +│ 685 │ NtGdiGetCertificateByHandle │ 0x000002AC / 684 │ +│ 686 │ NtGdiGetCertificateSize │ 0x000002AD / 685 │ +│ 687 │ NtGdiGetCertificateSizeByHandle │ 0x000002AE / 686 │ +│ 688 │ NtGdiGetCharABCWidthsW │ 0x000002AF / 687 │ +│ 689 │ NtGdiGetCharacterPlacementW │ 0x000002B0 / 688 │ +│ 690 │ NtGdiGetColorAdjustment │ 0x000002B1 / 689 │ +│ 691 │ NtGdiGetColorSpaceforBitmap │ 0x000002B2 / 690 │ +│ 692 │ NtGdiGetCurrentDpiInfo │ 0x000002B3 / 691 │ +│ 693 │ NtGdiGetDCDpiScaleValue │ 0x000002B4 / 692 │ +│ 694 │ NtGdiGetDeviceCaps │ 0x000002B5 / 693 │ +│ 695 │ NtGdiGetDeviceCapsAll │ 0x000002B6 / 694 │ +│ 696 │ NtGdiGetDeviceWidth │ 0x000002B7 / 695 │ +│ 697 │ NtGdiGetDhpdev │ 0x000002B8 / 696 │ +│ 698 │ NtGdiGetETM │ 0x000002B9 / 697 │ +│ 699 │ NtGdiGetEmbUFI │ 0x000002BA / 698 │ +│ 700 │ NtGdiGetEmbedFonts │ 0x000002BB / 699 │ +│ 701 │ NtGdiGetEntry │ 0x000002BC / 700 │ +│ 702 │ NtGdiGetEudcTimeStampEx │ 0x000002BD / 701 │ +│ 703 │ NtGdiGetFontFileData │ 0x000002BE / 702 │ +│ 704 │ NtGdiGetFontFileInfo │ 0x000002BF / 703 │ +│ 705 │ NtGdiGetFontResourceInfoInternalW │ 0x000002C0 / 704 │ +│ 706 │ NtGdiGetFontUnicodeRanges │ 0x000002C1 / 705 │ +│ 707 │ NtGdiGetGlyphIndicesW │ 0x000002C2 / 706 │ +│ 708 │ NtGdiGetGlyphIndicesWInternal │ 0x000002C3 / 707 │ +│ 709 │ NtGdiGetGlyphOutline │ 0x000002C4 / 708 │ +│ 710 │ NtGdiGetKerningPairs │ 0x000002C5 / 709 │ +│ 711 │ NtGdiGetLinkedUFIs │ 0x000002C6 / 710 │ +│ 712 │ NtGdiGetMiterLimit │ 0x000002C7 / 711 │ +│ 713 │ NtGdiGetMonitorID │ 0x000002C8 / 712 │ +│ 714 │ NtGdiGetNumberOfPhysicalMonitors │ 0x000002C9 / 713 │ +│ 715 │ NtGdiGetOPMInformation │ 0x000002CA / 714 │ +│ 716 │ NtGdiGetOPMRandomNumber │ 0x000002CB / 715 │ +│ 717 │ NtGdiGetObjectBitmapHandle │ 0x000002CC / 716 │ +│ 718 │ NtGdiGetPath │ 0x000002CD / 717 │ +│ 719 │ NtGdiGetPerBandInfo │ 0x000002CE / 718 │ +│ 720 │ NtGdiGetPhysicalMonitorDescription │ 0x000002CF / 719 │ +│ 721 │ NtGdiGetPhysicalMonitors │ 0x000002D0 / 720 │ +│ 722 │ NtGdiGetProcessSessionFonts │ 0x000002D1 / 721 │ +│ 723 │ NtGdiGetPublicFontTableChangeCookie │ 0x000002D2 / 722 │ +│ 724 │ NtGdiGetRealizationInfo │ 0x000002D3 / 723 │ +│ 725 │ NtGdiGetServerMetaFileBits │ 0x000002D4 / 724 │ +│ 726 │ NtGdiGetSpoolMessage │ 0x000002D5 / 725 │ +│ 727 │ NtGdiGetStats │ 0x000002D6 / 726 │ +│ 728 │ NtGdiGetStringBitmapW │ 0x000002D7 / 727 │ +│ 729 │ NtGdiGetSuggestedOPMProtectedOutputArraySize │ 0x000002D8 / 728 │ +│ 730 │ NtGdiGetTextExtentExW │ 0x000002D9 / 729 │ +│ 731 │ NtGdiGetUFI │ 0x000002DA / 730 │ +│ 732 │ NtGdiGetUFIPathname │ 0x000002DB / 731 │ +│ 733 │ NtGdiGradientFill │ 0x000002DC / 732 │ +│ 734 │ NtGdiHLSurfGetInformation │ 0x000002DD / 733 │ +│ 735 │ NtGdiHLSurfSetInformation │ 0x000002DE / 734 │ +│ 736 │ NtGdiHT_Get8BPPFormatPalette │ 0x000002DF / 735 │ +│ 737 │ NtGdiHT_Get8BPPMaskPalette │ 0x000002E0 / 736 │ +│ 738 │ NtGdiIcmBrushInfo │ 0x000002E1 / 737 │ +│ 739 │ NtGdiInit │ 0x000002E2 / 738 │ +│ 740 │ NtGdiInitSpool │ 0x000002E3 / 739 │ +│ 741 │ NtGdiMakeFontDir │ 0x000002E4 / 740 │ +│ 742 │ NtGdiMakeInfoDC │ 0x000002E5 / 741 │ +│ 743 │ NtGdiMakeObjectUnXferable │ 0x000002E6 / 742 │ +│ 744 │ NtGdiMakeObjectXferable │ 0x000002E7 / 743 │ +│ 745 │ NtGdiMirrorWindowOrg │ 0x000002E8 / 744 │ +│ 746 │ NtGdiMonoBitmap │ 0x000002E9 / 745 │ +│ 747 │ NtGdiMoveTo │ 0x000002EA / 746 │ +│ 748 │ NtGdiOffsetClipRgn │ 0x000002EB / 747 │ +│ 749 │ NtGdiPATHOBJ_bEnum │ 0x000002EC / 748 │ +│ 750 │ NtGdiPATHOBJ_bEnumClipLines │ 0x000002ED / 749 │ +│ 751 │ NtGdiPATHOBJ_vEnumStart │ 0x000002EE / 750 │ +│ 752 │ NtGdiPATHOBJ_vEnumStartClipLines │ 0x000002EF / 751 │ +│ 753 │ NtGdiPATHOBJ_vGetBounds │ 0x000002F0 / 752 │ +│ 754 │ NtGdiPathToRegion │ 0x000002F1 / 753 │ +│ 755 │ NtGdiPlgBlt │ 0x000002F2 / 754 │ +│ 756 │ NtGdiPolyDraw │ 0x000002F3 / 755 │ +│ 757 │ NtGdiPolyTextOutW │ 0x000002F4 / 756 │ +│ 758 │ NtGdiPtInRegion │ 0x000002F5 / 757 │ +│ 759 │ NtGdiPtVisible │ 0x000002F6 / 758 │ +│ 760 │ NtGdiQueryFonts │ 0x000002F7 / 759 │ +│ 761 │ NtGdiRemoveFontResourceW │ 0x000002F8 / 760 │ +│ 762 │ NtGdiRemoveMergeFont │ 0x000002F9 / 761 │ +│ 763 │ NtGdiResetDC │ 0x000002FA / 762 │ +│ 764 │ NtGdiResizePalette │ 0x000002FB / 763 │ +│ 765 │ NtGdiRoundRect │ 0x000002FC / 764 │ +│ 766 │ NtGdiSTROBJ_bEnum │ 0x000002FD / 765 │ +│ 767 │ NtGdiSTROBJ_bEnumPositionsOnly │ 0x000002FE / 766 │ +│ 768 │ NtGdiSTROBJ_bGetAdvanceWidths │ 0x000002FF / 767 │ +│ 769 │ NtGdiSTROBJ_dwGetCodePage │ 0x00000300 / 768 │ +│ 770 │ NtGdiSTROBJ_vEnumStart │ 0x00000301 / 769 │ +│ 771 │ NtGdiScaleRgn │ 0x00000302 / 770 │ +│ 772 │ NtGdiScaleValues │ 0x00000303 / 771 │ +│ 773 │ NtGdiScaleViewportExtEx │ 0x00000304 / 772 │ +│ 774 │ NtGdiScaleWindowExtEx │ 0x00000305 / 773 │ +│ 775 │ NtGdiSelectBrush │ 0x00000306 / 774 │ +│ 776 │ NtGdiSelectClipPath │ 0x00000307 / 775 │ +│ 777 │ NtGdiSelectPen │ 0x00000308 / 776 │ +│ 778 │ NtGdiSetBitmapAttributes │ 0x00000309 / 777 │ +│ 779 │ NtGdiSetBrushAttributes │ 0x0000030A / 778 │ +│ 780 │ NtGdiSetColorAdjustment │ 0x0000030B / 779 │ +│ 781 │ NtGdiSetColorSpace │ 0x0000030C / 780 │ +│ 782 │ NtGdiSetFontXform │ 0x0000030D / 781 │ +│ 783 │ NtGdiSetIcmMode │ 0x0000030E / 782 │ +│ 784 │ NtGdiSetLinkedUFIs │ 0x0000030F / 783 │ +│ 785 │ NtGdiSetMagicColors │ 0x00000310 / 784 │ +│ 786 │ NtGdiSetOPMSigningKeyAndSequenceNumbers │ 0x00000311 / 785 │ +│ 787 │ NtGdiSetPUMPDOBJ │ 0x00000312 / 786 │ +│ 788 │ NtGdiSetPixelFormat │ 0x00000313 / 787 │ +│ 789 │ NtGdiSetRectRgn │ 0x00000314 / 788 │ +│ 790 │ NtGdiSetSizeDevice │ 0x00000315 / 789 │ +│ 791 │ NtGdiSetSystemPaletteUse │ 0x00000316 / 790 │ +│ 792 │ NtGdiSetTextJustification │ 0x00000317 / 791 │ +│ 793 │ NtGdiSetUMPDSandboxState │ 0x00000318 / 792 │ +│ 794 │ NtGdiStartDoc │ 0x00000319 / 793 │ +│ 795 │ NtGdiStartPage │ 0x0000031A / 794 │ +│ 796 │ NtGdiStrokeAndFillPath │ 0x0000031B / 795 │ +│ 797 │ NtGdiStrokePath │ 0x0000031C / 796 │ +│ 798 │ NtGdiSwapBuffers │ 0x0000031D / 797 │ +│ 799 │ NtGdiTransparentBlt │ 0x0000031E / 798 │ +│ 800 │ NtGdiUMPDEngFreeUserMem │ 0x0000031F / 799 │ +│ 801 │ NtGdiUnloadPrinterDriver │ 0x00000320 / 800 │ +│ 802 │ NtGdiUnmapMemFont │ 0x00000321 / 801 │ +│ 803 │ NtGdiUpdateColors │ 0x00000322 / 802 │ +│ 804 │ NtGdiUpdateTransform │ 0x00000323 / 803 │ +│ 805 │ NtGdiWaitForTextReady │ 0x00000324 / 804 │ +│ 806 │ NtGdiWidenPath │ 0x00000325 / 805 │ +│ 807 │ NtGdiXFORMOBJ_bApplyXform │ 0x00000326 / 806 │ +│ 808 │ NtGdiXFORMOBJ_iGetXform │ 0x00000327 / 807 │ +│ 809 │ NtGdiXLATEOBJ_cGetPalette │ 0x00000328 / 808 │ +│ 810 │ NtGdiXLATEOBJ_hGetColorTransform │ 0x00000329 / 809 │ +│ 811 │ NtGdiXLATEOBJ_iXlate │ 0x0000032A / 810 │ +│ 812 │ NtUserGetOwnerTransformedMonitorRect │ 0x0000032B / 811 │ +│ 813 │ NtHWCursorUpdatePointer │ 0x0000032C / 812 │ +│ 814 │ NtInputSpaceRegionFromPoint │ 0x0000032D / 813 │ +│ 815 │ NtIsOneCoreTransformMode │ 0x0000032E / 814 │ +│ 816 │ NtKSTInitialize │ 0x0000032F / 815 │ +│ 817 │ NtKSTWait │ 0x00000330 / 816 │ +│ 818 │ NtMITAccessibilityTimerNotification │ 0x00000331 / 817 │ +│ 819 │ NtMITActivateInputProcessing │ 0x00000332 / 818 │ +│ 820 │ NtMITConfigureVirtualTouchpad │ 0x00000333 / 819 │ +│ 821 │ NtMITCoreMsgKOpenConnectionTo │ 0x00000334 / 820 │ +│ 822 │ NtMITDeactivateInputProcessing │ 0x00000335 / 821 │ +│ 823 │ NtMITDisableMouseIntercept │ 0x00000336 / 822 │ +│ 824 │ NtMITDispatchCompletion │ 0x00000337 / 823 │ +│ 825 │ NtMITEnableMouseIntercept │ 0x00000338 / 824 │ +│ 826 │ NtMITGetCursorUpdateHandle │ 0x00000339 / 825 │ +│ 827 │ NtMITInitMinuserThread │ 0x0000033A / 826 │ +│ 828 │ NtMITMinuserSetInputTransformOffset │ 0x0000033B / 827 │ +│ 829 │ NtMITMinuserWindowDestroyed │ 0x0000033C / 828 │ +│ 830 │ NtMITPostMouseInputMessage │ 0x0000033D / 829 │ +│ 831 │ NtMITPostThreadEventMessage │ 0x0000033E / 830 │ +│ 832 │ NtMITPostWindowEventMessage │ 0x0000033F / 831 │ +│ 833 │ NtMITPrepareReceiveInputMessage │ 0x00000340 / 832 │ +│ 834 │ NtMITPrepareSendInputMessage │ 0x00000341 / 833 │ +│ 835 │ NtMITProcessDelegateCapturedPointers │ 0x00000342 / 834 │ +│ 836 │ NtMITSetInputCallbacks │ 0x00000343 / 835 │ +│ 837 │ NtMITSetInputDelegationMode │ 0x00000344 / 836 │ +│ 838 │ NtMITSetInputObservationState │ 0x00000345 / 837 │ +│ 839 │ NtMITSetKeyboardInputRoutingPolicy │ 0x00000346 / 838 │ +│ 840 │ NtMITSetKeyboardOverriderState │ 0x00000347 / 839 │ +│ 841 │ NtMITSetLastInputRecipient │ 0x00000348 / 840 │ +│ 842 │ NtMITSynthesizeKeyboardInput │ 0x00000349 / 841 │ +│ 843 │ NtMITSynthesizeMouseInput │ 0x0000034A / 842 │ +│ 844 │ NtMITSynthesizeTouchInput │ 0x0000034B / 843 │ +│ 845 │ NtMITUninitMinuserThread │ 0x0000034C / 844 │ +│ 846 │ NtMITUpdateInputGlobals │ 0x0000034D / 845 │ +│ 847 │ NtMapVisualRelativePoints │ 0x0000034E / 846 │ +│ 848 │ NtMinGetInputTransform │ 0x0000034F / 847 │ +│ 849 │ NtMinInteropCoreMessagingWithInput │ 0x00000350 / 848 │ +│ 850 │ NtMinQPeekForInput │ 0x00000351 / 849 │ +│ 851 │ NtMinQSuspendInputProcessing │ 0x00000352 / 850 │ +│ 852 │ NtMinQUpdateWakeMask │ 0x00000353 / 851 │ +│ 853 │ NtModerncoreBeginLayoutUpdate │ 0x00000354 / 852 │ +│ 854 │ NtModerncoreCreateDCompositionHwndTarget │ 0x00000355 / 853 │ +│ 855 │ NtModerncoreCreateGDIHwndTarget │ 0x00000356 / 854 │ +│ 856 │ NtModerncoreDestroyDCompositionHwndTarget │ 0x00000357 / 855 │ +│ 857 │ NtModerncoreDestroyGDIHwndTarget │ 0x00000358 / 856 │ +│ 858 │ NtModerncoreEnableResizeLayoutSynchronization │ 0x00000359 / 857 │ +│ 859 │ NtModerncoreGetNavigationWindowVisual │ 0x0000035A / 858 │ +│ 860 │ NtModerncoreGetResizeDCompositionSynchronizationObject │ 0x0000035B / 859 │ +│ 861 │ NtModerncoreGetWindowContentVisual │ 0x0000035C / 860 │ +│ 862 │ NtModerncoreIdleTimerThread │ 0x0000035D / 861 │ +│ 863 │ NtModerncoreIsResizeLayoutSynchronizationEnabled │ 0x0000035E / 862 │ +│ 864 │ NtModerncoreProcessConnect │ 0x0000035F / 863 │ +│ 865 │ NtModerncoreRegisterEnhancedNavigationWindowHandle │ 0x00000360 / 864 │ +│ 866 │ NtModerncoreRegisterNavigationWindowHandle │ 0x00000361 / 865 │ +│ 867 │ NtModerncoreSetNavigationServiceSid │ 0x00000362 / 866 │ +│ 868 │ NtModerncoreUnregisterNavigationWindowHandle │ 0x00000363 / 867 │ +│ 869 │ NtNotifyPresentToCompositionSurface │ 0x00000364 / 868 │ +│ 870 │ NtOpenCompositionSurfaceDirtyRegion │ 0x00000365 / 869 │ +│ 871 │ NtOpenCompositionSurfaceRealizationInfo │ 0x00000366 / 870 │ +│ 872 │ NtOpenCompositionSurfaceSectionInfo │ 0x00000367 / 871 │ +│ 873 │ NtQueryCompositionInputIsImplicit │ 0x00000368 / 872 │ +│ 874 │ NtQueryCompositionInputQueueAndTransform │ 0x00000369 / 873 │ +│ 875 │ NtQueryCompositionInputSink │ 0x0000036A / 874 │ +│ 876 │ NtQueryCompositionInputSinkLuid │ 0x0000036B / 875 │ +│ 877 │ NtQueryCompositionInputSinkViewId │ 0x0000036C / 876 │ +│ 878 │ NtQueryCompositionSurfaceBinding │ 0x0000036D / 877 │ +│ 879 │ NtQueryCompositionSurfaceFrameRate │ 0x0000036E / 878 │ +│ 880 │ NtQueryCompositionSurfaceHDRMetaData │ 0x0000036F / 879 │ +│ 881 │ NtQueryCompositionSurfaceRenderingRealization │ 0x00000370 / 880 │ +│ 882 │ NtQueryCompositionSurfaceStatistics │ 0x00000371 / 881 │ +│ 883 │ NtRIMAddInputObserver │ 0x00000372 / 882 │ +│ 884 │ NtRIMAreSiblingDevices │ 0x00000373 / 883 │ +│ 885 │ NtRIMDeviceIoControl │ 0x00000374 / 884 │ +│ 886 │ NtRIMEnableMonitorMappingForDevice │ 0x00000375 / 885 │ +│ 887 │ NtRIMFreeInputBuffer │ 0x00000376 / 886 │ +│ 888 │ NtRIMGetDevicePreparsedData │ 0x00000377 / 887 │ +│ 889 │ NtRIMGetDevicePreparsedDataLockfree │ 0x00000378 / 888 │ +│ 890 │ NtRIMGetDeviceProperties │ 0x00000379 / 889 │ +│ 891 │ NtRIMGetDevicePropertiesLockfree │ 0x0000037A / 890 │ +│ 892 │ NtRIMGetPhysicalDeviceRect │ 0x0000037B / 891 │ +│ 893 │ NtRIMGetSourceProcessId │ 0x0000037C / 892 │ +│ 894 │ NtRIMObserveNextInput │ 0x0000037D / 893 │ +│ 895 │ NtRIMOnAsyncPnpWorkNotification │ 0x0000037E / 894 │ +│ 896 │ NtRIMOnPnpNotification │ 0x0000037F / 895 │ +│ 897 │ NtRIMOnTimerNotification │ 0x00000380 / 896 │ +│ 898 │ NtRIMQueryDevicePath │ 0x00000381 / 897 │ +│ 899 │ NtRIMReadInput │ 0x00000382 / 898 │ +│ 900 │ NtRIMRegisterForInputEx │ 0x00000383 / 899 │ +│ 901 │ NtRIMRemoveInputObserver │ 0x00000384 / 900 │ +│ 902 │ NtRIMSetDeadzoneRotation │ 0x00000385 / 901 │ +│ 903 │ NtRIMSetExtendedDeviceProperty │ 0x00000386 / 902 │ +│ 904 │ NtRIMSetTestModeStatus │ 0x00000387 / 903 │ +│ 905 │ NtRIMUnregisterForInput │ 0x00000388 / 904 │ +│ 906 │ NtRIMUpdateInputObserverRegistration │ 0x00000389 / 905 │ +│ 907 │ NtSetCompositionSurfaceAnalogExclusive │ 0x0000038A / 906 │ +│ 908 │ NtSetCompositionSurfaceBufferUsage │ 0x0000038B / 907 │ +│ 909 │ NtSetCompositionSurfaceDirectFlipState │ 0x0000038C / 908 │ +│ 910 │ NtSetCompositionSurfaceIndependentFlipInfo │ 0x0000038D / 909 │ +│ 911 │ NtSetCompositionSurfaceStatistics │ 0x0000038E / 910 │ +│ 912 │ NtSetCursorInputSpace │ 0x0000038F / 911 │ +│ 913 │ NtSetPointerDeviceInputSpace │ 0x00000390 / 912 │ +│ 914 │ NtSetShellCursorState │ 0x00000391 / 913 │ +│ 915 │ NtTokenManagerConfirmOutstandingAnalogToken │ 0x00000392 / 914 │ +│ 916 │ NtTokenManagerCreateCompositionTokenHandle │ 0x00000393 / 915 │ +│ 917 │ NtTokenManagerCreateFlipObjectReturnTokenHandle │ 0x00000394 / 916 │ +│ 918 │ NtTokenManagerCreateFlipObjectTokenHandle │ 0x00000395 / 917 │ +│ 919 │ NtTokenManagerGetAnalogExclusiveSurfaceUpdates │ 0x00000396 / 918 │ +│ 920 │ NtTokenManagerGetAnalogExclusiveTokenEvent │ 0x00000397 / 919 │ +│ 921 │ NtTokenManagerOpenSectionAndEvents │ 0x00000398 / 920 │ +│ 922 │ NtTokenManagerThread │ 0x00000399 / 921 │ +│ 923 │ NtUnBindCompositionSurface │ 0x0000039A / 922 │ +│ 924 │ NtUpdateInputSinkTransforms │ 0x0000039B / 923 │ +│ 925 │ NtUserAcquireIAMKey │ 0x0000039C / 924 │ +│ 926 │ NtUserAcquireInteractiveControlBackgroundAccess │ 0x0000039D / 925 │ +│ 927 │ NtUserAddClipboardFormatListener │ 0x0000039E / 926 │ +│ 928 │ NtUserAddVisualIdentifier │ 0x0000039F / 927 │ +│ 929 │ NtUserAllowSetForegroundWindow │ 0x000003A0 / 928 │ +│ 930 │ NtUserArrangeIconicWindows │ 0x000003A1 / 929 │ +│ 931 │ NtUserAssociateInputContext │ 0x000003A2 / 930 │ +│ 932 │ NtUserAutoPromoteMouseInPointer │ 0x000003A3 / 931 │ +│ 933 │ NtUserAutoRotateScreen │ 0x000003A4 / 932 │ +│ 934 │ NtUserBeginDeferWindowPos │ 0x000003A5 / 933 │ +│ 935 │ NtUserBeginLayoutUpdate │ 0x000003A6 / 934 │ +│ 936 │ NtUserBlockInput │ 0x000003A7 / 935 │ +│ 937 │ NtUserBroadcastImeShowStatusChange │ 0x000003A8 / 936 │ +│ 938 │ NtUserBroadcastThemeChangeEvent │ 0x000003A9 / 937 │ +│ 939 │ NtUserBuildHimcList │ 0x000003AA / 938 │ +│ 940 │ NtUserBuildPropList │ 0x000003AB / 939 │ +│ 941 │ NtUserCalculatePopupWindowPosition │ 0x000003AC / 940 │ +│ 942 │ NtUserCanBrokerForceForeground │ 0x000003AD / 941 │ +│ 943 │ NtUserCancelQueueEventCompletionPacket │ 0x000003AE / 942 │ +│ 944 │ NtUserChangeDisplaySettings │ 0x000003AF / 943 │ +│ 945 │ NtUserChangeWindowMessageFilter │ 0x000003B0 / 944 │ +│ 946 │ NtUserChangeWindowMessageFilterEx │ 0x000003B1 / 945 │ +│ 947 │ NtUserCheckAccessForIntegrityLevel │ 0x000003B2 / 946 │ +│ 948 │ NtUserCheckImeShowStatusInThread │ 0x000003B3 / 947 │ +│ 949 │ NtUserCheckProcessForClipboardAccess │ 0x000003B4 / 948 │ +│ 950 │ NtUserCheckProcessSession │ 0x000003B5 / 949 │ +│ 951 │ NtUserCheckWindowThreadDesktop │ 0x000003B6 / 950 │ +│ 952 │ NtUserChildWindowFromPointEx │ 0x000003B7 / 951 │ +│ 953 │ NtUserCitSetInfo │ 0x000003B8 / 952 │ +│ 954 │ NtUserClearForeground │ 0x000003B9 / 953 │ +│ 955 │ NtUserClearRunWakeBit │ 0x000003BA / 954 │ +│ 956 │ NtUserClearWakeMask │ 0x000003BB / 955 │ +│ 957 │ NtUserClearWindowState │ 0x000003BC / 956 │ +│ 958 │ NtUserClipCursor │ 0x000003BD / 957 │ +│ 959 │ NtUserCompositionInputSinkLuidFromPoint │ 0x000003BE / 958 │ +│ 960 │ NtUserCompositionInputSinkViewInstanceIdFromPoint │ 0x000003BF / 959 │ +│ 961 │ NtUserConfigureActivationObject │ 0x000003C0 / 960 │ +│ 962 │ NtUserConfirmResizeCommit │ 0x000003C1 / 961 │ +│ 963 │ NtUserCreateActivationObject │ 0x000003C2 / 962 │ +│ 964 │ NtUserCreateBaseWindow │ 0x000003C3 / 963 │ +│ 965 │ NtUserCreateDCompositionHwndTarget │ 0x000003C4 / 964 │ +│ 966 │ NtUserCreateDesktopEx │ 0x000003C5 / 965 │ +│ 967 │ NtUserCreateEmptyCursorObject │ 0x000003C6 / 966 │ +│ 968 │ NtUserCreateInputContext │ 0x000003C7 / 967 │ +│ 969 │ NtUserCreateMenu │ 0x000003C8 / 968 │ +│ 970 │ NtUserCreatePalmRejectionDelayZone │ 0x000003C9 / 969 │ +│ 971 │ NtUserCreatePopupMenu │ 0x000003CA / 970 │ +│ 972 │ NtUserCreateSystemThreads │ 0x000003CB / 971 │ +│ 973 │ NtUserCreateWindowStation │ 0x000003CC / 972 │ +│ 974 │ NtUserCsDdeUninitialize │ 0x000003CD / 973 │ +│ 975 │ NtUserCtxDisplayIOCtl │ 0x000003CE / 974 │ +│ 976 │ NtUserDWP_GetEnabledPopupOffset │ 0x000003CF / 975 │ +│ 977 │ NtUserDeferWindowDpiChanges │ 0x000003D0 / 976 │ +│ 978 │ NtUserDeferWindowPosAndBand │ 0x000003D1 / 977 │ +│ 979 │ NtUserDeferredDesktopRotation │ 0x000003D2 / 978 │ +│ 980 │ NtUserDelegateCapturePointers │ 0x000003D3 / 979 │ +│ 981 │ NtUserDelegateInput │ 0x000003D4 / 980 │ +│ 982 │ NtUserDeregisterShellHookWindow │ 0x000003D5 / 981 │ +│ 983 │ NtUserDestroyActivationObject │ 0x000003D6 / 982 │ +│ 984 │ NtUserDestroyCaret │ 0x000003D7 / 983 │ +│ 985 │ NtUserDestroyDCompositionHwndTarget │ 0x000003D8 / 984 │ +│ 986 │ NtUserDestroyInputContext │ 0x000003D9 / 985 │ +│ 987 │ NtUserDestroyPalmRejectionDelayZone │ 0x000003DA / 986 │ +│ 988 │ NtUserDisableImmersiveOwner │ 0x000003DB / 987 │ +│ 989 │ NtUserDisableProcessWindowFiltering │ 0x000003DC / 988 │ +│ 990 │ NtUserDisableProcessWindowsGhosting │ 0x000003DD / 989 │ +│ 991 │ NtUserDisableThreadIme │ 0x000003DE / 990 │ +│ 992 │ NtUserDiscardPointerFrameMessages │ 0x000003DF / 991 │ +│ 993 │ NtUserDisplayConfigGetDeviceInfo │ 0x000003E0 / 992 │ +│ 994 │ NtUserDisplayConfigSetDeviceInfo │ 0x000003E1 / 993 │ +│ 995 │ NtUserDoInitMessagePumpHook │ 0x000003E2 / 994 │ +│ 996 │ NtUserDoSoundConnect │ 0x000003E3 / 995 │ +│ 997 │ NtUserDoSoundDisconnect │ 0x000003E4 / 996 │ +│ 998 │ NtUserDoUninitMessagePumpHook │ 0x000003E5 / 997 │ +│ 999 │ NtUserDownlevelTouchpad │ 0x000003E6 / 998 │ +│ 1000 │ NtUserDragDetect │ 0x000003E7 / 999 │ +│ 1001 │ NtUserDragObject │ 0x000003E8 / 1000 │ +│ 1002 │ NtUserDrainThreadCoreMessagingCompletions │ 0x000003E9 / 1001 │ +│ 1003 │ NtUserDrawAnimatedRects │ 0x000003EA / 1002 │ +│ 1004 │ NtUserDrawCaption │ 0x000003EB / 1003 │ +│ 1005 │ NtUserDrawCaptionTemp │ 0x000003EC / 1004 │ +│ 1006 │ NtUserDrawMenuBar │ 0x000003ED / 1005 │ +│ 1007 │ NtUserDrawMenuBarTemp │ 0x000003EE / 1006 │ +│ 1008 │ NtUserDwmGetRemoteSessionOcclusionEvent │ 0x000003EF / 1007 │ +│ 1009 │ NtUserDwmGetRemoteSessionOcclusionState │ 0x000003F0 / 1008 │ +│ 1010 │ NtUserDwmKernelShutdown │ 0x000003F1 / 1009 │ +│ 1011 │ NtUserDwmKernelStartup │ 0x000003F2 / 1010 │ +│ 1012 │ NtUserDwmLockScreenUpdates │ 0x000003F3 / 1011 │ +│ 1013 │ NtUserDwmValidateWindow │ 0x000003F4 / 1012 │ +│ 1014 │ NtUserEnableChildWindowDpiMessage │ 0x000003F5 / 1013 │ +│ 1015 │ NtUserEnableIAMAccess │ 0x000003F6 / 1014 │ +│ 1016 │ NtUserEnableModernAppWindowKeyboardIntercept │ 0x000003F7 / 1015 │ +│ 1017 │ NtUserEnableMouseInPointer │ 0x000003F8 / 1016 │ +│ 1018 │ NtUserEnableMouseInPointerForThread │ 0x000003F9 / 1017 │ +│ 1019 │ NtUserEnableMouseInPointerForWindow │ 0x000003FA / 1018 │ +│ 1020 │ NtUserEnableMouseInputForCursorSuppression │ 0x000003FB / 1019 │ +│ 1021 │ NtUserEnableNonClientDpiScaling │ 0x000003FC / 1020 │ +│ 1022 │ NtUserEnableResizeLayoutSynchronization │ 0x000003FD / 1021 │ +│ 1023 │ NtUserEnableSessionForMMCSS │ 0x000003FE / 1022 │ +│ 1024 │ NtUserEnableShellWindowManagementBehavior │ 0x000003FF / 1023 │ +│ 1025 │ NtUserEnableSoftwareCursorForScreenCapture │ 0x00000400 / 1024 │ +│ 1026 │ NtUserEnableTouchPad │ 0x00000401 / 1025 │ +│ 1027 │ NtUserEnableWindow │ 0x00000402 / 1026 │ +│ 1028 │ NtUserEnableWindowGDIScaledDpiMessage │ 0x00000403 / 1027 │ +│ 1029 │ NtUserEnableWindowResizeOptimization │ 0x00000404 / 1028 │ +│ 1030 │ NtUserEndMenu │ 0x00000405 / 1029 │ +│ 1031 │ NtUserEnsureDpiDepSysMetCacheForPlateau │ 0x00000406 / 1030 │ +│ 1032 │ NtUserEnumClipboardFormats │ 0x00000407 / 1031 │ +│ 1033 │ NtUserEvent │ 0x00000408 / 1032 │ +│ 1034 │ NtUserFlashWindowEx │ 0x00000409 / 1033 │ +│ 1035 │ NtUserForceEnableNumpadTranslation │ 0x0000040A / 1034 │ +│ 1036 │ NtUserForceWindowToDpiForTest │ 0x0000040B / 1035 │ +│ 1037 │ NtUserFrostCrashedWindow │ 0x0000040C / 1036 │ +│ 1038 │ NtUserSetSensorPresence │ 0x0000040D / 1037 │ +│ 1039 │ NtUserFunctionalizeDisplayConfig │ 0x0000040E / 1038 │ +│ 1040 │ NtUserGetActiveProcessesDpis │ 0x0000040F / 1039 │ +│ 1041 │ NtUserGetAppImeLevel │ 0x00000410 / 1040 │ +│ 1042 │ NtUserGetAutoRotationState │ 0x00000411 / 1041 │ +│ 1043 │ NtUserGetCIMSSM │ 0x00000412 / 1042 │ +│ 1044 │ NtUserGetCaretPos │ 0x00000413 / 1043 │ +│ 1045 │ NtUserGetClassIcoCur │ 0x00000414 / 1044 │ +│ 1046 │ NtUserGetClipCursor │ 0x00000415 / 1045 │ +│ 1047 │ NtUserGetClipboardAccessToken │ 0x00000416 / 1046 │ +│ 1048 │ NtUserGetClipboardMetadata │ 0x00000417 / 1047 │ +│ 1049 │ NtUserGetClipboardViewer │ 0x00000418 / 1048 │ +│ 1050 │ NtUserGetComboBoxInfo │ 0x00000419 / 1049 │ +│ 1051 │ NtUserGetCurrentDpiInfoForWindow │ 0x0000041A / 1050 │ +│ 1052 │ NtUserGetCurrentInputMessageSource │ 0x0000041B / 1051 │ +│ 1053 │ NtUserGetCursor │ 0x0000041C / 1052 │ +│ 1054 │ NtUserGetCursorInfo │ 0x0000041D / 1053 │ +│ 1055 │ NtUserGetCursorPos │ 0x0000041E / 1054 │ +│ 1056 │ NtUserGetDCompositionHwndBitmap │ 0x0000041F / 1055 │ +│ 1057 │ NtUserGetDManipHookInitFunction │ 0x00000420 / 1056 │ +│ 1058 │ NtUserGetDesktopID │ 0x00000421 / 1057 │ +│ 1059 │ NtUserGetDesktopVisualTransform │ 0x00000422 / 1058 │ +│ 1060 │ NtUserGetDeviceChangeInfo │ 0x00000423 / 1059 │ +│ 1061 │ NtUserGetDisplayAutoRotationPreferences │ 0x00000424 / 1060 │ +│ 1062 │ NtUserGetDisplayAutoRotationPreferencesByProcessId │ 0x00000425 / 1061 │ +│ 1063 │ NtUserGetDisplayConfigBufferSizes │ 0x00000426 / 1062 │ +│ 1064 │ NtUserGetDpiForCurrentProcess │ 0x00000427 / 1063 │ +│ 1065 │ NtUserGetDpiForMonitor │ 0x00000428 / 1064 │ +│ 1066 │ NtUserGetExtendedPointerDeviceProperty │ 0x00000429 / 1065 │ +│ 1067 │ NtUserGetGestureConfig │ 0x0000042A / 1066 │ +│ 1068 │ NtUserGetGestureExtArgs │ 0x0000042B / 1067 │ +│ 1069 │ NtUserGetGestureInfo │ 0x0000042C / 1068 │ +│ 1070 │ NtUserGetGuiResources │ 0x0000042D / 1069 │ +│ 1071 │ NtUserGetHDevName │ 0x0000042E / 1070 │ +│ 1072 │ NtUserGetHimetricScaleFactorFromPixelLocation │ 0x0000042F / 1071 │ +│ 1073 │ NtUserGetIMEShowStatus │ 0x00000430 / 1072 │ +│ 1074 │ NtUserGetImeHotKey │ 0x00000431 / 1073 │ +│ 1075 │ NtUserGetImeInfoEx │ 0x00000432 / 1074 │ +│ 1076 │ NtUserGetInputContainerId │ 0x00000433 / 1075 │ +│ 1077 │ NtUserGetInputDesktop │ 0x00000434 / 1076 │ +│ 1078 │ NtUserGetInputEvent │ 0x00000435 / 1077 │ +│ 1079 │ NtUserGetInputLocaleInfo │ 0x00000436 / 1078 │ +│ 1080 │ NtUserGetInteractiveControlDeviceInfo │ 0x00000437 / 1079 │ +│ 1081 │ NtUserGetInteractiveControlInfo │ 0x00000438 / 1080 │ +│ 1082 │ NtUserGetInteractiveCtrlSupportedWaveforms │ 0x00000439 / 1081 │ +│ 1083 │ NtUserGetInternalWindowPos │ 0x0000043A / 1082 │ +│ 1084 │ NtUserGetKeyNameText │ 0x0000043B / 1083 │ +│ 1085 │ NtUserGetKeyboardLayout │ 0x0000043C / 1084 │ +│ 1086 │ NtUserGetKeyboardLayoutName │ 0x0000043D / 1085 │ +│ 1087 │ NtUserGetKeyboardType │ 0x0000043E / 1086 │ +│ 1088 │ NtUserGetLayeredWindowAttributes │ 0x0000043F / 1087 │ +│ 1089 │ NtUserGetListBoxInfo │ 0x00000440 / 1088 │ +│ 1090 │ NtUserGetMenuIndex │ 0x00000441 / 1089 │ +│ 1091 │ NtUserGetMenuItemRect │ 0x00000442 / 1090 │ +│ 1092 │ NtUserGetMessagePos │ 0x00000443 / 1091 │ +│ 1093 │ NtUserGetMinuserIdForBaseWindow │ 0x00000444 / 1092 │ +│ 1094 │ NtUserGetModernAppWindow │ 0x00000445 / 1093 │ +│ 1095 │ NtUserGetMouseMovePointsEx │ 0x00000446 / 1094 │ +│ 1096 │ NtUserGetOemBitmapSize │ 0x00000447 / 1095 │ +│ 1097 │ NtUserGetPhysicalDeviceRect │ 0x00000448 / 1096 │ +│ 1098 │ NtUserGetPointerCursorId │ 0x00000449 / 1097 │ +│ 1099 │ NtUserGetPointerDevice │ 0x0000044A / 1098 │ +│ 1100 │ NtUserGetPointerDeviceCursors │ 0x0000044B / 1099 │ +│ 1101 │ NtUserGetPointerDeviceInputSpace │ 0x0000044C / 1100 │ +│ 1102 │ NtUserGetPointerDeviceOrientation │ 0x0000044D / 1101 │ +│ 1103 │ NtUserGetPointerDeviceProperties │ 0x0000044E / 1102 │ +│ 1104 │ NtUserGetPointerDeviceRects │ 0x0000044F / 1103 │ +│ 1105 │ NtUserGetPointerDevices │ 0x00000450 / 1104 │ +│ 1106 │ NtUserGetPointerFrameTimes │ 0x00000451 / 1105 │ +│ 1107 │ NtUserGetPointerInfoList │ 0x00000452 / 1106 │ +│ 1108 │ NtUserGetPointerInputTransform │ 0x00000453 / 1107 │ +│ 1109 │ NtUserGetPointerProprietaryId │ 0x00000454 / 1108 │ +│ 1110 │ NtUserGetPointerType │ 0x00000455 / 1109 │ +│ 1111 │ NtUserGetPrecisionTouchPadConfiguration │ 0x00000456 / 1110 │ +│ 1112 │ NtUserGetPriorityClipboardFormat │ 0x00000457 / 1111 │ +│ 1113 │ NtUserGetProcessDefaultLayout │ 0x00000458 / 1112 │ +│ 1114 │ NtUserGetProcessDpiAwarenessContext │ 0x00000459 / 1113 │ +│ 1115 │ NtUserGetProcessUIContextInformation │ 0x0000045A / 1114 │ +│ 1116 │ NtUserGetQueueIocp │ 0x0000045B / 1115 │ +│ 1117 │ NtUserGetQueueStatus │ 0x0000045C / 1116 │ +│ 1118 │ NtUserGetQueueStatusReadonly │ 0x0000045D / 1117 │ +│ 1119 │ NtUserGetRawInputBuffer │ 0x0000045E / 1118 │ +│ 1120 │ NtUserGetRawInputData │ 0x0000045F / 1119 │ +│ 1121 │ NtUserGetRawInputDeviceInfo │ 0x00000460 / 1120 │ +│ 1122 │ NtUserGetRawInputDeviceList │ 0x00000461 / 1121 │ +│ 1123 │ NtUserGetRawPointerDeviceData │ 0x00000462 / 1122 │ +│ 1124 │ NtUserGetRegisteredRawInputDevices │ 0x00000463 / 1123 │ +│ 1125 │ NtUserGetRequiredCursorSizes │ 0x00000464 / 1124 │ +│ 1126 │ NtUserGetResizeDCompositionSynchronizationObject │ 0x00000465 / 1125 │ +│ 1127 │ NtUserGetSendMessageReceiver │ 0x00000466 / 1126 │ +│ 1128 │ NtUserGetSharedWindowData │ 0x00000467 / 1127 │ +│ 1129 │ NtUserGetSysMenuOffset │ 0x00000468 / 1128 │ +│ 1130 │ NtUserGetSystemContentRects │ 0x00000469 / 1129 │ +│ 1131 │ NtUserGetSystemDpiForProcess │ 0x0000046A / 1130 │ +│ 1132 │ NtUserGetTopLevelWindow │ 0x0000046B / 1131 │ +│ 1133 │ NtUserGetTouchInputInfo │ 0x0000046C / 1132 │ +│ 1134 │ NtUserGetTouchValidationStatus │ 0x0000046D / 1133 │ +│ 1135 │ NtUserGetUniformSpaceMapping │ 0x0000046E / 1134 │ +│ 1136 │ NtUserGetUnpredictedMessagePos │ 0x0000046F / 1135 │ +│ 1137 │ NtUserGetUpdatedClipboardFormats │ 0x00000470 / 1136 │ +│ 1138 │ NtUserGetWOWClass │ 0x00000471 / 1137 │ +│ 1139 │ NtUserGetWinStationInfo │ 0x00000472 / 1138 │ +│ 1140 │ NtUserGetWindowBand │ 0x00000473 / 1139 │ +│ 1141 │ NtUserGetWindowCompositionAttribute │ 0x00000474 / 1140 │ +│ 1142 │ NtUserGetWindowCompositionInfo │ 0x00000475 / 1141 │ +│ 1143 │ NtUserGetWindowContextHelpId │ 0x00000476 / 1142 │ +│ 1144 │ NtUserGetWindowDisplayAffinity │ 0x00000477 / 1143 │ +│ 1145 │ NtUserGetWindowFeedbackSetting │ 0x00000478 / 1144 │ +│ 1146 │ NtUserGetWindowMinimizeRect │ 0x00000479 / 1145 │ +│ 1147 │ NtUserGetWindowProcessHandle │ 0x0000047A / 1146 │ +│ 1148 │ NtUserGetWindowRgnEx │ 0x0000047B / 1147 │ +│ 1149 │ NtUserGetWindowThreadProcessId │ 0x0000047C / 1148 │ +│ 1150 │ NtUserGetWindowTrackInfoAsync │ 0x0000047D / 1149 │ +│ 1151 │ NtUserGhostWindowFromHungWindow │ 0x0000047E / 1150 │ +│ 1152 │ NtUserHandleDelegatedInput │ 0x0000047F / 1151 │ +│ 1153 │ NtUserHandleSystemThreadCreationFailure │ 0x00000480 / 1152 │ +│ 1154 │ NtUserHardErrorControl │ 0x00000481 / 1153 │ +│ 1155 │ NtUserHideCursorNoCapture │ 0x00000482 / 1154 │ +│ 1156 │ NtUserHidePointerContactVisualization │ 0x00000483 / 1155 │ +│ 1157 │ NtUserHiliteMenuItem │ 0x00000484 / 1156 │ +│ 1158 │ NtUserHungWindowFromGhostWindow │ 0x00000485 / 1157 │ +│ 1159 │ NtUserHwndQueryRedirectionInfo │ 0x00000486 / 1158 │ +│ 1160 │ NtUserHwndSetRedirectionInfo │ 0x00000487 / 1159 │ +│ 1161 │ NtUserImpersonateDdeClientWindow │ 0x00000488 / 1160 │ +│ 1162 │ NtUserInheritWindowMonitor │ 0x00000489 / 1161 │ +│ 1163 │ NtUserInitAnsiOem │ 0x0000048A / 1162 │ +│ 1164 │ NtUserInitRunThread │ 0x0000048B / 1163 │ +│ 1165 │ NtUserInitThreadCoreMessagingIocp │ 0x0000048C / 1164 │ +│ 1166 │ NtUserInitialize │ 0x0000048D / 1165 │ +│ 1167 │ NtUserInitializeClientPfnArrays │ 0x0000048E / 1166 │ +│ 1168 │ NtUserInitializeGenericHidInjection │ 0x0000048F / 1167 │ +│ 1169 │ NtUserInitializeInputDeviceInjection │ 0x00000490 / 1168 │ +│ 1170 │ NtUserInitializePointerDeviceInjection │ 0x00000491 / 1169 │ +│ 1171 │ NtUserInitializePointerDeviceInjectionEx │ 0x00000492 / 1170 │ +│ 1172 │ NtUserInitializeTouchInjection │ 0x00000493 / 1171 │ +│ 1173 │ NtUserInjectDeviceInput │ 0x00000494 / 1172 │ +│ 1174 │ NtUserInjectGenericHidInput │ 0x00000495 / 1173 │ +│ 1175 │ NtUserInjectGesture │ 0x00000496 / 1174 │ +│ 1176 │ NtUserInjectKeyboardInput │ 0x00000497 / 1175 │ +│ 1177 │ NtUserInjectMouseInput │ 0x00000498 / 1176 │ +│ 1178 │ NtUserInjectPointerInput │ 0x00000499 / 1177 │ +│ 1179 │ NtUserInjectTouchInput │ 0x0000049A / 1178 │ +│ 1180 │ NtUserInteractiveControlQueryUsage │ 0x0000049B / 1179 │ +│ 1181 │ NtUserInternalGetWindowIcon │ 0x0000049C / 1180 │ +│ 1182 │ NtUserInternalToUnicode │ 0x0000049D / 1181 │ +│ 1183 │ NtUserIsChildWindowDpiMessageEnabled │ 0x0000049E / 1182 │ +│ 1184 │ NtUserIsMouseInPointerEnabled │ 0x0000049F / 1183 │ +│ 1185 │ NtUserIsMouseInputEnabled │ 0x000004A0 / 1184 │ +│ 1186 │ NtUserIsNonClientDpiScalingEnabled │ 0x000004A1 / 1185 │ +│ 1187 │ NtUserIsResizeLayoutSynchronizationEnabled │ 0x000004A2 / 1186 │ +│ 1188 │ NtUserIsTopLevelWindow │ 0x000004A3 / 1187 │ +│ 1189 │ NtUserIsTouchWindow │ 0x000004A4 / 1188 │ +│ 1190 │ NtUserIsWindowBroadcastingDpiToChildren │ 0x000004A5 / 1189 │ +│ 1191 │ NtUserIsWindowGDIScaledDpiMessageEnabled │ 0x000004A6 / 1190 │ +│ 1192 │ NtUserKillSystemTimer │ 0x000004A7 / 1191 │ +│ 1193 │ NtUserLW_LoadFonts │ 0x000004A8 / 1192 │ +│ 1194 │ NtUserLayoutCompleted │ 0x000004A9 / 1193 │ +│ 1195 │ NtUserLinkDpiCursor │ 0x000004AA / 1194 │ +│ 1196 │ NtUserLoadCursorsAndIcons │ 0x000004AB / 1195 │ +│ 1197 │ NtUserLoadKeyboardLayoutEx │ 0x000004AC / 1196 │ +│ 1198 │ NtUserLoadUserApiHook │ 0x000004AD / 1197 │ +│ 1199 │ NtUserLockCursor │ 0x000004AE / 1198 │ +│ 1200 │ NtUserLockSetForegroundWindow │ 0x000004AF / 1199 │ +│ 1201 │ NtUserLockWindowStation │ 0x000004B0 / 1200 │ +│ 1202 │ NtUserLockWorkStation │ 0x000004B1 / 1201 │ +│ 1203 │ NtUserLogicalToPerMonitorDPIPhysicalPoint │ 0x000004B2 / 1202 │ +│ 1204 │ NtUserLogicalToPhysicalDpiPointForWindow │ 0x000004B3 / 1203 │ +│ 1205 │ NtUserLogicalToPhysicalPoint │ 0x000004B4 / 1204 │ +│ 1206 │ NtUserMNDragLeave │ 0x000004B5 / 1205 │ +│ 1207 │ NtUserMNDragOver │ 0x000004B6 / 1206 │ +│ 1208 │ NtUserMagControl │ 0x000004B7 / 1207 │ +│ 1209 │ NtUserMagGetContextInformation │ 0x000004B8 / 1208 │ +│ 1210 │ NtUserMagSetContextInformation │ 0x000004B9 / 1209 │ +│ 1211 │ NtUserMapDesktopObject │ 0x000004BA / 1210 │ +│ 1212 │ NtUserMapPointsByVisualIdentifier │ 0x000004BB / 1211 │ +│ 1213 │ NtUserMarkWindowForRawMouse │ 0x000004BC / 1212 │ +│ 1214 │ NtUserMenuItemFromPoint │ 0x000004BD / 1213 │ +│ 1215 │ NtUserMessageBeep │ 0x000004BE / 1214 │ +│ 1216 │ NtUserMinInitialize │ 0x000004BF / 1215 │ +│ 1217 │ NtUserMinMaximize │ 0x000004C0 / 1216 │ +│ 1218 │ NtUserModifyWindowTouchCapability │ 0x000004C1 / 1217 │ +│ 1219 │ NtUserMsgWaitForMultipleObjectsEx │ 0x000004C2 / 1218 │ +│ 1220 │ NtUserNavigateFocus │ 0x000004C3 / 1219 │ +│ 1221 │ NtUserNlsKbdSendIMENotification │ 0x000004C4 / 1220 │ +│ 1222 │ NtUserNotifyIMEStatus │ 0x000004C5 / 1221 │ +│ 1223 │ NtUserNotifyOverlayWindow │ 0x000004C6 / 1222 │ +│ 1224 │ NtUserOpenInputDesktop │ 0x000004C7 / 1223 │ +│ 1225 │ NtUserOpenThreadDesktop │ 0x000004C8 / 1224 │ +│ 1226 │ NtUserPaintMonitor │ 0x000004C9 / 1225 │ +│ 1227 │ NtUserPerMonitorDPIPhysicalToLogicalPoint │ 0x000004CA / 1226 │ +│ 1228 │ NtUserPhysicalToLogicalDpiPointForWindow │ 0x000004CB / 1227 │ +│ 1229 │ NtUserPhysicalToLogicalPoint │ 0x000004CC / 1228 │ +│ 1230 │ NtUserPlayEventSound │ 0x000004CD / 1229 │ +│ 1231 │ NtUserPostKeyboardInputMessage │ 0x000004CE / 1230 │ +│ 1232 │ NtUserPostQuitMessage │ 0x000004CF / 1231 │ +│ 1233 │ NtUserPrepareForLogoff │ 0x000004D0 / 1232 │ +│ 1234 │ NtUserPrintWindow │ 0x000004D1 / 1233 │ +│ 1235 │ NtUserProcessInkFeedbackCommand │ 0x000004D2 / 1234 │ +│ 1236 │ NtUserPromoteMouseInPointer │ 0x000004D3 / 1235 │ +│ 1237 │ NtUserPromotePointer │ 0x000004D4 / 1236 │ +│ 1238 │ NtUserQueryBSDRWindow │ 0x000004D5 / 1237 │ +│ 1239 │ NtUserQueryDisplayConfig │ 0x000004D6 / 1238 │ +│ 1240 │ NtUserQueryInformationThread │ 0x000004D7 / 1239 │ +│ 1241 │ NtUserQueryInputContext │ 0x000004D8 / 1240 │ +│ 1242 │ NtUserQuerySendMessage │ 0x000004D9 / 1241 │ +│ 1243 │ NtUserRealChildWindowFromPoint │ 0x000004DA / 1242 │ +│ 1244 │ NtUserRealWaitMessageEx │ 0x000004DB / 1243 │ +│ 1245 │ NtUserRealizePalette │ 0x000004DC / 1244 │ +│ 1246 │ NtUserReassociateQueueEventCompletionPacket │ 0x000004DD / 1245 │ +│ 1247 │ NtUserRedrawFrame │ 0x000004DE / 1246 │ +│ 1248 │ NtUserRedrawFrameAndHook │ 0x000004DF / 1247 │ +│ 1249 │ NtUserRedrawTitle │ 0x000004E0 / 1248 │ +│ 1250 │ NtUserRegisterBSDRWindow │ 0x000004E1 / 1249 │ +│ 1251 │ NtUserRegisterDManipHook │ 0x000004E2 / 1250 │ +│ 1252 │ NtUserRegisterEdgy │ 0x000004E3 / 1251 │ +│ 1253 │ NtUserRegisterErrorReportingDialog │ 0x000004E4 / 1252 │ +│ 1254 │ NtUserRegisterForCustomDockTargets │ 0x000004E5 / 1253 │ +│ 1255 │ NtUserRegisterForTooltipDismissNotification │ 0x000004E6 / 1254 │ +│ 1256 │ NtUserRegisterGhostWindow │ 0x000004E7 / 1255 │ +│ 1257 │ NtUserRegisterHotKey │ 0x000004E8 / 1256 │ +│ 1258 │ NtUserRegisterLPK │ 0x000004E9 / 1257 │ +│ 1259 │ NtUserRegisterLogonProcess │ 0x000004EA / 1258 │ +│ 1260 │ NtUserRegisterManipulationThread │ 0x000004EB / 1259 │ +│ 1261 │ NtUserRegisterPointerDeviceNotifications │ 0x000004EC / 1260 │ +│ 1262 │ NtUserRegisterPointerInputTarget │ 0x000004ED / 1261 │ +│ 1263 │ NtUserRegisterRawInputDevices │ 0x000004EE / 1262 │ +│ 1264 │ NtUserRegisterServicesProcess │ 0x000004EF / 1263 │ +│ 1265 │ NtUserRegisterSessionPort │ 0x000004F0 / 1264 │ +│ 1266 │ NtUserRegisterShellHookWindow │ 0x000004F1 / 1265 │ +│ 1267 │ NtUserRegisterShellPTPListener │ 0x000004F2 / 1266 │ +│ 1268 │ NtUserRegisterSiblingFrostWindow │ 0x000004F3 / 1267 │ +│ 1269 │ NtUserRegisterSystemThread │ 0x000004F4 / 1268 │ +│ 1270 │ NtUserRegisterTasklist │ 0x000004F5 / 1269 │ +│ 1271 │ NtUserRegisterTouchHitTestingWindow │ 0x000004F6 / 1270 │ +│ 1272 │ NtUserRegisterTouchPadCapable │ 0x000004F7 / 1271 │ +│ 1273 │ NtUserRegisterUserApiHook │ 0x000004F8 / 1272 │ +│ 1274 │ NtUserRegisterWindowArrangementCallout │ 0x000004F9 / 1273 │ +│ 1275 │ NtUserReleaseCapture │ 0x000004FA / 1274 │ +│ 1276 │ NtUserReleaseDC │ 0x000004FB / 1275 │ +│ 1277 │ NtUserReleaseDwmHitTestWaiters │ 0x000004FC / 1276 │ +│ 1278 │ NtUserRemoteConnect │ 0x000004FD / 1277 │ +│ 1279 │ NtUserRemoteConnectState │ 0x000004FE / 1278 │ +│ 1280 │ NtUserRemoteConsoleShadowStop │ 0x000004FF / 1279 │ +│ 1281 │ NtUserRemoteDisconnect │ 0x00000500 / 1280 │ +│ 1282 │ NtUserRemoteNotify │ 0x00000501 / 1281 │ +│ 1283 │ NtUserRemotePassthruDisable │ 0x00000502 / 1282 │ +│ 1284 │ NtUserRemotePassthruEnable │ 0x00000503 / 1283 │ +│ 1285 │ NtUserRemoteReconnect │ 0x00000504 / 1284 │ +│ 1286 │ NtUserRemoteRedrawRectangle │ 0x00000505 / 1285 │ +│ 1287 │ NtUserRemoteRedrawScreen │ 0x00000506 / 1286 │ +│ 1288 │ NtUserRemoteShadowCleanup │ 0x00000507 / 1287 │ +│ 1289 │ NtUserRemoteShadowSetup │ 0x00000508 / 1288 │ +│ 1290 │ NtUserRemoteShadowStart │ 0x00000509 / 1289 │ +│ 1291 │ NtUserRemoteShadowStop │ 0x0000050A / 1290 │ +│ 1292 │ NtUserRemoteStopScreenUpdates │ 0x0000050B / 1291 │ +│ 1293 │ NtUserRemoteThinwireStats │ 0x0000050C / 1292 │ +│ 1294 │ NtUserRemoveClipboardFormatListener │ 0x0000050D / 1293 │ +│ 1295 │ NtUserRemoveInjectionDevice │ 0x0000050E / 1294 │ +│ 1296 │ NtUserRemoveQueueCompletion │ 0x0000050F / 1295 │ +│ 1297 │ NtUserRemoveVisualIdentifier │ 0x00000510 / 1296 │ +│ 1298 │ NtUserReplyMessage │ 0x00000511 / 1297 │ +│ 1299 │ NtUserReportInertia │ 0x00000512 / 1298 │ +│ 1300 │ NtUserResetDblClk │ 0x00000513 / 1299 │ +│ 1301 │ NtUserResolveDesktopForWOW │ 0x00000514 / 1300 │ +│ 1302 │ NtUserRestoreWindowDpiChanges │ 0x00000515 / 1301 │ +│ 1303 │ NtUserScaleSystemMetricForDPIWithoutCache │ 0x00000516 / 1302 │ +│ 1304 │ NtUserScheduleDispatchNotification │ 0x00000517 / 1303 │ +│ 1305 │ NtUserSendEventMessage │ 0x00000518 / 1304 │ +│ 1306 │ NtUserSendInteractiveControlHapticsReport │ 0x00000519 / 1305 │ +│ 1307 │ NtUserSetActivationFilter │ 0x0000051A / 1306 │ +│ 1308 │ NtUserSetActiveProcessForMonitor │ 0x0000051B / 1307 │ +│ 1309 │ NtUserSetAdditionalForegroundBoostProcesses │ 0x0000051C / 1308 │ +│ 1310 │ NtUserSetAppImeLevel │ 0x0000051D / 1309 │ +│ 1311 │ NtUserSetAutoRotation │ 0x0000051E / 1310 │ +│ 1312 │ NtUserSetBridgeWindowChild │ 0x0000051F / 1311 │ +│ 1313 │ NtUserSetBrokeredForeground │ 0x00000520 / 1312 │ +│ 1314 │ NtUserSetCalibrationData │ 0x00000521 / 1313 │ +│ 1315 │ NtUserSetCancelRotationDelayHintWindow │ 0x00000522 / 1314 │ +│ 1316 │ NtUserSetCaretBlinkTime │ 0x00000523 / 1315 │ +│ 1317 │ NtUserSetCaretPos │ 0x00000524 / 1316 │ +│ 1318 │ NtUserSetChildWindowNoActivate │ 0x00000525 / 1317 │ +│ 1319 │ NtUserSetClassWord │ 0x00000526 / 1318 │ +│ 1320 │ NtUserSetCoreWindow │ 0x00000527 / 1319 │ +│ 1321 │ NtUserSetCoreWindowPartner │ 0x00000528 / 1320 │ +│ 1322 │ NtUserSetCursorIconDataEx │ 0x00000529 / 1321 │ +│ 1323 │ NtUserSetCursorPos │ 0x0000052A / 1322 │ +│ 1324 │ NtUserSetDesktopColorTransform │ 0x0000052B / 1323 │ +│ 1325 │ NtUserSetDesktopVisualInputSink │ 0x0000052C / 1324 │ +│ 1326 │ NtUserSetDialogControlDpiChangeBehavior │ 0x0000052D / 1325 │ +│ 1327 │ NtUserSetDialogPointer │ 0x0000052E / 1326 │ +│ 1328 │ NtUserSetDialogSystemMenu │ 0x0000052F / 1327 │ +│ 1329 │ NtUserSetDisplayAutoRotationPreferences │ 0x00000530 / 1328 │ +│ 1330 │ NtUserSetDisplayConfig │ 0x00000531 / 1329 │ +│ 1331 │ NtUserSetDisplayMapping │ 0x00000532 / 1330 │ +│ 1332 │ NtUserSetDoubleClickTime │ 0x00000533 / 1331 │ +│ 1333 │ NtUserSetDpiForWindow │ 0x00000534 / 1332 │ +│ 1334 │ NtUserSetFallbackForeground │ 0x00000535 / 1333 │ +│ 1335 │ NtUserSetFeatureReportResponse │ 0x00000536 / 1334 │ +│ 1336 │ NtUserSetForegroundRedirectionForActivationObject │ 0x00000537 / 1335 │ +│ 1337 │ NtUserSetForegroundWindow │ 0x00000538 / 1336 │ +│ 1338 │ NtUserSetForegroundWindowForApplication │ 0x00000539 / 1337 │ +│ 1339 │ NtUserSetFullscreenMagnifierOffsetsDWMUpdated │ 0x0000053A / 1338 │ +│ 1340 │ NtUserSetGestureConfig │ 0x0000053B / 1339 │ +│ 1341 │ NtUserSetImeHotKey │ 0x0000053C / 1340 │ +│ 1342 │ NtUserSetImeInfoEx │ 0x0000053D / 1341 │ +│ 1343 │ NtUserSetImeOwnerWindow │ 0x0000053E / 1342 │ +│ 1344 │ NtUserSetInputServiceState │ 0x0000053F / 1343 │ +│ 1345 │ NtUserSetInteractiveControlFocus │ 0x00000540 / 1344 │ +│ 1346 │ NtUserSetInteractiveCtrlRotationAngle │ 0x00000541 / 1345 │ +│ 1347 │ NtUserSetInternalWindowPos │ 0x00000542 / 1346 │ +│ 1348 │ NtUserSetLayeredWindowAttributes │ 0x00000543 / 1347 │ +│ 1349 │ NtUserSetMagnificationDesktopMagnifierOffsetsDWMUpdated │ 0x00000544 / 1348 │ +│ 1350 │ NtUserSetManipulationInputTarget │ 0x00000545 / 1349 │ +│ 1351 │ NtUserSetMenu │ 0x00000546 / 1350 │ +│ 1352 │ NtUserSetMenuContextHelpId │ 0x00000547 / 1351 │ +│ 1353 │ NtUserSetMenuFlagRtoL │ 0x00000548 / 1352 │ +│ 1354 │ NtUserSetMessageExtraInfo │ 0x00000549 / 1353 │ +│ 1355 │ NtUserSetMirrorRendering │ 0x0000054A / 1354 │ +│ 1356 │ NtUserSetModernAppWindow │ 0x0000054B / 1355 │ +│ 1357 │ NtUserSetMonitorWorkArea │ 0x0000054C / 1356 │ +│ 1358 │ NtUserSetMouseInputRateLimitingTimer │ 0x0000054D / 1357 │ +│ 1359 │ NtUserSetMsgBox │ 0x0000054E / 1358 │ +│ 1360 │ NtUserSetObjectInformation │ 0x0000054F / 1359 │ +│ 1361 │ NtUserSetPrecisionTouchPadConfiguration │ 0x00000550 / 1360 │ +│ 1362 │ NtUserSetProcessDefaultLayout │ 0x00000551 / 1361 │ +│ 1363 │ NtUserSetProcessDpiAwarenessContext │ 0x00000552 / 1362 │ +│ 1364 │ NtUserSetProcessInteractionFlags │ 0x00000553 / 1363 │ +│ 1365 │ NtUserSetProcessLaunchForegroundPolicy │ 0x00000554 / 1364 │ +│ 1366 │ NtUserSetProcessMousewheelRoutingMode │ 0x00000555 / 1365 │ +│ 1367 │ NtUserSetProcessRestrictionExemption │ 0x00000556 / 1366 │ +│ 1368 │ NtUserSetProcessUIAccessZorder │ 0x00000557 / 1367 │ +│ 1369 │ NtUserSetProgmanWindow │ 0x00000558 / 1368 │ +│ 1370 │ NtUserSetSharedWindowData │ 0x00000559 / 1369 │ +│ 1371 │ NtUserSetShellChangeNotifyHWND │ 0x0000055A / 1370 │ +│ 1372 │ NtUserSetShellWindowEx │ 0x0000055B / 1371 │ +│ 1373 │ NtUserSetSysColors │ 0x0000055C / 1372 │ +│ 1374 │ NtUserSetSysMenu │ 0x0000055D / 1373 │ +│ 1375 │ NtUserSetSystemContentRects │ 0x0000055E / 1374 │ +│ 1376 │ NtUserSetSystemCursor │ 0x0000055F / 1375 │ +│ 1377 │ NtUserSetSystemTimer │ 0x00000560 / 1376 │ +│ 1378 │ NtUserSetTSFEventState │ 0x00000561 / 1377 │ +│ 1379 │ NtUserSetTargetForResourceBrokering │ 0x00000562 / 1378 │ +│ 1380 │ NtUserSetTaskmanWindow │ 0x00000563 / 1379 │ +│ 1381 │ NtUserSetThreadInputBlocked │ 0x00000564 / 1380 │ +│ 1382 │ NtUserSetThreadLayoutHandles │ 0x00000565 / 1381 │ +│ 1383 │ NtUserSetThreadQueueMergeSetting │ 0x00000566 / 1382 │ +│ 1384 │ NtUserSetVisible │ 0x00000567 / 1383 │ +│ 1385 │ NtUserSetWaitForQueueAttach │ 0x00000568 / 1384 │ +│ 1386 │ NtUserSetWatermarkStrings │ 0x00000569 / 1385 │ +│ 1387 │ NtUserSetWindowBand │ 0x0000056A / 1386 │ +│ 1388 │ NtUserSetWindowCompositionAttribute │ 0x0000056B / 1387 │ +│ 1389 │ NtUserSetWindowCompositionTransition │ 0x0000056C / 1388 │ +│ 1390 │ NtUserSetWindowContextHelpId │ 0x0000056D / 1389 │ +│ 1391 │ NtUserSetWindowDisplayAffinity │ 0x0000056E / 1390 │ +│ 1392 │ NtUserSetWindowFeedbackSetting │ 0x0000056F / 1391 │ +│ 1393 │ NtUserSetWindowRgnEx │ 0x00000570 / 1392 │ +│ 1394 │ NtUserSetWindowShowState │ 0x00000571 / 1393 │ +│ 1395 │ NtUserSetWindowState │ 0x00000572 / 1394 │ +│ 1396 │ NtUserSetWindowStationUser │ 0x00000573 / 1395 │ +│ 1397 │ NtUserShellMigrateWindow │ 0x00000574 / 1396 │ +│ 1398 │ NtUserShellRegisterHotKey │ 0x00000575 / 1397 │ +│ 1399 │ NtUserShellSetWindowPos │ 0x00000576 / 1398 │ +│ 1400 │ NtUserShowCursor │ 0x00000577 / 1399 │ +│ 1401 │ NtUserShowOwnedPopups │ 0x00000578 / 1400 │ +│ 1402 │ NtUserShowStartGlass │ 0x00000579 / 1401 │ +│ 1403 │ NtUserShowSystemCursor │ 0x0000057A / 1402 │ +│ 1404 │ NtUserShutdownBlockReasonCreate │ 0x0000057B / 1403 │ +│ 1405 │ NtUserShutdownBlockReasonQuery │ 0x0000057C / 1404 │ +│ 1406 │ NtUserShutdownReasonDestroy │ 0x0000057D / 1405 │ +│ 1407 │ NtUserSignalRedirectionStartComplete │ 0x0000057E / 1406 │ +│ 1408 │ NtUserSlicerControl │ 0x0000057F / 1407 │ +│ 1409 │ NtUserSoundSentry │ 0x00000580 / 1408 │ +│ 1410 │ NtUserStopAndEndInertia │ 0x00000581 / 1409 │ +│ 1411 │ NtUserSwapMouseButton │ 0x00000582 / 1410 │ +│ 1412 │ NtUserSwitchDesktop │ 0x00000583 / 1411 │ +│ 1413 │ NtUserSwitchToThisWindow │ 0x00000584 / 1412 │ +│ 1414 │ NtUserSystemParametersInfoForDpi │ 0x00000585 / 1413 │ +│ 1415 │ NtUserTestForInteractiveUser │ 0x00000586 / 1414 │ +│ 1416 │ NtUserThreadMessageQueueAttached │ 0x00000587 / 1415 │ +│ 1417 │ NtUserTraceLoggingSendMixedModeTelemetry │ 0x00000588 / 1416 │ +│ 1418 │ NtUserTrackPopupMenuEx │ 0x00000589 / 1417 │ +│ 1419 │ NtUserTransformPoint │ 0x0000058A / 1418 │ +│ 1420 │ NtUserTransformRect │ 0x0000058B / 1419 │ +│ 1421 │ NtUserUndelegateInput │ 0x0000058C / 1420 │ +│ 1422 │ NtUserUnhookWindowsHook │ 0x0000058D / 1421 │ +│ 1423 │ NtUserUnloadKeyboardLayout │ 0x0000058E / 1422 │ +│ 1424 │ NtUserUnlockWindowStation │ 0x0000058F / 1423 │ +│ 1425 │ NtUserUnregisterHotKey │ 0x00000590 / 1424 │ +│ 1426 │ NtUserUnregisterSessionPort │ 0x00000591 / 1425 │ +│ 1427 │ NtUserUnregisterUserApiHook │ 0x00000592 / 1426 │ +│ 1428 │ NtUserUpdateClientRect │ 0x00000593 / 1427 │ +│ 1429 │ NtUserUpdateDefaultDesktopThumbnail │ 0x00000594 / 1428 │ +│ 1430 │ NtUserUpdateInputContext │ 0x00000595 / 1429 │ +│ 1431 │ NtUserUpdateInstance │ 0x00000596 / 1430 │ +│ 1432 │ NtUserUpdateLayeredWindow │ 0x00000597 / 1431 │ +│ 1433 │ NtUserUpdatePerUserImmEnabling │ 0x00000598 / 1432 │ +│ 1434 │ NtUserUpdatePerUserSystemParameters │ 0x00000599 / 1433 │ +│ 1435 │ NtUserUpdateWindow │ 0x0000059A / 1434 │ +│ 1436 │ NtUserUpdateWindowInputSinkHints │ 0x0000059B / 1435 │ +│ 1437 │ NtUserUpdateWindowTrackingInfo │ 0x0000059C / 1436 │ +│ 1438 │ NtUserUpdateWindows │ 0x0000059D / 1437 │ +│ 1439 │ NtUserUserHandleGrantAccess │ 0x0000059E / 1438 │ +│ 1440 │ NtUserUserPowerCalloutWorker │ 0x0000059F / 1439 │ +│ 1441 │ NtUserValidateHandleSecure │ 0x000005A0 / 1440 │ +│ 1442 │ NtUserValidateRgn │ 0x000005A1 / 1441 │ +│ 1443 │ NtUserWaitAvailableMessageEx │ 0x000005A2 / 1442 │ +│ 1444 │ NtUserWaitForInputIdle │ 0x000005A3 / 1443 │ +│ 1445 │ NtUserWaitForRedirectionStartComplete │ 0x000005A4 / 1444 │ +│ 1446 │ NtUserWakeRITForShutdown │ 0x000005A5 / 1445 │ +│ 1447 │ NtUserWindowFromDC │ 0x000005A6 / 1446 │ +│ 1448 │ NtUserWindowFromPhysicalPoint │ 0x000005A7 / 1447 │ +│ 1449 │ NtUserZapActiveAndFocus │ 0x000005A8 / 1448 │ +│ 1450 │ NtValidateCompositionSurfaceHandle │ 0x000005A9 / 1449 │ +│ 1451 │ NtVisualCaptureBits │ 0x000005AA / 1450 │ +│ 1452 │ NtUserSetClassLongPtr │ 0x000005AB / 1451 │ +│ 1453 │ NtUserSetWindowLongPtr │ 0x000005AC / 1452 │ +└──────┴─────────────────────────────────────────────────────────┴───────────────────┘ From 0c3088f2880cad919d11c0e88ba65493223cd506 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sat, 30 Nov 2024 04:24:42 +0800 Subject: [PATCH 21/37] start binding --- sdk/commands_types_gen.go | 4 ++-- sdk/debuggerError_types_gen.go | 4 ++-- sdk/ioctl_types_gen.go | 4 ++-- ux/ark/arks_enum_gen.go | 4 ++-- 4 files changed, 8 insertions(+), 8 deletions(-) diff --git a/sdk/commands_types_gen.go b/sdk/commands_types_gen.go index 60d315ad..ed5c485a 100644 --- a/sdk/commands_types_gen.go +++ b/sdk/commands_types_gen.go @@ -3,7 +3,7 @@ package sdk import ( "strings" - "golang.org/x/exp/constraints" + ) // Code generated by GeneratedFile types - DO NOT EDIT. @@ -21,7 +21,7 @@ func (t CommandsType) Valid() bool { return t >= DebuggingType && t <= MetaType } -func CommandsTypeBy[T constraints.Integer](v T) CommandsType { +func CommandsTypeBy[T stream.Integer](v T) CommandsType { return CommandsType(v) } diff --git a/sdk/debuggerError_types_gen.go b/sdk/debuggerError_types_gen.go index 18c26e9b..693c2c93 100644 --- a/sdk/debuggerError_types_gen.go +++ b/sdk/debuggerError_types_gen.go @@ -3,7 +3,7 @@ package sdk import ( "strings" - "golang.org/x/exp/constraints" + ) // Code generated by GeneratedFile types - DO NOT EDIT. @@ -100,7 +100,7 @@ func (t DebuggerErrorType) Valid() bool { return t >= TagNotExistsType && t <= InvalidPhysicalAddressType } -func DebuggerErrorTypeBy[T constraints.Integer](v T) DebuggerErrorType { +func DebuggerErrorTypeBy[T stream.Integer](v T) DebuggerErrorType { return DebuggerErrorType(v) } diff --git a/sdk/ioctl_types_gen.go b/sdk/ioctl_types_gen.go index 9d69f8e2..05df8ff0 100644 --- a/sdk/ioctl_types_gen.go +++ b/sdk/ioctl_types_gen.go @@ -3,7 +3,7 @@ package sdk import ( "strings" - "golang.org/x/exp/constraints" + ) // Code generated by GeneratedFile types - DO NOT EDIT. @@ -50,7 +50,7 @@ func (t IoctlType) Valid() bool { return t >= IoctlRegisterEventType && t <= IoctlPreactivateFunctionalityType } -func IoctlTypeBy[T constraints.Integer](v T) IoctlType { +func IoctlTypeBy[T stream.Integer](v T) IoctlType { return IoctlType(v) } diff --git a/ux/ark/arks_enum_gen.go b/ux/ark/arks_enum_gen.go index 4913baf9..4b9329da 100644 --- a/ux/ark/arks_enum_gen.go +++ b/ux/ark/arks_enum_gen.go @@ -3,7 +3,7 @@ package ark import ( "strings" - "golang.org/x/exp/constraints" + ) // Code generated by GeneratedFile enum - DO NOT EDIT. @@ -26,7 +26,7 @@ const ( InvalidArksKind ) -func ConvertInteger2ArksKind[T constraints.Integer](v T) ArksKind { +func ConvertInteger2ArksKind[T stream.Integer](v T) ArksKind { return ArksKind(v) } From bb51801bb2fa5da1e2d52f533cd67c67803d48b9 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sat, 30 Nov 2024 15:26:25 +0800 Subject: [PATCH 22/37] start binding --- sdk/bindgen/bind_test.go | 6 +++--- sdk/bindgen/command_test.go | 4 ++-- sdk/bindgen/constants/constants_gen_test.go | 2 +- sdk/bindgen/macros_decode.go | 2 +- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/sdk/bindgen/bind_test.go b/sdk/bindgen/bind_test.go index 3bb85ddb..519f67af 100644 --- a/sdk/bindgen/bind_test.go +++ b/sdk/bindgen/bind_test.go @@ -48,8 +48,8 @@ func TestBindMacros(t *testing.T) { mylog.Trace("number of macros", macros.Len()) var ( - enumDebuggers = stream.NewOrderedMap("", "") - enumIoctls = stream.NewOrderedMap("", "") + enumDebuggers = new(maps.SafeSliceMap[string, string]) + enumIoctls = new(maps.SafeSliceMap[string, string]) ) for _, p := range macros.List() { @@ -256,7 +256,7 @@ typedef struct _LIST_ENTRY { #endif ` -var m = stream.NewOrderedMap("", "") +var m = new(maps.SafeSliceMap[string, string]) func init() { m.Set("PAGE_SIZE", "4096") diff --git a/sdk/bindgen/command_test.go b/sdk/bindgen/command_test.go index cc40dd27..f6ccbc1a 100644 --- a/sdk/bindgen/command_test.go +++ b/sdk/bindgen/command_test.go @@ -71,7 +71,7 @@ func TestUnmarshalCommandJson(t *testing.T) { func TestCommandGenerate(t *testing.T) { t.Skip("not well") - m := stream.NewOrderedMap("", "") + m := new(maps.SafeSliceMap[string, string]) m.Set("debugging", "debugging") m.Set("extension", "extension") m.Set("hwdbg", "hwdbg") @@ -108,7 +108,7 @@ func commandGenerate(kindName, path string) { return err }) - m := stream.NewOrderedMap("", "") + m := new(maps.SafeSliceMap[string, string]) for _, command := range commands { m.Set(command.FullName, command.FullName) // todo this must be use Cmd,then it will return the right command } diff --git a/sdk/bindgen/constants/constants_gen_test.go b/sdk/bindgen/constants/constants_gen_test.go index 67910237..9a78c9e1 100644 --- a/sdk/bindgen/constants/constants_gen_test.go +++ b/sdk/bindgen/constants/constants_gen_test.go @@ -21,7 +21,7 @@ func TestGenConstants(t *testing.T) { } func genConstants(fileName string) { - m := stream.NewOrderedMap("", "") + m := new(maps.SafeSliceMap[string, string]) for i, s := range stream.NewBuffer(fileName).ToLines() { if i == 4 { // break // test diff --git a/sdk/bindgen/macros_decode.go b/sdk/bindgen/macros_decode.go index 32186c17..445a6f88 100644 --- a/sdk/bindgen/macros_decode.go +++ b/sdk/bindgen/macros_decode.go @@ -7,7 +7,7 @@ import ( ) func extractMacros(lines []string) *stream.OrderedMap[string, string] { - macros := stream.NewOrderedMap("", "") + macros := new(maps.SafeSliceMap[string, string]) macros.Set("PAGE_SIZE", "4096") var macroName string var macroValue strings.Builder From 1f91407ac92f7ec8c41ab648f13e2a2f477b286b Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sat, 30 Nov 2024 15:38:57 +0800 Subject: [PATCH 23/37] start binding --- sdk/bindgen/macros_decode.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sdk/bindgen/macros_decode.go b/sdk/bindgen/macros_decode.go index 445a6f88..30db8083 100644 --- a/sdk/bindgen/macros_decode.go +++ b/sdk/bindgen/macros_decode.go @@ -6,7 +6,7 @@ import ( "github.com/ddkwork/golibrary/stream" ) -func extractMacros(lines []string) *stream.OrderedMap[string, string] { +func extractMacros(lines []string) *maps.SafeSliceMap[string, string] { macros := new(maps.SafeSliceMap[string, string]) macros.Set("PAGE_SIZE", "4096") var macroName string From 981f0b1104748a6a169f92c60793c90860111061 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sat, 30 Nov 2024 16:25:24 +0800 Subject: [PATCH 24/37] start binding --- sdk/bindgen/bind_test.go | 131 ++++++++++---------- sdk/bindgen/command_test.go | 2 + sdk/bindgen/macros_decode.go | 2 +- sdk/bindgen/merged_headers.h | 214 +++++++++++++++------------------ sdk/commands_types_gen.go | 1 + sdk/debuggerError_types_gen.go | 1 + sdk/ioctl_types_gen.go | 1 + ux/ark/ark.go | 4 +- ux/ark/ark_test.go | 30 ++--- ux/ark/arks_enum_gen.go | 136 --------------------- ux/ark/arks_types_gen.go | 144 ++++++++++++++++++++++ 11 files changed, 336 insertions(+), 330 deletions(-) delete mode 100644 ux/ark/arks_enum_gen.go create mode 100644 ux/ark/arks_types_gen.go diff --git a/sdk/bindgen/bind_test.go b/sdk/bindgen/bind_test.go index 519f67af..8dca68ad 100644 --- a/sdk/bindgen/bind_test.go +++ b/sdk/bindgen/bind_test.go @@ -6,6 +6,8 @@ import ( "testing" "unicode" + "github.com/goradd/maps" + "github.com/ddkwork/app/bindgen/clang" "github.com/ddkwork/app/bindgen/gengo" "github.com/ddkwork/golibrary/mylog" @@ -51,15 +53,15 @@ func TestBindMacros(t *testing.T) { enumDebuggers = new(maps.SafeSliceMap[string, string]) enumIoctls = new(maps.SafeSliceMap[string, string]) ) - - for _, p := range macros.List() { - if !m.Has(p.Key) { - // mylog.Warning(p.Key, p.Value) - macros.Delete(p.Key) - continue + macros.Range(func(key string, value string) bool { + if !m.Has(key) { + // mylog.Warning(key, value) + macros.Delete(key) + // return true } - // mylog.Warning(p.Key, p.Value) - } + // mylog.Warning(key, value) + return true + }) g := stream.NewGeneratedFile() g.P("package sdk") @@ -69,76 +71,78 @@ func TestBindMacros(t *testing.T) { g.P() g.P("var (") - for _, p := range macros.List() { - p.Value = strings.TrimSpace(p.Value) - if strings.HasPrefix(p.Value, "sizeof") { - continue + macros.Range(func(key string, value string) bool { + value = strings.TrimSpace(value) + if strings.HasPrefix(value, "sizeof") { + return true } - if strings.HasSuffix(p.Value, "OPERATION_MANDATORY_DEBUGGEE_BIT") { - continue + if strings.HasSuffix(value, "OPERATION_MANDATORY_DEBUGGEE_BIT") { + return true } - if strings.Contains(p.Value, "sizeof") { - continue + if strings.Contains(value, "sizeof") { + return true } - if strings.Contains(p.Value, "TOP_LEVEL_DRIVERS_VMCALL_STARTING_NUMBER") { - continue + if strings.Contains(value, "TOP_LEVEL_DRIVERS_VMCALL_STARTING_NUMBER") { + return true } - p.Value = strings.ReplaceAll(p.Value, "\\", "") - p.Value = strings.Replace(p.Value, "6U", "6", 1) - p.Value = strings.Replace(p.Value, "7U", "7", 1) - p.Value = strings.Replace(p.Value, "8U", "8", 1) - p.Value = strings.Replace(p.Value, "9U", "9", 1) - p.Value = strings.Replace(p.Value, "10U", "10", 1) - p.Value = strings.Replace(p.Value, "11U", "11", 1) - p.Value = strings.Replace(p.Value, "12U", "12", 1) - p.Value = strings.Replace(p.Value, "13U", "13", 1) - p.Value = strings.Replace(p.Value, "14U", "14", 1) - p.Value = strings.Replace(p.Value, "15U", "15", 1) - p.Value = strings.Replace(p.Value, "16U", "16", 1) - p.Value = strings.Replace(p.Value, "17U", "17", 1) - p.Value = strings.Replace(p.Value, "NORMAL_PAGE_SIZE", "NormalPageSize", 1) - p.Value = strings.TrimSuffix(p.Value, "U") - p.Value = strings.TrimSuffix(p.Value, "ull") - - if len(p.Value) == 0 { - mylog.Todo(p.Key + " = " + p.Value) - continue + value = strings.ReplaceAll(value, "\\", "") + value = strings.Replace(value, "6U", "6", 1) + value = strings.Replace(value, "7U", "7", 1) + value = strings.Replace(value, "8U", "8", 1) + value = strings.Replace(value, "9U", "9", 1) + value = strings.Replace(value, "10U", "10", 1) + value = strings.Replace(value, "11U", "11", 1) + value = strings.Replace(value, "12U", "12", 1) + value = strings.Replace(value, "13U", "13", 1) + value = strings.Replace(value, "14U", "14", 1) + value = strings.Replace(value, "15U", "15", 1) + value = strings.Replace(value, "16U", "16", 1) + value = strings.Replace(value, "17U", "17", 1) + value = strings.Replace(value, "NORMAL_PAGE_SIZE", "NormalPageSize", 1) + value = strings.TrimSuffix(value, "U") + value = strings.TrimSuffix(value, "ull") + + if len(value) == 0 { + mylog.Todo(key + " = " + value) + return true } - if p.Value[0] == '(' && p.Value[len(p.Value)-1] == ')' { - p.Value = p.Value[1 : len(p.Value)-1] + if value[0] == '(' && value[len(value)-1] == ')' { + value = value[1 : len(value)-1] } - if strings.HasPrefix(p.Value, "0x") && !strings.Contains(p.Value, "//") && len(p.Value) > len("0xffffffff") { - // mylog.Todo(p.Key + " = " + p.Value) - p.Value = "uint64(" + p.Value + ")" + if strings.HasPrefix(value, "0x") && !strings.Contains(value, "//") && len(value) > len("0xffffffff") { + // mylog.Todo(key + " = " + value) + value = "uint64(" + value + ")" } - key := p.Key - //if key == "DEBUGGER_OPERATION_WAS_SUCCESSFUL" || strings.HasPrefix(key, "DEBUGGER_ERROR") { - // key += " debuggerErrorType" + k := key + //if k == "DEBUGGER_OPERATION_WAS_SUCCESSFUL" || strings.HasPrefix(k, "DEBUGGER_ERROR") { + // k += " debuggerErrorType" //} - value := p.Value - if isAlphabetOrUnderscore(value) { - value = stream.ToCamelUpper(value, false) + v := value + if isAlphabetOrUnderscore(v) { + v = stream.ToCamelUpper(v, false) } - key = stream.ToCamelUpper(key, false) + k = stream.ToCamelUpper(k, false) switch { - case strings.HasPrefix(p.Key, "DEBUGGER_ERROR"): - after, found := strings.CutPrefix(p.Key, "DEBUGGER_ERROR") + case strings.HasPrefix(k, "DEBUGGER_ERROR"): + after, found := strings.CutPrefix(k, "DEBUGGER_ERROR") if found { - key = after + k = after } - enumDebuggers.Set(key, key) - case strings.HasPrefix(p.Key, "IOCTL_"): - enumIoctls.Set(key, key) + enumDebuggers.Set(k, k) + case strings.HasPrefix(k, "IOCTL_"): + enumIoctls.Set(k, k) } - g.P(stream.ToCamelUpper(key, false) + "=" + value) - macros.Delete(p.Key) - } + g.P(stream.ToCamelUpper(k, false) + "=" + v) + macros.Delete(k) + return true + }) + g.P(")") g.P(` @@ -158,10 +162,11 @@ const ( stream.NewGeneratedFile().SetPackageName("sdk").SetFilePath("../").EnumTypes("debuggerError", enumDebuggers) stream.NewGeneratedFile().SetPackageName("sdk").SetFilePath("../").EnumTypes("ioctl", enumIoctls) - for _, p := range macros.List() { - return - mylog.Todo(p.Key + " = " + p.Value) - } + macros.Range(func(key string, value string) bool { + return true + mylog.Todo(key + " = " + value) + return true + }) } // isAlphabetOrUnderscore 检查字符串是否仅由字母或下划线组成 diff --git a/sdk/bindgen/command_test.go b/sdk/bindgen/command_test.go index f6ccbc1a..b3f9c367 100644 --- a/sdk/bindgen/command_test.go +++ b/sdk/bindgen/command_test.go @@ -8,6 +8,8 @@ import ( "strings" "testing" + "github.com/goradd/maps" + "github.com/ddkwork/HyperDbg/sdk" "github.com/ddkwork/golibrary/mylog" diff --git a/sdk/bindgen/macros_decode.go b/sdk/bindgen/macros_decode.go index 30db8083..750d8a23 100644 --- a/sdk/bindgen/macros_decode.go +++ b/sdk/bindgen/macros_decode.go @@ -3,7 +3,7 @@ package bindgen import ( "strings" - "github.com/ddkwork/golibrary/stream" + "github.com/goradd/maps" ) func extractMacros(lines []string) *maps.SafeSliceMap[string, string] { diff --git a/sdk/bindgen/merged_headers.h b/sdk/bindgen/merged_headers.h index d4e3828e..59d89f34 100644 --- a/sdk/bindgen/merged_headers.h +++ b/sdk/bindgen/merged_headers.h @@ -1,15 +1,3 @@ - -typedef unsigned char uint8_t; // 无符号8位整数 -typedef unsigned short uint16_t; // 无符号16位整数 -typedef unsigned int uint32_t; // 无符号32位整数 -typedef unsigned long long uint64_t; // 无符号64位整数 -typedef signed char int8_t; // 有符号8位整数 -typedef signed short int16_t; // 有符号16位整数 -typedef signed int int32_t; // 有符号32位整数 -typedef signed long long int64_t; // 有符号64位整数 -typedef int bool; // 使用 typedef 定义 bool 类型 - -typedef int* intptr_t; //bugfix.h #ifndef size_t #define size_t int @@ -67,7 +55,6 @@ typedef struct _LIST_ENTRY { #define _In_reads_bytes_(x) #endif - //SDK\Headers\BasicTypes.h /** * @file BasicTypes.h @@ -234,8 +221,8 @@ typedef struct _CR3_TYPE * @brief enum for reasons why debuggee is paused * */ -typedef enum DEBUGGEE_PAUSING_REASON_ { - +typedef enum _DEBUGGEE_PAUSING_REASON +{ // // For both kernel & user debugger @@ -271,8 +258,8 @@ typedef enum DEBUGGEE_PAUSING_REASON_ { * @brief enum for requested action for HyperDbg packet * */ -typedef enum DEBUGGER_REMOTE_PACKET_REQUESTED_ACTION_ { - +typedef enum _DEBUGGER_REMOTE_PACKET_REQUESTED_ACTION +{ // // Debugger to debuggee (user-mode execution) @@ -368,8 +355,8 @@ typedef enum DEBUGGER_REMOTE_PACKET_REQUESTED_ACTION_ { * @warning used in hwdbg * */ -typedef enum DEBUGGER_REMOTE_PACKET_TYPE_ { - +typedef enum _DEBUGGER_REMOTE_PACKET_TYPE +{ // // Debugger to debuggee (vmx-root) @@ -1101,8 +1088,8 @@ const unsigned char BuildSignature[] = { * @brief Different levels of paging * */ -typedef enum PAGING_LEVEL_ { - +typedef enum _PAGING_LEVEL +{ PagingLevelPageTable = 0, PagingLevelPageDirectory, PagingLevelPageDirectoryPointerTable, @@ -1117,8 +1104,8 @@ typedef enum PAGING_LEVEL_ { * @brief Inum of intentions for buffers (buffer tag) * */ -typedef enum POOL_ALLOCATION_INTENTION_ { - +typedef enum _POOL_ALLOCATION_INTENTION +{ TRACKING_HOOKED_PAGES, EXEC_TRAMPOLINE, SPLIT_2MB_PAGING_TO_4KB_PAGE, @@ -1146,8 +1133,8 @@ typedef enum POOL_ALLOCATION_INTENTION_ { // Debug Registers Modifications // ////////////////////////////////////////////////// -typedef enum DEBUG_REGISTER_TYPE_ { - +typedef enum _DEBUG_REGISTER_TYPE +{ BREAK_ON_INSTRUCTION_FETCH, BREAK_ON_WRITE_ONLY, BREAK_ON_IO_READ_OR_WRITE_NOT_SUPPORTED, @@ -1158,8 +1145,8 @@ typedef enum DEBUG_REGISTER_TYPE_ { // Execution Stages // ////////////////////////////////////////////////// -typedef enum VMX_EXECUTION_MODE_ { - +typedef enum _VMX_EXECUTION_MODE +{ VmxExecutionModeNonRoot = FALSE, VmxExecutionModeRoot = TRUE } VMX_EXECUTION_MODE; @@ -1168,8 +1155,8 @@ typedef enum VMX_EXECUTION_MODE_ { * @brief Type of calling the event * */ -typedef enum VMM_CALLBACK_EVENT_CALLING_STAGE_TYPE_ { - +typedef enum _VMM_CALLBACK_EVENT_CALLING_STAGE_TYPE +{ VMM_CALLBACK_CALLING_STAGE_INVALID_EVENT_EMULATION = 0, VMM_CALLBACK_CALLING_STAGE_PRE_EVENT_EMULATION = 1, VMM_CALLBACK_CALLING_STAGE_POST_EVENT_EMULATION = 2, @@ -1181,8 +1168,8 @@ typedef enum VMM_CALLBACK_EVENT_CALLING_STAGE_TYPE_ { * @brief enum to query different process and thread interception mechanisms * */ -typedef enum DEBUGGER_THREAD_PROCESS_TRACING_ { - +typedef enum _DEBUGGER_THREAD_PROCESS_TRACING +{ DEBUGGER_THREAD_PROCESS_TRACING_INTERCEPT_CLOCK_INTERRUPTS_FOR_THREAD_CHANGE, DEBUGGER_THREAD_PROCESS_TRACING_INTERCEPT_CLOCK_INTERRUPTS_FOR_PROCESS_CHANGE, @@ -1331,8 +1318,8 @@ typedef struct _DEBUGGEE_UD_PAUSED_PACKET * @brief Type of transferring buffer between user-to-kernel * */ -typedef enum NOTIFY_TYPE_ { - +typedef enum _NOTIFY_TYPE +{ IRP_BASED, EVENT_BASED } NOTIFY_TYPE; @@ -1387,8 +1374,8 @@ typedef struct _DIRECT_VMCALL_PARAMETERS * @brief different type of memory addresses * */ -typedef enum DEBUGGER_HOOK_MEMORY_TYPE_ { - +typedef enum _DEBUGGER_HOOK_MEMORY_TYPE +{ DEBUGGER_MEMORY_HOOK_VIRTUAL_ADDRESS, DEBUGGER_MEMORY_HOOK_PHYSICAL_ADDRESS } DEBUGGER_HOOK_MEMORY_TYPE; @@ -2099,8 +2086,8 @@ typedef struct _VMX_SEGMENT_SELECTOR * @brief Exceptions enum * */ -typedef enum EXCEPTION_VECTORS_ { - +typedef enum _EXCEPTION_VECTORS +{ EXCEPTION_VECTOR_DIVIDE_ERROR, EXCEPTION_VECTOR_DEBUG_BREAKPOINT, EXCEPTION_VECTOR_NMI, @@ -2153,8 +2140,8 @@ typedef enum EXCEPTION_VECTORS_ { * @brief The status of triggering events * */ -typedef enum VMM_CALLBACK_TRIGGERING_EVENT_STATUS_TYPE_ { - +typedef enum _VMM_CALLBACK_TRIGGERING_EVENT_STATUS_TYPE +{ VMM_CALLBACK_TRIGGERING_EVENT_STATUS_SUCCESSFUL_NO_INITIALIZED = 0, VMM_CALLBACK_TRIGGERING_EVENT_STATUS_SUCCESSFUL = 0, VMM_CALLBACK_TRIGGERING_EVENT_STATUS_SUCCESSFUL_IGNORE_EVENT = 1, @@ -2171,8 +2158,8 @@ typedef enum VMM_CALLBACK_TRIGGERING_EVENT_STATUS_TYPE_ { * @brief enum to show type of all HyperDbg events * */ -typedef enum VMM_EVENT_TYPE_ENUM_ { - +typedef enum _VMM_EVENT_TYPE_ENUM +{ // // EPT Memory Monitoring Events @@ -2255,8 +2242,8 @@ typedef enum VMM_EVENT_TYPE_ENUM_ { * @brief Type of Actions * */ -typedef enum DEBUGGER_EVENT_ACTION_TYPE_ENUM_ { - +typedef enum _DEBUGGER_EVENT_ACTION_TYPE_ENUM +{ BREAK_TO_DEBUGGER, RUN_SCRIPT, RUN_CUSTOM_CODE @@ -2267,8 +2254,8 @@ typedef enum DEBUGGER_EVENT_ACTION_TYPE_ENUM_ { * @brief Type of handling !syscall or !sysret * */ -typedef enum DEBUGGER_EVENT_SYSCALL_SYSRET_TYPE_ { - +typedef enum _DEBUGGER_EVENT_SYSCALL_SYSRET_TYPE +{ DEBUGGER_EVENT_SYSCALL_SYSRET_SAFE_ACCESS_MEMORY = 0, DEBUGGER_EVENT_SYSCALL_SYSRET_HANDLE_ALL_UD = 1, @@ -2280,8 +2267,8 @@ typedef enum DEBUGGER_EVENT_SYSCALL_SYSRET_TYPE_ { * @brief Type of mode change traps * */ -typedef enum DEBUGGER_EVENT_MODE_TYPE_ { - +typedef enum _DEBUGGER_EVENT_MODE_TYPE +{ DEBUGGER_EVENT_MODE_TYPE_USER_MODE_AND_KERNEL_MODE = 1, DEBUGGER_EVENT_MODE_TYPE_USER_MODE = 3, DEBUGGER_EVENT_MODE_TYPE_KERNEL_MODE = 0, @@ -2293,8 +2280,8 @@ typedef enum DEBUGGER_EVENT_MODE_TYPE_ { * @brief Type of tracing events * */ -typedef enum DEBUGGER_EVENT_TRACE_TYPE_ { - +typedef enum _DEBUGGER_EVENT_TRACE_TYPE +{ DEBUGGER_EVENT_TRACE_TYPE_INVALID = 0, DEBUGGER_EVENT_TRACE_TYPE_STEP_IN = 1, DEBUGGER_EVENT_TRACE_TYPE_STEP_OUT = 2, @@ -2306,8 +2293,8 @@ typedef enum DEBUGGER_EVENT_TRACE_TYPE_ { * @brief different types of modifying events request (enable/disable/clear) * */ -typedef enum DEBUGGER_MODIFY_EVENTS_TYPE_ { - +typedef enum _DEBUGGER_MODIFY_EVENTS_TYPE +{ DEBUGGER_MODIFY_EVENTS_QUERY_STATE, DEBUGGER_MODIFY_EVENTS_ENABLE, DEBUGGER_MODIFY_EVENTS_DISABLE, @@ -2366,8 +2353,8 @@ typedef struct _DEBUGGER_EVENT_OPTIONS * @brief Things to consider when applying resources * */ -typedef enum PROTECTED_HV_RESOURCES_PASSING_OVERS_ { - +typedef enum _PROTECTED_HV_RESOURCES_PASSING_OVERS +{ // // for exception bitmap // @@ -2401,8 +2388,8 @@ typedef enum PROTECTED_HV_RESOURCES_PASSING_OVERS_ { * @brief Type of protected (multi-used) resources * */ -typedef enum PROTECTED_HV_RESOURCES_TYPE_ { - +typedef enum _PROTECTED_HV_RESOURCES_TYPE +{ PROTECTED_HV_RESOURCES_EXCEPTION_BITMAP, PROTECTED_HV_RESOURCES_EXTERNAL_INTERRUPT_EXITING, @@ -2574,8 +2561,8 @@ typedef struct _DEBUGGER_EVENT_AND_ACTION_RESULT * @warning This file should be changed along with hwdbg files * */ -typedef enum HWDBG_ACTION_ENUMS_ { - +typedef enum _HWDBG_ACTION_ENUMS +{ hwdbgActionSendInstanceInfo = 1, hwdbgActionConfigureScriptBuffer = 2, @@ -2586,8 +2573,8 @@ typedef enum HWDBG_ACTION_ENUMS_ { * @warning This file should be changed along with hwdbg files * */ -typedef enum HWDBG_RESPONSE_ENUMS_ { - +typedef enum _HWDBG_RESPONSE_ENUMS +{ hwdbgResponseSuccessOrErrorMessage = 1, hwdbgResponseInstanceInfo = 2, @@ -2598,8 +2585,8 @@ typedef enum HWDBG_RESPONSE_ENUMS_ { * @warning This file should be changed along with hwdbg files * */ -typedef enum HWDBG_SUCCESS_OR_ERROR_ENUMS_ { - +typedef enum _HWDBG_SUCCESS_OR_ERROR_ENUMS +{ hwdbgOperationWasSuccessful = 0x7FFFFFFF, hwdbgErrorInvalidPacket = 1, @@ -3170,7 +3157,7 @@ typedef struct _PCI_TREE * */ #pragma once -//#include "Pcie.h" +#include "Pcie.h" #define SIZEOF_DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS \ sizeof(DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS) @@ -3247,8 +3234,8 @@ typedef struct _DEBUGGER_PAGE_IN_REQUEST * @brief different modes of reconstruct requests * */ -typedef enum REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE_ { - +typedef enum _REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE +{ REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE_UNKNOWN = 0, REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE_USER_MODE, REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE_KERNEL_MODE, @@ -3258,8 +3245,8 @@ typedef enum REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE_ { * @brief different types of reconstruct requests * */ -typedef enum REVERSING_MACHINE_RECONSTRUCT_MEMORY_TYPE_ { - +typedef enum _REVERSING_MACHINE_RECONSTRUCT_MEMORY_TYPE +{ REVERSING_MACHINE_RECONSTRUCT_MEMORY_TYPE_UNKNOWN = 0, REVERSING_MACHINE_RECONSTRUCT_MEMORY_TYPE_RECONSTRUCT, REVERSING_MACHINE_RECONSTRUCT_MEMORY_TYPE_PATTERN, @@ -3311,8 +3298,8 @@ typedef struct _DEBUGGER_DT_COMMAND_OPTIONS * @brief different types of prealloc requests * */ -typedef enum DEBUGGER_PREALLOC_COMMAND_TYPE_ { - +typedef enum _DEBUGGER_PREALLOC_COMMAND_TYPE +{ DEBUGGER_PREALLOC_COMMAND_TYPE_THREAD_INTERCEPTION, DEBUGGER_PREALLOC_COMMAND_TYPE_MONITOR, DEBUGGER_PREALLOC_COMMAND_TYPE_EPTHOOK, @@ -3346,8 +3333,8 @@ typedef struct _DEBUGGER_PREALLOC_COMMAND * @brief different types of preactivate requests * */ -typedef enum DEBUGGER_PREACTIVATE_COMMAND_TYPE_ { - +typedef enum _DEBUGGER_PREACTIVATE_COMMAND_TYPE +{ DEBUGGER_PREACTIVATE_COMMAND_TYPE_MODE, } DEBUGGER_PREACTIVATE_COMMAND_TYPE; @@ -3375,8 +3362,8 @@ typedef struct _DEBUGGER_PREACTIVATE_COMMAND * @brief different types of reading memory * */ -typedef enum DEBUGGER_READ_READING_TYPE_ { - +typedef enum _DEBUGGER_READ_READING_TYPE +{ READ_FROM_KERNEL, READ_FROM_VMX_ROOT } DEBUGGER_READ_READING_TYPE; @@ -3385,8 +3372,8 @@ typedef enum DEBUGGER_READ_READING_TYPE_ { * @brief different type of addresses * */ -typedef enum DEBUGGER_READ_MEMORY_TYPE_ { - +typedef enum _DEBUGGER_READ_MEMORY_TYPE +{ DEBUGGER_READ_PHYSICAL_ADDRESS, DEBUGGER_READ_VIRTUAL_ADDRESS } DEBUGGER_READ_MEMORY_TYPE; @@ -3395,8 +3382,8 @@ typedef enum DEBUGGER_READ_MEMORY_TYPE_ { * @brief different address mode * */ -typedef enum DEBUGGER_READ_MEMORY_ADDRESS_MODE_ { - +typedef enum _DEBUGGER_READ_MEMORY_ADDRESS_MODE +{ DEBUGGER_READ_ADDRESS_MODE_32_BIT, DEBUGGER_READ_ADDRESS_MODE_64_BIT @@ -3407,8 +3394,8 @@ typedef enum DEBUGGER_READ_MEMORY_ADDRESS_MODE_ { * the details of memory or disassemble them * */ -typedef enum DEBUGGER_SHOW_MEMORY_STYLE_ { - +typedef enum _DEBUGGER_SHOW_MEMORY_STYLE +{ DEBUGGER_SHOW_COMMAND_DT = 1, DEBUGGER_SHOW_COMMAND_DISASSEMBLE64, DEBUGGER_SHOW_COMMAND_DISASSEMBLE32, @@ -3469,8 +3456,8 @@ typedef struct _DEBUGGER_FLUSH_LOGGING_BUFFERS * @brief test query used for test purposed * */ -typedef enum DEBUGGER_TEST_QUERY_STATE_ { - +typedef enum _DEBUGGER_TEST_QUERY_STATE +{ TEST_QUERY_HALTING_CORE_STATUS = 1, // Query constant to show detail of halting of core TEST_QUERY_PREALLOCATED_POOL_STATE = 2, // Query pre-allocated pool state TEST_QUERY_TRAP_STATE = 3, // Query trap state @@ -3587,8 +3574,8 @@ typedef struct _DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER * @brief different types of actions on MSRs * */ -typedef enum DEBUGGER_MSR_ACTION_TYPE_ { - +typedef enum _DEBUGGER_MSR_ACTION_TYPE +{ DEBUGGER_MSR_READ, DEBUGGER_MSR_WRITE } DEBUGGER_MSR_ACTION_TYPE; @@ -3618,8 +3605,8 @@ typedef struct _DEBUGGER_READ_AND_WRITE_ON_MSR * @brief different type of addresses for editing memory * */ -typedef enum DEBUGGER_EDIT_MEMORY_TYPE_ { - +typedef enum _DEBUGGER_EDIT_MEMORY_TYPE +{ EDIT_VIRTUAL_MEMORY, EDIT_PHYSICAL_MEMORY } DEBUGGER_EDIT_MEMORY_TYPE; @@ -3628,8 +3615,8 @@ typedef enum DEBUGGER_EDIT_MEMORY_TYPE_ { * @brief size of editing memory * */ -typedef enum DEBUGGER_EDIT_MEMORY_BYTE_SIZE_ { - +typedef enum _DEBUGGER_EDIT_MEMORY_BYTE_SIZE +{ EDIT_BYTE, EDIT_DWORD, EDIT_QWORD @@ -3660,8 +3647,8 @@ typedef struct _DEBUGGER_EDIT_MEMORY * @brief different types of address for searching on memory * */ -typedef enum DEBUGGER_SEARCH_MEMORY_TYPE_ { - +typedef enum _DEBUGGER_SEARCH_MEMORY_TYPE +{ SEARCH_PHYSICAL_MEMORY, SEARCH_VIRTUAL_MEMORY, SEARCH_PHYSICAL_FROM_VIRTUAL_MEMORY, @@ -3672,8 +3659,8 @@ typedef enum DEBUGGER_SEARCH_MEMORY_TYPE_ { * @brief different sizes on searching memory * */ -typedef enum DEBUGGER_SEARCH_MEMORY_BYTE_SIZE_ { - +typedef enum _DEBUGGER_SEARCH_MEMORY_BYTE_SIZE +{ SEARCH_BYTE, SEARCH_DWORD, SEARCH_QWORD @@ -3772,8 +3759,8 @@ typedef struct _DEBUGGEE_CHANGE_CORE_PACKET * @brief different actions of switchings * */ -typedef enum DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_TYPE_ { - +typedef enum _DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_TYPE +{ DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_ATTACH, DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_DETACH, DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_REMOVE_HOOKS, @@ -3813,8 +3800,8 @@ typedef struct _DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS * @brief different type of process or thread queries * */ -typedef enum DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_TYPES_ { - +typedef enum _DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_TYPES +{ DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_QUERY_PROCESS_COUNT = 1, DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_QUERY_THREAD_COUNT = 2, DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_QUERY_PROCESS_LIST = 3, @@ -3828,8 +3815,8 @@ typedef enum DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_TYPES_ { * @brief different actions on showing or querying list of process or threads * */ -typedef enum DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_ACTIONS_ { - +typedef enum _DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_ACTIONS +{ DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_ACTION_SHOW_INSTANTLY = 1, DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_ACTION_QUERY_COUNT = 2, DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_ACTION_QUERY_SAVE_DETAILS = 3, @@ -3935,8 +3922,8 @@ typedef struct _DEBUGGER_SINGLE_CALLSTACK_FRAME * @brief callstack showing method * */ -typedef enum DEBUGGER_CALLSTACK_DISPLAY_METHOD_ { - +typedef enum _DEBUGGER_CALLSTACK_DISPLAY_METHOD +{ DEBUGGER_CALLSTACK_DISPLAY_METHOD_WITHOUT_PARAMS, DEBUGGER_CALLSTACK_DISPLAY_METHOD_WITH_PARAMS, @@ -4023,8 +4010,8 @@ typedef struct _DEBUGGER_EVENT_REQUEST_CUSTOM_CODE * @brief User-mode debugging actions * */ -typedef enum DEBUGGER_UD_COMMAND_ACTION_TYPE_ { - +typedef enum _DEBUGGER_UD_COMMAND_ACTION_TYPE +{ DEBUGGER_UD_COMMAND_ACTION_TYPE_NONE = 0, DEBUGGER_UD_COMMAND_ACTION_TYPE_PAUSE, DEBUGGER_UD_COMMAND_ACTION_TYPE_CONTINUE, @@ -4067,8 +4054,8 @@ typedef struct _DEBUGGER_UD_COMMAND_PACKET * @brief Debugger process switch and process details * */ -typedef enum DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_TYPE_ { - +typedef enum _DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_TYPE +{ DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_GET_PROCESS_DETAILS, DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_GET_PROCESS_LIST, @@ -4107,8 +4094,8 @@ typedef struct _DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET * @brief Debugger thread switch and thread details * */ -typedef enum DEBUGGEE_DETAILS_AND_SWITCH_THREAD_TYPE_ { - +typedef enum _DEBUGGEE_DETAILS_AND_SWITCH_THREAD_TYPE +{ DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PERFORM_SWITCH, DEBUGGEE_DETAILS_AND_SWITCH_THREAD_GET_THREAD_DETAILS, @@ -4148,8 +4135,8 @@ typedef struct _DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET * @brief stepping and tracking types * */ -typedef enum DEBUGGER_REMOTE_STEPPING_REQUEST_ { - +typedef enum _DEBUGGER_REMOTE_STEPPING_REQUEST +{ DEBUGGER_REMOTE_STEPPING_REQUEST_STEP_IN, DEBUGGER_REMOTE_STEPPING_REQUEST_INSTRUMENTATION_STEP_IN, DEBUGGER_REMOTE_STEPPING_REQUEST_INSTRUMENTATION_STEP_IN_FOR_TRACKING, @@ -4189,8 +4176,8 @@ typedef struct _DEBUGGEE_STEP_PACKET * @brief Perform actions related to APIC * */ -typedef enum DEBUGGER_APIC_REQUEST_TYPE_ { - +typedef enum _DEBUGGER_APIC_REQUEST_TYPE +{ DEBUGGER_APIC_REQUEST_TYPE_READ_LOCAL_APIC, } DEBUGGER_APIC_REQUEST_TYPE; @@ -4366,8 +4353,8 @@ typedef struct _DEBUGGEE_BP_PACKET * @brief breakpoint modification types * */ -typedef enum DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST_ { - +typedef enum _DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST +{ DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST_LIST_BREAKPOINTS, DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST_ENABLE, @@ -4395,8 +4382,8 @@ typedef struct _DEBUGGEE_BP_LIST_OR_MODIFY_PACKET * @brief Whether a jump is taken or not taken * */ -typedef enum DEBUGGER_CONDITIONAL_JUMP_STATUS_ { - +typedef enum _DEBUGGER_CONDITIONAL_JUMP_STATUS +{ DEBUGGER_CONDITIONAL_JUMP_STATUS_ERROR = 0, DEBUGGER_CONDITIONAL_JUMP_STATUS_NOT_CONDITIONAL_JUMP, @@ -4759,7 +4746,7 @@ static const char *const FunctionNames[] = { "FUNC_WCSNCMP", }; -typedef enum REGS_ENUM_ { +typedef enum REGS_ENUM { REGISTER_RAX = 0, REGISTER_EAX = 1, REGISTER_AX = 2, @@ -5509,4 +5496,3 @@ SymCastingQueryForFiledsAndTypes(_In_ const char * StructName, #endif - diff --git a/sdk/commands_types_gen.go b/sdk/commands_types_gen.go index ed5c485a..abb03846 100644 --- a/sdk/commands_types_gen.go +++ b/sdk/commands_types_gen.go @@ -1,6 +1,7 @@ package sdk import ( + "github.com/ddkwork/golibrary/stream" "strings" diff --git a/sdk/debuggerError_types_gen.go b/sdk/debuggerError_types_gen.go index 693c2c93..71b8642e 100644 --- a/sdk/debuggerError_types_gen.go +++ b/sdk/debuggerError_types_gen.go @@ -1,6 +1,7 @@ package sdk import ( + "github.com/ddkwork/golibrary/stream" "strings" diff --git a/sdk/ioctl_types_gen.go b/sdk/ioctl_types_gen.go index 05df8ff0..556a22bb 100644 --- a/sdk/ioctl_types_gen.go +++ b/sdk/ioctl_types_gen.go @@ -1,6 +1,7 @@ package sdk import ( + "github.com/ddkwork/golibrary/stream" "strings" diff --git a/ux/ark/ark.go b/ux/ark/ark.go index ca08678c..d4796527 100644 --- a/ux/ark/ark.go +++ b/ux/ark/ark.go @@ -36,7 +36,7 @@ func arkTodo() { } func Layout() *unison.Panel { - type ark struct{ Name ArksKind } + type ark struct{ Name ArksType } table, header := widget.NewTable(ark{}, widget.TableContext[ark]{ ContextMenuItems: nil, MarshalRow: func(node *widget.Node[ark]) (cells []widget.CellData) { @@ -53,7 +53,7 @@ func Layout() *unison.Panel { mylog.Todo("selection changed callback") }, SetRootRowsCallBack: func(root *widget.Node[ark]) { - for _, kind := range InvalidArksKind.Kinds() { + for _, kind := range KernelTablesType.EnumTypes() { root.AddChildByData(ark{kind}) } }, diff --git a/ux/ark/ark_test.go b/ux/ark/ark_test.go index 1c8394b7..5269d236 100644 --- a/ux/ark/ark_test.go +++ b/ux/ark/ark_test.go @@ -3,23 +3,25 @@ package ark import ( "testing" + "github.com/goradd/maps" + "github.com/ddkwork/golibrary/stream" ) func TestName(t *testing.T) { g := stream.NewGeneratedFile() - g.EnumTypes("arks", []string{ - "kernelTables", - "explorer", - "taskManager", - "driverTool", - "registryEditor", - "hardwareMonitor", - "hardwareHook", - "randomHook", - "environmentEditor", - "vstart", - "crypt", - "packer", - }, nil) + m := new(maps.SafeSliceMap[string, string]) + m.Set("kernelTables", "kernelTables") + m.Set("explorer", "explorer") + m.Set("taskManager", "taskManager") + m.Set("driverTool", "driverTool") + m.Set("registryEditor", "registryEditor") + m.Set("hardwareMonitor", "hardwareMonitor") + m.Set("hardwareHook", "hardwareHook") + m.Set("randomHook", "randomHook") + m.Set("environmentEditor", "environmentEditor") + m.Set("vstart", "vstart") + m.Set("crypt", "crypt") + m.Set("packer", "packer") + g.EnumTypes("arks", m) } diff --git a/ux/ark/arks_enum_gen.go b/ux/ark/arks_enum_gen.go deleted file mode 100644 index 4b9329da..00000000 --- a/ux/ark/arks_enum_gen.go +++ /dev/null @@ -1,136 +0,0 @@ -package ark - -import ( - "strings" - - -) - -// Code generated by GeneratedFile enum - DO NOT EDIT. - -type ArksKind byte - -const ( - KernelTablesKind ArksKind = iota - ExplorerKind - TaskManagerKind - DriverToolKind - RegistryEditorKind - HardwareMonitorKind - HardwareHookKind - RandomHookKind - EnvironmentEditorKind - VstartKind - CryptKind - PackerKind - InvalidArksKind -) - -func ConvertInteger2ArksKind[T stream.Integer](v T) ArksKind { - return ArksKind(v) -} - -func (k ArksKind) AssertKind(kinds string) ArksKind { - for _, kind := range k.Kinds() { - if strings.ToLower(kinds) == strings.ToLower(kind.String()) { - return kind - } - } - return InvalidArksKind -} - -func (k ArksKind) String() string { - switch k { - case KernelTablesKind: - return "KernelTables" - case ExplorerKind: - return "Explorer" - case TaskManagerKind: - return "TaskManager" - case DriverToolKind: - return "DriverTool" - case RegistryEditorKind: - return "RegistryEditor" - case HardwareMonitorKind: - return "HardwareMonitor" - case HardwareHookKind: - return "HardwareHook" - case RandomHookKind: - return "RandomHook" - case EnvironmentEditorKind: - return "EnvironmentEditor" - case VstartKind: - return "Vstart" - case CryptKind: - return "Crypt" - case PackerKind: - return "Packer" - default: - return "InvalidArksKind" - } -} - -func (k ArksKind) Keys() []string { - return []string{ - "KernelTables", - "Explorer", - "TaskManager", - "DriverTool", - "RegistryEditor", - "HardwareMonitor", - "HardwareHook", - "RandomHook", - "EnvironmentEditor", - "Vstart", - "Crypt", - "Packer", - } -} - -func (k ArksKind) Kinds() []ArksKind { - return []ArksKind{ - KernelTablesKind, - ExplorerKind, - TaskManagerKind, - DriverToolKind, - RegistryEditorKind, - HardwareMonitorKind, - HardwareHookKind, - RandomHookKind, - EnvironmentEditorKind, - VstartKind, - CryptKind, - PackerKind, - } -} - -func (k ArksKind) PngFileName() string { - switch k { - case KernelTablesKind: - return "KernelTables" - case ExplorerKind: - return "Explorer" - case TaskManagerKind: - return "TaskManager" - case DriverToolKind: - return "DriverTool" - case RegistryEditorKind: - return "RegistryEditor" - case HardwareMonitorKind: - return "HardwareMonitor" - case HardwareHookKind: - return "HardwareHook" - case RandomHookKind: - return "RandomHook" - case EnvironmentEditorKind: - return "EnvironmentEditor" - case VstartKind: - return "Vstart" - case CryptKind: - return "Crypt" - case PackerKind: - return "Packer" - default: - return "InvalidArksKind" - } -} diff --git a/ux/ark/arks_types_gen.go b/ux/ark/arks_types_gen.go new file mode 100644 index 00000000..ac99f897 --- /dev/null +++ b/ux/ark/arks_types_gen.go @@ -0,0 +1,144 @@ +package ark + +import ( + "strings" + + "github.com/ddkwork/golibrary/stream" +) + +// Code generated by GeneratedFile types - DO NOT EDIT. + +type ArksType uint8 + +const ( + KernelTablesType ArksType = iota + ExplorerType + TaskManagerType + DriverToolType + RegistryEditorType + HardwareMonitorType + HardwareHookType + RandomHookType + EnvironmentEditorType + VstartType + CryptType + PackerType +) + +func (t ArksType) Valid() bool { + return t >= KernelTablesType && t <= PackerType +} + +func ArksTypeBy[T stream.Integer](v T) ArksType { + return ArksType(v) +} + +func (t ArksType) AssertBy(name string) ArksType { + name = strings.TrimSuffix(name, "Type") + for _, n := range t.EnumTypes() { + if strings.ToLower(name) == strings.ToLower(n.String()) { + return n + } + } + panic("InvalidType") +} + +func (t ArksType) String() string { + switch t { + case KernelTablesType: + return "KernelTables" + case ExplorerType: + return "Explorer" + case TaskManagerType: + return "TaskManager" + case DriverToolType: + return "DriverTool" + case RegistryEditorType: + return "RegistryEditor" + case HardwareMonitorType: + return "HardwareMonitor" + case HardwareHookType: + return "HardwareHook" + case RandomHookType: + return "RandomHook" + case EnvironmentEditorType: + return "EnvironmentEditor" + case VstartType: + return "Vstart" + case CryptType: + return "Crypt" + case PackerType: + return "Packer" + default: + panic("InvalidType") + } +} + +func (t ArksType) Tooltip() string { + switch t { + case KernelTablesType: + return "kernelTables" + case ExplorerType: + return "explorer" + case TaskManagerType: + return "taskManager" + case DriverToolType: + return "driverTool" + case RegistryEditorType: + return "registryEditor" + case HardwareMonitorType: + return "hardwareMonitor" + case HardwareHookType: + return "hardwareHook" + case RandomHookType: + return "randomHook" + case EnvironmentEditorType: + return "environmentEditor" + case VstartType: + return "vstart" + case CryptType: + return "crypt" + case PackerType: + return "packer" + default: + panic("InvalidType") + } +} + +func (t ArksType) Names() []string { + return []string{ + "KernelTables", + "Explorer", + "TaskManager", + "DriverTool", + "RegistryEditor", + "HardwareMonitor", + "HardwareHook", + "RandomHook", + "EnvironmentEditor", + "Vstart", + "Crypt", + "Packer", + } +} + +func (t ArksType) EnumTypes() []ArksType { + return []ArksType{ + KernelTablesType, + ExplorerType, + TaskManagerType, + DriverToolType, + RegistryEditorType, + HardwareMonitorType, + HardwareHookType, + RandomHookType, + EnvironmentEditorType, + VstartType, + CryptType, + PackerType, + } +} + +func (t ArksType) SvgFileName() string { + return t.String() + ".svg" +} From 994a741e98f1dcc1db96f720a0361498e6d2a2bf Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sat, 30 Nov 2024 16:52:53 +0800 Subject: [PATCH 25/37] start binding --- ux/ark/ark.go | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/ux/ark/ark.go b/ux/ark/ark.go index d4796527..52d9ffe0 100644 --- a/ux/ark/ark.go +++ b/ux/ark/ark.go @@ -11,6 +11,7 @@ import ( "github.com/ddkwork/golibrary/mylog" "github.com/ddkwork/golibrary/stream" "github.com/ddkwork/unison" + "github.com/goradd/maps" ) func main() { @@ -65,8 +66,8 @@ func Layout() *unison.Panel { widget.SetScrollLayout(splitPanel, 2) left := widget.NewTableScrollPanel(table, header) - layouts := stream.NewOrderedMap(InvalidArksKind, func() unison.Paneler { return widget.NewPanel() }) - layouts.Set(KernelTablesKind, func() unison.Paneler { + layouts := new(maps.SafeSliceMap[ArksType, func() unison.Paneler]) + layouts.Set(KernelTablesType, func() unison.Paneler { table, header := widget.NewTable(ms.NtApi{}, widget.TableContext[ms.NtApi]{ ContextMenuItems: nil, MarshalRow: func(node *widget.Node[ms.NtApi]) (cells []widget.CellData) { @@ -111,7 +112,7 @@ func Layout() *unison.Panel { }) right := widget.NewPanel() - right.AddChild(mylog.Check2Bool(layouts.Get(KernelTablesKind))()) // todo make a welcoming page + right.AddChild((layouts.Get(KernelTablesType))()) // todo make a welcoming page splitPanel.AddChild(left) splitPanel.AddChild(right) @@ -122,13 +123,13 @@ func Layout() *unison.Panel { break } switch n.Data.Name { - case KernelTablesKind: + case KernelTablesType: right.RemoveAllChildren() - paneler := mylog.Check2Bool(layouts.Get(KernelTablesKind))() + paneler := (layouts.Get(KernelTablesType))() right.AddChild(paneler) splitPanel.AddChild(right) - case PackerKind: + case PackerType: mylog.Todo("packer") // pe包似乎有个检测壳的，看看全不全 // https://github.com/inc0d3/malware/blob/master/tools%2Funpacker%2Fthemida-2.x%2FThemida%20-%20Winlicense%20Ultra%20Unpacker%201.4.txt From 114af3388083ac3be54fd0877cc60dd002627c65 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sat, 30 Nov 2024 17:35:00 +0800 Subject: [PATCH 26/37] start binding --- ntdll.txt | 980 +++++------ sdk/commands_types_gen.go | 3 +- sdk/debuggerError_types_gen.go | 3 +- sdk/ioctl_types_gen.go | 3 +- win32u.txt | 2914 ++++++++++++++++---------------- 5 files changed, 1950 insertions(+), 1953 deletions(-) diff --git a/ntdll.txt b/ntdll.txt index dde48aaf..f2f53f0c 100644 --- a/ntdll.txt +++ b/ntdll.txt @@ -1,491 +1,491 @@ Windows 11 v10.0.22621.1928 -┌─────┬───────────────────────────────────────────────────────┬──────────────────┐ -│ Id │ Name │ Index │ -├─────┼───────────────────────────────────────────────────────┼──────────────────┤ -│ 1 │ NtAccessCheck │ 0x00000000 / 0 │ -│ 2 │ NtWorkerFactoryWorkerReady │ 0x00000001 / 1 │ -│ 3 │ NtAcceptConnectPort │ 0x00000002 / 2 │ -│ 4 │ NtMapUserPhysicalPagesScatter │ 0x00000003 / 3 │ -│ 5 │ NtWaitForSingleObject │ 0x00000004 / 4 │ -│ 6 │ NtCallbackReturn │ 0x00000005 / 5 │ -│ 7 │ NtReadFile │ 0x00000006 / 6 │ -│ 8 │ NtDeviceIoControlFile │ 0x00000007 / 7 │ -│ 9 │ NtWriteFile │ 0x00000008 / 8 │ -│ 10 │ NtRemoveIoCompletion │ 0x00000009 / 9 │ -│ 11 │ NtReleaseSemaphore │ 0x0000000A / 10 │ -│ 12 │ NtReplyWaitReceivePort │ 0x0000000B / 11 │ -│ 13 │ NtReplyPort │ 0x0000000C / 12 │ -│ 14 │ NtSetInformationThread │ 0x0000000D / 13 │ -│ 15 │ NtSetEvent │ 0x0000000E / 14 │ -│ 16 │ NtClose │ 0x0000000F / 15 │ -│ 17 │ NtQueryObject │ 0x00000010 / 16 │ -│ 18 │ NtQueryInformationFile │ 0x00000011 / 17 │ -│ 19 │ NtOpenKey │ 0x00000012 / 18 │ -│ 20 │ NtEnumerateValueKey │ 0x00000013 / 19 │ -│ 21 │ NtFindAtom │ 0x00000014 / 20 │ -│ 22 │ NtQueryDefaultLocale │ 0x00000015 / 21 │ -│ 23 │ NtQueryKey │ 0x00000016 / 22 │ -│ 24 │ NtQueryValueKey │ 0x00000017 / 23 │ -│ 25 │ NtAllocateVirtualMemory │ 0x00000018 / 24 │ -│ 26 │ NtQueryInformationProcess │ 0x00000019 / 25 │ -│ 27 │ NtWaitForMultipleObjects32 │ 0x0000001A / 26 │ -│ 28 │ NtWriteFileGather │ 0x0000001B / 27 │ -│ 29 │ NtSetInformationProcess │ 0x0000001C / 28 │ -│ 30 │ NtCreateKey │ 0x0000001D / 29 │ -│ 31 │ NtFreeVirtualMemory │ 0x0000001E / 30 │ -│ 32 │ NtImpersonateClientOfPort │ 0x0000001F / 31 │ -│ 33 │ NtReleaseMutant │ 0x00000020 / 32 │ -│ 34 │ NtQueryInformationToken │ 0x00000021 / 33 │ -│ 35 │ NtRequestWaitReplyPort │ 0x00000022 / 34 │ -│ 36 │ NtQueryVirtualMemory │ 0x00000023 / 35 │ -│ 37 │ NtOpenThreadToken │ 0x00000024 / 36 │ -│ 38 │ NtQueryInformationThread │ 0x00000025 / 37 │ -│ 39 │ NtOpenProcess │ 0x00000026 / 38 │ -│ 40 │ NtSetInformationFile │ 0x00000027 / 39 │ -│ 41 │ NtMapViewOfSection │ 0x00000028 / 40 │ -│ 42 │ NtAccessCheckAndAuditAlarm │ 0x00000029 / 41 │ -│ 43 │ NtUnmapViewOfSection │ 0x0000002A / 42 │ -│ 44 │ NtReplyWaitReceivePortEx │ 0x0000002B / 43 │ -│ 45 │ NtTerminateProcess │ 0x0000002C / 44 │ -│ 46 │ NtSetEventBoostPriority │ 0x0000002D / 45 │ -│ 47 │ NtReadFileScatter │ 0x0000002E / 46 │ -│ 48 │ NtOpenThreadTokenEx │ 0x0000002F / 47 │ -│ 49 │ NtOpenProcessTokenEx │ 0x00000030 / 48 │ -│ 50 │ NtQueryPerformanceCounter │ 0x00000031 / 49 │ -│ 51 │ NtEnumerateKey │ 0x00000032 / 50 │ -│ 52 │ NtOpenFile │ 0x00000033 / 51 │ -│ 53 │ NtDelayExecution │ 0x00000034 / 52 │ -│ 54 │ NtQueryDirectoryFile │ 0x00000035 / 53 │ -│ 55 │ NtQuerySystemInformation │ 0x00000036 / 54 │ -│ 56 │ NtOpenSection │ 0x00000037 / 55 │ -│ 57 │ NtQueryTimer │ 0x00000038 / 56 │ -│ 58 │ NtFsControlFile │ 0x00000039 / 57 │ -│ 59 │ NtWriteVirtualMemory │ 0x0000003A / 58 │ -│ 60 │ NtCloseObjectAuditAlarm │ 0x0000003B / 59 │ -│ 61 │ NtDuplicateObject │ 0x0000003C / 60 │ -│ 62 │ NtQueryAttributesFile │ 0x0000003D / 61 │ -│ 63 │ NtClearEvent │ 0x0000003E / 62 │ -│ 64 │ NtReadVirtualMemory │ 0x0000003F / 63 │ -│ 65 │ NtOpenEvent │ 0x00000040 / 64 │ -│ 66 │ NtAdjustPrivilegesToken │ 0x00000041 / 65 │ -│ 67 │ NtDuplicateToken │ 0x00000042 / 66 │ -│ 68 │ NtContinue │ 0x00000043 / 67 │ -│ 69 │ NtQueryDefaultUILanguage │ 0x00000044 / 68 │ -│ 70 │ NtQueueApcThread │ 0x00000045 / 69 │ -│ 71 │ NtYieldExecution │ 0x00000046 / 70 │ -│ 72 │ NtAddAtom │ 0x00000047 / 71 │ -│ 73 │ NtCreateEvent │ 0x00000048 / 72 │ -│ 74 │ NtQueryVolumeInformationFile │ 0x00000049 / 73 │ -│ 75 │ NtCreateSection │ 0x0000004A / 74 │ -│ 76 │ NtFlushBuffersFile │ 0x0000004B / 75 │ -│ 77 │ NtApphelpCacheControl │ 0x0000004C / 76 │ -│ 78 │ NtCreateProcessEx │ 0x0000004D / 77 │ -│ 79 │ NtCreateThread │ 0x0000004E / 78 │ -│ 80 │ NtIsProcessInJob │ 0x0000004F / 79 │ -│ 81 │ NtProtectVirtualMemory │ 0x00000050 / 80 │ -│ 82 │ NtQuerySection │ 0x00000051 / 81 │ -│ 83 │ NtResumeThread │ 0x00000052 / 82 │ -│ 84 │ NtTerminateThread │ 0x00000053 / 83 │ -│ 85 │ NtReadRequestData │ 0x00000054 / 84 │ -│ 86 │ NtCreateFile │ 0x00000055 / 85 │ -│ 87 │ NtQueryEvent │ 0x00000056 / 86 │ -│ 88 │ NtWriteRequestData │ 0x00000057 / 87 │ -│ 89 │ NtOpenDirectoryObject │ 0x00000058 / 88 │ -│ 90 │ NtAccessCheckByTypeAndAuditAlarm │ 0x00000059 / 89 │ -│ 91 │ NtQuerySystemTime │ 0x0000005B / 91 │ -│ 92 │ NtWaitForMultipleObjects │ 0x0000005B / 91 │ -│ 93 │ NtSetInformationObject │ 0x0000005C / 92 │ -│ 94 │ NtCancelIoFile │ 0x0000005D / 93 │ -│ 95 │ NtTraceEvent │ 0x0000005E / 94 │ -│ 96 │ NtPowerInformation │ 0x0000005F / 95 │ -│ 97 │ NtSetValueKey │ 0x00000060 / 96 │ -│ 98 │ NtCancelTimer │ 0x00000061 / 97 │ -│ 99 │ NtSetTimer │ 0x00000062 / 98 │ -│ 100 │ NtAccessCheckByType │ 0x00000063 / 99 │ -│ 101 │ NtAccessCheckByTypeResultList │ 0x00000064 / 100 │ -│ 102 │ NtAccessCheckByTypeResultListAndAuditAlarm │ 0x00000065 / 101 │ -│ 103 │ NtAccessCheckByTypeResultListAndAuditAlarmByHandle │ 0x00000066 / 102 │ -│ 104 │ NtAcquireCrossVmMutant │ 0x00000067 / 103 │ -│ 105 │ NtAcquireProcessActivityReference │ 0x00000068 / 104 │ -│ 106 │ NtAddAtomEx │ 0x00000069 / 105 │ -│ 107 │ NtAddBootEntry │ 0x0000006A / 106 │ -│ 108 │ NtAddDriverEntry │ 0x0000006B / 107 │ -│ 109 │ NtAdjustGroupsToken │ 0x0000006C / 108 │ -│ 110 │ NtAdjustTokenClaimsAndDeviceGroups │ 0x0000006D / 109 │ -│ 111 │ NtAlertResumeThread │ 0x0000006E / 110 │ -│ 112 │ NtAlertThread │ 0x0000006F / 111 │ -│ 113 │ NtAlertThreadByThreadId │ 0x00000070 / 112 │ -│ 114 │ NtAllocateLocallyUniqueId │ 0x00000071 / 113 │ -│ 115 │ NtAllocateReserveObject │ 0x00000072 / 114 │ -│ 116 │ NtAllocateUserPhysicalPages │ 0x00000073 / 115 │ -│ 117 │ NtAllocateUserPhysicalPagesEx │ 0x00000074 / 116 │ -│ 118 │ NtAllocateUuids │ 0x00000075 / 117 │ -│ 119 │ NtAllocateVirtualMemoryEx │ 0x00000076 / 118 │ -│ 120 │ NtAlpcAcceptConnectPort │ 0x00000077 / 119 │ -│ 121 │ NtAlpcCancelMessage │ 0x00000078 / 120 │ -│ 122 │ NtAlpcConnectPort │ 0x00000079 / 121 │ -│ 123 │ NtAlpcConnectPortEx │ 0x0000007A / 122 │ -│ 124 │ NtAlpcCreatePort │ 0x0000007B / 123 │ -│ 125 │ NtAlpcCreatePortSection │ 0x0000007C / 124 │ -│ 126 │ NtAlpcCreateResourceReserve │ 0x0000007D / 125 │ -│ 127 │ NtAlpcCreateSectionView │ 0x0000007E / 126 │ -│ 128 │ NtAlpcCreateSecurityContext │ 0x0000007F / 127 │ -│ 129 │ NtAlpcDeletePortSection │ 0x00000080 / 128 │ -│ 130 │ NtAlpcDeleteResourceReserve │ 0x00000081 / 129 │ -│ 131 │ NtAlpcDeleteSectionView │ 0x00000082 / 130 │ -│ 132 │ NtAlpcDeleteSecurityContext │ 0x00000083 / 131 │ -│ 133 │ NtAlpcDisconnectPort │ 0x00000084 / 132 │ -│ 134 │ NtAlpcImpersonateClientContainerOfPort │ 0x00000085 / 133 │ -│ 135 │ NtAlpcImpersonateClientOfPort │ 0x00000086 / 134 │ -│ 136 │ NtAlpcOpenSenderProcess │ 0x00000087 / 135 │ -│ 137 │ NtAlpcOpenSenderThread │ 0x00000088 / 136 │ -│ 138 │ NtAlpcQueryInformation │ 0x00000089 / 137 │ -│ 139 │ NtAlpcQueryInformationMessage │ 0x0000008A / 138 │ -│ 140 │ NtAlpcRevokeSecurityContext │ 0x0000008B / 139 │ -│ 141 │ NtAlpcSendWaitReceivePort │ 0x0000008C / 140 │ -│ 142 │ NtAlpcSetInformation │ 0x0000008D / 141 │ -│ 143 │ NtAreMappedFilesTheSame │ 0x0000008E / 142 │ -│ 144 │ NtAssignProcessToJobObject │ 0x0000008F / 143 │ -│ 145 │ NtAssociateWaitCompletionPacket │ 0x00000090 / 144 │ -│ 146 │ NtCallEnclave │ 0x00000091 / 145 │ -│ 147 │ NtCancelIoFileEx │ 0x00000092 / 146 │ -│ 148 │ NtCancelSynchronousIoFile │ 0x00000093 / 147 │ -│ 149 │ NtCancelTimer2 │ 0x00000094 / 148 │ -│ 150 │ NtCancelWaitCompletionPacket │ 0x00000095 / 149 │ -│ 151 │ NtChangeProcessState │ 0x00000096 / 150 │ -│ 152 │ NtChangeThreadState │ 0x00000097 / 151 │ -│ 153 │ NtCommitComplete │ 0x00000098 / 152 │ -│ 154 │ NtCommitEnlistment │ 0x00000099 / 153 │ -│ 155 │ NtCommitRegistryTransaction │ 0x0000009A / 154 │ -│ 156 │ NtCommitTransaction │ 0x0000009B / 155 │ -│ 157 │ NtCompactKeys │ 0x0000009C / 156 │ -│ 158 │ NtCompareObjects │ 0x0000009D / 157 │ -│ 159 │ NtCompareSigningLevels │ 0x0000009E / 158 │ -│ 160 │ NtCompareTokens │ 0x0000009F / 159 │ -│ 161 │ NtCompleteConnectPort │ 0x000000A0 / 160 │ -│ 162 │ NtCompressKey │ 0x000000A1 / 161 │ -│ 163 │ NtConnectPort │ 0x000000A2 / 162 │ -│ 164 │ NtContinueEx │ 0x000000A3 / 163 │ -│ 165 │ NtConvertBetweenAuxiliaryCounterAndPerformanceCounter │ 0x000000A4 / 164 │ -│ 166 │ NtCopyFileChunk │ 0x000000A5 / 165 │ -│ 167 │ NtCreateCpuPartition │ 0x000000A6 / 166 │ -│ 168 │ NtCreateCrossVmEvent │ 0x000000A7 / 167 │ -│ 169 │ NtCreateCrossVmMutant │ 0x000000A8 / 168 │ -│ 170 │ NtCreateDebugObject │ 0x000000A9 / 169 │ -│ 171 │ NtCreateDirectoryObject │ 0x000000AA / 170 │ -│ 172 │ NtCreateDirectoryObjectEx │ 0x000000AB / 171 │ -│ 173 │ NtCreateEnclave │ 0x000000AC / 172 │ -│ 174 │ NtCreateEnlistment │ 0x000000AD / 173 │ -│ 175 │ NtCreateEventPair │ 0x000000AE / 174 │ -│ 176 │ NtCreateIRTimer │ 0x000000AF / 175 │ -│ 177 │ NtCreateIoCompletion │ 0x000000B0 / 176 │ -│ 178 │ NtCreateIoRing │ 0x000000B1 / 177 │ -│ 179 │ NtCreateJobObject │ 0x000000B2 / 178 │ -│ 180 │ NtCreateJobSet │ 0x000000B3 / 179 │ -│ 181 │ NtCreateKeyTransacted │ 0x000000B4 / 180 │ -│ 182 │ NtCreateKeyedEvent │ 0x000000B5 / 181 │ -│ 183 │ NtCreateLowBoxToken │ 0x000000B6 / 182 │ -│ 184 │ NtCreateMailslotFile │ 0x000000B7 / 183 │ -│ 185 │ NtCreateMutant │ 0x000000B8 / 184 │ -│ 186 │ NtCreateNamedPipeFile │ 0x000000B9 / 185 │ -│ 187 │ NtCreatePagingFile │ 0x000000BA / 186 │ -│ 188 │ NtCreatePartition │ 0x000000BB / 187 │ -│ 189 │ NtCreatePort │ 0x000000BC / 188 │ -│ 190 │ NtCreatePrivateNamespace │ 0x000000BD / 189 │ -│ 191 │ NtCreateProcess │ 0x000000BE / 190 │ -│ 192 │ NtCreateProcessStateChange │ 0x000000BF / 191 │ -│ 193 │ NtCreateProfile │ 0x000000C0 / 192 │ -│ 194 │ NtCreateProfileEx │ 0x000000C1 / 193 │ -│ 195 │ NtCreateRegistryTransaction │ 0x000000C2 / 194 │ -│ 196 │ NtCreateResourceManager │ 0x000000C3 / 195 │ -│ 197 │ NtCreateSectionEx │ 0x000000C4 / 196 │ -│ 198 │ NtCreateSemaphore │ 0x000000C5 / 197 │ -│ 199 │ NtCreateSymbolicLinkObject │ 0x000000C6 / 198 │ -│ 200 │ NtCreateThreadEx │ 0x000000C7 / 199 │ -│ 201 │ NtCreateThreadStateChange │ 0x000000C8 / 200 │ -│ 202 │ NtCreateTimer │ 0x000000C9 / 201 │ -│ 203 │ NtCreateTimer2 │ 0x000000CA / 202 │ -│ 204 │ NtCreateToken │ 0x000000CB / 203 │ -│ 205 │ NtCreateTokenEx │ 0x000000CC / 204 │ -│ 206 │ NtCreateTransaction │ 0x000000CD / 205 │ -│ 207 │ NtCreateTransactionManager │ 0x000000CE / 206 │ -│ 208 │ NtCreateUserProcess │ 0x000000CF / 207 │ -│ 209 │ NtCreateWaitCompletionPacket │ 0x000000D0 / 208 │ -│ 210 │ NtCreateWaitablePort │ 0x000000D1 / 209 │ -│ 211 │ NtCreateWnfStateName │ 0x000000D2 / 210 │ -│ 212 │ NtCreateWorkerFactory │ 0x000000D3 / 211 │ -│ 213 │ NtDebugActiveProcess │ 0x000000D4 / 212 │ -│ 214 │ NtDebugContinue │ 0x000000D5 / 213 │ -│ 215 │ NtDeleteAtom │ 0x000000D6 / 214 │ -│ 216 │ NtDeleteBootEntry │ 0x000000D7 / 215 │ -│ 217 │ NtDeleteDriverEntry │ 0x000000D8 / 216 │ -│ 218 │ NtDeleteFile │ 0x000000D9 / 217 │ -│ 219 │ NtDeleteKey │ 0x000000DA / 218 │ -│ 220 │ NtDeleteObjectAuditAlarm │ 0x000000DB / 219 │ -│ 221 │ NtDeletePrivateNamespace │ 0x000000DC / 220 │ -│ 222 │ NtDeleteValueKey │ 0x000000DD / 221 │ -│ 223 │ NtDeleteWnfStateData │ 0x000000DE / 222 │ -│ 224 │ NtDeleteWnfStateName │ 0x000000DF / 223 │ -│ 225 │ NtDirectGraphicsCall │ 0x000000E0 / 224 │ -│ 226 │ NtDisableLastKnownGood │ 0x000000E1 / 225 │ -│ 227 │ NtDisplayString │ 0x000000E2 / 226 │ -│ 228 │ NtDrawText │ 0x000000E3 / 227 │ -│ 229 │ NtEnableLastKnownGood │ 0x000000E4 / 228 │ -│ 230 │ NtEnumerateBootEntries │ 0x000000E5 / 229 │ -│ 231 │ NtEnumerateDriverEntries │ 0x000000E6 / 230 │ -│ 232 │ NtEnumerateSystemEnvironmentValuesEx │ 0x000000E7 / 231 │ -│ 233 │ NtEnumerateTransactionObject │ 0x000000E8 / 232 │ -│ 234 │ NtExtendSection │ 0x000000E9 / 233 │ -│ 235 │ NtFilterBootOption │ 0x000000EA / 234 │ -│ 236 │ NtFilterToken │ 0x000000EB / 235 │ -│ 237 │ NtFilterTokenEx │ 0x000000EC / 236 │ -│ 238 │ NtFlushBuffersFileEx │ 0x000000ED / 237 │ -│ 239 │ NtFlushInstallUILanguage │ 0x000000EE / 238 │ -│ 240 │ NtFlushInstructionCache │ 0x000000EF / 239 │ -│ 241 │ NtFlushKey │ 0x000000F0 / 240 │ -│ 242 │ NtFlushProcessWriteBuffers │ 0x000000F1 / 241 │ -│ 243 │ NtFlushVirtualMemory │ 0x000000F2 / 242 │ -│ 244 │ NtFlushWriteBuffer │ 0x000000F3 / 243 │ -│ 245 │ NtFreeUserPhysicalPages │ 0x000000F4 / 244 │ -│ 246 │ NtFreezeRegistry │ 0x000000F5 / 245 │ -│ 247 │ NtFreezeTransactions │ 0x000000F6 / 246 │ -│ 248 │ NtGetCachedSigningLevel │ 0x000000F7 / 247 │ -│ 249 │ NtGetCompleteWnfStateSubscription │ 0x000000F8 / 248 │ -│ 250 │ NtGetContextThread │ 0x000000F9 / 249 │ -│ 251 │ NtGetCurrentProcessorNumber │ 0x000000FA / 250 │ -│ 252 │ NtGetCurrentProcessorNumberEx │ 0x000000FB / 251 │ -│ 253 │ NtGetDevicePowerState │ 0x000000FC / 252 │ -│ 254 │ NtGetMUIRegistryInfo │ 0x000000FD / 253 │ -│ 255 │ NtGetNextProcess │ 0x000000FE / 254 │ -│ 256 │ NtGetNextThread │ 0x000000FF / 255 │ -│ 257 │ NtGetNlsSectionPtr │ 0x00000100 / 256 │ -│ 258 │ NtGetNotificationResourceManager │ 0x00000101 / 257 │ -│ 259 │ NtGetWriteWatch │ 0x00000102 / 258 │ -│ 260 │ NtImpersonateAnonymousToken │ 0x00000103 / 259 │ -│ 261 │ NtImpersonateThread │ 0x00000104 / 260 │ -│ 262 │ NtInitializeEnclave │ 0x00000105 / 261 │ -│ 263 │ NtInitializeNlsFiles │ 0x00000106 / 262 │ -│ 264 │ NtInitializeRegistry │ 0x00000107 / 263 │ -│ 265 │ NtInitiatePowerAction │ 0x00000108 / 264 │ -│ 266 │ NtIsSystemResumeAutomatic │ 0x00000109 / 265 │ -│ 267 │ NtIsUILanguageComitted │ 0x0000010A / 266 │ -│ 268 │ NtListenPort │ 0x0000010B / 267 │ -│ 269 │ NtLoadDriver │ 0x0000010C / 268 │ -│ 270 │ NtLoadEnclaveData │ 0x0000010D / 269 │ -│ 271 │ NtLoadKey │ 0x0000010E / 270 │ -│ 272 │ NtLoadKey2 │ 0x0000010F / 271 │ -│ 273 │ NtLoadKey3 │ 0x00000110 / 272 │ -│ 274 │ NtLoadKeyEx │ 0x00000111 / 273 │ -│ 275 │ NtLockFile │ 0x00000112 / 274 │ -│ 276 │ NtLockProductActivationKeys │ 0x00000113 / 275 │ -│ 277 │ NtLockRegistryKey │ 0x00000114 / 276 │ -│ 278 │ NtLockVirtualMemory │ 0x00000115 / 277 │ -│ 279 │ NtMakePermanentObject │ 0x00000116 / 278 │ -│ 280 │ NtMakeTemporaryObject │ 0x00000117 / 279 │ -│ 281 │ NtManageHotPatch │ 0x00000118 / 280 │ -│ 282 │ NtManagePartition │ 0x00000119 / 281 │ -│ 283 │ NtMapCMFModule │ 0x0000011A / 282 │ -│ 284 │ NtMapUserPhysicalPages │ 0x0000011B / 283 │ -│ 285 │ NtMapViewOfSectionEx │ 0x0000011C / 284 │ -│ 286 │ NtModifyBootEntry │ 0x0000011D / 285 │ -│ 287 │ NtModifyDriverEntry │ 0x0000011E / 286 │ -│ 288 │ NtNotifyChangeDirectoryFile │ 0x0000011F / 287 │ -│ 289 │ NtNotifyChangeDirectoryFileEx │ 0x00000120 / 288 │ -│ 290 │ NtNotifyChangeKey │ 0x00000121 / 289 │ -│ 291 │ NtNotifyChangeMultipleKeys │ 0x00000122 / 290 │ -│ 292 │ NtNotifyChangeSession │ 0x00000123 / 291 │ -│ 293 │ NtOpenCpuPartition │ 0x00000124 / 292 │ -│ 294 │ NtOpenEnlistment │ 0x00000125 / 293 │ -│ 295 │ NtOpenEventPair │ 0x00000126 / 294 │ -│ 296 │ NtOpenIoCompletion │ 0x00000127 / 295 │ -│ 297 │ NtOpenJobObject │ 0x00000128 / 296 │ -│ 298 │ NtOpenKeyEx │ 0x00000129 / 297 │ -│ 299 │ NtOpenKeyTransacted │ 0x0000012A / 298 │ -│ 300 │ NtOpenKeyTransactedEx │ 0x0000012B / 299 │ -│ 301 │ NtOpenKeyedEvent │ 0x0000012C / 300 │ -│ 302 │ NtOpenMutant │ 0x0000012D / 301 │ -│ 303 │ NtOpenObjectAuditAlarm │ 0x0000012E / 302 │ -│ 304 │ NtOpenPartition │ 0x0000012F / 303 │ -│ 305 │ NtOpenPrivateNamespace │ 0x00000130 / 304 │ -│ 306 │ NtOpenProcessToken │ 0x00000131 / 305 │ -│ 307 │ NtOpenRegistryTransaction │ 0x00000132 / 306 │ -│ 308 │ NtOpenResourceManager │ 0x00000133 / 307 │ -│ 309 │ NtOpenSemaphore │ 0x00000134 / 308 │ -│ 310 │ NtOpenSession │ 0x00000135 / 309 │ -│ 311 │ NtOpenSymbolicLinkObject │ 0x00000136 / 310 │ -│ 312 │ NtOpenThread │ 0x00000137 / 311 │ -│ 313 │ NtOpenTimer │ 0x00000138 / 312 │ -│ 314 │ NtOpenTransaction │ 0x00000139 / 313 │ -│ 315 │ NtOpenTransactionManager │ 0x0000013A / 314 │ -│ 316 │ NtPlugPlayControl │ 0x0000013B / 315 │ -│ 317 │ NtPrePrepareComplete │ 0x0000013C / 316 │ -│ 318 │ NtPrePrepareEnlistment │ 0x0000013D / 317 │ -│ 319 │ NtPrepareComplete │ 0x0000013E / 318 │ -│ 320 │ NtPrepareEnlistment │ 0x0000013F / 319 │ -│ 321 │ NtPrivilegeCheck │ 0x00000140 / 320 │ -│ 322 │ NtPrivilegeObjectAuditAlarm │ 0x00000141 / 321 │ -│ 323 │ NtPrivilegedServiceAuditAlarm │ 0x00000142 / 322 │ -│ 324 │ NtPropagationComplete │ 0x00000143 / 323 │ -│ 325 │ NtPropagationFailed │ 0x00000144 / 324 │ -│ 326 │ NtPssCaptureVaSpaceBulk │ 0x00000145 / 325 │ -│ 327 │ NtPulseEvent │ 0x00000146 / 326 │ -│ 328 │ NtQueryAuxiliaryCounterFrequency │ 0x00000147 / 327 │ -│ 329 │ NtQueryBootEntryOrder │ 0x00000148 / 328 │ -│ 330 │ NtQueryBootOptions │ 0x00000149 / 329 │ -│ 331 │ NtQueryDebugFilterState │ 0x0000014A / 330 │ -│ 332 │ NtQueryDirectoryFileEx │ 0x0000014B / 331 │ -│ 333 │ NtQueryDirectoryObject │ 0x0000014C / 332 │ -│ 334 │ NtQueryDriverEntryOrder │ 0x0000014D / 333 │ -│ 335 │ NtQueryEaFile │ 0x0000014E / 334 │ -│ 336 │ NtQueryFullAttributesFile │ 0x0000014F / 335 │ -│ 337 │ NtQueryInformationAtom │ 0x00000150 / 336 │ -│ 338 │ NtQueryInformationByName │ 0x00000151 / 337 │ -│ 339 │ NtQueryInformationCpuPartition │ 0x00000152 / 338 │ -│ 340 │ NtQueryInformationEnlistment │ 0x00000153 / 339 │ -│ 341 │ NtQueryInformationJobObject │ 0x00000154 / 340 │ -│ 342 │ NtQueryInformationPort │ 0x00000155 / 341 │ -│ 343 │ NtQueryInformationResourceManager │ 0x00000156 / 342 │ -│ 344 │ NtQueryInformationTransaction │ 0x00000157 / 343 │ -│ 345 │ NtQueryInformationTransactionManager │ 0x00000158 / 344 │ -│ 346 │ NtQueryInformationWorkerFactory │ 0x00000159 / 345 │ -│ 347 │ NtQueryInstallUILanguage │ 0x0000015A / 346 │ -│ 348 │ NtQueryIntervalProfile │ 0x0000015B / 347 │ -│ 349 │ NtQueryIoCompletion │ 0x0000015C / 348 │ -│ 350 │ NtQueryIoRingCapabilities │ 0x0000015D / 349 │ -│ 351 │ NtQueryLicenseValue │ 0x0000015E / 350 │ -│ 352 │ NtQueryMultipleValueKey │ 0x0000015F / 351 │ -│ 353 │ NtQueryMutant │ 0x00000160 / 352 │ -│ 354 │ NtQueryOpenSubKeys │ 0x00000161 / 353 │ -│ 355 │ NtQueryOpenSubKeysEx │ 0x00000162 / 354 │ -│ 356 │ NtQueryPortInformationProcess │ 0x00000163 / 355 │ -│ 357 │ NtQueryQuotaInformationFile │ 0x00000164 / 356 │ -│ 358 │ NtQuerySecurityAttributesToken │ 0x00000165 / 357 │ -│ 359 │ NtQuerySecurityObject │ 0x00000166 / 358 │ -│ 360 │ NtQuerySecurityPolicy │ 0x00000167 / 359 │ -│ 361 │ NtQuerySemaphore │ 0x00000168 / 360 │ -│ 362 │ NtQuerySymbolicLinkObject │ 0x00000169 / 361 │ -│ 363 │ NtQuerySystemEnvironmentValue │ 0x0000016A / 362 │ -│ 364 │ NtQuerySystemEnvironmentValueEx │ 0x0000016B / 363 │ -│ 365 │ NtQuerySystemInformationEx │ 0x0000016C / 364 │ -│ 366 │ NtQueryTimerResolution │ 0x0000016D / 365 │ -│ 367 │ NtQueryWnfStateData │ 0x0000016E / 366 │ -│ 368 │ NtQueryWnfStateNameInformation │ 0x0000016F / 367 │ -│ 369 │ NtQueueApcThreadEx │ 0x00000170 / 368 │ -│ 370 │ NtQueueApcThreadEx2 │ 0x00000171 / 369 │ -│ 371 │ NtRaiseException │ 0x00000172 / 370 │ -│ 372 │ NtRaiseHardError │ 0x00000173 / 371 │ -│ 373 │ NtReadOnlyEnlistment │ 0x00000174 / 372 │ -│ 374 │ NtReadVirtualMemoryEx │ 0x00000175 / 373 │ -│ 375 │ NtRecoverEnlistment │ 0x00000176 / 374 │ -│ 376 │ NtRecoverResourceManager │ 0x00000177 / 375 │ -│ 377 │ NtRecoverTransactionManager │ 0x00000178 / 376 │ -│ 378 │ NtRegisterProtocolAddressInformation │ 0x00000179 / 377 │ -│ 379 │ NtRegisterThreadTerminatePort │ 0x0000017A / 378 │ -│ 380 │ NtReleaseKeyedEvent │ 0x0000017B / 379 │ -│ 381 │ NtReleaseWorkerFactoryWorker │ 0x0000017C / 380 │ -│ 382 │ NtRemoveIoCompletionEx │ 0x0000017D / 381 │ -│ 383 │ NtRemoveProcessDebug │ 0x0000017E / 382 │ -│ 384 │ NtRenameKey │ 0x0000017F / 383 │ -│ 385 │ NtRenameTransactionManager │ 0x00000180 / 384 │ -│ 386 │ NtReplaceKey │ 0x00000181 / 385 │ -│ 387 │ NtReplacePartitionUnit │ 0x00000182 / 386 │ -│ 388 │ NtReplyWaitReplyPort │ 0x00000183 / 387 │ -│ 389 │ NtRequestPort │ 0x00000184 / 388 │ -│ 390 │ NtResetEvent │ 0x00000185 / 389 │ -│ 391 │ NtResetWriteWatch │ 0x00000186 / 390 │ -│ 392 │ NtRestoreKey │ 0x00000187 / 391 │ -│ 393 │ NtResumeProcess │ 0x00000188 / 392 │ -│ 394 │ NtRevertContainerImpersonation │ 0x00000189 / 393 │ -│ 395 │ NtRollbackComplete │ 0x0000018A / 394 │ -│ 396 │ NtRollbackEnlistment │ 0x0000018B / 395 │ -│ 397 │ NtRollbackRegistryTransaction │ 0x0000018C / 396 │ -│ 398 │ NtRollbackTransaction │ 0x0000018D / 397 │ -│ 399 │ NtRollforwardTransactionManager │ 0x0000018E / 398 │ -│ 400 │ NtSaveKey │ 0x0000018F / 399 │ -│ 401 │ NtSaveKeyEx │ 0x00000190 / 400 │ -│ 402 │ NtSaveMergedKeys │ 0x00000191 / 401 │ -│ 403 │ NtSecureConnectPort │ 0x00000192 / 402 │ -│ 404 │ NtSerializeBoot │ 0x00000193 / 403 │ -│ 405 │ NtSetBootEntryOrder │ 0x00000194 / 404 │ -│ 406 │ NtSetBootOptions │ 0x00000195 / 405 │ -│ 407 │ NtSetCachedSigningLevel │ 0x00000196 / 406 │ -│ 408 │ NtSetCachedSigningLevel2 │ 0x00000197 / 407 │ -│ 409 │ NtSetContextThread │ 0x00000198 / 408 │ -│ 410 │ NtSetDebugFilterState │ 0x00000199 / 409 │ -│ 411 │ NtSetDefaultHardErrorPort │ 0x0000019A / 410 │ -│ 412 │ NtSetDefaultLocale │ 0x0000019B / 411 │ -│ 413 │ NtSetDefaultUILanguage │ 0x0000019C / 412 │ -│ 414 │ NtSetDriverEntryOrder │ 0x0000019D / 413 │ -│ 415 │ NtSetEaFile │ 0x0000019E / 414 │ -│ 416 │ NtSetHighEventPair │ 0x0000019F / 415 │ -│ 417 │ NtSetHighWaitLowEventPair │ 0x000001A0 / 416 │ -│ 418 │ NtSetIRTimer │ 0x000001A1 / 417 │ -│ 419 │ NtSetInformationCpuPartition │ 0x000001A2 / 418 │ -│ 420 │ NtSetInformationDebugObject │ 0x000001A3 / 419 │ -│ 421 │ NtSetInformationEnlistment │ 0x000001A4 / 420 │ -│ 422 │ NtSetInformationIoRing │ 0x000001A5 / 421 │ -│ 423 │ NtSetInformationJobObject │ 0x000001A6 / 422 │ -│ 424 │ NtSetInformationKey │ 0x000001A7 / 423 │ -│ 425 │ NtSetInformationResourceManager │ 0x000001A8 / 424 │ -│ 426 │ NtSetInformationSymbolicLink │ 0x000001A9 / 425 │ -│ 427 │ NtSetInformationToken │ 0x000001AA / 426 │ -│ 428 │ NtSetInformationTransaction │ 0x000001AB / 427 │ -│ 429 │ NtSetInformationTransactionManager │ 0x000001AC / 428 │ -│ 430 │ NtSetInformationVirtualMemory │ 0x000001AD / 429 │ -│ 431 │ NtSetInformationWorkerFactory │ 0x000001AE / 430 │ -│ 432 │ NtSetIntervalProfile │ 0x000001AF / 431 │ -│ 433 │ NtSetIoCompletion │ 0x000001B0 / 432 │ -│ 434 │ NtSetIoCompletionEx │ 0x000001B1 / 433 │ -│ 435 │ NtSetLdtEntries │ 0x000001B2 / 434 │ -│ 436 │ NtSetLowEventPair │ 0x000001B3 / 435 │ -│ 437 │ NtSetLowWaitHighEventPair │ 0x000001B4 / 436 │ -│ 438 │ NtSetQuotaInformationFile │ 0x000001B5 / 437 │ -│ 439 │ NtSetSecurityObject │ 0x000001B6 / 438 │ -│ 440 │ NtSetSystemEnvironmentValue │ 0x000001B7 / 439 │ -│ 441 │ NtSetSystemEnvironmentValueEx │ 0x000001B8 / 440 │ -│ 442 │ NtSetSystemInformation │ 0x000001B9 / 441 │ -│ 443 │ NtSetSystemPowerState │ 0x000001BA / 442 │ -│ 444 │ NtSetSystemTime │ 0x000001BB / 443 │ -│ 445 │ NtSetThreadExecutionState │ 0x000001BC / 444 │ -│ 446 │ NtSetTimer2 │ 0x000001BD / 445 │ -│ 447 │ NtSetTimerEx │ 0x000001BE / 446 │ -│ 448 │ NtSetTimerResolution │ 0x000001BF / 447 │ -│ 449 │ NtSetUuidSeed │ 0x000001C0 / 448 │ -│ 450 │ NtSetVolumeInformationFile │ 0x000001C1 / 449 │ -│ 451 │ NtSetWnfProcessNotificationEvent │ 0x000001C2 / 450 │ -│ 452 │ NtShutdownSystem │ 0x000001C3 / 451 │ -│ 453 │ NtShutdownWorkerFactory │ 0x000001C4 / 452 │ -│ 454 │ NtSignalAndWaitForSingleObject │ 0x000001C5 / 453 │ -│ 455 │ NtSinglePhaseReject │ 0x000001C6 / 454 │ -│ 456 │ NtStartProfile │ 0x000001C7 / 455 │ -│ 457 │ NtStopProfile │ 0x000001C8 / 456 │ -│ 458 │ NtSubmitIoRing │ 0x000001C9 / 457 │ -│ 459 │ NtSubscribeWnfStateChange │ 0x000001CA / 458 │ -│ 460 │ NtSuspendProcess │ 0x000001CB / 459 │ -│ 461 │ NtSuspendThread │ 0x000001CC / 460 │ -│ 462 │ NtSystemDebugControl │ 0x000001CD / 461 │ -│ 463 │ NtTerminateEnclave │ 0x000001CE / 462 │ -│ 464 │ NtTerminateJobObject │ 0x000001CF / 463 │ -│ 465 │ NtTestAlert │ 0x000001D0 / 464 │ -│ 466 │ NtThawRegistry │ 0x000001D1 / 465 │ -│ 467 │ NtThawTransactions │ 0x000001D2 / 466 │ -│ 468 │ NtTraceControl │ 0x000001D3 / 467 │ -│ 469 │ NtTranslateFilePath │ 0x000001D4 / 468 │ -│ 470 │ NtUmsThreadYield │ 0x000001D5 / 469 │ -│ 471 │ NtUnloadDriver │ 0x000001D6 / 470 │ -│ 472 │ NtUnloadKey │ 0x000001D7 / 471 │ -│ 473 │ NtUnloadKey2 │ 0x000001D8 / 472 │ -│ 474 │ NtUnloadKeyEx │ 0x000001D9 / 473 │ -│ 475 │ NtUnlockFile │ 0x000001DA / 474 │ -│ 476 │ NtUnlockVirtualMemory │ 0x000001DB / 475 │ -│ 477 │ NtUnmapViewOfSectionEx │ 0x000001DC / 476 │ -│ 478 │ NtUnsubscribeWnfStateChange │ 0x000001DD / 477 │ -│ 479 │ NtUpdateWnfStateData │ 0x000001DE / 478 │ -│ 480 │ NtVdmControl │ 0x000001DF / 479 │ -│ 481 │ NtWaitForAlertByThreadId │ 0x000001E0 / 480 │ -│ 482 │ NtWaitForDebugEvent │ 0x000001E1 / 481 │ -│ 483 │ NtWaitForKeyedEvent │ 0x000001E2 / 482 │ -│ 484 │ NtWaitForWorkViaWorkerFactory │ 0x000001E3 / 483 │ -│ 485 │ NtWaitHighEventPair │ 0x000001E4 / 484 │ -│ 486 │ NtWaitLowEventPair │ 0x000001E5 / 485 │ -└─────┴───────────────────────────────────────────────────────┴──────────────────┘ +┌─────┬───────────────────────────────────────────────────────┬───────────────────┐ +│ Id │ Name │ Index │ +├─────┼───────────────────────────────────────────────────────┼───────────────────┤ +│ 1 │ NtAccessCheck │ 0x00000000, //0 │ +│ 2 │ NtWorkerFactoryWorkerReady │ 0x00000001, //1 │ +│ 3 │ NtAcceptConnectPort │ 0x00000002, //2 │ +│ 4 │ NtMapUserPhysicalPagesScatter │ 0x00000003, //3 │ +│ 5 │ NtWaitForSingleObject │ 0x00000004, //4 │ +│ 6 │ NtCallbackReturn │ 0x00000005, //5 │ +│ 7 │ NtReadFile │ 0x00000006, //6 │ +│ 8 │ NtDeviceIoControlFile │ 0x00000007, //7 │ +│ 9 │ NtWriteFile │ 0x00000008, //8 │ +│ 10 │ NtRemoveIoCompletion │ 0x00000009, //9 │ +│ 11 │ NtReleaseSemaphore │ 0x0000000A, //10 │ +│ 12 │ NtReplyWaitReceivePort │ 0x0000000B, //11 │ +│ 13 │ NtReplyPort │ 0x0000000C, //12 │ +│ 14 │ NtSetInformationThread │ 0x0000000D, //13 │ +│ 15 │ NtSetEvent │ 0x0000000E, //14 │ +│ 16 │ NtClose │ 0x0000000F, //15 │ +│ 17 │ NtQueryObject │ 0x00000010, //16 │ +│ 18 │ NtQueryInformationFile │ 0x00000011, //17 │ +│ 19 │ NtOpenKey │ 0x00000012, //18 │ +│ 20 │ NtEnumerateValueKey │ 0x00000013, //19 │ +│ 21 │ NtFindAtom │ 0x00000014, //20 │ +│ 22 │ NtQueryDefaultLocale │ 0x00000015, //21 │ +│ 23 │ NtQueryKey │ 0x00000016, //22 │ +│ 24 │ NtQueryValueKey │ 0x00000017, //23 │ +│ 25 │ NtAllocateVirtualMemory │ 0x00000018, //24 │ +│ 26 │ NtQueryInformationProcess │ 0x00000019, //25 │ +│ 27 │ NtWaitForMultipleObjects32 │ 0x0000001A, //26 │ +│ 28 │ NtWriteFileGather │ 0x0000001B, //27 │ +│ 29 │ NtSetInformationProcess │ 0x0000001C, //28 │ +│ 30 │ NtCreateKey │ 0x0000001D, //29 │ +│ 31 │ NtFreeVirtualMemory │ 0x0000001E, //30 │ +│ 32 │ NtImpersonateClientOfPort │ 0x0000001F, //31 │ +│ 33 │ NtReleaseMutant │ 0x00000020, //32 │ +│ 34 │ NtQueryInformationToken │ 0x00000021, //33 │ +│ 35 │ NtRequestWaitReplyPort │ 0x00000022, //34 │ +│ 36 │ NtQueryVirtualMemory │ 0x00000023, //35 │ +│ 37 │ NtOpenThreadToken │ 0x00000024, //36 │ +│ 38 │ NtQueryInformationThread │ 0x00000025, //37 │ +│ 39 │ NtOpenProcess │ 0x00000026, //38 │ +│ 40 │ NtSetInformationFile │ 0x00000027, //39 │ +│ 41 │ NtMapViewOfSection │ 0x00000028, //40 │ +│ 42 │ NtAccessCheckAndAuditAlarm │ 0x00000029, //41 │ +│ 43 │ NtUnmapViewOfSection │ 0x0000002A, //42 │ +│ 44 │ NtReplyWaitReceivePortEx │ 0x0000002B, //43 │ +│ 45 │ NtTerminateProcess │ 0x0000002C, //44 │ +│ 46 │ NtSetEventBoostPriority │ 0x0000002D, //45 │ +│ 47 │ NtReadFileScatter │ 0x0000002E, //46 │ +│ 48 │ NtOpenThreadTokenEx │ 0x0000002F, //47 │ +│ 49 │ NtOpenProcessTokenEx │ 0x00000030, //48 │ +│ 50 │ NtQueryPerformanceCounter │ 0x00000031, //49 │ +│ 51 │ NtEnumerateKey │ 0x00000032, //50 │ +│ 52 │ NtOpenFile │ 0x00000033, //51 │ +│ 53 │ NtDelayExecution │ 0x00000034, //52 │ +│ 54 │ NtQueryDirectoryFile │ 0x00000035, //53 │ +│ 55 │ NtQuerySystemInformation │ 0x00000036, //54 │ +│ 56 │ NtOpenSection │ 0x00000037, //55 │ +│ 57 │ NtQueryTimer │ 0x00000038, //56 │ +│ 58 │ NtFsControlFile │ 0x00000039, //57 │ +│ 59 │ NtWriteVirtualMemory │ 0x0000003A, //58 │ +│ 60 │ NtCloseObjectAuditAlarm │ 0x0000003B, //59 │ +│ 61 │ NtDuplicateObject │ 0x0000003C, //60 │ +│ 62 │ NtQueryAttributesFile │ 0x0000003D, //61 │ +│ 63 │ NtClearEvent │ 0x0000003E, //62 │ +│ 64 │ NtReadVirtualMemory │ 0x0000003F, //63 │ +│ 65 │ NtOpenEvent │ 0x00000040, //64 │ +│ 66 │ NtAdjustPrivilegesToken │ 0x00000041, //65 │ +│ 67 │ NtDuplicateToken │ 0x00000042, //66 │ +│ 68 │ NtContinue │ 0x00000043, //67 │ +│ 69 │ NtQueryDefaultUILanguage │ 0x00000044, //68 │ +│ 70 │ NtQueueApcThread │ 0x00000045, //69 │ +│ 71 │ NtYieldExecution │ 0x00000046, //70 │ +│ 72 │ NtAddAtom │ 0x00000047, //71 │ +│ 73 │ NtCreateEvent │ 0x00000048, //72 │ +│ 74 │ NtQueryVolumeInformationFile │ 0x00000049, //73 │ +│ 75 │ NtCreateSection │ 0x0000004A, //74 │ +│ 76 │ NtFlushBuffersFile │ 0x0000004B, //75 │ +│ 77 │ NtApphelpCacheControl │ 0x0000004C, //76 │ +│ 78 │ NtCreateProcessEx │ 0x0000004D, //77 │ +│ 79 │ NtCreateThread │ 0x0000004E, //78 │ +│ 80 │ NtIsProcessInJob │ 0x0000004F, //79 │ +│ 81 │ NtProtectVirtualMemory │ 0x00000050, //80 │ +│ 82 │ NtQuerySection │ 0x00000051, //81 │ +│ 83 │ NtResumeThread │ 0x00000052, //82 │ +│ 84 │ NtTerminateThread │ 0x00000053, //83 │ +│ 85 │ NtReadRequestData │ 0x00000054, //84 │ +│ 86 │ NtCreateFile │ 0x00000055, //85 │ +│ 87 │ NtQueryEvent │ 0x00000056, //86 │ +│ 88 │ NtWriteRequestData │ 0x00000057, //87 │ +│ 89 │ NtOpenDirectoryObject │ 0x00000058, //88 │ +│ 90 │ NtAccessCheckByTypeAndAuditAlarm │ 0x00000059, //89 │ +│ 91 │ NtQuerySystemTime │ 0x0000005B, //91 │ +│ 92 │ NtWaitForMultipleObjects │ 0x0000005B, //91 │ +│ 93 │ NtSetInformationObject │ 0x0000005C, //92 │ +│ 94 │ NtCancelIoFile │ 0x0000005D, //93 │ +│ 95 │ NtTraceEvent │ 0x0000005E, //94 │ +│ 96 │ NtPowerInformation │ 0x0000005F, //95 │ +│ 97 │ NtSetValueKey │ 0x00000060, //96 │ +│ 98 │ NtCancelTimer │ 0x00000061, //97 │ +│ 99 │ NtSetTimer │ 0x00000062, //98 │ +│ 100 │ NtAccessCheckByType │ 0x00000063, //99 │ +│ 101 │ NtAccessCheckByTypeResultList │ 0x00000064, //100 │ +│ 102 │ NtAccessCheckByTypeResultListAndAuditAlarm │ 0x00000065, //101 │ +│ 103 │ NtAccessCheckByTypeResultListAndAuditAlarmByHandle │ 0x00000066, //102 │ +│ 104 │ NtAcquireCrossVmMutant │ 0x00000067, //103 │ +│ 105 │ NtAcquireProcessActivityReference │ 0x00000068, //104 │ +│ 106 │ NtAddAtomEx │ 0x00000069, //105 │ +│ 107 │ NtAddBootEntry │ 0x0000006A, //106 │ +│ 108 │ NtAddDriverEntry │ 0x0000006B, //107 │ +│ 109 │ NtAdjustGroupsToken │ 0x0000006C, //108 │ +│ 110 │ NtAdjustTokenClaimsAndDeviceGroups │ 0x0000006D, //109 │ +│ 111 │ NtAlertResumeThread │ 0x0000006E, //110 │ +│ 112 │ NtAlertThread │ 0x0000006F, //111 │ +│ 113 │ NtAlertThreadByThreadId │ 0x00000070, //112 │ +│ 114 │ NtAllocateLocallyUniqueId │ 0x00000071, //113 │ +│ 115 │ NtAllocateReserveObject │ 0x00000072, //114 │ +│ 116 │ NtAllocateUserPhysicalPages │ 0x00000073, //115 │ +│ 117 │ NtAllocateUserPhysicalPagesEx │ 0x00000074, //116 │ +│ 118 │ NtAllocateUuids │ 0x00000075, //117 │ +│ 119 │ NtAllocateVirtualMemoryEx │ 0x00000076, //118 │ +│ 120 │ NtAlpcAcceptConnectPort │ 0x00000077, //119 │ +│ 121 │ NtAlpcCancelMessage │ 0x00000078, //120 │ +│ 122 │ NtAlpcConnectPort │ 0x00000079, //121 │ +│ 123 │ NtAlpcConnectPortEx │ 0x0000007A, //122 │ +│ 124 │ NtAlpcCreatePort │ 0x0000007B, //123 │ +│ 125 │ NtAlpcCreatePortSection │ 0x0000007C, //124 │ +│ 126 │ NtAlpcCreateResourceReserve │ 0x0000007D, //125 │ +│ 127 │ NtAlpcCreateSectionView │ 0x0000007E, //126 │ +│ 128 │ NtAlpcCreateSecurityContext │ 0x0000007F, //127 │ +│ 129 │ NtAlpcDeletePortSection │ 0x00000080, //128 │ +│ 130 │ NtAlpcDeleteResourceReserve │ 0x00000081, //129 │ +│ 131 │ NtAlpcDeleteSectionView │ 0x00000082, //130 │ +│ 132 │ NtAlpcDeleteSecurityContext │ 0x00000083, //131 │ +│ 133 │ NtAlpcDisconnectPort │ 0x00000084, //132 │ +│ 134 │ NtAlpcImpersonateClientContainerOfPort │ 0x00000085, //133 │ +│ 135 │ NtAlpcImpersonateClientOfPort │ 0x00000086, //134 │ +│ 136 │ NtAlpcOpenSenderProcess │ 0x00000087, //135 │ +│ 137 │ NtAlpcOpenSenderThread │ 0x00000088, //136 │ +│ 138 │ NtAlpcQueryInformation │ 0x00000089, //137 │ +│ 139 │ NtAlpcQueryInformationMessage │ 0x0000008A, //138 │ +│ 140 │ NtAlpcRevokeSecurityContext │ 0x0000008B, //139 │ +│ 141 │ NtAlpcSendWaitReceivePort │ 0x0000008C, //140 │ +│ 142 │ NtAlpcSetInformation │ 0x0000008D, //141 │ +│ 143 │ NtAreMappedFilesTheSame │ 0x0000008E, //142 │ +│ 144 │ NtAssignProcessToJobObject │ 0x0000008F, //143 │ +│ 145 │ NtAssociateWaitCompletionPacket │ 0x00000090, //144 │ +│ 146 │ NtCallEnclave │ 0x00000091, //145 │ +│ 147 │ NtCancelIoFileEx │ 0x00000092, //146 │ +│ 148 │ NtCancelSynchronousIoFile │ 0x00000093, //147 │ +│ 149 │ NtCancelTimer2 │ 0x00000094, //148 │ +│ 150 │ NtCancelWaitCompletionPacket │ 0x00000095, //149 │ +│ 151 │ NtChangeProcessState │ 0x00000096, //150 │ +│ 152 │ NtChangeThreadState │ 0x00000097, //151 │ +│ 153 │ NtCommitComplete │ 0x00000098, //152 │ +│ 154 │ NtCommitEnlistment │ 0x00000099, //153 │ +│ 155 │ NtCommitRegistryTransaction │ 0x0000009A, //154 │ +│ 156 │ NtCommitTransaction │ 0x0000009B, //155 │ +│ 157 │ NtCompactKeys │ 0x0000009C, //156 │ +│ 158 │ NtCompareObjects │ 0x0000009D, //157 │ +│ 159 │ NtCompareSigningLevels │ 0x0000009E, //158 │ +│ 160 │ NtCompareTokens │ 0x0000009F, //159 │ +│ 161 │ NtCompleteConnectPort │ 0x000000A0, //160 │ +│ 162 │ NtCompressKey │ 0x000000A1, //161 │ +│ 163 │ NtConnectPort │ 0x000000A2, //162 │ +│ 164 │ NtContinueEx │ 0x000000A3, //163 │ +│ 165 │ NtConvertBetweenAuxiliaryCounterAndPerformanceCounter │ 0x000000A4, //164 │ +│ 166 │ NtCopyFileChunk │ 0x000000A5, //165 │ +│ 167 │ NtCreateCpuPartition │ 0x000000A6, //166 │ +│ 168 │ NtCreateCrossVmEvent │ 0x000000A7, //167 │ +│ 169 │ NtCreateCrossVmMutant │ 0x000000A8, //168 │ +│ 170 │ NtCreateDebugObject │ 0x000000A9, //169 │ +│ 171 │ NtCreateDirectoryObject │ 0x000000AA, //170 │ +│ 172 │ NtCreateDirectoryObjectEx │ 0x000000AB, //171 │ +│ 173 │ NtCreateEnclave │ 0x000000AC, //172 │ +│ 174 │ NtCreateEnlistment │ 0x000000AD, //173 │ +│ 175 │ NtCreateEventPair │ 0x000000AE, //174 │ +│ 176 │ NtCreateIRTimer │ 0x000000AF, //175 │ +│ 177 │ NtCreateIoCompletion │ 0x000000B0, //176 │ +│ 178 │ NtCreateIoRing │ 0x000000B1, //177 │ +│ 179 │ NtCreateJobObject │ 0x000000B2, //178 │ +│ 180 │ NtCreateJobSet │ 0x000000B3, //179 │ +│ 181 │ NtCreateKeyTransacted │ 0x000000B4, //180 │ +│ 182 │ NtCreateKeyedEvent │ 0x000000B5, //181 │ +│ 183 │ NtCreateLowBoxToken │ 0x000000B6, //182 │ +│ 184 │ NtCreateMailslotFile │ 0x000000B7, //183 │ +│ 185 │ NtCreateMutant │ 0x000000B8, //184 │ +│ 186 │ NtCreateNamedPipeFile │ 0x000000B9, //185 │ +│ 187 │ NtCreatePagingFile │ 0x000000BA, //186 │ +│ 188 │ NtCreatePartition │ 0x000000BB, //187 │ +│ 189 │ NtCreatePort │ 0x000000BC, //188 │ +│ 190 │ NtCreatePrivateNamespace │ 0x000000BD, //189 │ +│ 191 │ NtCreateProcess │ 0x000000BE, //190 │ +│ 192 │ NtCreateProcessStateChange │ 0x000000BF, //191 │ +│ 193 │ NtCreateProfile │ 0x000000C0, //192 │ +│ 194 │ NtCreateProfileEx │ 0x000000C1, //193 │ +│ 195 │ NtCreateRegistryTransaction │ 0x000000C2, //194 │ +│ 196 │ NtCreateResourceManager │ 0x000000C3, //195 │ +│ 197 │ NtCreateSectionEx │ 0x000000C4, //196 │ +│ 198 │ NtCreateSemaphore │ 0x000000C5, //197 │ +│ 199 │ NtCreateSymbolicLinkObject │ 0x000000C6, //198 │ +│ 200 │ NtCreateThreadEx │ 0x000000C7, //199 │ +│ 201 │ NtCreateThreadStateChange │ 0x000000C8, //200 │ +│ 202 │ NtCreateTimer │ 0x000000C9, //201 │ +│ 203 │ NtCreateTimer2 │ 0x000000CA, //202 │ +│ 204 │ NtCreateToken │ 0x000000CB, //203 │ +│ 205 │ NtCreateTokenEx │ 0x000000CC, //204 │ +│ 206 │ NtCreateTransaction │ 0x000000CD, //205 │ +│ 207 │ NtCreateTransactionManager │ 0x000000CE, //206 │ +│ 208 │ NtCreateUserProcess │ 0x000000CF, //207 │ +│ 209 │ NtCreateWaitCompletionPacket │ 0x000000D0, //208 │ +│ 210 │ NtCreateWaitablePort │ 0x000000D1, //209 │ +│ 211 │ NtCreateWnfStateName │ 0x000000D2, //210 │ +│ 212 │ NtCreateWorkerFactory │ 0x000000D3, //211 │ +│ 213 │ NtDebugActiveProcess │ 0x000000D4, //212 │ +│ 214 │ NtDebugContinue │ 0x000000D5, //213 │ +│ 215 │ NtDeleteAtom │ 0x000000D6, //214 │ +│ 216 │ NtDeleteBootEntry │ 0x000000D7, //215 │ +│ 217 │ NtDeleteDriverEntry │ 0x000000D8, //216 │ +│ 218 │ NtDeleteFile │ 0x000000D9, //217 │ +│ 219 │ NtDeleteKey │ 0x000000DA, //218 │ +│ 220 │ NtDeleteObjectAuditAlarm │ 0x000000DB, //219 │ +│ 221 │ NtDeletePrivateNamespace │ 0x000000DC, //220 │ +│ 222 │ NtDeleteValueKey │ 0x000000DD, //221 │ +│ 223 │ NtDeleteWnfStateData │ 0x000000DE, //222 │ +│ 224 │ NtDeleteWnfStateName │ 0x000000DF, //223 │ +│ 225 │ NtDirectGraphicsCall │ 0x000000E0, //224 │ +│ 226 │ NtDisableLastKnownGood │ 0x000000E1, //225 │ +│ 227 │ NtDisplayString │ 0x000000E2, //226 │ +│ 228 │ NtDrawText │ 0x000000E3, //227 │ +│ 229 │ NtEnableLastKnownGood │ 0x000000E4, //228 │ +│ 230 │ NtEnumerateBootEntries │ 0x000000E5, //229 │ +│ 231 │ NtEnumerateDriverEntries │ 0x000000E6, //230 │ +│ 232 │ NtEnumerateSystemEnvironmentValuesEx │ 0x000000E7, //231 │ +│ 233 │ NtEnumerateTransactionObject │ 0x000000E8, //232 │ +│ 234 │ NtExtendSection │ 0x000000E9, //233 │ +│ 235 │ NtFilterBootOption │ 0x000000EA, //234 │ +│ 236 │ NtFilterToken │ 0x000000EB, //235 │ +│ 237 │ NtFilterTokenEx │ 0x000000EC, //236 │ +│ 238 │ NtFlushBuffersFileEx │ 0x000000ED, //237 │ +│ 239 │ NtFlushInstallUILanguage │ 0x000000EE, //238 │ +│ 240 │ NtFlushInstructionCache │ 0x000000EF, //239 │ +│ 241 │ NtFlushKey │ 0x000000F0, //240 │ +│ 242 │ NtFlushProcessWriteBuffers │ 0x000000F1, //241 │ +│ 243 │ NtFlushVirtualMemory │ 0x000000F2, //242 │ +│ 244 │ NtFlushWriteBuffer │ 0x000000F3, //243 │ +│ 245 │ NtFreeUserPhysicalPages │ 0x000000F4, //244 │ +│ 246 │ NtFreezeRegistry │ 0x000000F5, //245 │ +│ 247 │ NtFreezeTransactions │ 0x000000F6, //246 │ +│ 248 │ NtGetCachedSigningLevel │ 0x000000F7, //247 │ +│ 249 │ NtGetCompleteWnfStateSubscription │ 0x000000F8, //248 │ +│ 250 │ NtGetContextThread │ 0x000000F9, //249 │ +│ 251 │ NtGetCurrentProcessorNumber │ 0x000000FA, //250 │ +│ 252 │ NtGetCurrentProcessorNumberEx │ 0x000000FB, //251 │ +│ 253 │ NtGetDevicePowerState │ 0x000000FC, //252 │ +│ 254 │ NtGetMUIRegistryInfo │ 0x000000FD, //253 │ +│ 255 │ NtGetNextProcess │ 0x000000FE, //254 │ +│ 256 │ NtGetNextThread │ 0x000000FF, //255 │ +│ 257 │ NtGetNlsSectionPtr │ 0x00000100, //256 │ +│ 258 │ NtGetNotificationResourceManager │ 0x00000101, //257 │ +│ 259 │ NtGetWriteWatch │ 0x00000102, //258 │ +│ 260 │ NtImpersonateAnonymousToken │ 0x00000103, //259 │ +│ 261 │ NtImpersonateThread │ 0x00000104, //260 │ +│ 262 │ NtInitializeEnclave │ 0x00000105, //261 │ +│ 263 │ NtInitializeNlsFiles │ 0x00000106, //262 │ +│ 264 │ NtInitializeRegistry │ 0x00000107, //263 │ +│ 265 │ NtInitiatePowerAction │ 0x00000108, //264 │ +│ 266 │ NtIsSystemResumeAutomatic │ 0x00000109, //265 │ +│ 267 │ NtIsUILanguageComitted │ 0x0000010A, //266 │ +│ 268 │ NtListenPort │ 0x0000010B, //267 │ +│ 269 │ NtLoadDriver │ 0x0000010C, //268 │ +│ 270 │ NtLoadEnclaveData │ 0x0000010D, //269 │ +│ 271 │ NtLoadKey │ 0x0000010E, //270 │ +│ 272 │ NtLoadKey2 │ 0x0000010F, //271 │ +│ 273 │ NtLoadKey3 │ 0x00000110, //272 │ +│ 274 │ NtLoadKeyEx │ 0x00000111, //273 │ +│ 275 │ NtLockFile │ 0x00000112, //274 │ +│ 276 │ NtLockProductActivationKeys │ 0x00000113, //275 │ +│ 277 │ NtLockRegistryKey │ 0x00000114, //276 │ +│ 278 │ NtLockVirtualMemory │ 0x00000115, //277 │ +│ 279 │ NtMakePermanentObject │ 0x00000116, //278 │ +│ 280 │ NtMakeTemporaryObject │ 0x00000117, //279 │ +│ 281 │ NtManageHotPatch │ 0x00000118, //280 │ +│ 282 │ NtManagePartition │ 0x00000119, //281 │ +│ 283 │ NtMapCMFModule │ 0x0000011A, //282 │ +│ 284 │ NtMapUserPhysicalPages │ 0x0000011B, //283 │ +│ 285 │ NtMapViewOfSectionEx │ 0x0000011C, //284 │ +│ 286 │ NtModifyBootEntry │ 0x0000011D, //285 │ +│ 287 │ NtModifyDriverEntry │ 0x0000011E, //286 │ +│ 288 │ NtNotifyChangeDirectoryFile │ 0x0000011F, //287 │ +│ 289 │ NtNotifyChangeDirectoryFileEx │ 0x00000120, //288 │ +│ 290 │ NtNotifyChangeKey │ 0x00000121, //289 │ +│ 291 │ NtNotifyChangeMultipleKeys │ 0x00000122, //290 │ +│ 292 │ NtNotifyChangeSession │ 0x00000123, //291 │ +│ 293 │ NtOpenCpuPartition │ 0x00000124, //292 │ +│ 294 │ NtOpenEnlistment │ 0x00000125, //293 │ +│ 295 │ NtOpenEventPair │ 0x00000126, //294 │ +│ 296 │ NtOpenIoCompletion │ 0x00000127, //295 │ +│ 297 │ NtOpenJobObject │ 0x00000128, //296 │ +│ 298 │ NtOpenKeyEx │ 0x00000129, //297 │ +│ 299 │ NtOpenKeyTransacted │ 0x0000012A, //298 │ +│ 300 │ NtOpenKeyTransactedEx │ 0x0000012B, //299 │ +│ 301 │ NtOpenKeyedEvent │ 0x0000012C, //300 │ +│ 302 │ NtOpenMutant │ 0x0000012D, //301 │ +│ 303 │ NtOpenObjectAuditAlarm │ 0x0000012E, //302 │ +│ 304 │ NtOpenPartition │ 0x0000012F, //303 │ +│ 305 │ NtOpenPrivateNamespace │ 0x00000130, //304 │ +│ 306 │ NtOpenProcessToken │ 0x00000131, //305 │ +│ 307 │ NtOpenRegistryTransaction │ 0x00000132, //306 │ +│ 308 │ NtOpenResourceManager │ 0x00000133, //307 │ +│ 309 │ NtOpenSemaphore │ 0x00000134, //308 │ +│ 310 │ NtOpenSession │ 0x00000135, //309 │ +│ 311 │ NtOpenSymbolicLinkObject │ 0x00000136, //310 │ +│ 312 │ NtOpenThread │ 0x00000137, //311 │ +│ 313 │ NtOpenTimer │ 0x00000138, //312 │ +│ 314 │ NtOpenTransaction │ 0x00000139, //313 │ +│ 315 │ NtOpenTransactionManager │ 0x0000013A, //314 │ +│ 316 │ NtPlugPlayControl │ 0x0000013B, //315 │ +│ 317 │ NtPrePrepareComplete │ 0x0000013C, //316 │ +│ 318 │ NtPrePrepareEnlistment │ 0x0000013D, //317 │ +│ 319 │ NtPrepareComplete │ 0x0000013E, //318 │ +│ 320 │ NtPrepareEnlistment │ 0x0000013F, //319 │ +│ 321 │ NtPrivilegeCheck │ 0x00000140, //320 │ +│ 322 │ NtPrivilegeObjectAuditAlarm │ 0x00000141, //321 │ +│ 323 │ NtPrivilegedServiceAuditAlarm │ 0x00000142, //322 │ +│ 324 │ NtPropagationComplete │ 0x00000143, //323 │ +│ 325 │ NtPropagationFailed │ 0x00000144, //324 │ +│ 326 │ NtPssCaptureVaSpaceBulk │ 0x00000145, //325 │ +│ 327 │ NtPulseEvent │ 0x00000146, //326 │ +│ 328 │ NtQueryAuxiliaryCounterFrequency │ 0x00000147, //327 │ +│ 329 │ NtQueryBootEntryOrder │ 0x00000148, //328 │ +│ 330 │ NtQueryBootOptions │ 0x00000149, //329 │ +│ 331 │ NtQueryDebugFilterState │ 0x0000014A, //330 │ +│ 332 │ NtQueryDirectoryFileEx │ 0x0000014B, //331 │ +│ 333 │ NtQueryDirectoryObject │ 0x0000014C, //332 │ +│ 334 │ NtQueryDriverEntryOrder │ 0x0000014D, //333 │ +│ 335 │ NtQueryEaFile │ 0x0000014E, //334 │ +│ 336 │ NtQueryFullAttributesFile │ 0x0000014F, //335 │ +│ 337 │ NtQueryInformationAtom │ 0x00000150, //336 │ +│ 338 │ NtQueryInformationByName │ 0x00000151, //337 │ +│ 339 │ NtQueryInformationCpuPartition │ 0x00000152, //338 │ +│ 340 │ NtQueryInformationEnlistment │ 0x00000153, //339 │ +│ 341 │ NtQueryInformationJobObject │ 0x00000154, //340 │ +│ 342 │ NtQueryInformationPort │ 0x00000155, //341 │ +│ 343 │ NtQueryInformationResourceManager │ 0x00000156, //342 │ +│ 344 │ NtQueryInformationTransaction │ 0x00000157, //343 │ +│ 345 │ NtQueryInformationTransactionManager │ 0x00000158, //344 │ +│ 346 │ NtQueryInformationWorkerFactory │ 0x00000159, //345 │ +│ 347 │ NtQueryInstallUILanguage │ 0x0000015A, //346 │ +│ 348 │ NtQueryIntervalProfile │ 0x0000015B, //347 │ +│ 349 │ NtQueryIoCompletion │ 0x0000015C, //348 │ +│ 350 │ NtQueryIoRingCapabilities │ 0x0000015D, //349 │ +│ 351 │ NtQueryLicenseValue │ 0x0000015E, //350 │ +│ 352 │ NtQueryMultipleValueKey │ 0x0000015F, //351 │ +│ 353 │ NtQueryMutant │ 0x00000160, //352 │ +│ 354 │ NtQueryOpenSubKeys │ 0x00000161, //353 │ +│ 355 │ NtQueryOpenSubKeysEx │ 0x00000162, //354 │ +│ 356 │ NtQueryPortInformationProcess │ 0x00000163, //355 │ +│ 357 │ NtQueryQuotaInformationFile │ 0x00000164, //356 │ +│ 358 │ NtQuerySecurityAttributesToken │ 0x00000165, //357 │ +│ 359 │ NtQuerySecurityObject │ 0x00000166, //358 │ +│ 360 │ NtQuerySecurityPolicy │ 0x00000167, //359 │ +│ 361 │ NtQuerySemaphore │ 0x00000168, //360 │ +│ 362 │ NtQuerySymbolicLinkObject │ 0x00000169, //361 │ +│ 363 │ NtQuerySystemEnvironmentValue │ 0x0000016A, //362 │ +│ 364 │ NtQuerySystemEnvironmentValueEx │ 0x0000016B, //363 │ +│ 365 │ NtQuerySystemInformationEx │ 0x0000016C, //364 │ +│ 366 │ NtQueryTimerResolution │ 0x0000016D, //365 │ +│ 367 │ NtQueryWnfStateData │ 0x0000016E, //366 │ +│ 368 │ NtQueryWnfStateNameInformation │ 0x0000016F, //367 │ +│ 369 │ NtQueueApcThreadEx │ 0x00000170, //368 │ +│ 370 │ NtQueueApcThreadEx2 │ 0x00000171, //369 │ +│ 371 │ NtRaiseException │ 0x00000172, //370 │ +│ 372 │ NtRaiseHardError │ 0x00000173, //371 │ +│ 373 │ NtReadOnlyEnlistment │ 0x00000174, //372 │ +│ 374 │ NtReadVirtualMemoryEx │ 0x00000175, //373 │ +│ 375 │ NtRecoverEnlistment │ 0x00000176, //374 │ +│ 376 │ NtRecoverResourceManager │ 0x00000177, //375 │ +│ 377 │ NtRecoverTransactionManager │ 0x00000178, //376 │ +│ 378 │ NtRegisterProtocolAddressInformation │ 0x00000179, //377 │ +│ 379 │ NtRegisterThreadTerminatePort │ 0x0000017A, //378 │ +│ 380 │ NtReleaseKeyedEvent │ 0x0000017B, //379 │ +│ 381 │ NtReleaseWorkerFactoryWorker │ 0x0000017C, //380 │ +│ 382 │ NtRemoveIoCompletionEx │ 0x0000017D, //381 │ +│ 383 │ NtRemoveProcessDebug │ 0x0000017E, //382 │ +│ 384 │ NtRenameKey │ 0x0000017F, //383 │ +│ 385 │ NtRenameTransactionManager │ 0x00000180, //384 │ +│ 386 │ NtReplaceKey │ 0x00000181, //385 │ +│ 387 │ NtReplacePartitionUnit │ 0x00000182, //386 │ +│ 388 │ NtReplyWaitReplyPort │ 0x00000183, //387 │ +│ 389 │ NtRequestPort │ 0x00000184, //388 │ +│ 390 │ NtResetEvent │ 0x00000185, //389 │ +│ 391 │ NtResetWriteWatch │ 0x00000186, //390 │ +│ 392 │ NtRestoreKey │ 0x00000187, //391 │ +│ 393 │ NtResumeProcess │ 0x00000188, //392 │ +│ 394 │ NtRevertContainerImpersonation │ 0x00000189, //393 │ +│ 395 │ NtRollbackComplete │ 0x0000018A, //394 │ +│ 396 │ NtRollbackEnlistment │ 0x0000018B, //395 │ +│ 397 │ NtRollbackRegistryTransaction │ 0x0000018C, //396 │ +│ 398 │ NtRollbackTransaction │ 0x0000018D, //397 │ +│ 399 │ NtRollforwardTransactionManager │ 0x0000018E, //398 │ +│ 400 │ NtSaveKey │ 0x0000018F, //399 │ +│ 401 │ NtSaveKeyEx │ 0x00000190, //400 │ +│ 402 │ NtSaveMergedKeys │ 0x00000191, //401 │ +│ 403 │ NtSecureConnectPort │ 0x00000192, //402 │ +│ 404 │ NtSerializeBoot │ 0x00000193, //403 │ +│ 405 │ NtSetBootEntryOrder │ 0x00000194, //404 │ +│ 406 │ NtSetBootOptions │ 0x00000195, //405 │ +│ 407 │ NtSetCachedSigningLevel │ 0x00000196, //406 │ +│ 408 │ NtSetCachedSigningLevel2 │ 0x00000197, //407 │ +│ 409 │ NtSetContextThread │ 0x00000198, //408 │ +│ 410 │ NtSetDebugFilterState │ 0x00000199, //409 │ +│ 411 │ NtSetDefaultHardErrorPort │ 0x0000019A, //410 │ +│ 412 │ NtSetDefaultLocale │ 0x0000019B, //411 │ +│ 413 │ NtSetDefaultUILanguage │ 0x0000019C, //412 │ +│ 414 │ NtSetDriverEntryOrder │ 0x0000019D, //413 │ +│ 415 │ NtSetEaFile │ 0x0000019E, //414 │ +│ 416 │ NtSetHighEventPair │ 0x0000019F, //415 │ +│ 417 │ NtSetHighWaitLowEventPair │ 0x000001A0, //416 │ +│ 418 │ NtSetIRTimer │ 0x000001A1, //417 │ +│ 419 │ NtSetInformationCpuPartition │ 0x000001A2, //418 │ +│ 420 │ NtSetInformationDebugObject │ 0x000001A3, //419 │ +│ 421 │ NtSetInformationEnlistment │ 0x000001A4, //420 │ +│ 422 │ NtSetInformationIoRing │ 0x000001A5, //421 │ +│ 423 │ NtSetInformationJobObject │ 0x000001A6, //422 │ +│ 424 │ NtSetInformationKey │ 0x000001A7, //423 │ +│ 425 │ NtSetInformationResourceManager │ 0x000001A8, //424 │ +│ 426 │ NtSetInformationSymbolicLink │ 0x000001A9, //425 │ +│ 427 │ NtSetInformationToken │ 0x000001AA, //426 │ +│ 428 │ NtSetInformationTransaction │ 0x000001AB, //427 │ +│ 429 │ NtSetInformationTransactionManager │ 0x000001AC, //428 │ +│ 430 │ NtSetInformationVirtualMemory │ 0x000001AD, //429 │ +│ 431 │ NtSetInformationWorkerFactory │ 0x000001AE, //430 │ +│ 432 │ NtSetIntervalProfile │ 0x000001AF, //431 │ +│ 433 │ NtSetIoCompletion │ 0x000001B0, //432 │ +│ 434 │ NtSetIoCompletionEx │ 0x000001B1, //433 │ +│ 435 │ NtSetLdtEntries │ 0x000001B2, //434 │ +│ 436 │ NtSetLowEventPair │ 0x000001B3, //435 │ +│ 437 │ NtSetLowWaitHighEventPair │ 0x000001B4, //436 │ +│ 438 │ NtSetQuotaInformationFile │ 0x000001B5, //437 │ +│ 439 │ NtSetSecurityObject │ 0x000001B6, //438 │ +│ 440 │ NtSetSystemEnvironmentValue │ 0x000001B7, //439 │ +│ 441 │ NtSetSystemEnvironmentValueEx │ 0x000001B8, //440 │ +│ 442 │ NtSetSystemInformation │ 0x000001B9, //441 │ +│ 443 │ NtSetSystemPowerState │ 0x000001BA, //442 │ +│ 444 │ NtSetSystemTime │ 0x000001BB, //443 │ +│ 445 │ NtSetThreadExecutionState │ 0x000001BC, //444 │ +│ 446 │ NtSetTimer2 │ 0x000001BD, //445 │ +│ 447 │ NtSetTimerEx │ 0x000001BE, //446 │ +│ 448 │ NtSetTimerResolution │ 0x000001BF, //447 │ +│ 449 │ NtSetUuidSeed │ 0x000001C0, //448 │ +│ 450 │ NtSetVolumeInformationFile │ 0x000001C1, //449 │ +│ 451 │ NtSetWnfProcessNotificationEvent │ 0x000001C2, //450 │ +│ 452 │ NtShutdownSystem │ 0x000001C3, //451 │ +│ 453 │ NtShutdownWorkerFactory │ 0x000001C4, //452 │ +│ 454 │ NtSignalAndWaitForSingleObject │ 0x000001C5, //453 │ +│ 455 │ NtSinglePhaseReject │ 0x000001C6, //454 │ +│ 456 │ NtStartProfile │ 0x000001C7, //455 │ +│ 457 │ NtStopProfile │ 0x000001C8, //456 │ +│ 458 │ NtSubmitIoRing │ 0x000001C9, //457 │ +│ 459 │ NtSubscribeWnfStateChange │ 0x000001CA, //458 │ +│ 460 │ NtSuspendProcess │ 0x000001CB, //459 │ +│ 461 │ NtSuspendThread │ 0x000001CC, //460 │ +│ 462 │ NtSystemDebugControl │ 0x000001CD, //461 │ +│ 463 │ NtTerminateEnclave │ 0x000001CE, //462 │ +│ 464 │ NtTerminateJobObject │ 0x000001CF, //463 │ +│ 465 │ NtTestAlert │ 0x000001D0, //464 │ +│ 466 │ NtThawRegistry │ 0x000001D1, //465 │ +│ 467 │ NtThawTransactions │ 0x000001D2, //466 │ +│ 468 │ NtTraceControl │ 0x000001D3, //467 │ +│ 469 │ NtTranslateFilePath │ 0x000001D4, //468 │ +│ 470 │ NtUmsThreadYield │ 0x000001D5, //469 │ +│ 471 │ NtUnloadDriver │ 0x000001D6, //470 │ +│ 472 │ NtUnloadKey │ 0x000001D7, //471 │ +│ 473 │ NtUnloadKey2 │ 0x000001D8, //472 │ +│ 474 │ NtUnloadKeyEx │ 0x000001D9, //473 │ +│ 475 │ NtUnlockFile │ 0x000001DA, //474 │ +│ 476 │ NtUnlockVirtualMemory │ 0x000001DB, //475 │ +│ 477 │ NtUnmapViewOfSectionEx │ 0x000001DC, //476 │ +│ 478 │ NtUnsubscribeWnfStateChange │ 0x000001DD, //477 │ +│ 479 │ NtUpdateWnfStateData │ 0x000001DE, //478 │ +│ 480 │ NtVdmControl │ 0x000001DF, //479 │ +│ 481 │ NtWaitForAlertByThreadId │ 0x000001E0, //480 │ +│ 482 │ NtWaitForDebugEvent │ 0x000001E1, //481 │ +│ 483 │ NtWaitForKeyedEvent │ 0x000001E2, //482 │ +│ 484 │ NtWaitForWorkViaWorkerFactory │ 0x000001E3, //483 │ +│ 485 │ NtWaitHighEventPair │ 0x000001E4, //484 │ +│ 486 │ NtWaitLowEventPair │ 0x000001E5, //485 │ +└─────┴───────────────────────────────────────────────────────┴───────────────────┘ diff --git a/sdk/commands_types_gen.go b/sdk/commands_types_gen.go index abb03846..87eda192 100644 --- a/sdk/commands_types_gen.go +++ b/sdk/commands_types_gen.go @@ -1,10 +1,9 @@ package sdk import ( - "github.com/ddkwork/golibrary/stream" "strings" - + "github.com/ddkwork/golibrary/stream" ) // Code generated by GeneratedFile types - DO NOT EDIT. diff --git a/sdk/debuggerError_types_gen.go b/sdk/debuggerError_types_gen.go index 71b8642e..7e3c4572 100644 --- a/sdk/debuggerError_types_gen.go +++ b/sdk/debuggerError_types_gen.go @@ -1,10 +1,9 @@ package sdk import ( - "github.com/ddkwork/golibrary/stream" "strings" - + "github.com/ddkwork/golibrary/stream" ) // Code generated by GeneratedFile types - DO NOT EDIT. diff --git a/sdk/ioctl_types_gen.go b/sdk/ioctl_types_gen.go index 556a22bb..1b941cce 100644 --- a/sdk/ioctl_types_gen.go +++ b/sdk/ioctl_types_gen.go @@ -1,10 +1,9 @@ package sdk import ( - "github.com/ddkwork/golibrary/stream" "strings" - + "github.com/ddkwork/golibrary/stream" ) // Code generated by GeneratedFile types - DO NOT EDIT. diff --git a/win32u.txt b/win32u.txt index 74cc9aa4..05652d05 100644 --- a/win32u.txt +++ b/win32u.txt @@ -1,1458 +1,1458 @@ Windows 11 v10.0.22621.1928 -┌──────┬─────────────────────────────────────────────────────────┬───────────────────┐ -│ Id │ Name │ Index │ -├──────┼─────────────────────────────────────────────────────────┼───────────────────┤ -│ 1 │ NtUserGetThreadState │ 0x00000000 / 0 │ -│ 2 │ NtUserPeekMessage │ 0x00000001 / 1 │ -│ 3 │ NtUserGetKeyState │ 0x00000002 / 2 │ -│ 4 │ NtUserInvalidateRect │ 0x00000003 / 3 │ -│ 5 │ NtUserGetMessage │ 0x00000004 / 4 │ -│ 6 │ NtUserMessageCall │ 0x00000005 / 5 │ -│ 7 │ NtGdiBitBlt │ 0x00000006 / 6 │ -│ 8 │ NtGdiGetCharSet │ 0x00000007 / 7 │ -│ 9 │ NtUserGetDC │ 0x00000008 / 8 │ -│ 10 │ NtGdiSelectBitmap │ 0x00000009 / 9 │ -│ 11 │ NtUserWaitMessage │ 0x0000000A / 10 │ -│ 12 │ NtUserTranslateMessage │ 0x0000000B / 11 │ -│ 13 │ NtUserGetProp │ 0x0000000C / 12 │ -│ 14 │ NtUserPostMessage │ 0x0000000D / 13 │ -│ 15 │ NtUserQueryWindow │ 0x0000000E / 14 │ -│ 16 │ NtUserTranslateAccelerator │ 0x0000000F / 15 │ -│ 17 │ NtGdiFlush │ 0x00000010 / 16 │ -│ 18 │ NtUserRedrawWindow │ 0x00000011 / 17 │ -│ 19 │ NtUserWindowFromPoint │ 0x00000012 / 18 │ -│ 20 │ NtUserCallMsgFilter │ 0x00000013 / 19 │ -│ 21 │ NtUserValidateTimerCallback │ 0x00000014 / 20 │ -│ 22 │ NtUserBeginPaint │ 0x00000015 / 21 │ -│ 23 │ NtUserSetTimer │ 0x00000016 / 22 │ -│ 24 │ NtUserEndPaint │ 0x00000017 / 23 │ -│ 25 │ NtUserSetCursor │ 0x00000018 / 24 │ -│ 26 │ NtUserKillTimer │ 0x00000019 / 25 │ -│ 27 │ NtUserBuildHwndList │ 0x0000001A / 26 │ -│ 28 │ NtUserSelectPalette │ 0x0000001B / 27 │ -│ 29 │ NtUserCallNextHookEx │ 0x0000001C / 28 │ -│ 30 │ NtUserHideCaret │ 0x0000001D / 29 │ -│ 31 │ NtGdiIntersectClipRect │ 0x0000001E / 30 │ -│ 32 │ NtUserGetProcessWindowStation │ 0x0000001F / 31 │ -│ 33 │ NtGdiDeleteObjectApp │ 0x00000020 / 32 │ -│ 34 │ NtUserSetWindowPos │ 0x00000021 / 33 │ -│ 35 │ NtUserShowCaret │ 0x00000022 / 34 │ -│ 36 │ NtUserEndDeferWindowPosEx │ 0x00000023 / 35 │ -│ 37 │ NtUserVkKeyScanEx │ 0x00000024 / 36 │ -│ 38 │ NtGdiSetDIBitsToDeviceInternal │ 0x00000025 / 37 │ -│ 39 │ NtGdiGetRandomRgn │ 0x00000026 / 38 │ -│ 40 │ NtUserCopyAcceleratorTable │ 0x00000027 / 39 │ -│ 41 │ NtUserNotifyWinEvent │ 0x00000028 / 40 │ -│ 42 │ NtGdiExtSelectClipRgn │ 0x00000029 / 41 │ -│ 43 │ NtUserIsClipboardFormatAvailable │ 0x0000002A / 42 │ -│ 44 │ NtUserSetScrollInfo │ 0x0000002B / 43 │ -│ 45 │ NtGdiStretchBlt │ 0x0000002C / 44 │ -│ 46 │ NtUserCreateCaret │ 0x0000002D / 45 │ -│ 47 │ NtGdiRectVisible │ 0x0000002E / 46 │ -│ 48 │ NtGdiCombineRgn │ 0x0000002F / 47 │ -│ 49 │ NtGdiGetDCObject │ 0x00000030 / 48 │ -│ 50 │ NtUserDispatchMessage │ 0x00000031 / 49 │ -│ 51 │ NtUserRegisterWindowMessage │ 0x00000032 / 50 │ -│ 52 │ NtGdiExtTextOutW │ 0x00000033 / 51 │ -│ 53 │ NtGdiSelectFont │ 0x00000034 / 52 │ -│ 54 │ NtGdiRestoreDC │ 0x00000035 / 53 │ -│ 55 │ NtGdiSaveDC │ 0x00000036 / 54 │ -│ 56 │ NtUserGetForegroundWindow │ 0x00000037 / 55 │ -│ 57 │ NtUserShowScrollBar │ 0x00000038 / 56 │ -│ 58 │ NtUserFindExistingCursorIcon │ 0x00000039 / 57 │ -│ 59 │ NtGdiGetDCDword │ 0x0000003A / 58 │ -│ 60 │ NtGdiGetRegionData │ 0x0000003B / 59 │ -│ 61 │ NtGdiLineTo │ 0x0000003C / 60 │ -│ 62 │ NtUserSystemParametersInfo │ 0x0000003D / 61 │ -│ 63 │ NtGdiGetAppClipBox │ 0x0000003E / 62 │ -│ 64 │ NtUserGetAsyncKeyState │ 0x0000003F / 63 │ -│ 65 │ NtUserGetCPD │ 0x00000040 / 64 │ -│ 66 │ NtUserRemoveProp │ 0x00000041 / 65 │ -│ 67 │ NtGdiDoPalette │ 0x00000042 / 66 │ -│ 68 │ NtGdiPolyPolyDraw │ 0x00000043 / 67 │ -│ 69 │ NtUserSetCapture │ 0x00000044 / 68 │ -│ 70 │ NtUserEnumDisplayMonitors │ 0x00000045 / 69 │ -│ 71 │ NtGdiCreateCompatibleBitmap │ 0x00000046 / 70 │ -│ 72 │ NtUserSetProp │ 0x00000047 / 71 │ -│ 73 │ NtGdiGetTextCharsetInfo │ 0x00000048 / 72 │ -│ 74 │ NtUserSBGetParms │ 0x00000049 / 73 │ -│ 75 │ NtUserGetIconInfo │ 0x0000004A / 74 │ -│ 76 │ NtUserExcludeUpdateRgn │ 0x0000004B / 75 │ -│ 77 │ NtUserSetFocus │ 0x0000004C / 76 │ -│ 78 │ NtGdiExtGetObjectW │ 0x0000004D / 77 │ -│ 79 │ NtUserGetUpdateRect │ 0x0000004E / 78 │ -│ 80 │ NtGdiCreateCompatibleDC │ 0x0000004F / 79 │ -│ 81 │ NtUserGetClipboardSequenceNumber │ 0x00000050 / 80 │ -│ 82 │ NtGdiCreatePen │ 0x00000051 / 81 │ -│ 83 │ NtUserShowWindow │ 0x00000052 / 82 │ -│ 84 │ NtUserGetKeyboardLayoutList │ 0x00000053 / 83 │ -│ 85 │ NtGdiPatBlt │ 0x00000054 / 84 │ -│ 86 │ NtUserMapVirtualKeyEx │ 0x00000055 / 85 │ -│ 87 │ NtUserSetWindowLong │ 0x00000056 / 86 │ -│ 88 │ NtGdiHfontCreate │ 0x00000057 / 87 │ -│ 89 │ NtUserMoveWindow │ 0x00000058 / 88 │ -│ 90 │ NtUserPostThreadMessage │ 0x00000059 / 89 │ -│ 91 │ NtUserDrawIconEx │ 0x0000005A / 90 │ -│ 92 │ NtUserGetSystemMenu │ 0x0000005B / 91 │ -│ 93 │ NtGdiDrawStream │ 0x0000005C / 92 │ -│ 94 │ NtUserInternalGetWindowText │ 0x0000005D / 93 │ -│ 95 │ NtUserGetWindowDC │ 0x0000005E / 94 │ -│ 96 │ NtGdiInvertRgn │ 0x0000005F / 95 │ -│ 97 │ NtGdiGetRgnBox │ 0x00000060 / 96 │ -│ 98 │ NtGdiGetAndSetDCDword │ 0x00000061 / 97 │ -│ 99 │ NtGdiMaskBlt │ 0x00000062 / 98 │ -│ 100 │ NtGdiGetWidthTable │ 0x00000063 / 99 │ -│ 101 │ NtUserScrollDC │ 0x00000064 / 100 │ -│ 102 │ NtUserGetObjectInformation │ 0x00000065 / 101 │ -│ 103 │ NtGdiCreateBitmap │ 0x00000066 / 102 │ -│ 104 │ NtUserFindWindowEx │ 0x00000067 / 103 │ -│ 105 │ NtGdiPolyPatBlt │ 0x00000068 / 104 │ -│ 106 │ NtUserUnhookWindowsHookEx │ 0x00000069 / 105 │ -│ 107 │ NtGdiGetNearestColor │ 0x0000006A / 106 │ -│ 108 │ NtGdiTransformPoints │ 0x0000006B / 107 │ -│ 109 │ NtGdiGetDCPoint │ 0x0000006C / 108 │ -│ 110 │ NtGdiCreateDIBBrush │ 0x0000006D / 109 │ -│ 111 │ NtGdiGetTextMetricsW │ 0x0000006E / 110 │ -│ 112 │ NtUserCreateWindowEx │ 0x0000006F / 111 │ -│ 113 │ NtUserSetParent │ 0x00000070 / 112 │ -│ 114 │ NtUserGetKeyboardState │ 0x00000071 / 113 │ -│ 115 │ NtUserToUnicodeEx │ 0x00000072 / 114 │ -│ 116 │ NtUserGetControlBrush │ 0x00000073 / 115 │ -│ 117 │ NtUserGetClassName │ 0x00000074 / 116 │ -│ 118 │ NtGdiAlphaBlend │ 0x00000075 / 117 │ -│ 119 │ NtGdiOffsetRgn │ 0x00000076 / 118 │ -│ 120 │ NtUserDefSetText │ 0x00000077 / 119 │ -│ 121 │ NtGdiGetTextFaceW │ 0x00000078 / 120 │ -│ 122 │ NtGdiStretchDIBitsInternal │ 0x00000079 / 121 │ -│ 123 │ NtUserSendInput │ 0x0000007A / 122 │ -│ 124 │ NtUserGetThreadDesktop │ 0x0000007B / 123 │ -│ 125 │ NtGdiCreateRectRgn │ 0x0000007C / 124 │ -│ 126 │ NtGdiGetDIBitsInternal │ 0x0000007D / 125 │ -│ 127 │ NtUserGetUpdateRgn │ 0x0000007E / 126 │ -│ 128 │ NtGdiDeleteClientObj │ 0x0000007F / 127 │ -│ 129 │ NtUserGetIconSize │ 0x00000080 / 128 │ -│ 130 │ NtUserFillWindow │ 0x00000081 / 129 │ -│ 131 │ NtGdiExtCreateRegion │ 0x00000082 / 130 │ -│ 132 │ NtGdiComputeXformCoefficients │ 0x00000083 / 131 │ -│ 133 │ NtUserSetWindowsHookEx │ 0x00000084 / 132 │ -│ 134 │ NtUserNotifyProcessCreate │ 0x00000085 / 133 │ -│ 135 │ NtGdiUnrealizeObject │ 0x00000086 / 134 │ -│ 136 │ NtUserGetTitleBarInfo │ 0x00000087 / 135 │ -│ 137 │ NtGdiRectangle │ 0x00000088 / 136 │ -│ 138 │ NtUserSetThreadDesktop │ 0x00000089 / 137 │ -│ 139 │ NtUserGetDCEx │ 0x0000008A / 138 │ -│ 140 │ NtUserGetScrollBarInfo │ 0x0000008B / 139 │ -│ 141 │ NtGdiGetTextExtent │ 0x0000008C / 140 │ -│ 142 │ NtUserSetWindowFNID │ 0x0000008D / 141 │ -│ 143 │ NtGdiSetLayout │ 0x0000008E / 142 │ -│ 144 │ NtUserCalcMenuBar │ 0x0000008F / 143 │ -│ 145 │ NtUserThunkedMenuItemInfo │ 0x00000090 / 144 │ -│ 146 │ NtGdiExcludeClipRect │ 0x00000091 / 145 │ -│ 147 │ NtGdiCreateDIBSection │ 0x00000092 / 146 │ -│ 148 │ NtGdiGetDCforBitmap │ 0x00000093 / 147 │ -│ 149 │ NtUserDestroyCursor │ 0x00000094 / 148 │ -│ 150 │ NtUserDestroyWindow │ 0x00000095 / 149 │ -│ 151 │ NtGdiCreateDIBitmapInternal │ 0x00000096 / 150 │ -│ 152 │ NtUserOpenWindowStation │ 0x00000097 / 151 │ -│ 153 │ NtUserSetCursorIconData │ 0x00000098 / 152 │ -│ 154 │ NtUserCloseDesktop │ 0x00000099 / 153 │ -│ 155 │ NtUserOpenDesktop │ 0x0000009A / 154 │ -│ 156 │ NtUserSetProcessWindowStation │ 0x0000009B / 155 │ -│ 157 │ NtUserGetAtomName │ 0x0000009C / 156 │ -│ 158 │ NtGdiExtCreatePen │ 0x0000009D / 157 │ -│ 159 │ NtGdiCreatePaletteInternal │ 0x0000009E / 158 │ -│ 160 │ NtGdiSetBrushOrg │ 0x0000009F / 159 │ -│ 161 │ NtUserBuildNameList │ 0x000000A0 / 160 │ -│ 162 │ NtGdiSetPixel │ 0x000000A1 / 161 │ -│ 163 │ NtUserRegisterClassExWOW │ 0x000000A2 / 162 │ -│ 164 │ NtGdiCreatePatternBrushInternal │ 0x000000A3 / 163 │ -│ 165 │ NtUserGetAncestor │ 0x000000A4 / 164 │ -│ 166 │ NtGdiGetOutlineTextMetricsInternalW │ 0x000000A5 / 165 │ -│ 167 │ NtGdiSetBitmapBits │ 0x000000A6 / 166 │ -│ 168 │ NtUserCloseWindowStation │ 0x000000A7 / 167 │ -│ 169 │ NtUserGetDoubleClickTime │ 0x000000A8 / 168 │ -│ 170 │ NtUserEnableScrollBar │ 0x000000A9 / 169 │ -│ 171 │ NtGdiCreateSolidBrush │ 0x000000AA / 170 │ -│ 172 │ NtUserGetClassInfoEx │ 0x000000AB / 171 │ -│ 173 │ NtGdiCreateClientObj │ 0x000000AC / 172 │ -│ 174 │ NtUserUnregisterClass │ 0x000000AD / 173 │ -│ 175 │ NtUserDeleteMenu │ 0x000000AE / 174 │ -│ 176 │ NtGdiRectInRegion │ 0x000000AF / 175 │ -│ 177 │ NtUserScrollWindowEx │ 0x000000B0 / 176 │ -│ 178 │ NtGdiGetPixel │ 0x000000B1 / 177 │ -│ 179 │ NtUserSetClassLong │ 0x000000B2 / 178 │ -│ 180 │ NtUserGetMenuBarInfo │ 0x000000B3 / 179 │ -│ 181 │ NtGdiGetNearestPaletteIndex │ 0x000000B4 / 180 │ -│ 182 │ NtGdiGetCharWidthW │ 0x000000B5 / 181 │ -│ 183 │ NtUserInvalidateRgn │ 0x000000B6 / 182 │ -│ 184 │ NtUserGetClipboardOwner │ 0x000000B7 / 183 │ -│ 185 │ NtUserSetWindowRgn │ 0x000000B8 / 184 │ -│ 186 │ NtUserBitBltSysBmp │ 0x000000B9 / 185 │ -│ 187 │ NtGdiGetCharWidthInfo │ 0x000000BA / 186 │ -│ 188 │ NtUserValidateRect │ 0x000000BB / 187 │ -│ 189 │ NtUserCloseClipboard │ 0x000000BC / 188 │ -│ 190 │ NtUserOpenClipboard │ 0x000000BD / 189 │ -│ 191 │ NtUserSetClipboardData │ 0x000000BE / 190 │ -│ 192 │ NtUserEnableMenuItem │ 0x000000BF / 191 │ -│ 193 │ NtUserAlterWindowStyle │ 0x000000C0 / 192 │ -│ 194 │ NtGdiFillRgn │ 0x000000C1 / 193 │ -│ 195 │ NtUserGetWindowPlacement │ 0x000000C2 / 194 │ -│ 196 │ NtGdiModifyWorldTransform │ 0x000000C3 / 195 │ -│ 197 │ NtGdiGetFontData │ 0x000000C4 / 196 │ -│ 198 │ NtUserGetOpenClipboardWindow │ 0x000000C5 / 197 │ -│ 199 │ NtUserSetThreadState │ 0x000000C6 / 198 │ -│ 200 │ NtGdiOpenDCW │ 0x000000C7 / 199 │ -│ 201 │ NtUserTrackMouseEvent │ 0x000000C8 / 200 │ -│ 202 │ NtGdiGetTransform │ 0x000000C9 / 201 │ -│ 203 │ NtUserDestroyMenu │ 0x000000CA / 202 │ -│ 204 │ NtGdiGetBitmapBits │ 0x000000CB / 203 │ -│ 205 │ NtUserConsoleControl │ 0x000000CC / 204 │ -│ 206 │ NtUserSetActiveWindow │ 0x000000CD / 205 │ -│ 207 │ NtUserSetInformationThread │ 0x000000CE / 206 │ -│ 208 │ NtUserSetWindowPlacement │ 0x000000CF / 207 │ -│ 209 │ NtUserGetControlColor │ 0x000000D0 / 208 │ -│ 210 │ NtGdiSetMetaRgn │ 0x000000D1 / 209 │ -│ 211 │ NtGdiSetMiterLimit │ 0x000000D2 / 210 │ -│ 212 │ NtGdiSetVirtualResolution │ 0x000000D3 / 211 │ -│ 213 │ NtGdiGetRasterizerCaps │ 0x000000D4 / 212 │ -│ 214 │ NtUserSetWindowWord │ 0x000000D5 / 213 │ -│ 215 │ NtUserGetClipboardFormatName │ 0x000000D6 / 214 │ -│ 216 │ NtUserRealInternalGetMessage │ 0x000000D7 / 215 │ -│ 217 │ NtUserCreateLocalMemHandle │ 0x000000D8 / 216 │ -│ 218 │ NtUserAttachThreadInput │ 0x000000D9 / 217 │ -│ 219 │ NtGdiCreateHalftonePalette │ 0x000000DA / 218 │ -│ 220 │ NtUserPaintMenuBar │ 0x000000DB / 219 │ -│ 221 │ NtUserSetKeyboardState │ 0x000000DC / 220 │ -│ 222 │ NtGdiCombineTransform │ 0x000000DD / 221 │ -│ 223 │ NtUserCreateAcceleratorTable │ 0x000000DE / 222 │ -│ 224 │ NtUserGetCursorFrameInfo │ 0x000000DF / 223 │ -│ 225 │ NtUserGetAltTabInfo │ 0x000000E0 / 224 │ -│ 226 │ NtUserGetCaretBlinkTime │ 0x000000E1 / 225 │ -│ 227 │ NtGdiQueryFontAssocInfo │ 0x000000E2 / 226 │ -│ 228 │ NtUserProcessConnect │ 0x000000E3 / 227 │ -│ 229 │ NtUserEnumDisplayDevices │ 0x000000E4 / 228 │ -│ 230 │ NtUserEmptyClipboard │ 0x000000E5 / 229 │ -│ 231 │ NtUserGetClipboardData │ 0x000000E6 / 230 │ -│ 232 │ NtUserRemoveMenu │ 0x000000E7 / 231 │ -│ 233 │ NtGdiSetBoundsRect │ 0x000000E8 / 232 │ -│ 234 │ NtGdiGetBitmapDimension │ 0x000000E9 / 233 │ -│ 235 │ NtUserConvertMemHandle │ 0x000000EA / 234 │ -│ 236 │ NtUserDestroyAcceleratorTable │ 0x000000EB / 235 │ -│ 237 │ NtUserGetGUIThreadInfo │ 0x000000EC / 236 │ -│ 238 │ NtGdiCloseFigure │ 0x000000ED / 237 │ -│ 239 │ NtUserSetWindowsHookAW │ 0x000000EE / 238 │ -│ 240 │ NtUserSetMenuDefaultItem │ 0x000000EF / 239 │ -│ 241 │ NtUserCheckMenuItem │ 0x000000F0 / 240 │ -│ 242 │ NtUserSetWinEventHook │ 0x000000F1 / 241 │ -│ 243 │ NtUserUnhookWinEvent │ 0x000000F2 / 242 │ -│ 244 │ NtUserLockWindowUpdate │ 0x000000F3 / 243 │ -│ 245 │ NtUserSetSystemMenu │ 0x000000F4 / 244 │ -│ 246 │ NtUserThunkedMenuInfo │ 0x000000F5 / 245 │ -│ 247 │ NtGdiBeginPath │ 0x000000F6 / 246 │ -│ 248 │ NtGdiEndPath │ 0x000000F7 / 247 │ -│ 249 │ NtGdiFillPath │ 0x000000F8 / 248 │ -│ 250 │ NtUserDdeInitialize │ 0x000000F9 / 249 │ -│ 251 │ NtUserModifyUserStartupInfoFlags │ 0x000000FA / 250 │ -│ 252 │ NtUserCountClipboardFormats │ 0x000000FB / 251 │ -│ 253 │ NtGdiAddFontMemResourceEx │ 0x000000FC / 252 │ -│ 254 │ NtGdiEqualRgn │ 0x000000FD / 253 │ -│ 255 │ NtGdiGetSystemPaletteUse │ 0x000000FE / 254 │ -│ 256 │ NtGdiRemoveFontMemResourceEx │ 0x000000FF / 255 │ -│ 257 │ NtUserEnumDisplaySettings │ 0x00000100 / 256 │ -│ 258 │ NtUserPaintDesktop │ 0x00000101 / 257 │ -│ 259 │ NtGdiExtEscape │ 0x00000102 / 258 │ -│ 260 │ NtGdiSetBitmapDimension │ 0x00000103 / 259 │ -│ 261 │ NtGdiSetFontEnumeration │ 0x00000104 / 260 │ -│ 262 │ NtUserChangeClipboardChain │ 0x00000105 / 261 │ -│ 263 │ NtUserSetClipboardViewer │ 0x00000106 / 262 │ -│ 264 │ NtUserShowWindowAsync │ 0x00000107 / 263 │ -│ 265 │ NtGdiCreateColorSpace │ 0x00000108 / 264 │ -│ 266 │ NtGdiDeleteColorSpace │ 0x00000109 / 265 │ -│ 267 │ NtUserActivateKeyboardLayout │ 0x0000010A / 266 │ -│ 268 │ NtBindCompositionSurface │ 0x0000010B / 267 │ -│ 269 │ NtCloseCompositionInputSink │ 0x0000010C / 268 │ -│ 270 │ NtCompositionInputThread │ 0x0000010D / 269 │ -│ 271 │ NtCompositionSetDropTarget │ 0x0000010E / 270 │ -│ 272 │ NtCompositorNotifyExitWindows │ 0x0000010F / 271 │ -│ 273 │ NtConfigureInputSpace │ 0x00000110 / 272 │ -│ 274 │ NtCreateCompositionInputSink │ 0x00000111 / 273 │ -│ 275 │ NtCreateCompositionSurfaceHandle │ 0x00000112 / 274 │ -│ 276 │ NtCreateImplicitCompositionInputSink │ 0x00000113 / 275 │ -│ 277 │ NtDCompositionAddCrossDeviceVisualChild │ 0x00000114 / 276 │ -│ 278 │ NtDCompositionBeginFrame │ 0x00000115 / 277 │ -│ 279 │ NtDCompositionBoostCompositorClock │ 0x00000116 / 278 │ -│ 280 │ NtDCompositionCommitChannel │ 0x00000117 / 279 │ -│ 281 │ NtDCompositionCommitSynchronizationObject │ 0x00000118 / 280 │ -│ 282 │ NtDCompositionConfirmFrame │ 0x00000119 / 281 │ -│ 283 │ NtDCompositionConnectPipe │ 0x0000011A / 282 │ -│ 284 │ NtDCompositionCreateAndBindSharedSection │ 0x0000011B / 283 │ -│ 285 │ NtDCompositionCreateChannel │ 0x0000011C / 284 │ -│ 286 │ NtDCompositionCreateConnection │ 0x0000011D / 285 │ -│ 287 │ NtDCompositionCreateDwmChannel │ 0x0000011E / 286 │ -│ 288 │ NtDCompositionCreateSharedResourceHandle │ 0x0000011F / 287 │ -│ 289 │ NtDCompositionCreateSynchronizationObject │ 0x00000120 / 288 │ -│ 290 │ NtDCompositionDestroyChannel │ 0x00000121 / 289 │ -│ 291 │ NtDCompositionDestroyConnection │ 0x00000122 / 290 │ -│ 292 │ NtDCompositionDuplicateHandleToProcess │ 0x00000123 / 291 │ -│ 293 │ NtDCompositionDuplicateSwapchainHandleToDwm │ 0x00000124 / 292 │ -│ 294 │ NtDCompositionEnableMMCSS │ 0x00000125 / 293 │ -│ 295 │ NtDCompositionGetBatchId │ 0x00000126 / 294 │ -│ 296 │ NtDCompositionGetChannels │ 0x00000127 / 295 │ -│ 297 │ NtDCompositionGetConnectionBatch │ 0x00000128 / 296 │ -│ 298 │ NtDCompositionGetDeletedResources │ 0x00000129 / 297 │ -│ 299 │ NtDCompositionGetFrameId │ 0x0000012A / 298 │ -│ 300 │ NtDCompositionGetFrameIdFromBatchId │ 0x0000012B / 299 │ -│ 301 │ NtDCompositionGetFrameLegacyTokens │ 0x0000012C / 300 │ -│ 302 │ NtDCompositionGetFrameStatistics │ 0x0000012D / 301 │ -│ 303 │ NtDCompositionGetFrameSurfaceUpdates │ 0x0000012E / 302 │ -│ 304 │ NtDCompositionGetMaterialProperty │ 0x0000012F / 303 │ -│ 305 │ NtDCompositionGetStatistics │ 0x00000130 / 304 │ -│ 306 │ NtDCompositionGetTargetStatistics │ 0x00000131 / 305 │ -│ 307 │ NtDCompositionNotifySuperWetInkWork │ 0x00000132 / 306 │ -│ 308 │ NtDCompositionProcessChannelBatchBuffer │ 0x00000133 / 307 │ -│ 309 │ NtDCompositionReferenceSharedResourceOnDwmChannel │ 0x00000134 / 308 │ -│ 310 │ NtDCompositionRegisterThumbnailVisual │ 0x00000135 / 309 │ -│ 311 │ NtDCompositionRegisterVirtualDesktopVisual │ 0x00000136 / 310 │ -│ 312 │ NtDCompositionReleaseAllResources │ 0x00000137 / 311 │ -│ 313 │ NtDCompositionRemoveCrossDeviceVisualChild │ 0x00000138 / 312 │ -│ 314 │ NtDCompositionSetBlurredWallpaperSurface │ 0x00000139 / 313 │ -│ 315 │ NtDCompositionSetChannelCommitCompletionEvent │ 0x0000013A / 314 │ -│ 316 │ NtDCompositionSetChannelConnectionId │ 0x0000013B / 315 │ -│ 317 │ NtDCompositionSetChildRootVisual │ 0x0000013C / 316 │ -│ 318 │ NtDCompositionSetDebugCounter │ 0x0000013D / 317 │ -│ 319 │ NtDCompositionSetMaterialProperty │ 0x0000013E / 318 │ -│ 320 │ NtDCompositionSubmitDWMBatch │ 0x0000013F / 319 │ -│ 321 │ NtDCompositionSuspendAnimations │ 0x00000140 / 320 │ -│ 322 │ NtDCompositionSynchronize │ 0x00000141 / 321 │ -│ 323 │ NtDCompositionTelemetrySetApplicationId │ 0x00000142 / 322 │ -│ 324 │ NtDCompositionUpdatePointerCapture │ 0x00000143 / 323 │ -│ 325 │ NtDCompositionWaitForChannel │ 0x00000144 / 324 │ -│ 326 │ NtDCompositionWaitForCompositorClock │ 0x00000145 / 325 │ -│ 327 │ NtDesktopCaptureBits │ 0x00000146 / 326 │ -│ 328 │ NtDuplicateCompositionInputSink │ 0x00000147 / 327 │ -│ 329 │ NtDxgkCancelPresents │ 0x00000148 / 328 │ -│ 330 │ NtDxgkCheckSinglePlaneForMultiPlaneOverlaySupport │ 0x00000149 / 329 │ -│ 331 │ NtDxgkConnectDoorbell │ 0x0000014A / 330 │ -│ 332 │ NtDxgkCreateDoorbell │ 0x0000014B / 331 │ -│ 333 │ NtDxgkCreateNativeFence │ 0x0000014C / 332 │ -│ 334 │ NtDxgkCreateTrackedWorkload │ 0x0000014D / 333 │ -│ 335 │ NtDxgkDestroyDoorbell │ 0x0000014E / 334 │ -│ 336 │ NtDxgkDestroyTrackedWorkload │ 0x0000014F / 335 │ -│ 337 │ NtDxgkDispMgrOperation │ 0x00000150 / 336 │ -│ 338 │ NtDxgkDisplayPortOperation │ 0x00000151 / 337 │ -│ 339 │ NtDxgkDuplicateHandle │ 0x00000152 / 338 │ -│ 340 │ NtDxgkEnumAdapters3 │ 0x00000153 / 339 │ -│ 341 │ NtDxgkEnumProcesses │ 0x00000154 / 340 │ -│ 342 │ NtDxgkGetAvailableTrackedWorkloadIndex │ 0x00000155 / 341 │ -│ 343 │ NtDxgkGetProcessList │ 0x00000156 / 342 │ -│ 344 │ NtDxgkGetProperties │ 0x00000157 / 343 │ -│ 345 │ NtDxgkGetTrackedWorkloadStatistics │ 0x00000158 / 344 │ -│ 346 │ NtDxgkNotifyWorkSubmission │ 0x00000159 / 345 │ -│ 347 │ NtDxgkOpenNativeFenceFromNtHandle │ 0x0000015A / 346 │ -│ 348 │ NtDxgkOutputDuplPresentToHwQueue │ 0x0000015B / 347 │ -│ 349 │ NtDxgkPinResources │ 0x0000015C / 348 │ -│ 350 │ NtDxgkRegisterVailProcess │ 0x0000015D / 349 │ -│ 351 │ NtDxgkResetTrackedWorkloadStatistics │ 0x0000015E / 350 │ -│ 352 │ NtDxgkSetProperties │ 0x0000015F / 351 │ -│ 353 │ NtDxgkSubmitPresentBltToHwQueue │ 0x00000160 / 352 │ -│ 354 │ NtDxgkSubmitPresentToHwQueue │ 0x00000161 / 353 │ -│ 355 │ NtDxgkUnpinResources │ 0x00000162 / 354 │ -│ 356 │ NtDxgkUpdateTrackedWorkload │ 0x00000163 / 355 │ -│ 357 │ NtDxgkVailConnect │ 0x00000164 / 356 │ -│ 358 │ NtDxgkVailDisconnect │ 0x00000165 / 357 │ -│ 359 │ NtDxgkVailPromoteCompositionSurface │ 0x00000166 / 358 │ -│ 360 │ NtEnableOneCoreTransformMode │ 0x00000167 / 359 │ -│ 361 │ NtFlipObjectAddContent │ 0x00000168 / 360 │ -│ 362 │ NtFlipObjectAddPoolBuffer │ 0x00000169 / 361 │ -│ 363 │ NtFlipObjectConsumerAcquirePresent │ 0x0000016A / 362 │ -│ 364 │ NtFlipObjectConsumerAdjustUsageReference │ 0x0000016B / 363 │ -│ 365 │ NtFlipObjectConsumerBeginProcessPresent │ 0x0000016C / 364 │ -│ 366 │ NtFlipObjectConsumerEndProcessPresent │ 0x0000016D / 365 │ -│ 367 │ NtFlipObjectConsumerPostMessage │ 0x0000016E / 366 │ -│ 368 │ NtFlipObjectConsumerQueryBufferInfo │ 0x0000016F / 367 │ -│ 369 │ NtFlipObjectCreate │ 0x00000170 / 368 │ -│ 370 │ NtFlipObjectDisconnectEndpoint │ 0x00000171 / 369 │ -│ 371 │ NtFlipObjectEnablePresentStatisticsType │ 0x00000172 / 370 │ -│ 372 │ NtFlipObjectOpen │ 0x00000173 / 371 │ -│ 373 │ NtFlipObjectPresentCancel │ 0x00000174 / 372 │ -│ 374 │ NtFlipObjectQueryBufferAvailableEvent │ 0x00000175 / 373 │ -│ 375 │ NtFlipObjectQueryEndpointConnected │ 0x00000176 / 374 │ -│ 376 │ NtFlipObjectQueryLostEvent │ 0x00000177 / 375 │ -│ 377 │ NtFlipObjectQueryNextMessageToProducer │ 0x00000178 / 376 │ -│ 378 │ NtFlipObjectReadNextMessageToProducer │ 0x00000179 / 377 │ -│ 379 │ NtFlipObjectRemoveContent │ 0x0000017A / 378 │ -│ 380 │ NtFlipObjectRemovePoolBuffer │ 0x0000017B / 379 │ -│ 381 │ NtFlipObjectSetContent │ 0x0000017C / 380 │ -│ 382 │ NtGdiAbortDoc │ 0x0000017D / 381 │ -│ 383 │ NtGdiAbortPath │ 0x0000017E / 382 │ -│ 384 │ NtGdiAddEmbFontToDC │ 0x0000017F / 383 │ -│ 385 │ NtGdiAddFontResourceW │ 0x00000180 / 384 │ -│ 386 │ NtGdiAddInitialFonts │ 0x00000181 / 385 │ -│ 387 │ NtGdiAddRemoteFontToDC │ 0x00000182 / 386 │ -│ 388 │ NtGdiAddRemoteMMInstanceToDC │ 0x00000183 / 387 │ -│ 389 │ NtGdiAngleArc │ 0x00000184 / 388 │ -│ 390 │ NtGdiAnyLinkedFonts │ 0x00000185 / 389 │ -│ 391 │ NtGdiArcInternal │ 0x00000186 / 390 │ -│ 392 │ NtGdiBRUSHOBJ_DeleteRbrush │ 0x00000187 / 391 │ -│ 393 │ NtGdiBRUSHOBJ_hGetColorTransform │ 0x00000188 / 392 │ -│ 394 │ NtGdiBRUSHOBJ_pvAllocRbrush │ 0x00000189 / 393 │ -│ 395 │ NtGdiBRUSHOBJ_pvGetRbrush │ 0x0000018A / 394 │ -│ 396 │ NtGdiBRUSHOBJ_ulGetBrushColor │ 0x0000018B / 395 │ -│ 397 │ NtGdiBeginGdiRendering │ 0x0000018C / 396 │ -│ 398 │ NtGdiCLIPOBJ_bEnum │ 0x0000018D / 397 │ -│ 399 │ NtGdiCLIPOBJ_cEnumStart │ 0x0000018E / 398 │ -│ 400 │ NtGdiCLIPOBJ_ppoGetPath │ 0x0000018F / 399 │ -│ 401 │ NtGdiCancelDC │ 0x00000190 / 400 │ -│ 402 │ NtGdiChangeGhostFont │ 0x00000191 / 401 │ -│ 403 │ NtGdiCheckBitmapBits │ 0x00000192 / 402 │ -│ 404 │ NtGdiClearBitmapAttributes │ 0x00000193 / 403 │ -│ 405 │ NtGdiClearBrushAttributes │ 0x00000194 / 404 │ -│ 406 │ NtGdiColorCorrectPalette │ 0x00000195 / 405 │ -│ 407 │ NtGdiConfigureOPMProtectedOutput │ 0x00000196 / 406 │ -│ 408 │ NtGdiConvertMetafileRect │ 0x00000197 / 407 │ -│ 409 │ NtGdiCreateBitmapFromDxSurface │ 0x00000198 / 408 │ -│ 410 │ NtGdiCreateBitmapFromDxSurface2 │ 0x00000199 / 409 │ -│ 411 │ NtGdiCreateColorTransform │ 0x0000019A / 410 │ -│ 412 │ NtGdiCreateEllipticRgn │ 0x0000019B / 411 │ -│ 413 │ NtGdiCreateHatchBrushInternal │ 0x0000019C / 412 │ -│ 414 │ NtGdiCreateMetafileDC │ 0x0000019D / 413 │ -│ 415 │ NtGdiCreateOPMProtectedOutput │ 0x0000019E / 414 │ -│ 416 │ NtGdiCreateOPMProtectedOutputs │ 0x0000019F / 415 │ -│ 417 │ NtGdiCreateRoundRectRgn │ 0x000001A0 / 416 │ -│ 418 │ NtGdiCreateServerMetaFile │ 0x000001A1 / 417 │ -│ 419 │ NtGdiCreateSessionMappedDIBSection │ 0x000001A2 / 418 │ -│ 420 │ NtGdiDDCCIGetCapabilitiesString │ 0x000001A3 / 419 │ -│ 421 │ NtGdiDDCCIGetCapabilitiesStringLength │ 0x000001A4 / 420 │ -│ 422 │ NtGdiDDCCIGetTimingReport │ 0x000001A5 / 421 │ -│ 423 │ NtGdiDDCCIGetVCPFeature │ 0x000001A6 / 422 │ -│ 424 │ NtGdiDDCCISaveCurrentSettings │ 0x000001A7 / 423 │ -│ 425 │ NtGdiDDCCISetVCPFeature │ 0x000001A8 / 424 │ -│ 426 │ NtGdiDdCreateFullscreenSprite │ 0x000001A9 / 425 │ -│ 427 │ NtGdiDdDDIAbandonSwapChain │ 0x000001AA / 426 │ -│ 428 │ NtGdiDdDDIAcquireKeyedMutex │ 0x000001AB / 427 │ -│ 429 │ NtGdiDdDDIAcquireKeyedMutex2 │ 0x000001AC / 428 │ -│ 430 │ NtGdiDdDDIAcquireSwapChain │ 0x000001AD / 429 │ -│ 431 │ NtGdiDdDDIAddSurfaceToSwapChain │ 0x000001AE / 430 │ -│ 432 │ NtGdiDdDDIAdjustFullscreenGamma │ 0x000001AF / 431 │ -│ 433 │ NtGdiDdDDICacheHybridQueryValue │ 0x000001B0 / 432 │ -│ 434 │ NtGdiDdDDIChangeVideoMemoryReservation │ 0x000001B1 / 433 │ -│ 435 │ NtGdiDdDDICheckExclusiveOwnership │ 0x000001B2 / 434 │ -│ 436 │ NtGdiDdDDICheckMonitorPowerState │ 0x000001B3 / 435 │ -│ 437 │ NtGdiDdDDICheckMultiPlaneOverlaySupport │ 0x000001B4 / 436 │ -│ 438 │ NtGdiDdDDICheckMultiPlaneOverlaySupport2 │ 0x000001B5 / 437 │ -│ 439 │ NtGdiDdDDICheckMultiPlaneOverlaySupport3 │ 0x000001B6 / 438 │ -│ 440 │ NtGdiDdDDICheckOcclusion │ 0x000001B7 / 439 │ -│ 441 │ NtGdiDdDDICheckSharedResourceAccess │ 0x000001B8 / 440 │ -│ 442 │ NtGdiDdDDICheckVidPnExclusiveOwnership │ 0x000001B9 / 441 │ -│ 443 │ NtGdiDdDDICloseAdapter │ 0x000001BA / 442 │ -│ 444 │ NtGdiDdDDIConfigureSharedResource │ 0x000001BB / 443 │ -│ 445 │ NtGdiDdDDICreateAllocation │ 0x000001BC / 444 │ -│ 446 │ NtGdiDdDDICreateBundleObject │ 0x000001BD / 445 │ -│ 447 │ NtGdiDdDDICreateContext │ 0x000001BE / 446 │ -│ 448 │ NtGdiDdDDICreateContextVirtual │ 0x000001BF / 447 │ -│ 449 │ NtGdiDdDDICreateDCFromMemory │ 0x000001C0 / 448 │ -│ 450 │ NtGdiDdDDICreateDevice │ 0x000001C1 / 449 │ -│ 451 │ NtGdiDdDDICreateHwContext │ 0x000001C2 / 450 │ -│ 452 │ NtGdiDdDDICreateHwQueue │ 0x000001C3 / 451 │ -│ 453 │ NtGdiDdDDICreateKeyedMutex │ 0x000001C4 / 452 │ -│ 454 │ NtGdiDdDDICreateKeyedMutex2 │ 0x000001C5 / 453 │ -│ 455 │ NtGdiDdDDICreateOutputDupl │ 0x000001C6 / 454 │ -│ 456 │ NtGdiDdDDICreateOverlay │ 0x000001C7 / 455 │ -│ 457 │ NtGdiDdDDICreatePagingQueue │ 0x000001C8 / 456 │ -│ 458 │ NtGdiDdDDICreateProtectedSession │ 0x000001C9 / 457 │ -│ 459 │ NtGdiDdDDICreateSwapChain │ 0x000001CA / 458 │ -│ 460 │ NtGdiDdDDICreateSynchronizationObject │ 0x000001CB / 459 │ -│ 461 │ NtGdiDdDDIDDisplayEnum │ 0x000001CC / 460 │ -│ 462 │ NtGdiDdDDIDestroyAllocation │ 0x000001CD / 461 │ -│ 463 │ NtGdiDdDDIDestroyAllocation2 │ 0x000001CE / 462 │ -│ 464 │ NtGdiDdDDIDestroyContext │ 0x000001CF / 463 │ -│ 465 │ NtGdiDdDDIDestroyDCFromMemory │ 0x000001D0 / 464 │ -│ 466 │ NtGdiDdDDIDestroyDevice │ 0x000001D1 / 465 │ -│ 467 │ NtGdiDdDDIDestroyHwContext │ 0x000001D2 / 466 │ -│ 468 │ NtGdiDdDDIDestroyHwQueue │ 0x000001D3 / 467 │ -│ 469 │ NtGdiDdDDIDestroyKeyedMutex │ 0x000001D4 / 468 │ -│ 470 │ NtGdiDdDDIDestroyOutputDupl │ 0x000001D5 / 469 │ -│ 471 │ NtGdiDdDDIDestroyOverlay │ 0x000001D6 / 470 │ -│ 472 │ NtGdiDdDDIDestroyPagingQueue │ 0x000001D7 / 471 │ -│ 473 │ NtGdiDdDDIDestroyProtectedSession │ 0x000001D8 / 472 │ -│ 474 │ NtGdiDdDDIDestroySynchronizationObject │ 0x000001D9 / 473 │ -│ 475 │ NtGdiDdDDIDispMgrCreate │ 0x000001DA / 474 │ -│ 476 │ NtGdiDdDDIDispMgrSourceOperation │ 0x000001DB / 475 │ -│ 477 │ NtGdiDdDDIDispMgrTargetOperation │ 0x000001DC / 476 │ -│ 478 │ NtGdiDdDDIEnumAdapters │ 0x000001DD / 477 │ -│ 479 │ NtGdiDdDDIEnumAdapters2 │ 0x000001DE / 478 │ -│ 480 │ NtGdiDdDDIEscape │ 0x000001DF / 479 │ -│ 481 │ NtGdiDdDDIEvict │ 0x000001E0 / 480 │ -│ 482 │ NtGdiDdDDIExtractBundleObject │ 0x000001E1 / 481 │ -│ 483 │ NtGdiDdDDIFlipOverlay │ 0x000001E2 / 482 │ -│ 484 │ NtGdiDdDDIFlushHeapTransitions │ 0x000001E3 / 483 │ -│ 485 │ NtGdiDdDDIFreeGpuVirtualAddress │ 0x000001E4 / 484 │ -│ 486 │ NtGdiDdDDIGetAllocationPriority │ 0x000001E5 / 485 │ -│ 487 │ NtGdiDdDDIGetCachedHybridQueryValue │ 0x000001E6 / 486 │ -│ 488 │ NtGdiDdDDIGetContextInProcessSchedulingPriority │ 0x000001E7 / 487 │ -│ 489 │ NtGdiDdDDIGetContextSchedulingPriority │ 0x000001E8 / 488 │ -│ 490 │ NtGdiDdDDIGetDWMVerticalBlankEvent │ 0x000001E9 / 489 │ -│ 491 │ NtGdiDdDDIGetDeviceState │ 0x000001EA / 490 │ -│ 492 │ NtGdiDdDDIGetDisplayModeList │ 0x000001EB / 491 │ -│ 493 │ NtGdiDdDDIGetMemoryBudgetTarget │ 0x000001EC / 492 │ -│ 494 │ NtGdiDdDDIGetMultiPlaneOverlayCaps │ 0x000001ED / 493 │ -│ 495 │ NtGdiDdDDIGetMultisampleMethodList │ 0x000001EE / 494 │ -│ 496 │ NtGdiDdDDIGetOverlayState │ 0x000001EF / 495 │ -│ 497 │ NtGdiDdDDIGetPostCompositionCaps │ 0x000001F0 / 496 │ -│ 498 │ NtGdiDdDDIGetPresentHistory │ 0x000001F1 / 497 │ -│ 499 │ NtGdiDdDDIGetPresentQueueEvent │ 0x000001F2 / 498 │ -│ 500 │ NtGdiDdDDIGetProcessDeviceRemovalSupport │ 0x000001F3 / 499 │ -│ 501 │ NtGdiDdDDIGetProcessSchedulingPriorityBand │ 0x000001F4 / 500 │ -│ 502 │ NtGdiDdDDIGetProcessSchedulingPriorityClass │ 0x000001F5 / 501 │ -│ 503 │ NtGdiDdDDIGetResourcePresentPrivateDriverData │ 0x000001F6 / 502 │ -│ 504 │ NtGdiDdDDIGetRuntimeData │ 0x000001F7 / 503 │ -│ 505 │ NtGdiDdDDIGetScanLine │ 0x000001F8 / 504 │ -│ 506 │ NtGdiDdDDIGetSetSwapChainMetadata │ 0x000001F9 / 505 │ -│ 507 │ NtGdiDdDDIGetSharedPrimaryHandle │ 0x000001FA / 506 │ -│ 508 │ NtGdiDdDDIGetSharedResourceAdapterLuid │ 0x000001FB / 507 │ -│ 509 │ NtGdiDdDDIGetSharedResourceAdapterLuidFlipManager │ 0x000001FC / 508 │ -│ 510 │ NtGdiDdDDIGetSwapChainSurfacePhysicalAddress │ 0x000001FD / 509 │ -│ 511 │ NtGdiDdDDIGetYieldPercentage │ 0x000001FE / 510 │ -│ 512 │ NtGdiDdDDIInvalidateActiveVidPn │ 0x000001FF / 511 │ -│ 513 │ NtGdiDdDDIInvalidateCache │ 0x00000200 / 512 │ -│ 514 │ NtGdiDdDDILock │ 0x00000201 / 513 │ -│ 515 │ NtGdiDdDDILock2 │ 0x00000202 / 514 │ -│ 516 │ NtGdiDdDDIMakeResident │ 0x00000203 / 515 │ -│ 517 │ NtGdiDdDDIMapGpuVirtualAddress │ 0x00000204 / 516 │ -│ 518 │ NtGdiDdDDIMarkDeviceAsError │ 0x00000205 / 517 │ -│ 519 │ NtGdiDdDDINetDispGetNextChunkInfo │ 0x00000206 / 518 │ -│ 520 │ NtGdiDdDDINetDispQueryMiracastDisplayDeviceStatus │ 0x00000207 / 519 │ -│ 521 │ NtGdiDdDDINetDispQueryMiracastDisplayDeviceSupport │ 0x00000208 / 520 │ -│ 522 │ NtGdiDdDDINetDispStartMiracastDisplayDevice │ 0x00000209 / 521 │ -│ 523 │ NtGdiDdDDINetDispStopMiracastDisplayDevice │ 0x0000020A / 522 │ -│ 524 │ NtGdiDdDDIOfferAllocations │ 0x0000020B / 523 │ -│ 525 │ NtGdiDdDDIOpenAdapterFromDeviceName │ 0x0000020C / 524 │ -│ 526 │ NtGdiDdDDIOpenAdapterFromHdc │ 0x0000020D / 525 │ -│ 527 │ NtGdiDdDDIOpenAdapterFromLuid │ 0x0000020E / 526 │ -│ 528 │ NtGdiDdDDIOpenBundleObjectNtHandleFromName │ 0x0000020F / 527 │ -│ 529 │ NtGdiDdDDIOpenKeyedMutex │ 0x00000210 / 528 │ -│ 530 │ NtGdiDdDDIOpenKeyedMutex2 │ 0x00000211 / 529 │ -│ 531 │ NtGdiDdDDIOpenKeyedMutexFromNtHandle │ 0x00000212 / 530 │ -│ 532 │ NtGdiDdDDIOpenNtHandleFromName │ 0x00000213 / 531 │ -│ 533 │ NtGdiDdDDIOpenProtectedSessionFromNtHandle │ 0x00000214 / 532 │ -│ 534 │ NtGdiDdDDIOpenResource │ 0x00000215 / 533 │ -│ 535 │ NtGdiDdDDIOpenResourceFromNtHandle │ 0x00000216 / 534 │ -│ 536 │ NtGdiDdDDIOpenSwapChain │ 0x00000217 / 535 │ -│ 537 │ NtGdiDdDDIOpenSyncObjectFromNtHandle │ 0x00000218 / 536 │ -│ 538 │ NtGdiDdDDIOpenSyncObjectFromNtHandle2 │ 0x00000219 / 537 │ -│ 539 │ NtGdiDdDDIOpenSyncObjectNtHandleFromName │ 0x0000021A / 538 │ -│ 540 │ NtGdiDdDDIOpenSynchronizationObject │ 0x0000021B / 539 │ -│ 541 │ NtGdiDdDDIOutputDuplGetFrameInfo │ 0x0000021C / 540 │ -│ 542 │ NtGdiDdDDIOutputDuplGetMetaData │ 0x0000021D / 541 │ -│ 543 │ NtGdiDdDDIOutputDuplGetPointerShapeData │ 0x0000021E / 542 │ -│ 544 │ NtGdiDdDDIOutputDuplPresent │ 0x0000021F / 543 │ -│ 545 │ NtGdiDdDDIOutputDuplReleaseFrame │ 0x00000220 / 544 │ -│ 546 │ NtGdiDdDDIPollDisplayChildren │ 0x00000221 / 545 │ -│ 547 │ NtGdiDdDDIPresent │ 0x00000222 / 546 │ -│ 548 │ NtGdiDdDDIPresentMultiPlaneOverlay │ 0x00000223 / 547 │ -│ 549 │ NtGdiDdDDIPresentMultiPlaneOverlay2 │ 0x00000224 / 548 │ -│ 550 │ NtGdiDdDDIPresentMultiPlaneOverlay3 │ 0x00000225 / 549 │ -│ 551 │ NtGdiDdDDIPresentRedirected │ 0x00000226 / 550 │ -│ 552 │ NtGdiDdDDIQueryAdapterInfo │ 0x00000227 / 551 │ -│ 553 │ NtGdiDdDDIQueryAllocationResidency │ 0x00000228 / 552 │ -│ 554 │ NtGdiDdDDIQueryClockCalibration │ 0x00000229 / 553 │ -│ 555 │ NtGdiDdDDIQueryFSEBlock │ 0x0000022A / 554 │ -│ 556 │ NtGdiDdDDIQueryProcessOfferInfo │ 0x0000022B / 555 │ -│ 557 │ NtGdiDdDDIQueryProtectedSessionInfoFromNtHandle │ 0x0000022C / 556 │ -│ 558 │ NtGdiDdDDIQueryProtectedSessionStatus │ 0x0000022D / 557 │ -│ 559 │ NtGdiDdDDIQueryRemoteVidPnSourceFromGdiDisplayName │ 0x0000022E / 558 │ -│ 560 │ NtGdiDdDDIQueryResourceInfo │ 0x0000022F / 559 │ -│ 561 │ NtGdiDdDDIQueryResourceInfoFromNtHandle │ 0x00000230 / 560 │ -│ 562 │ NtGdiDdDDIQueryStatistics │ 0x00000231 / 561 │ -│ 563 │ NtGdiDdDDIQueryVidPnExclusiveOwnership │ 0x00000232 / 562 │ -│ 564 │ NtGdiDdDDIQueryVideoMemoryInfo │ 0x00000233 / 563 │ -│ 565 │ NtGdiDdDDIReclaimAllocations │ 0x00000234 / 564 │ -│ 566 │ NtGdiDdDDIReclaimAllocations2 │ 0x00000235 / 565 │ -│ 567 │ NtGdiDdDDIReleaseKeyedMutex │ 0x00000236 / 566 │ -│ 568 │ NtGdiDdDDIReleaseKeyedMutex2 │ 0x00000237 / 567 │ -│ 569 │ NtGdiDdDDIReleaseProcessVidPnSourceOwners │ 0x00000238 / 568 │ -│ 570 │ NtGdiDdDDIReleaseSwapChain │ 0x00000239 / 569 │ -│ 571 │ NtGdiDdDDIRemoveSurfaceFromSwapChain │ 0x0000023A / 570 │ -│ 572 │ NtGdiDdDDIRender │ 0x0000023B / 571 │ -│ 573 │ NtGdiDdDDIReserveGpuVirtualAddress │ 0x0000023C / 572 │ -│ 574 │ NtGdiDdDDISetAllocationPriority │ 0x0000023D / 573 │ -│ 575 │ NtGdiDdDDISetContextInProcessSchedulingPriority │ 0x0000023E / 574 │ -│ 576 │ NtGdiDdDDISetContextSchedulingPriority │ 0x0000023F / 575 │ -│ 577 │ NtGdiDdDDISetDisplayMode │ 0x00000240 / 576 │ -│ 578 │ NtGdiDdDDISetDodIndirectSwapchain │ 0x00000241 / 577 │ -│ 579 │ NtGdiDdDDISetFSEBlock │ 0x00000242 / 578 │ -│ 580 │ NtGdiDdDDISetGammaRamp │ 0x00000243 / 579 │ -│ 581 │ NtGdiDdDDISetHwProtectionTeardownRecovery │ 0x00000244 / 580 │ -│ 582 │ NtGdiDdDDISetMemoryBudgetTarget │ 0x00000245 / 581 │ -│ 583 │ NtGdiDdDDISetMonitorColorSpaceTransform │ 0x00000246 / 582 │ -│ 584 │ NtGdiDdDDISetProcessDeviceRemovalSupport │ 0x00000247 / 583 │ -│ 585 │ NtGdiDdDDISetProcessSchedulingPriorityBand │ 0x00000248 / 584 │ -│ 586 │ NtGdiDdDDISetProcessSchedulingPriorityClass │ 0x00000249 / 585 │ -│ 587 │ NtGdiDdDDISetQueuedLimit │ 0x0000024A / 586 │ -│ 588 │ NtGdiDdDDISetStablePowerState │ 0x0000024B / 587 │ -│ 589 │ NtGdiDdDDISetStereoEnabled │ 0x0000024C / 588 │ -│ 590 │ NtGdiDdDDISetSyncRefreshCountWaitTarget │ 0x0000024D / 589 │ -│ 591 │ NtGdiDdDDISetVidPnSourceHwProtection │ 0x0000024E / 590 │ -│ 592 │ NtGdiDdDDISetVidPnSourceOwner │ 0x0000024F / 591 │ -│ 593 │ NtGdiDdDDISetYieldPercentage │ 0x00000250 / 592 │ -│ 594 │ NtGdiDdDDIShareObjects │ 0x00000251 / 593 │ -│ 595 │ NtGdiDdDDISharedPrimaryLockNotification │ 0x00000252 / 594 │ -│ 596 │ NtGdiDdDDISharedPrimaryUnLockNotification │ 0x00000253 / 595 │ -│ 597 │ NtGdiDdDDISignalSynchronizationObject │ 0x00000254 / 596 │ -│ 598 │ NtGdiDdDDISignalSynchronizationObjectFromCpu │ 0x00000255 / 597 │ -│ 599 │ NtGdiDdDDISignalSynchronizationObjectFromGpu │ 0x00000256 / 598 │ -│ 600 │ NtGdiDdDDISignalSynchronizationObjectFromGpu2 │ 0x00000257 / 599 │ -│ 601 │ NtGdiDdDDISubmitCommand │ 0x00000258 / 600 │ -│ 602 │ NtGdiDdDDISubmitCommandToHwQueue │ 0x00000259 / 601 │ -│ 603 │ NtGdiDdDDISubmitSignalSyncObjectsToHwQueue │ 0x0000025A / 602 │ -│ 604 │ NtGdiDdDDISubmitWaitForSyncObjectsToHwQueue │ 0x0000025B / 603 │ -│ 605 │ NtGdiDdDDITrimProcessCommitment │ 0x0000025C / 604 │ -│ 606 │ NtGdiDdDDIUnOrderedPresentSwapChain │ 0x0000025D / 605 │ -│ 607 │ NtGdiDdDDIUnlock │ 0x0000025E / 606 │ -│ 608 │ NtGdiDdDDIUnlock2 │ 0x0000025F / 607 │ -│ 609 │ NtGdiDdDDIUpdateAllocationProperty │ 0x00000260 / 608 │ -│ 610 │ NtGdiDdDDIUpdateGpuVirtualAddress │ 0x00000261 / 609 │ -│ 611 │ NtGdiDdDDIUpdateOverlay │ 0x00000262 / 610 │ -│ 612 │ NtGdiDdDDIWaitForIdle │ 0x00000263 / 611 │ -│ 613 │ NtGdiDdDDIWaitForSynchronizationObject │ 0x00000264 / 612 │ -│ 614 │ NtGdiDdDDIWaitForSynchronizationObjectFromCpu │ 0x00000265 / 613 │ -│ 615 │ NtGdiDdDDIWaitForSynchronizationObjectFromGpu │ 0x00000266 / 614 │ -│ 616 │ NtGdiDdDDIWaitForVerticalBlankEvent │ 0x00000267 / 615 │ -│ 617 │ NtGdiDdDDIWaitForVerticalBlankEvent2 │ 0x00000268 / 616 │ -│ 618 │ NtGdiDdDestroyFullscreenSprite │ 0x00000269 / 617 │ -│ 619 │ NtGdiDdNotifyFullscreenSpriteUpdate │ 0x0000026A / 618 │ -│ 620 │ NtGdiDdQueryVisRgnUniqueness │ 0x0000026B / 619 │ -│ 621 │ NtGdiDeleteColorTransform │ 0x0000026C / 620 │ -│ 622 │ NtGdiDescribePixelFormat │ 0x0000026D / 621 │ -│ 623 │ NtGdiDestroyOPMProtectedOutput │ 0x0000026E / 622 │ -│ 624 │ NtGdiDestroyPhysicalMonitor │ 0x0000026F / 623 │ -│ 625 │ NtGdiDoBanding │ 0x00000270 / 624 │ -│ 626 │ NtGdiDrawEscape │ 0x00000271 / 625 │ -│ 627 │ NtGdiDwmCreatedBitmapRemotingOutput │ 0x00000272 / 626 │ -│ 628 │ NtGdiEllipse │ 0x00000273 / 627 │ -│ 629 │ NtGdiEnableEudc │ 0x00000274 / 628 │ -│ 630 │ NtGdiEndDoc │ 0x00000275 / 629 │ -│ 631 │ NtGdiEndGdiRendering │ 0x00000276 / 630 │ -│ 632 │ NtGdiEndPage │ 0x00000277 / 631 │ -│ 633 │ NtGdiEngAlphaBlend │ 0x00000278 / 632 │ -│ 634 │ NtGdiEngAssociateSurface │ 0x00000279 / 633 │ -│ 635 │ NtGdiEngBitBlt │ 0x0000027A / 634 │ -│ 636 │ NtGdiEngCheckAbort │ 0x0000027B / 635 │ -│ 637 │ NtGdiEngComputeGlyphSet │ 0x0000027C / 636 │ -│ 638 │ NtGdiEngCopyBits │ 0x0000027D / 637 │ -│ 639 │ NtGdiEngCreateBitmap │ 0x0000027E / 638 │ -│ 640 │ NtGdiEngCreateClip │ 0x0000027F / 639 │ -│ 641 │ NtGdiEngCreateDeviceBitmap │ 0x00000280 / 640 │ -│ 642 │ NtGdiEngCreateDeviceSurface │ 0x00000281 / 641 │ -│ 643 │ NtGdiEngCreatePalette │ 0x00000282 / 642 │ -│ 644 │ NtGdiEngDeleteClip │ 0x00000283 / 643 │ -│ 645 │ NtGdiEngDeletePalette │ 0x00000284 / 644 │ -│ 646 │ NtGdiEngDeletePath │ 0x00000285 / 645 │ -│ 647 │ NtGdiEngDeleteSurface │ 0x00000286 / 646 │ -│ 648 │ NtGdiEngEraseSurface │ 0x00000287 / 647 │ -│ 649 │ NtGdiEngFillPath │ 0x00000288 / 648 │ -│ 650 │ NtGdiEngGradientFill │ 0x00000289 / 649 │ -│ 651 │ NtGdiEngLineTo │ 0x0000028A / 650 │ -│ 652 │ NtGdiEngLockSurface │ 0x0000028B / 651 │ -│ 653 │ NtGdiEngMarkBandingSurface │ 0x0000028C / 652 │ -│ 654 │ NtGdiEngPaint │ 0x0000028D / 653 │ -│ 655 │ NtGdiEngPlgBlt │ 0x0000028E / 654 │ -│ 656 │ NtGdiEngStretchBlt │ 0x0000028F / 655 │ -│ 657 │ NtGdiEngStretchBltROP │ 0x00000290 / 656 │ -│ 658 │ NtGdiEngStrokeAndFillPath │ 0x00000291 / 657 │ -│ 659 │ NtGdiEngStrokePath │ 0x00000292 / 658 │ -│ 660 │ NtGdiEngTextOut │ 0x00000293 / 659 │ -│ 661 │ NtGdiEngTransparentBlt │ 0x00000294 / 660 │ -│ 662 │ NtGdiEngUnlockSurface │ 0x00000295 / 661 │ -│ 663 │ NtGdiEnsureDpiDepDefaultGuiFontForPlateau │ 0x00000296 / 662 │ -│ 664 │ NtGdiEnumFonts │ 0x00000297 / 663 │ -│ 665 │ NtGdiEnumObjects │ 0x00000298 / 664 │ -│ 666 │ NtGdiEudcLoadUnloadLink │ 0x00000299 / 665 │ -│ 667 │ NtGdiExtFloodFill │ 0x0000029A / 666 │ -│ 668 │ NtGdiFONTOBJ_cGetAllGlyphHandles │ 0x0000029B / 667 │ -│ 669 │ NtGdiFONTOBJ_cGetGlyphs │ 0x0000029C / 668 │ -│ 670 │ NtGdiFONTOBJ_pQueryGlyphAttrs │ 0x0000029D / 669 │ -│ 671 │ NtGdiFONTOBJ_pfdg │ 0x0000029E / 670 │ -│ 672 │ NtGdiFONTOBJ_pifi │ 0x0000029F / 671 │ -│ 673 │ NtGdiFONTOBJ_pvTrueTypeFontFile │ 0x000002A0 / 672 │ -│ 674 │ NtGdiFONTOBJ_pxoGetXform │ 0x000002A1 / 673 │ -│ 675 │ NtGdiFONTOBJ_vGetInfo │ 0x000002A2 / 674 │ -│ 676 │ NtGdiFlattenPath │ 0x000002A3 / 675 │ -│ 677 │ NtGdiFontIsLinked │ 0x000002A4 / 676 │ -│ 678 │ NtGdiForceUFIMapping │ 0x000002A5 / 677 │ -│ 679 │ NtGdiFrameRgn │ 0x000002A6 / 678 │ -│ 680 │ NtGdiFullscreenControl │ 0x000002A7 / 679 │ -│ 681 │ NtGdiGetBitmapDpiScaleValue │ 0x000002A8 / 680 │ -│ 682 │ NtGdiGetBoundsRect │ 0x000002A9 / 681 │ -│ 683 │ NtGdiGetCOPPCompatibleOPMInformation │ 0x000002AA / 682 │ -│ 684 │ NtGdiGetCertificate │ 0x000002AB / 683 │ -│ 685 │ NtGdiGetCertificateByHandle │ 0x000002AC / 684 │ -│ 686 │ NtGdiGetCertificateSize │ 0x000002AD / 685 │ -│ 687 │ NtGdiGetCertificateSizeByHandle │ 0x000002AE / 686 │ -│ 688 │ NtGdiGetCharABCWidthsW │ 0x000002AF / 687 │ -│ 689 │ NtGdiGetCharacterPlacementW │ 0x000002B0 / 688 │ -│ 690 │ NtGdiGetColorAdjustment │ 0x000002B1 / 689 │ -│ 691 │ NtGdiGetColorSpaceforBitmap │ 0x000002B2 / 690 │ -│ 692 │ NtGdiGetCurrentDpiInfo │ 0x000002B3 / 691 │ -│ 693 │ NtGdiGetDCDpiScaleValue │ 0x000002B4 / 692 │ -│ 694 │ NtGdiGetDeviceCaps │ 0x000002B5 / 693 │ -│ 695 │ NtGdiGetDeviceCapsAll │ 0x000002B6 / 694 │ -│ 696 │ NtGdiGetDeviceWidth │ 0x000002B7 / 695 │ -│ 697 │ NtGdiGetDhpdev │ 0x000002B8 / 696 │ -│ 698 │ NtGdiGetETM │ 0x000002B9 / 697 │ -│ 699 │ NtGdiGetEmbUFI │ 0x000002BA / 698 │ -│ 700 │ NtGdiGetEmbedFonts │ 0x000002BB / 699 │ -│ 701 │ NtGdiGetEntry │ 0x000002BC / 700 │ -│ 702 │ NtGdiGetEudcTimeStampEx │ 0x000002BD / 701 │ -│ 703 │ NtGdiGetFontFileData │ 0x000002BE / 702 │ -│ 704 │ NtGdiGetFontFileInfo │ 0x000002BF / 703 │ -│ 705 │ NtGdiGetFontResourceInfoInternalW │ 0x000002C0 / 704 │ -│ 706 │ NtGdiGetFontUnicodeRanges │ 0x000002C1 / 705 │ -│ 707 │ NtGdiGetGlyphIndicesW │ 0x000002C2 / 706 │ -│ 708 │ NtGdiGetGlyphIndicesWInternal │ 0x000002C3 / 707 │ -│ 709 │ NtGdiGetGlyphOutline │ 0x000002C4 / 708 │ -│ 710 │ NtGdiGetKerningPairs │ 0x000002C5 / 709 │ -│ 711 │ NtGdiGetLinkedUFIs │ 0x000002C6 / 710 │ -│ 712 │ NtGdiGetMiterLimit │ 0x000002C7 / 711 │ -│ 713 │ NtGdiGetMonitorID │ 0x000002C8 / 712 │ -│ 714 │ NtGdiGetNumberOfPhysicalMonitors │ 0x000002C9 / 713 │ -│ 715 │ NtGdiGetOPMInformation │ 0x000002CA / 714 │ -│ 716 │ NtGdiGetOPMRandomNumber │ 0x000002CB / 715 │ -│ 717 │ NtGdiGetObjectBitmapHandle │ 0x000002CC / 716 │ -│ 718 │ NtGdiGetPath │ 0x000002CD / 717 │ -│ 719 │ NtGdiGetPerBandInfo │ 0x000002CE / 718 │ -│ 720 │ NtGdiGetPhysicalMonitorDescription │ 0x000002CF / 719 │ -│ 721 │ NtGdiGetPhysicalMonitors │ 0x000002D0 / 720 │ -│ 722 │ NtGdiGetProcessSessionFonts │ 0x000002D1 / 721 │ -│ 723 │ NtGdiGetPublicFontTableChangeCookie │ 0x000002D2 / 722 │ -│ 724 │ NtGdiGetRealizationInfo │ 0x000002D3 / 723 │ -│ 725 │ NtGdiGetServerMetaFileBits │ 0x000002D4 / 724 │ -│ 726 │ NtGdiGetSpoolMessage │ 0x000002D5 / 725 │ -│ 727 │ NtGdiGetStats │ 0x000002D6 / 726 │ -│ 728 │ NtGdiGetStringBitmapW │ 0x000002D7 / 727 │ -│ 729 │ NtGdiGetSuggestedOPMProtectedOutputArraySize │ 0x000002D8 / 728 │ -│ 730 │ NtGdiGetTextExtentExW │ 0x000002D9 / 729 │ -│ 731 │ NtGdiGetUFI │ 0x000002DA / 730 │ -│ 732 │ NtGdiGetUFIPathname │ 0x000002DB / 731 │ -│ 733 │ NtGdiGradientFill │ 0x000002DC / 732 │ -│ 734 │ NtGdiHLSurfGetInformation │ 0x000002DD / 733 │ -│ 735 │ NtGdiHLSurfSetInformation │ 0x000002DE / 734 │ -│ 736 │ NtGdiHT_Get8BPPFormatPalette │ 0x000002DF / 735 │ -│ 737 │ NtGdiHT_Get8BPPMaskPalette │ 0x000002E0 / 736 │ -│ 738 │ NtGdiIcmBrushInfo │ 0x000002E1 / 737 │ -│ 739 │ NtGdiInit │ 0x000002E2 / 738 │ -│ 740 │ NtGdiInitSpool │ 0x000002E3 / 739 │ -│ 741 │ NtGdiMakeFontDir │ 0x000002E4 / 740 │ -│ 742 │ NtGdiMakeInfoDC │ 0x000002E5 / 741 │ -│ 743 │ NtGdiMakeObjectUnXferable │ 0x000002E6 / 742 │ -│ 744 │ NtGdiMakeObjectXferable │ 0x000002E7 / 743 │ -│ 745 │ NtGdiMirrorWindowOrg │ 0x000002E8 / 744 │ -│ 746 │ NtGdiMonoBitmap │ 0x000002E9 / 745 │ -│ 747 │ NtGdiMoveTo │ 0x000002EA / 746 │ -│ 748 │ NtGdiOffsetClipRgn │ 0x000002EB / 747 │ -│ 749 │ NtGdiPATHOBJ_bEnum │ 0x000002EC / 748 │ -│ 750 │ NtGdiPATHOBJ_bEnumClipLines │ 0x000002ED / 749 │ -│ 751 │ NtGdiPATHOBJ_vEnumStart │ 0x000002EE / 750 │ -│ 752 │ NtGdiPATHOBJ_vEnumStartClipLines │ 0x000002EF / 751 │ -│ 753 │ NtGdiPATHOBJ_vGetBounds │ 0x000002F0 / 752 │ -│ 754 │ NtGdiPathToRegion │ 0x000002F1 / 753 │ -│ 755 │ NtGdiPlgBlt │ 0x000002F2 / 754 │ -│ 756 │ NtGdiPolyDraw │ 0x000002F3 / 755 │ -│ 757 │ NtGdiPolyTextOutW │ 0x000002F4 / 756 │ -│ 758 │ NtGdiPtInRegion │ 0x000002F5 / 757 │ -│ 759 │ NtGdiPtVisible │ 0x000002F6 / 758 │ -│ 760 │ NtGdiQueryFonts │ 0x000002F7 / 759 │ -│ 761 │ NtGdiRemoveFontResourceW │ 0x000002F8 / 760 │ -│ 762 │ NtGdiRemoveMergeFont │ 0x000002F9 / 761 │ -│ 763 │ NtGdiResetDC │ 0x000002FA / 762 │ -│ 764 │ NtGdiResizePalette │ 0x000002FB / 763 │ -│ 765 │ NtGdiRoundRect │ 0x000002FC / 764 │ -│ 766 │ NtGdiSTROBJ_bEnum │ 0x000002FD / 765 │ -│ 767 │ NtGdiSTROBJ_bEnumPositionsOnly │ 0x000002FE / 766 │ -│ 768 │ NtGdiSTROBJ_bGetAdvanceWidths │ 0x000002FF / 767 │ -│ 769 │ NtGdiSTROBJ_dwGetCodePage │ 0x00000300 / 768 │ -│ 770 │ NtGdiSTROBJ_vEnumStart │ 0x00000301 / 769 │ -│ 771 │ NtGdiScaleRgn │ 0x00000302 / 770 │ -│ 772 │ NtGdiScaleValues │ 0x00000303 / 771 │ -│ 773 │ NtGdiScaleViewportExtEx │ 0x00000304 / 772 │ -│ 774 │ NtGdiScaleWindowExtEx │ 0x00000305 / 773 │ -│ 775 │ NtGdiSelectBrush │ 0x00000306 / 774 │ -│ 776 │ NtGdiSelectClipPath │ 0x00000307 / 775 │ -│ 777 │ NtGdiSelectPen │ 0x00000308 / 776 │ -│ 778 │ NtGdiSetBitmapAttributes │ 0x00000309 / 777 │ -│ 779 │ NtGdiSetBrushAttributes │ 0x0000030A / 778 │ -│ 780 │ NtGdiSetColorAdjustment │ 0x0000030B / 779 │ -│ 781 │ NtGdiSetColorSpace │ 0x0000030C / 780 │ -│ 782 │ NtGdiSetFontXform │ 0x0000030D / 781 │ -│ 783 │ NtGdiSetIcmMode │ 0x0000030E / 782 │ -│ 784 │ NtGdiSetLinkedUFIs │ 0x0000030F / 783 │ -│ 785 │ NtGdiSetMagicColors │ 0x00000310 / 784 │ -│ 786 │ NtGdiSetOPMSigningKeyAndSequenceNumbers │ 0x00000311 / 785 │ -│ 787 │ NtGdiSetPUMPDOBJ │ 0x00000312 / 786 │ -│ 788 │ NtGdiSetPixelFormat │ 0x00000313 / 787 │ -│ 789 │ NtGdiSetRectRgn │ 0x00000314 / 788 │ -│ 790 │ NtGdiSetSizeDevice │ 0x00000315 / 789 │ -│ 791 │ NtGdiSetSystemPaletteUse │ 0x00000316 / 790 │ -│ 792 │ NtGdiSetTextJustification │ 0x00000317 / 791 │ -│ 793 │ NtGdiSetUMPDSandboxState │ 0x00000318 / 792 │ -│ 794 │ NtGdiStartDoc │ 0x00000319 / 793 │ -│ 795 │ NtGdiStartPage │ 0x0000031A / 794 │ -│ 796 │ NtGdiStrokeAndFillPath │ 0x0000031B / 795 │ -│ 797 │ NtGdiStrokePath │ 0x0000031C / 796 │ -│ 798 │ NtGdiSwapBuffers │ 0x0000031D / 797 │ -│ 799 │ NtGdiTransparentBlt │ 0x0000031E / 798 │ -│ 800 │ NtGdiUMPDEngFreeUserMem │ 0x0000031F / 799 │ -│ 801 │ NtGdiUnloadPrinterDriver │ 0x00000320 / 800 │ -│ 802 │ NtGdiUnmapMemFont │ 0x00000321 / 801 │ -│ 803 │ NtGdiUpdateColors │ 0x00000322 / 802 │ -│ 804 │ NtGdiUpdateTransform │ 0x00000323 / 803 │ -│ 805 │ NtGdiWaitForTextReady │ 0x00000324 / 804 │ -│ 806 │ NtGdiWidenPath │ 0x00000325 / 805 │ -│ 807 │ NtGdiXFORMOBJ_bApplyXform │ 0x00000326 / 806 │ -│ 808 │ NtGdiXFORMOBJ_iGetXform │ 0x00000327 / 807 │ -│ 809 │ NtGdiXLATEOBJ_cGetPalette │ 0x00000328 / 808 │ -│ 810 │ NtGdiXLATEOBJ_hGetColorTransform │ 0x00000329 / 809 │ -│ 811 │ NtGdiXLATEOBJ_iXlate │ 0x0000032A / 810 │ -│ 812 │ NtUserGetOwnerTransformedMonitorRect │ 0x0000032B / 811 │ -│ 813 │ NtHWCursorUpdatePointer │ 0x0000032C / 812 │ -│ 814 │ NtInputSpaceRegionFromPoint │ 0x0000032D / 813 │ -│ 815 │ NtIsOneCoreTransformMode │ 0x0000032E / 814 │ -│ 816 │ NtKSTInitialize │ 0x0000032F / 815 │ -│ 817 │ NtKSTWait │ 0x00000330 / 816 │ -│ 818 │ NtMITAccessibilityTimerNotification │ 0x00000331 / 817 │ -│ 819 │ NtMITActivateInputProcessing │ 0x00000332 / 818 │ -│ 820 │ NtMITConfigureVirtualTouchpad │ 0x00000333 / 819 │ -│ 821 │ NtMITCoreMsgKOpenConnectionTo │ 0x00000334 / 820 │ -│ 822 │ NtMITDeactivateInputProcessing │ 0x00000335 / 821 │ -│ 823 │ NtMITDisableMouseIntercept │ 0x00000336 / 822 │ -│ 824 │ NtMITDispatchCompletion │ 0x00000337 / 823 │ -│ 825 │ NtMITEnableMouseIntercept │ 0x00000338 / 824 │ -│ 826 │ NtMITGetCursorUpdateHandle │ 0x00000339 / 825 │ -│ 827 │ NtMITInitMinuserThread │ 0x0000033A / 826 │ -│ 828 │ NtMITMinuserSetInputTransformOffset │ 0x0000033B / 827 │ -│ 829 │ NtMITMinuserWindowDestroyed │ 0x0000033C / 828 │ -│ 830 │ NtMITPostMouseInputMessage │ 0x0000033D / 829 │ -│ 831 │ NtMITPostThreadEventMessage │ 0x0000033E / 830 │ -│ 832 │ NtMITPostWindowEventMessage │ 0x0000033F / 831 │ -│ 833 │ NtMITPrepareReceiveInputMessage │ 0x00000340 / 832 │ -│ 834 │ NtMITPrepareSendInputMessage │ 0x00000341 / 833 │ -│ 835 │ NtMITProcessDelegateCapturedPointers │ 0x00000342 / 834 │ -│ 836 │ NtMITSetInputCallbacks │ 0x00000343 / 835 │ -│ 837 │ NtMITSetInputDelegationMode │ 0x00000344 / 836 │ -│ 838 │ NtMITSetInputObservationState │ 0x00000345 / 837 │ -│ 839 │ NtMITSetKeyboardInputRoutingPolicy │ 0x00000346 / 838 │ -│ 840 │ NtMITSetKeyboardOverriderState │ 0x00000347 / 839 │ -│ 841 │ NtMITSetLastInputRecipient │ 0x00000348 / 840 │ -│ 842 │ NtMITSynthesizeKeyboardInput │ 0x00000349 / 841 │ -│ 843 │ NtMITSynthesizeMouseInput │ 0x0000034A / 842 │ -│ 844 │ NtMITSynthesizeTouchInput │ 0x0000034B / 843 │ -│ 845 │ NtMITUninitMinuserThread │ 0x0000034C / 844 │ -│ 846 │ NtMITUpdateInputGlobals │ 0x0000034D / 845 │ -│ 847 │ NtMapVisualRelativePoints │ 0x0000034E / 846 │ -│ 848 │ NtMinGetInputTransform │ 0x0000034F / 847 │ -│ 849 │ NtMinInteropCoreMessagingWithInput │ 0x00000350 / 848 │ -│ 850 │ NtMinQPeekForInput │ 0x00000351 / 849 │ -│ 851 │ NtMinQSuspendInputProcessing │ 0x00000352 / 850 │ -│ 852 │ NtMinQUpdateWakeMask │ 0x00000353 / 851 │ -│ 853 │ NtModerncoreBeginLayoutUpdate │ 0x00000354 / 852 │ -│ 854 │ NtModerncoreCreateDCompositionHwndTarget │ 0x00000355 / 853 │ -│ 855 │ NtModerncoreCreateGDIHwndTarget │ 0x00000356 / 854 │ -│ 856 │ NtModerncoreDestroyDCompositionHwndTarget │ 0x00000357 / 855 │ -│ 857 │ NtModerncoreDestroyGDIHwndTarget │ 0x00000358 / 856 │ -│ 858 │ NtModerncoreEnableResizeLayoutSynchronization │ 0x00000359 / 857 │ -│ 859 │ NtModerncoreGetNavigationWindowVisual │ 0x0000035A / 858 │ -│ 860 │ NtModerncoreGetResizeDCompositionSynchronizationObject │ 0x0000035B / 859 │ -│ 861 │ NtModerncoreGetWindowContentVisual │ 0x0000035C / 860 │ -│ 862 │ NtModerncoreIdleTimerThread │ 0x0000035D / 861 │ -│ 863 │ NtModerncoreIsResizeLayoutSynchronizationEnabled │ 0x0000035E / 862 │ -│ 864 │ NtModerncoreProcessConnect │ 0x0000035F / 863 │ -│ 865 │ NtModerncoreRegisterEnhancedNavigationWindowHandle │ 0x00000360 / 864 │ -│ 866 │ NtModerncoreRegisterNavigationWindowHandle │ 0x00000361 / 865 │ -│ 867 │ NtModerncoreSetNavigationServiceSid │ 0x00000362 / 866 │ -│ 868 │ NtModerncoreUnregisterNavigationWindowHandle │ 0x00000363 / 867 │ -│ 869 │ NtNotifyPresentToCompositionSurface │ 0x00000364 / 868 │ -│ 870 │ NtOpenCompositionSurfaceDirtyRegion │ 0x00000365 / 869 │ -│ 871 │ NtOpenCompositionSurfaceRealizationInfo │ 0x00000366 / 870 │ -│ 872 │ NtOpenCompositionSurfaceSectionInfo │ 0x00000367 / 871 │ -│ 873 │ NtQueryCompositionInputIsImplicit │ 0x00000368 / 872 │ -│ 874 │ NtQueryCompositionInputQueueAndTransform │ 0x00000369 / 873 │ -│ 875 │ NtQueryCompositionInputSink │ 0x0000036A / 874 │ -│ 876 │ NtQueryCompositionInputSinkLuid │ 0x0000036B / 875 │ -│ 877 │ NtQueryCompositionInputSinkViewId │ 0x0000036C / 876 │ -│ 878 │ NtQueryCompositionSurfaceBinding │ 0x0000036D / 877 │ -│ 879 │ NtQueryCompositionSurfaceFrameRate │ 0x0000036E / 878 │ -│ 880 │ NtQueryCompositionSurfaceHDRMetaData │ 0x0000036F / 879 │ -│ 881 │ NtQueryCompositionSurfaceRenderingRealization │ 0x00000370 / 880 │ -│ 882 │ NtQueryCompositionSurfaceStatistics │ 0x00000371 / 881 │ -│ 883 │ NtRIMAddInputObserver │ 0x00000372 / 882 │ -│ 884 │ NtRIMAreSiblingDevices │ 0x00000373 / 883 │ -│ 885 │ NtRIMDeviceIoControl │ 0x00000374 / 884 │ -│ 886 │ NtRIMEnableMonitorMappingForDevice │ 0x00000375 / 885 │ -│ 887 │ NtRIMFreeInputBuffer │ 0x00000376 / 886 │ -│ 888 │ NtRIMGetDevicePreparsedData │ 0x00000377 / 887 │ -│ 889 │ NtRIMGetDevicePreparsedDataLockfree │ 0x00000378 / 888 │ -│ 890 │ NtRIMGetDeviceProperties │ 0x00000379 / 889 │ -│ 891 │ NtRIMGetDevicePropertiesLockfree │ 0x0000037A / 890 │ -│ 892 │ NtRIMGetPhysicalDeviceRect │ 0x0000037B / 891 │ -│ 893 │ NtRIMGetSourceProcessId │ 0x0000037C / 892 │ -│ 894 │ NtRIMObserveNextInput │ 0x0000037D / 893 │ -│ 895 │ NtRIMOnAsyncPnpWorkNotification │ 0x0000037E / 894 │ -│ 896 │ NtRIMOnPnpNotification │ 0x0000037F / 895 │ -│ 897 │ NtRIMOnTimerNotification │ 0x00000380 / 896 │ -│ 898 │ NtRIMQueryDevicePath │ 0x00000381 / 897 │ -│ 899 │ NtRIMReadInput │ 0x00000382 / 898 │ -│ 900 │ NtRIMRegisterForInputEx │ 0x00000383 / 899 │ -│ 901 │ NtRIMRemoveInputObserver │ 0x00000384 / 900 │ -│ 902 │ NtRIMSetDeadzoneRotation │ 0x00000385 / 901 │ -│ 903 │ NtRIMSetExtendedDeviceProperty │ 0x00000386 / 902 │ -│ 904 │ NtRIMSetTestModeStatus │ 0x00000387 / 903 │ -│ 905 │ NtRIMUnregisterForInput │ 0x00000388 / 904 │ -│ 906 │ NtRIMUpdateInputObserverRegistration │ 0x00000389 / 905 │ -│ 907 │ NtSetCompositionSurfaceAnalogExclusive │ 0x0000038A / 906 │ -│ 908 │ NtSetCompositionSurfaceBufferUsage │ 0x0000038B / 907 │ -│ 909 │ NtSetCompositionSurfaceDirectFlipState │ 0x0000038C / 908 │ -│ 910 │ NtSetCompositionSurfaceIndependentFlipInfo │ 0x0000038D / 909 │ -│ 911 │ NtSetCompositionSurfaceStatistics │ 0x0000038E / 910 │ -│ 912 │ NtSetCursorInputSpace │ 0x0000038F / 911 │ -│ 913 │ NtSetPointerDeviceInputSpace │ 0x00000390 / 912 │ -│ 914 │ NtSetShellCursorState │ 0x00000391 / 913 │ -│ 915 │ NtTokenManagerConfirmOutstandingAnalogToken │ 0x00000392 / 914 │ -│ 916 │ NtTokenManagerCreateCompositionTokenHandle │ 0x00000393 / 915 │ -│ 917 │ NtTokenManagerCreateFlipObjectReturnTokenHandle │ 0x00000394 / 916 │ -│ 918 │ NtTokenManagerCreateFlipObjectTokenHandle │ 0x00000395 / 917 │ -│ 919 │ NtTokenManagerGetAnalogExclusiveSurfaceUpdates │ 0x00000396 / 918 │ -│ 920 │ NtTokenManagerGetAnalogExclusiveTokenEvent │ 0x00000397 / 919 │ -│ 921 │ NtTokenManagerOpenSectionAndEvents │ 0x00000398 / 920 │ -│ 922 │ NtTokenManagerThread │ 0x00000399 / 921 │ -│ 923 │ NtUnBindCompositionSurface │ 0x0000039A / 922 │ -│ 924 │ NtUpdateInputSinkTransforms │ 0x0000039B / 923 │ -│ 925 │ NtUserAcquireIAMKey │ 0x0000039C / 924 │ -│ 926 │ NtUserAcquireInteractiveControlBackgroundAccess │ 0x0000039D / 925 │ -│ 927 │ NtUserAddClipboardFormatListener │ 0x0000039E / 926 │ -│ 928 │ NtUserAddVisualIdentifier │ 0x0000039F / 927 │ -│ 929 │ NtUserAllowSetForegroundWindow │ 0x000003A0 / 928 │ -│ 930 │ NtUserArrangeIconicWindows │ 0x000003A1 / 929 │ -│ 931 │ NtUserAssociateInputContext │ 0x000003A2 / 930 │ -│ 932 │ NtUserAutoPromoteMouseInPointer │ 0x000003A3 / 931 │ -│ 933 │ NtUserAutoRotateScreen │ 0x000003A4 / 932 │ -│ 934 │ NtUserBeginDeferWindowPos │ 0x000003A5 / 933 │ -│ 935 │ NtUserBeginLayoutUpdate │ 0x000003A6 / 934 │ -│ 936 │ NtUserBlockInput │ 0x000003A7 / 935 │ -│ 937 │ NtUserBroadcastImeShowStatusChange │ 0x000003A8 / 936 │ -│ 938 │ NtUserBroadcastThemeChangeEvent │ 0x000003A9 / 937 │ -│ 939 │ NtUserBuildHimcList │ 0x000003AA / 938 │ -│ 940 │ NtUserBuildPropList │ 0x000003AB / 939 │ -│ 941 │ NtUserCalculatePopupWindowPosition │ 0x000003AC / 940 │ -│ 942 │ NtUserCanBrokerForceForeground │ 0x000003AD / 941 │ -│ 943 │ NtUserCancelQueueEventCompletionPacket │ 0x000003AE / 942 │ -│ 944 │ NtUserChangeDisplaySettings │ 0x000003AF / 943 │ -│ 945 │ NtUserChangeWindowMessageFilter │ 0x000003B0 / 944 │ -│ 946 │ NtUserChangeWindowMessageFilterEx │ 0x000003B1 / 945 │ -│ 947 │ NtUserCheckAccessForIntegrityLevel │ 0x000003B2 / 946 │ -│ 948 │ NtUserCheckImeShowStatusInThread │ 0x000003B3 / 947 │ -│ 949 │ NtUserCheckProcessForClipboardAccess │ 0x000003B4 / 948 │ -│ 950 │ NtUserCheckProcessSession │ 0x000003B5 / 949 │ -│ 951 │ NtUserCheckWindowThreadDesktop │ 0x000003B6 / 950 │ -│ 952 │ NtUserChildWindowFromPointEx │ 0x000003B7 / 951 │ -│ 953 │ NtUserCitSetInfo │ 0x000003B8 / 952 │ -│ 954 │ NtUserClearForeground │ 0x000003B9 / 953 │ -│ 955 │ NtUserClearRunWakeBit │ 0x000003BA / 954 │ -│ 956 │ NtUserClearWakeMask │ 0x000003BB / 955 │ -│ 957 │ NtUserClearWindowState │ 0x000003BC / 956 │ -│ 958 │ NtUserClipCursor │ 0x000003BD / 957 │ -│ 959 │ NtUserCompositionInputSinkLuidFromPoint │ 0x000003BE / 958 │ -│ 960 │ NtUserCompositionInputSinkViewInstanceIdFromPoint │ 0x000003BF / 959 │ -│ 961 │ NtUserConfigureActivationObject │ 0x000003C0 / 960 │ -│ 962 │ NtUserConfirmResizeCommit │ 0x000003C1 / 961 │ -│ 963 │ NtUserCreateActivationObject │ 0x000003C2 / 962 │ -│ 964 │ NtUserCreateBaseWindow │ 0x000003C3 / 963 │ -│ 965 │ NtUserCreateDCompositionHwndTarget │ 0x000003C4 / 964 │ -│ 966 │ NtUserCreateDesktopEx │ 0x000003C5 / 965 │ -│ 967 │ NtUserCreateEmptyCursorObject │ 0x000003C6 / 966 │ -│ 968 │ NtUserCreateInputContext │ 0x000003C7 / 967 │ -│ 969 │ NtUserCreateMenu │ 0x000003C8 / 968 │ -│ 970 │ NtUserCreatePalmRejectionDelayZone │ 0x000003C9 / 969 │ -│ 971 │ NtUserCreatePopupMenu │ 0x000003CA / 970 │ -│ 972 │ NtUserCreateSystemThreads │ 0x000003CB / 971 │ -│ 973 │ NtUserCreateWindowStation │ 0x000003CC / 972 │ -│ 974 │ NtUserCsDdeUninitialize │ 0x000003CD / 973 │ -│ 975 │ NtUserCtxDisplayIOCtl │ 0x000003CE / 974 │ -│ 976 │ NtUserDWP_GetEnabledPopupOffset │ 0x000003CF / 975 │ -│ 977 │ NtUserDeferWindowDpiChanges │ 0x000003D0 / 976 │ -│ 978 │ NtUserDeferWindowPosAndBand │ 0x000003D1 / 977 │ -│ 979 │ NtUserDeferredDesktopRotation │ 0x000003D2 / 978 │ -│ 980 │ NtUserDelegateCapturePointers │ 0x000003D3 / 979 │ -│ 981 │ NtUserDelegateInput │ 0x000003D4 / 980 │ -│ 982 │ NtUserDeregisterShellHookWindow │ 0x000003D5 / 981 │ -│ 983 │ NtUserDestroyActivationObject │ 0x000003D6 / 982 │ -│ 984 │ NtUserDestroyCaret │ 0x000003D7 / 983 │ -│ 985 │ NtUserDestroyDCompositionHwndTarget │ 0x000003D8 / 984 │ -│ 986 │ NtUserDestroyInputContext │ 0x000003D9 / 985 │ -│ 987 │ NtUserDestroyPalmRejectionDelayZone │ 0x000003DA / 986 │ -│ 988 │ NtUserDisableImmersiveOwner │ 0x000003DB / 987 │ -│ 989 │ NtUserDisableProcessWindowFiltering │ 0x000003DC / 988 │ -│ 990 │ NtUserDisableProcessWindowsGhosting │ 0x000003DD / 989 │ -│ 991 │ NtUserDisableThreadIme │ 0x000003DE / 990 │ -│ 992 │ NtUserDiscardPointerFrameMessages │ 0x000003DF / 991 │ -│ 993 │ NtUserDisplayConfigGetDeviceInfo │ 0x000003E0 / 992 │ -│ 994 │ NtUserDisplayConfigSetDeviceInfo │ 0x000003E1 / 993 │ -│ 995 │ NtUserDoInitMessagePumpHook │ 0x000003E2 / 994 │ -│ 996 │ NtUserDoSoundConnect │ 0x000003E3 / 995 │ -│ 997 │ NtUserDoSoundDisconnect │ 0x000003E4 / 996 │ -│ 998 │ NtUserDoUninitMessagePumpHook │ 0x000003E5 / 997 │ -│ 999 │ NtUserDownlevelTouchpad │ 0x000003E6 / 998 │ -│ 1000 │ NtUserDragDetect │ 0x000003E7 / 999 │ -│ 1001 │ NtUserDragObject │ 0x000003E8 / 1000 │ -│ 1002 │ NtUserDrainThreadCoreMessagingCompletions │ 0x000003E9 / 1001 │ -│ 1003 │ NtUserDrawAnimatedRects │ 0x000003EA / 1002 │ -│ 1004 │ NtUserDrawCaption │ 0x000003EB / 1003 │ -│ 1005 │ NtUserDrawCaptionTemp │ 0x000003EC / 1004 │ -│ 1006 │ NtUserDrawMenuBar │ 0x000003ED / 1005 │ -│ 1007 │ NtUserDrawMenuBarTemp │ 0x000003EE / 1006 │ -│ 1008 │ NtUserDwmGetRemoteSessionOcclusionEvent │ 0x000003EF / 1007 │ -│ 1009 │ NtUserDwmGetRemoteSessionOcclusionState │ 0x000003F0 / 1008 │ -│ 1010 │ NtUserDwmKernelShutdown │ 0x000003F1 / 1009 │ -│ 1011 │ NtUserDwmKernelStartup │ 0x000003F2 / 1010 │ -│ 1012 │ NtUserDwmLockScreenUpdates │ 0x000003F3 / 1011 │ -│ 1013 │ NtUserDwmValidateWindow │ 0x000003F4 / 1012 │ -│ 1014 │ NtUserEnableChildWindowDpiMessage │ 0x000003F5 / 1013 │ -│ 1015 │ NtUserEnableIAMAccess │ 0x000003F6 / 1014 │ -│ 1016 │ NtUserEnableModernAppWindowKeyboardIntercept │ 0x000003F7 / 1015 │ -│ 1017 │ NtUserEnableMouseInPointer │ 0x000003F8 / 1016 │ -│ 1018 │ NtUserEnableMouseInPointerForThread │ 0x000003F9 / 1017 │ -│ 1019 │ NtUserEnableMouseInPointerForWindow │ 0x000003FA / 1018 │ -│ 1020 │ NtUserEnableMouseInputForCursorSuppression │ 0x000003FB / 1019 │ -│ 1021 │ NtUserEnableNonClientDpiScaling │ 0x000003FC / 1020 │ -│ 1022 │ NtUserEnableResizeLayoutSynchronization │ 0x000003FD / 1021 │ -│ 1023 │ NtUserEnableSessionForMMCSS │ 0x000003FE / 1022 │ -│ 1024 │ NtUserEnableShellWindowManagementBehavior │ 0x000003FF / 1023 │ -│ 1025 │ NtUserEnableSoftwareCursorForScreenCapture │ 0x00000400 / 1024 │ -│ 1026 │ NtUserEnableTouchPad │ 0x00000401 / 1025 │ -│ 1027 │ NtUserEnableWindow │ 0x00000402 / 1026 │ -│ 1028 │ NtUserEnableWindowGDIScaledDpiMessage │ 0x00000403 / 1027 │ -│ 1029 │ NtUserEnableWindowResizeOptimization │ 0x00000404 / 1028 │ -│ 1030 │ NtUserEndMenu │ 0x00000405 / 1029 │ -│ 1031 │ NtUserEnsureDpiDepSysMetCacheForPlateau │ 0x00000406 / 1030 │ -│ 1032 │ NtUserEnumClipboardFormats │ 0x00000407 / 1031 │ -│ 1033 │ NtUserEvent │ 0x00000408 / 1032 │ -│ 1034 │ NtUserFlashWindowEx │ 0x00000409 / 1033 │ -│ 1035 │ NtUserForceEnableNumpadTranslation │ 0x0000040A / 1034 │ -│ 1036 │ NtUserForceWindowToDpiForTest │ 0x0000040B / 1035 │ -│ 1037 │ NtUserFrostCrashedWindow │ 0x0000040C / 1036 │ -│ 1038 │ NtUserSetSensorPresence │ 0x0000040D / 1037 │ -│ 1039 │ NtUserFunctionalizeDisplayConfig │ 0x0000040E / 1038 │ -│ 1040 │ NtUserGetActiveProcessesDpis │ 0x0000040F / 1039 │ -│ 1041 │ NtUserGetAppImeLevel │ 0x00000410 / 1040 │ -│ 1042 │ NtUserGetAutoRotationState │ 0x00000411 / 1041 │ -│ 1043 │ NtUserGetCIMSSM │ 0x00000412 / 1042 │ -│ 1044 │ NtUserGetCaretPos │ 0x00000413 / 1043 │ -│ 1045 │ NtUserGetClassIcoCur │ 0x00000414 / 1044 │ -│ 1046 │ NtUserGetClipCursor │ 0x00000415 / 1045 │ -│ 1047 │ NtUserGetClipboardAccessToken │ 0x00000416 / 1046 │ -│ 1048 │ NtUserGetClipboardMetadata │ 0x00000417 / 1047 │ -│ 1049 │ NtUserGetClipboardViewer │ 0x00000418 / 1048 │ -│ 1050 │ NtUserGetComboBoxInfo │ 0x00000419 / 1049 │ -│ 1051 │ NtUserGetCurrentDpiInfoForWindow │ 0x0000041A / 1050 │ -│ 1052 │ NtUserGetCurrentInputMessageSource │ 0x0000041B / 1051 │ -│ 1053 │ NtUserGetCursor │ 0x0000041C / 1052 │ -│ 1054 │ NtUserGetCursorInfo │ 0x0000041D / 1053 │ -│ 1055 │ NtUserGetCursorPos │ 0x0000041E / 1054 │ -│ 1056 │ NtUserGetDCompositionHwndBitmap │ 0x0000041F / 1055 │ -│ 1057 │ NtUserGetDManipHookInitFunction │ 0x00000420 / 1056 │ -│ 1058 │ NtUserGetDesktopID │ 0x00000421 / 1057 │ -│ 1059 │ NtUserGetDesktopVisualTransform │ 0x00000422 / 1058 │ -│ 1060 │ NtUserGetDeviceChangeInfo │ 0x00000423 / 1059 │ -│ 1061 │ NtUserGetDisplayAutoRotationPreferences │ 0x00000424 / 1060 │ -│ 1062 │ NtUserGetDisplayAutoRotationPreferencesByProcessId │ 0x00000425 / 1061 │ -│ 1063 │ NtUserGetDisplayConfigBufferSizes │ 0x00000426 / 1062 │ -│ 1064 │ NtUserGetDpiForCurrentProcess │ 0x00000427 / 1063 │ -│ 1065 │ NtUserGetDpiForMonitor │ 0x00000428 / 1064 │ -│ 1066 │ NtUserGetExtendedPointerDeviceProperty │ 0x00000429 / 1065 │ -│ 1067 │ NtUserGetGestureConfig │ 0x0000042A / 1066 │ -│ 1068 │ NtUserGetGestureExtArgs │ 0x0000042B / 1067 │ -│ 1069 │ NtUserGetGestureInfo │ 0x0000042C / 1068 │ -│ 1070 │ NtUserGetGuiResources │ 0x0000042D / 1069 │ -│ 1071 │ NtUserGetHDevName │ 0x0000042E / 1070 │ -│ 1072 │ NtUserGetHimetricScaleFactorFromPixelLocation │ 0x0000042F / 1071 │ -│ 1073 │ NtUserGetIMEShowStatus │ 0x00000430 / 1072 │ -│ 1074 │ NtUserGetImeHotKey │ 0x00000431 / 1073 │ -│ 1075 │ NtUserGetImeInfoEx │ 0x00000432 / 1074 │ -│ 1076 │ NtUserGetInputContainerId │ 0x00000433 / 1075 │ -│ 1077 │ NtUserGetInputDesktop │ 0x00000434 / 1076 │ -│ 1078 │ NtUserGetInputEvent │ 0x00000435 / 1077 │ -│ 1079 │ NtUserGetInputLocaleInfo │ 0x00000436 / 1078 │ -│ 1080 │ NtUserGetInteractiveControlDeviceInfo │ 0x00000437 / 1079 │ -│ 1081 │ NtUserGetInteractiveControlInfo │ 0x00000438 / 1080 │ -│ 1082 │ NtUserGetInteractiveCtrlSupportedWaveforms │ 0x00000439 / 1081 │ -│ 1083 │ NtUserGetInternalWindowPos │ 0x0000043A / 1082 │ -│ 1084 │ NtUserGetKeyNameText │ 0x0000043B / 1083 │ -│ 1085 │ NtUserGetKeyboardLayout │ 0x0000043C / 1084 │ -│ 1086 │ NtUserGetKeyboardLayoutName │ 0x0000043D / 1085 │ -│ 1087 │ NtUserGetKeyboardType │ 0x0000043E / 1086 │ -│ 1088 │ NtUserGetLayeredWindowAttributes │ 0x0000043F / 1087 │ -│ 1089 │ NtUserGetListBoxInfo │ 0x00000440 / 1088 │ -│ 1090 │ NtUserGetMenuIndex │ 0x00000441 / 1089 │ -│ 1091 │ NtUserGetMenuItemRect │ 0x00000442 / 1090 │ -│ 1092 │ NtUserGetMessagePos │ 0x00000443 / 1091 │ -│ 1093 │ NtUserGetMinuserIdForBaseWindow │ 0x00000444 / 1092 │ -│ 1094 │ NtUserGetModernAppWindow │ 0x00000445 / 1093 │ -│ 1095 │ NtUserGetMouseMovePointsEx │ 0x00000446 / 1094 │ -│ 1096 │ NtUserGetOemBitmapSize │ 0x00000447 / 1095 │ -│ 1097 │ NtUserGetPhysicalDeviceRect │ 0x00000448 / 1096 │ -│ 1098 │ NtUserGetPointerCursorId │ 0x00000449 / 1097 │ -│ 1099 │ NtUserGetPointerDevice │ 0x0000044A / 1098 │ -│ 1100 │ NtUserGetPointerDeviceCursors │ 0x0000044B / 1099 │ -│ 1101 │ NtUserGetPointerDeviceInputSpace │ 0x0000044C / 1100 │ -│ 1102 │ NtUserGetPointerDeviceOrientation │ 0x0000044D / 1101 │ -│ 1103 │ NtUserGetPointerDeviceProperties │ 0x0000044E / 1102 │ -│ 1104 │ NtUserGetPointerDeviceRects │ 0x0000044F / 1103 │ -│ 1105 │ NtUserGetPointerDevices │ 0x00000450 / 1104 │ -│ 1106 │ NtUserGetPointerFrameTimes │ 0x00000451 / 1105 │ -│ 1107 │ NtUserGetPointerInfoList │ 0x00000452 / 1106 │ -│ 1108 │ NtUserGetPointerInputTransform │ 0x00000453 / 1107 │ -│ 1109 │ NtUserGetPointerProprietaryId │ 0x00000454 / 1108 │ -│ 1110 │ NtUserGetPointerType │ 0x00000455 / 1109 │ -│ 1111 │ NtUserGetPrecisionTouchPadConfiguration │ 0x00000456 / 1110 │ -│ 1112 │ NtUserGetPriorityClipboardFormat │ 0x00000457 / 1111 │ -│ 1113 │ NtUserGetProcessDefaultLayout │ 0x00000458 / 1112 │ -│ 1114 │ NtUserGetProcessDpiAwarenessContext │ 0x00000459 / 1113 │ -│ 1115 │ NtUserGetProcessUIContextInformation │ 0x0000045A / 1114 │ -│ 1116 │ NtUserGetQueueIocp │ 0x0000045B / 1115 │ -│ 1117 │ NtUserGetQueueStatus │ 0x0000045C / 1116 │ -│ 1118 │ NtUserGetQueueStatusReadonly │ 0x0000045D / 1117 │ -│ 1119 │ NtUserGetRawInputBuffer │ 0x0000045E / 1118 │ -│ 1120 │ NtUserGetRawInputData │ 0x0000045F / 1119 │ -│ 1121 │ NtUserGetRawInputDeviceInfo │ 0x00000460 / 1120 │ -│ 1122 │ NtUserGetRawInputDeviceList │ 0x00000461 / 1121 │ -│ 1123 │ NtUserGetRawPointerDeviceData │ 0x00000462 / 1122 │ -│ 1124 │ NtUserGetRegisteredRawInputDevices │ 0x00000463 / 1123 │ -│ 1125 │ NtUserGetRequiredCursorSizes │ 0x00000464 / 1124 │ -│ 1126 │ NtUserGetResizeDCompositionSynchronizationObject │ 0x00000465 / 1125 │ -│ 1127 │ NtUserGetSendMessageReceiver │ 0x00000466 / 1126 │ -│ 1128 │ NtUserGetSharedWindowData │ 0x00000467 / 1127 │ -│ 1129 │ NtUserGetSysMenuOffset │ 0x00000468 / 1128 │ -│ 1130 │ NtUserGetSystemContentRects │ 0x00000469 / 1129 │ -│ 1131 │ NtUserGetSystemDpiForProcess │ 0x0000046A / 1130 │ -│ 1132 │ NtUserGetTopLevelWindow │ 0x0000046B / 1131 │ -│ 1133 │ NtUserGetTouchInputInfo │ 0x0000046C / 1132 │ -│ 1134 │ NtUserGetTouchValidationStatus │ 0x0000046D / 1133 │ -│ 1135 │ NtUserGetUniformSpaceMapping │ 0x0000046E / 1134 │ -│ 1136 │ NtUserGetUnpredictedMessagePos │ 0x0000046F / 1135 │ -│ 1137 │ NtUserGetUpdatedClipboardFormats │ 0x00000470 / 1136 │ -│ 1138 │ NtUserGetWOWClass │ 0x00000471 / 1137 │ -│ 1139 │ NtUserGetWinStationInfo │ 0x00000472 / 1138 │ -│ 1140 │ NtUserGetWindowBand │ 0x00000473 / 1139 │ -│ 1141 │ NtUserGetWindowCompositionAttribute │ 0x00000474 / 1140 │ -│ 1142 │ NtUserGetWindowCompositionInfo │ 0x00000475 / 1141 │ -│ 1143 │ NtUserGetWindowContextHelpId │ 0x00000476 / 1142 │ -│ 1144 │ NtUserGetWindowDisplayAffinity │ 0x00000477 / 1143 │ -│ 1145 │ NtUserGetWindowFeedbackSetting │ 0x00000478 / 1144 │ -│ 1146 │ NtUserGetWindowMinimizeRect │ 0x00000479 / 1145 │ -│ 1147 │ NtUserGetWindowProcessHandle │ 0x0000047A / 1146 │ -│ 1148 │ NtUserGetWindowRgnEx │ 0x0000047B / 1147 │ -│ 1149 │ NtUserGetWindowThreadProcessId │ 0x0000047C / 1148 │ -│ 1150 │ NtUserGetWindowTrackInfoAsync │ 0x0000047D / 1149 │ -│ 1151 │ NtUserGhostWindowFromHungWindow │ 0x0000047E / 1150 │ -│ 1152 │ NtUserHandleDelegatedInput │ 0x0000047F / 1151 │ -│ 1153 │ NtUserHandleSystemThreadCreationFailure │ 0x00000480 / 1152 │ -│ 1154 │ NtUserHardErrorControl │ 0x00000481 / 1153 │ -│ 1155 │ NtUserHideCursorNoCapture │ 0x00000482 / 1154 │ -│ 1156 │ NtUserHidePointerContactVisualization │ 0x00000483 / 1155 │ -│ 1157 │ NtUserHiliteMenuItem │ 0x00000484 / 1156 │ -│ 1158 │ NtUserHungWindowFromGhostWindow │ 0x00000485 / 1157 │ -│ 1159 │ NtUserHwndQueryRedirectionInfo │ 0x00000486 / 1158 │ -│ 1160 │ NtUserHwndSetRedirectionInfo │ 0x00000487 / 1159 │ -│ 1161 │ NtUserImpersonateDdeClientWindow │ 0x00000488 / 1160 │ -│ 1162 │ NtUserInheritWindowMonitor │ 0x00000489 / 1161 │ -│ 1163 │ NtUserInitAnsiOem │ 0x0000048A / 1162 │ -│ 1164 │ NtUserInitRunThread │ 0x0000048B / 1163 │ -│ 1165 │ NtUserInitThreadCoreMessagingIocp │ 0x0000048C / 1164 │ -│ 1166 │ NtUserInitialize │ 0x0000048D / 1165 │ -│ 1167 │ NtUserInitializeClientPfnArrays │ 0x0000048E / 1166 │ -│ 1168 │ NtUserInitializeGenericHidInjection │ 0x0000048F / 1167 │ -│ 1169 │ NtUserInitializeInputDeviceInjection │ 0x00000490 / 1168 │ -│ 1170 │ NtUserInitializePointerDeviceInjection │ 0x00000491 / 1169 │ -│ 1171 │ NtUserInitializePointerDeviceInjectionEx │ 0x00000492 / 1170 │ -│ 1172 │ NtUserInitializeTouchInjection │ 0x00000493 / 1171 │ -│ 1173 │ NtUserInjectDeviceInput │ 0x00000494 / 1172 │ -│ 1174 │ NtUserInjectGenericHidInput │ 0x00000495 / 1173 │ -│ 1175 │ NtUserInjectGesture │ 0x00000496 / 1174 │ -│ 1176 │ NtUserInjectKeyboardInput │ 0x00000497 / 1175 │ -│ 1177 │ NtUserInjectMouseInput │ 0x00000498 / 1176 │ -│ 1178 │ NtUserInjectPointerInput │ 0x00000499 / 1177 │ -│ 1179 │ NtUserInjectTouchInput │ 0x0000049A / 1178 │ -│ 1180 │ NtUserInteractiveControlQueryUsage │ 0x0000049B / 1179 │ -│ 1181 │ NtUserInternalGetWindowIcon │ 0x0000049C / 1180 │ -│ 1182 │ NtUserInternalToUnicode │ 0x0000049D / 1181 │ -│ 1183 │ NtUserIsChildWindowDpiMessageEnabled │ 0x0000049E / 1182 │ -│ 1184 │ NtUserIsMouseInPointerEnabled │ 0x0000049F / 1183 │ -│ 1185 │ NtUserIsMouseInputEnabled │ 0x000004A0 / 1184 │ -│ 1186 │ NtUserIsNonClientDpiScalingEnabled │ 0x000004A1 / 1185 │ -│ 1187 │ NtUserIsResizeLayoutSynchronizationEnabled │ 0x000004A2 / 1186 │ -│ 1188 │ NtUserIsTopLevelWindow │ 0x000004A3 / 1187 │ -│ 1189 │ NtUserIsTouchWindow │ 0x000004A4 / 1188 │ -│ 1190 │ NtUserIsWindowBroadcastingDpiToChildren │ 0x000004A5 / 1189 │ -│ 1191 │ NtUserIsWindowGDIScaledDpiMessageEnabled │ 0x000004A6 / 1190 │ -│ 1192 │ NtUserKillSystemTimer │ 0x000004A7 / 1191 │ -│ 1193 │ NtUserLW_LoadFonts │ 0x000004A8 / 1192 │ -│ 1194 │ NtUserLayoutCompleted │ 0x000004A9 / 1193 │ -│ 1195 │ NtUserLinkDpiCursor │ 0x000004AA / 1194 │ -│ 1196 │ NtUserLoadCursorsAndIcons │ 0x000004AB / 1195 │ -│ 1197 │ NtUserLoadKeyboardLayoutEx │ 0x000004AC / 1196 │ -│ 1198 │ NtUserLoadUserApiHook │ 0x000004AD / 1197 │ -│ 1199 │ NtUserLockCursor │ 0x000004AE / 1198 │ -│ 1200 │ NtUserLockSetForegroundWindow │ 0x000004AF / 1199 │ -│ 1201 │ NtUserLockWindowStation │ 0x000004B0 / 1200 │ -│ 1202 │ NtUserLockWorkStation │ 0x000004B1 / 1201 │ -│ 1203 │ NtUserLogicalToPerMonitorDPIPhysicalPoint │ 0x000004B2 / 1202 │ -│ 1204 │ NtUserLogicalToPhysicalDpiPointForWindow │ 0x000004B3 / 1203 │ -│ 1205 │ NtUserLogicalToPhysicalPoint │ 0x000004B4 / 1204 │ -│ 1206 │ NtUserMNDragLeave │ 0x000004B5 / 1205 │ -│ 1207 │ NtUserMNDragOver │ 0x000004B6 / 1206 │ -│ 1208 │ NtUserMagControl │ 0x000004B7 / 1207 │ -│ 1209 │ NtUserMagGetContextInformation │ 0x000004B8 / 1208 │ -│ 1210 │ NtUserMagSetContextInformation │ 0x000004B9 / 1209 │ -│ 1211 │ NtUserMapDesktopObject │ 0x000004BA / 1210 │ -│ 1212 │ NtUserMapPointsByVisualIdentifier │ 0x000004BB / 1211 │ -│ 1213 │ NtUserMarkWindowForRawMouse │ 0x000004BC / 1212 │ -│ 1214 │ NtUserMenuItemFromPoint │ 0x000004BD / 1213 │ -│ 1215 │ NtUserMessageBeep │ 0x000004BE / 1214 │ -│ 1216 │ NtUserMinInitialize │ 0x000004BF / 1215 │ -│ 1217 │ NtUserMinMaximize │ 0x000004C0 / 1216 │ -│ 1218 │ NtUserModifyWindowTouchCapability │ 0x000004C1 / 1217 │ -│ 1219 │ NtUserMsgWaitForMultipleObjectsEx │ 0x000004C2 / 1218 │ -│ 1220 │ NtUserNavigateFocus │ 0x000004C3 / 1219 │ -│ 1221 │ NtUserNlsKbdSendIMENotification │ 0x000004C4 / 1220 │ -│ 1222 │ NtUserNotifyIMEStatus │ 0x000004C5 / 1221 │ -│ 1223 │ NtUserNotifyOverlayWindow │ 0x000004C6 / 1222 │ -│ 1224 │ NtUserOpenInputDesktop │ 0x000004C7 / 1223 │ -│ 1225 │ NtUserOpenThreadDesktop │ 0x000004C8 / 1224 │ -│ 1226 │ NtUserPaintMonitor │ 0x000004C9 / 1225 │ -│ 1227 │ NtUserPerMonitorDPIPhysicalToLogicalPoint │ 0x000004CA / 1226 │ -│ 1228 │ NtUserPhysicalToLogicalDpiPointForWindow │ 0x000004CB / 1227 │ -│ 1229 │ NtUserPhysicalToLogicalPoint │ 0x000004CC / 1228 │ -│ 1230 │ NtUserPlayEventSound │ 0x000004CD / 1229 │ -│ 1231 │ NtUserPostKeyboardInputMessage │ 0x000004CE / 1230 │ -│ 1232 │ NtUserPostQuitMessage │ 0x000004CF / 1231 │ -│ 1233 │ NtUserPrepareForLogoff │ 0x000004D0 / 1232 │ -│ 1234 │ NtUserPrintWindow │ 0x000004D1 / 1233 │ -│ 1235 │ NtUserProcessInkFeedbackCommand │ 0x000004D2 / 1234 │ -│ 1236 │ NtUserPromoteMouseInPointer │ 0x000004D3 / 1235 │ -│ 1237 │ NtUserPromotePointer │ 0x000004D4 / 1236 │ -│ 1238 │ NtUserQueryBSDRWindow │ 0x000004D5 / 1237 │ -│ 1239 │ NtUserQueryDisplayConfig │ 0x000004D6 / 1238 │ -│ 1240 │ NtUserQueryInformationThread │ 0x000004D7 / 1239 │ -│ 1241 │ NtUserQueryInputContext │ 0x000004D8 / 1240 │ -│ 1242 │ NtUserQuerySendMessage │ 0x000004D9 / 1241 │ -│ 1243 │ NtUserRealChildWindowFromPoint │ 0x000004DA / 1242 │ -│ 1244 │ NtUserRealWaitMessageEx │ 0x000004DB / 1243 │ -│ 1245 │ NtUserRealizePalette │ 0x000004DC / 1244 │ -│ 1246 │ NtUserReassociateQueueEventCompletionPacket │ 0x000004DD / 1245 │ -│ 1247 │ NtUserRedrawFrame │ 0x000004DE / 1246 │ -│ 1248 │ NtUserRedrawFrameAndHook │ 0x000004DF / 1247 │ -│ 1249 │ NtUserRedrawTitle │ 0x000004E0 / 1248 │ -│ 1250 │ NtUserRegisterBSDRWindow │ 0x000004E1 / 1249 │ -│ 1251 │ NtUserRegisterDManipHook │ 0x000004E2 / 1250 │ -│ 1252 │ NtUserRegisterEdgy │ 0x000004E3 / 1251 │ -│ 1253 │ NtUserRegisterErrorReportingDialog │ 0x000004E4 / 1252 │ -│ 1254 │ NtUserRegisterForCustomDockTargets │ 0x000004E5 / 1253 │ -│ 1255 │ NtUserRegisterForTooltipDismissNotification │ 0x000004E6 / 1254 │ -│ 1256 │ NtUserRegisterGhostWindow │ 0x000004E7 / 1255 │ -│ 1257 │ NtUserRegisterHotKey │ 0x000004E8 / 1256 │ -│ 1258 │ NtUserRegisterLPK │ 0x000004E9 / 1257 │ -│ 1259 │ NtUserRegisterLogonProcess │ 0x000004EA / 1258 │ -│ 1260 │ NtUserRegisterManipulationThread │ 0x000004EB / 1259 │ -│ 1261 │ NtUserRegisterPointerDeviceNotifications │ 0x000004EC / 1260 │ -│ 1262 │ NtUserRegisterPointerInputTarget │ 0x000004ED / 1261 │ -│ 1263 │ NtUserRegisterRawInputDevices │ 0x000004EE / 1262 │ -│ 1264 │ NtUserRegisterServicesProcess │ 0x000004EF / 1263 │ -│ 1265 │ NtUserRegisterSessionPort │ 0x000004F0 / 1264 │ -│ 1266 │ NtUserRegisterShellHookWindow │ 0x000004F1 / 1265 │ -│ 1267 │ NtUserRegisterShellPTPListener │ 0x000004F2 / 1266 │ -│ 1268 │ NtUserRegisterSiblingFrostWindow │ 0x000004F3 / 1267 │ -│ 1269 │ NtUserRegisterSystemThread │ 0x000004F4 / 1268 │ -│ 1270 │ NtUserRegisterTasklist │ 0x000004F5 / 1269 │ -│ 1271 │ NtUserRegisterTouchHitTestingWindow │ 0x000004F6 / 1270 │ -│ 1272 │ NtUserRegisterTouchPadCapable │ 0x000004F7 / 1271 │ -│ 1273 │ NtUserRegisterUserApiHook │ 0x000004F8 / 1272 │ -│ 1274 │ NtUserRegisterWindowArrangementCallout │ 0x000004F9 / 1273 │ -│ 1275 │ NtUserReleaseCapture │ 0x000004FA / 1274 │ -│ 1276 │ NtUserReleaseDC │ 0x000004FB / 1275 │ -│ 1277 │ NtUserReleaseDwmHitTestWaiters │ 0x000004FC / 1276 │ -│ 1278 │ NtUserRemoteConnect │ 0x000004FD / 1277 │ -│ 1279 │ NtUserRemoteConnectState │ 0x000004FE / 1278 │ -│ 1280 │ NtUserRemoteConsoleShadowStop │ 0x000004FF / 1279 │ -│ 1281 │ NtUserRemoteDisconnect │ 0x00000500 / 1280 │ -│ 1282 │ NtUserRemoteNotify │ 0x00000501 / 1281 │ -│ 1283 │ NtUserRemotePassthruDisable │ 0x00000502 / 1282 │ -│ 1284 │ NtUserRemotePassthruEnable │ 0x00000503 / 1283 │ -│ 1285 │ NtUserRemoteReconnect │ 0x00000504 / 1284 │ -│ 1286 │ NtUserRemoteRedrawRectangle │ 0x00000505 / 1285 │ -│ 1287 │ NtUserRemoteRedrawScreen │ 0x00000506 / 1286 │ -│ 1288 │ NtUserRemoteShadowCleanup │ 0x00000507 / 1287 │ -│ 1289 │ NtUserRemoteShadowSetup │ 0x00000508 / 1288 │ -│ 1290 │ NtUserRemoteShadowStart │ 0x00000509 / 1289 │ -│ 1291 │ NtUserRemoteShadowStop │ 0x0000050A / 1290 │ -│ 1292 │ NtUserRemoteStopScreenUpdates │ 0x0000050B / 1291 │ -│ 1293 │ NtUserRemoteThinwireStats │ 0x0000050C / 1292 │ -│ 1294 │ NtUserRemoveClipboardFormatListener │ 0x0000050D / 1293 │ -│ 1295 │ NtUserRemoveInjectionDevice │ 0x0000050E / 1294 │ -│ 1296 │ NtUserRemoveQueueCompletion │ 0x0000050F / 1295 │ -│ 1297 │ NtUserRemoveVisualIdentifier │ 0x00000510 / 1296 │ -│ 1298 │ NtUserReplyMessage │ 0x00000511 / 1297 │ -│ 1299 │ NtUserReportInertia │ 0x00000512 / 1298 │ -│ 1300 │ NtUserResetDblClk │ 0x00000513 / 1299 │ -│ 1301 │ NtUserResolveDesktopForWOW │ 0x00000514 / 1300 │ -│ 1302 │ NtUserRestoreWindowDpiChanges │ 0x00000515 / 1301 │ -│ 1303 │ NtUserScaleSystemMetricForDPIWithoutCache │ 0x00000516 / 1302 │ -│ 1304 │ NtUserScheduleDispatchNotification │ 0x00000517 / 1303 │ -│ 1305 │ NtUserSendEventMessage │ 0x00000518 / 1304 │ -│ 1306 │ NtUserSendInteractiveControlHapticsReport │ 0x00000519 / 1305 │ -│ 1307 │ NtUserSetActivationFilter │ 0x0000051A / 1306 │ -│ 1308 │ NtUserSetActiveProcessForMonitor │ 0x0000051B / 1307 │ -│ 1309 │ NtUserSetAdditionalForegroundBoostProcesses │ 0x0000051C / 1308 │ -│ 1310 │ NtUserSetAppImeLevel │ 0x0000051D / 1309 │ -│ 1311 │ NtUserSetAutoRotation │ 0x0000051E / 1310 │ -│ 1312 │ NtUserSetBridgeWindowChild │ 0x0000051F / 1311 │ -│ 1313 │ NtUserSetBrokeredForeground │ 0x00000520 / 1312 │ -│ 1314 │ NtUserSetCalibrationData │ 0x00000521 / 1313 │ -│ 1315 │ NtUserSetCancelRotationDelayHintWindow │ 0x00000522 / 1314 │ -│ 1316 │ NtUserSetCaretBlinkTime │ 0x00000523 / 1315 │ -│ 1317 │ NtUserSetCaretPos │ 0x00000524 / 1316 │ -│ 1318 │ NtUserSetChildWindowNoActivate │ 0x00000525 / 1317 │ -│ 1319 │ NtUserSetClassWord │ 0x00000526 / 1318 │ -│ 1320 │ NtUserSetCoreWindow │ 0x00000527 / 1319 │ -│ 1321 │ NtUserSetCoreWindowPartner │ 0x00000528 / 1320 │ -│ 1322 │ NtUserSetCursorIconDataEx │ 0x00000529 / 1321 │ -│ 1323 │ NtUserSetCursorPos │ 0x0000052A / 1322 │ -│ 1324 │ NtUserSetDesktopColorTransform │ 0x0000052B / 1323 │ -│ 1325 │ NtUserSetDesktopVisualInputSink │ 0x0000052C / 1324 │ -│ 1326 │ NtUserSetDialogControlDpiChangeBehavior │ 0x0000052D / 1325 │ -│ 1327 │ NtUserSetDialogPointer │ 0x0000052E / 1326 │ -│ 1328 │ NtUserSetDialogSystemMenu │ 0x0000052F / 1327 │ -│ 1329 │ NtUserSetDisplayAutoRotationPreferences │ 0x00000530 / 1328 │ -│ 1330 │ NtUserSetDisplayConfig │ 0x00000531 / 1329 │ -│ 1331 │ NtUserSetDisplayMapping │ 0x00000532 / 1330 │ -│ 1332 │ NtUserSetDoubleClickTime │ 0x00000533 / 1331 │ -│ 1333 │ NtUserSetDpiForWindow │ 0x00000534 / 1332 │ -│ 1334 │ NtUserSetFallbackForeground │ 0x00000535 / 1333 │ -│ 1335 │ NtUserSetFeatureReportResponse │ 0x00000536 / 1334 │ -│ 1336 │ NtUserSetForegroundRedirectionForActivationObject │ 0x00000537 / 1335 │ -│ 1337 │ NtUserSetForegroundWindow │ 0x00000538 / 1336 │ -│ 1338 │ NtUserSetForegroundWindowForApplication │ 0x00000539 / 1337 │ -│ 1339 │ NtUserSetFullscreenMagnifierOffsetsDWMUpdated │ 0x0000053A / 1338 │ -│ 1340 │ NtUserSetGestureConfig │ 0x0000053B / 1339 │ -│ 1341 │ NtUserSetImeHotKey │ 0x0000053C / 1340 │ -│ 1342 │ NtUserSetImeInfoEx │ 0x0000053D / 1341 │ -│ 1343 │ NtUserSetImeOwnerWindow │ 0x0000053E / 1342 │ -│ 1344 │ NtUserSetInputServiceState │ 0x0000053F / 1343 │ -│ 1345 │ NtUserSetInteractiveControlFocus │ 0x00000540 / 1344 │ -│ 1346 │ NtUserSetInteractiveCtrlRotationAngle │ 0x00000541 / 1345 │ -│ 1347 │ NtUserSetInternalWindowPos │ 0x00000542 / 1346 │ -│ 1348 │ NtUserSetLayeredWindowAttributes │ 0x00000543 / 1347 │ -│ 1349 │ NtUserSetMagnificationDesktopMagnifierOffsetsDWMUpdated │ 0x00000544 / 1348 │ -│ 1350 │ NtUserSetManipulationInputTarget │ 0x00000545 / 1349 │ -│ 1351 │ NtUserSetMenu │ 0x00000546 / 1350 │ -│ 1352 │ NtUserSetMenuContextHelpId │ 0x00000547 / 1351 │ -│ 1353 │ NtUserSetMenuFlagRtoL │ 0x00000548 / 1352 │ -│ 1354 │ NtUserSetMessageExtraInfo │ 0x00000549 / 1353 │ -│ 1355 │ NtUserSetMirrorRendering │ 0x0000054A / 1354 │ -│ 1356 │ NtUserSetModernAppWindow │ 0x0000054B / 1355 │ -│ 1357 │ NtUserSetMonitorWorkArea │ 0x0000054C / 1356 │ -│ 1358 │ NtUserSetMouseInputRateLimitingTimer │ 0x0000054D / 1357 │ -│ 1359 │ NtUserSetMsgBox │ 0x0000054E / 1358 │ -│ 1360 │ NtUserSetObjectInformation │ 0x0000054F / 1359 │ -│ 1361 │ NtUserSetPrecisionTouchPadConfiguration │ 0x00000550 / 1360 │ -│ 1362 │ NtUserSetProcessDefaultLayout │ 0x00000551 / 1361 │ -│ 1363 │ NtUserSetProcessDpiAwarenessContext │ 0x00000552 / 1362 │ -│ 1364 │ NtUserSetProcessInteractionFlags │ 0x00000553 / 1363 │ -│ 1365 │ NtUserSetProcessLaunchForegroundPolicy │ 0x00000554 / 1364 │ -│ 1366 │ NtUserSetProcessMousewheelRoutingMode │ 0x00000555 / 1365 │ -│ 1367 │ NtUserSetProcessRestrictionExemption │ 0x00000556 / 1366 │ -│ 1368 │ NtUserSetProcessUIAccessZorder │ 0x00000557 / 1367 │ -│ 1369 │ NtUserSetProgmanWindow │ 0x00000558 / 1368 │ -│ 1370 │ NtUserSetSharedWindowData │ 0x00000559 / 1369 │ -│ 1371 │ NtUserSetShellChangeNotifyHWND │ 0x0000055A / 1370 │ -│ 1372 │ NtUserSetShellWindowEx │ 0x0000055B / 1371 │ -│ 1373 │ NtUserSetSysColors │ 0x0000055C / 1372 │ -│ 1374 │ NtUserSetSysMenu │ 0x0000055D / 1373 │ -│ 1375 │ NtUserSetSystemContentRects │ 0x0000055E / 1374 │ -│ 1376 │ NtUserSetSystemCursor │ 0x0000055F / 1375 │ -│ 1377 │ NtUserSetSystemTimer │ 0x00000560 / 1376 │ -│ 1378 │ NtUserSetTSFEventState │ 0x00000561 / 1377 │ -│ 1379 │ NtUserSetTargetForResourceBrokering │ 0x00000562 / 1378 │ -│ 1380 │ NtUserSetTaskmanWindow │ 0x00000563 / 1379 │ -│ 1381 │ NtUserSetThreadInputBlocked │ 0x00000564 / 1380 │ -│ 1382 │ NtUserSetThreadLayoutHandles │ 0x00000565 / 1381 │ -│ 1383 │ NtUserSetThreadQueueMergeSetting │ 0x00000566 / 1382 │ -│ 1384 │ NtUserSetVisible │ 0x00000567 / 1383 │ -│ 1385 │ NtUserSetWaitForQueueAttach │ 0x00000568 / 1384 │ -│ 1386 │ NtUserSetWatermarkStrings │ 0x00000569 / 1385 │ -│ 1387 │ NtUserSetWindowBand │ 0x0000056A / 1386 │ -│ 1388 │ NtUserSetWindowCompositionAttribute │ 0x0000056B / 1387 │ -│ 1389 │ NtUserSetWindowCompositionTransition │ 0x0000056C / 1388 │ -│ 1390 │ NtUserSetWindowContextHelpId │ 0x0000056D / 1389 │ -│ 1391 │ NtUserSetWindowDisplayAffinity │ 0x0000056E / 1390 │ -│ 1392 │ NtUserSetWindowFeedbackSetting │ 0x0000056F / 1391 │ -│ 1393 │ NtUserSetWindowRgnEx │ 0x00000570 / 1392 │ -│ 1394 │ NtUserSetWindowShowState │ 0x00000571 / 1393 │ -│ 1395 │ NtUserSetWindowState │ 0x00000572 / 1394 │ -│ 1396 │ NtUserSetWindowStationUser │ 0x00000573 / 1395 │ -│ 1397 │ NtUserShellMigrateWindow │ 0x00000574 / 1396 │ -│ 1398 │ NtUserShellRegisterHotKey │ 0x00000575 / 1397 │ -│ 1399 │ NtUserShellSetWindowPos │ 0x00000576 / 1398 │ -│ 1400 │ NtUserShowCursor │ 0x00000577 / 1399 │ -│ 1401 │ NtUserShowOwnedPopups │ 0x00000578 / 1400 │ -│ 1402 │ NtUserShowStartGlass │ 0x00000579 / 1401 │ -│ 1403 │ NtUserShowSystemCursor │ 0x0000057A / 1402 │ -│ 1404 │ NtUserShutdownBlockReasonCreate │ 0x0000057B / 1403 │ -│ 1405 │ NtUserShutdownBlockReasonQuery │ 0x0000057C / 1404 │ -│ 1406 │ NtUserShutdownReasonDestroy │ 0x0000057D / 1405 │ -│ 1407 │ NtUserSignalRedirectionStartComplete │ 0x0000057E / 1406 │ -│ 1408 │ NtUserSlicerControl │ 0x0000057F / 1407 │ -│ 1409 │ NtUserSoundSentry │ 0x00000580 / 1408 │ -│ 1410 │ NtUserStopAndEndInertia │ 0x00000581 / 1409 │ -│ 1411 │ NtUserSwapMouseButton │ 0x00000582 / 1410 │ -│ 1412 │ NtUserSwitchDesktop │ 0x00000583 / 1411 │ -│ 1413 │ NtUserSwitchToThisWindow │ 0x00000584 / 1412 │ -│ 1414 │ NtUserSystemParametersInfoForDpi │ 0x00000585 / 1413 │ -│ 1415 │ NtUserTestForInteractiveUser │ 0x00000586 / 1414 │ -│ 1416 │ NtUserThreadMessageQueueAttached │ 0x00000587 / 1415 │ -│ 1417 │ NtUserTraceLoggingSendMixedModeTelemetry │ 0x00000588 / 1416 │ -│ 1418 │ NtUserTrackPopupMenuEx │ 0x00000589 / 1417 │ -│ 1419 │ NtUserTransformPoint │ 0x0000058A / 1418 │ -│ 1420 │ NtUserTransformRect │ 0x0000058B / 1419 │ -│ 1421 │ NtUserUndelegateInput │ 0x0000058C / 1420 │ -│ 1422 │ NtUserUnhookWindowsHook │ 0x0000058D / 1421 │ -│ 1423 │ NtUserUnloadKeyboardLayout │ 0x0000058E / 1422 │ -│ 1424 │ NtUserUnlockWindowStation │ 0x0000058F / 1423 │ -│ 1425 │ NtUserUnregisterHotKey │ 0x00000590 / 1424 │ -│ 1426 │ NtUserUnregisterSessionPort │ 0x00000591 / 1425 │ -│ 1427 │ NtUserUnregisterUserApiHook │ 0x00000592 / 1426 │ -│ 1428 │ NtUserUpdateClientRect │ 0x00000593 / 1427 │ -│ 1429 │ NtUserUpdateDefaultDesktopThumbnail │ 0x00000594 / 1428 │ -│ 1430 │ NtUserUpdateInputContext │ 0x00000595 / 1429 │ -│ 1431 │ NtUserUpdateInstance │ 0x00000596 / 1430 │ -│ 1432 │ NtUserUpdateLayeredWindow │ 0x00000597 / 1431 │ -│ 1433 │ NtUserUpdatePerUserImmEnabling │ 0x00000598 / 1432 │ -│ 1434 │ NtUserUpdatePerUserSystemParameters │ 0x00000599 / 1433 │ -│ 1435 │ NtUserUpdateWindow │ 0x0000059A / 1434 │ -│ 1436 │ NtUserUpdateWindowInputSinkHints │ 0x0000059B / 1435 │ -│ 1437 │ NtUserUpdateWindowTrackingInfo │ 0x0000059C / 1436 │ -│ 1438 │ NtUserUpdateWindows │ 0x0000059D / 1437 │ -│ 1439 │ NtUserUserHandleGrantAccess │ 0x0000059E / 1438 │ -│ 1440 │ NtUserUserPowerCalloutWorker │ 0x0000059F / 1439 │ -│ 1441 │ NtUserValidateHandleSecure │ 0x000005A0 / 1440 │ -│ 1442 │ NtUserValidateRgn │ 0x000005A1 / 1441 │ -│ 1443 │ NtUserWaitAvailableMessageEx │ 0x000005A2 / 1442 │ -│ 1444 │ NtUserWaitForInputIdle │ 0x000005A3 / 1443 │ -│ 1445 │ NtUserWaitForRedirectionStartComplete │ 0x000005A4 / 1444 │ -│ 1446 │ NtUserWakeRITForShutdown │ 0x000005A5 / 1445 │ -│ 1447 │ NtUserWindowFromDC │ 0x000005A6 / 1446 │ -│ 1448 │ NtUserWindowFromPhysicalPoint │ 0x000005A7 / 1447 │ -│ 1449 │ NtUserZapActiveAndFocus │ 0x000005A8 / 1448 │ -│ 1450 │ NtValidateCompositionSurfaceHandle │ 0x000005A9 / 1449 │ -│ 1451 │ NtVisualCaptureBits │ 0x000005AA / 1450 │ -│ 1452 │ NtUserSetClassLongPtr │ 0x000005AB / 1451 │ -│ 1453 │ NtUserSetWindowLongPtr │ 0x000005AC / 1452 │ -└──────┴─────────────────────────────────────────────────────────┴───────────────────┘ +┌──────┬─────────────────────────────────────────────────────────┬────────────────────┐ +│ Id │ Name │ Index │ +├──────┼─────────────────────────────────────────────────────────┼────────────────────┤ +│ 1 │ NtUserGetThreadState │ 0x00000000, //0 │ +│ 2 │ NtUserPeekMessage │ 0x00000001, //1 │ +│ 3 │ NtUserGetKeyState │ 0x00000002, //2 │ +│ 4 │ NtUserInvalidateRect │ 0x00000003, //3 │ +│ 5 │ NtUserGetMessage │ 0x00000004, //4 │ +│ 6 │ NtUserMessageCall │ 0x00000005, //5 │ +│ 7 │ NtGdiBitBlt │ 0x00000006, //6 │ +│ 8 │ NtGdiGetCharSet │ 0x00000007, //7 │ +│ 9 │ NtUserGetDC │ 0x00000008, //8 │ +│ 10 │ NtGdiSelectBitmap │ 0x00000009, //9 │ +│ 11 │ NtUserWaitMessage │ 0x0000000A, //10 │ +│ 12 │ NtUserTranslateMessage │ 0x0000000B, //11 │ +│ 13 │ NtUserGetProp │ 0x0000000C, //12 │ +│ 14 │ NtUserPostMessage │ 0x0000000D, //13 │ +│ 15 │ NtUserQueryWindow │ 0x0000000E, //14 │ +│ 16 │ NtUserTranslateAccelerator │ 0x0000000F, //15 │ +│ 17 │ NtGdiFlush │ 0x00000010, //16 │ +│ 18 │ NtUserRedrawWindow │ 0x00000011, //17 │ +│ 19 │ NtUserWindowFromPoint │ 0x00000012, //18 │ +│ 20 │ NtUserCallMsgFilter │ 0x00000013, //19 │ +│ 21 │ NtUserValidateTimerCallback │ 0x00000014, //20 │ +│ 22 │ NtUserBeginPaint │ 0x00000015, //21 │ +│ 23 │ NtUserSetTimer │ 0x00000016, //22 │ +│ 24 │ NtUserEndPaint │ 0x00000017, //23 │ +│ 25 │ NtUserSetCursor │ 0x00000018, //24 │ +│ 26 │ NtUserKillTimer │ 0x00000019, //25 │ +│ 27 │ NtUserBuildHwndList │ 0x0000001A, //26 │ +│ 28 │ NtUserSelectPalette │ 0x0000001B, //27 │ +│ 29 │ NtUserCallNextHookEx │ 0x0000001C, //28 │ +│ 30 │ NtUserHideCaret │ 0x0000001D, //29 │ +│ 31 │ NtGdiIntersectClipRect │ 0x0000001E, //30 │ +│ 32 │ NtUserGetProcessWindowStation │ 0x0000001F, //31 │ +│ 33 │ NtGdiDeleteObjectApp │ 0x00000020, //32 │ +│ 34 │ NtUserSetWindowPos │ 0x00000021, //33 │ +│ 35 │ NtUserShowCaret │ 0x00000022, //34 │ +│ 36 │ NtUserEndDeferWindowPosEx │ 0x00000023, //35 │ +│ 37 │ NtUserVkKeyScanEx │ 0x00000024, //36 │ +│ 38 │ NtGdiSetDIBitsToDeviceInternal │ 0x00000025, //37 │ +│ 39 │ NtGdiGetRandomRgn │ 0x00000026, //38 │ +│ 40 │ NtUserCopyAcceleratorTable │ 0x00000027, //39 │ +│ 41 │ NtUserNotifyWinEvent │ 0x00000028, //40 │ +│ 42 │ NtGdiExtSelectClipRgn │ 0x00000029, //41 │ +│ 43 │ NtUserIsClipboardFormatAvailable │ 0x0000002A, //42 │ +│ 44 │ NtUserSetScrollInfo │ 0x0000002B, //43 │ +│ 45 │ NtGdiStretchBlt │ 0x0000002C, //44 │ +│ 46 │ NtUserCreateCaret │ 0x0000002D, //45 │ +│ 47 │ NtGdiRectVisible │ 0x0000002E, //46 │ +│ 48 │ NtGdiCombineRgn │ 0x0000002F, //47 │ +│ 49 │ NtGdiGetDCObject │ 0x00000030, //48 │ +│ 50 │ NtUserDispatchMessage │ 0x00000031, //49 │ +│ 51 │ NtUserRegisterWindowMessage │ 0x00000032, //50 │ +│ 52 │ NtGdiExtTextOutW │ 0x00000033, //51 │ +│ 53 │ NtGdiSelectFont │ 0x00000034, //52 │ +│ 54 │ NtGdiRestoreDC │ 0x00000035, //53 │ +│ 55 │ NtGdiSaveDC │ 0x00000036, //54 │ +│ 56 │ NtUserGetForegroundWindow │ 0x00000037, //55 │ +│ 57 │ NtUserShowScrollBar │ 0x00000038, //56 │ +│ 58 │ NtUserFindExistingCursorIcon │ 0x00000039, //57 │ +│ 59 │ NtGdiGetDCDword │ 0x0000003A, //58 │ +│ 60 │ NtGdiGetRegionData │ 0x0000003B, //59 │ +│ 61 │ NtGdiLineTo │ 0x0000003C, //60 │ +│ 62 │ NtUserSystemParametersInfo │ 0x0000003D, //61 │ +│ 63 │ NtGdiGetAppClipBox │ 0x0000003E, //62 │ +│ 64 │ NtUserGetAsyncKeyState │ 0x0000003F, //63 │ +│ 65 │ NtUserGetCPD │ 0x00000040, //64 │ +│ 66 │ NtUserRemoveProp │ 0x00000041, //65 │ +│ 67 │ NtGdiDoPalette │ 0x00000042, //66 │ +│ 68 │ NtGdiPolyPolyDraw │ 0x00000043, //67 │ +│ 69 │ NtUserSetCapture │ 0x00000044, //68 │ +│ 70 │ NtUserEnumDisplayMonitors │ 0x00000045, //69 │ +│ 71 │ NtGdiCreateCompatibleBitmap │ 0x00000046, //70 │ +│ 72 │ NtUserSetProp │ 0x00000047, //71 │ +│ 73 │ NtGdiGetTextCharsetInfo │ 0x00000048, //72 │ +│ 74 │ NtUserSBGetParms │ 0x00000049, //73 │ +│ 75 │ NtUserGetIconInfo │ 0x0000004A, //74 │ +│ 76 │ NtUserExcludeUpdateRgn │ 0x0000004B, //75 │ +│ 77 │ NtUserSetFocus │ 0x0000004C, //76 │ +│ 78 │ NtGdiExtGetObjectW │ 0x0000004D, //77 │ +│ 79 │ NtUserGetUpdateRect │ 0x0000004E, //78 │ +│ 80 │ NtGdiCreateCompatibleDC │ 0x0000004F, //79 │ +│ 81 │ NtUserGetClipboardSequenceNumber │ 0x00000050, //80 │ +│ 82 │ NtGdiCreatePen │ 0x00000051, //81 │ +│ 83 │ NtUserShowWindow │ 0x00000052, //82 │ +│ 84 │ NtUserGetKeyboardLayoutList │ 0x00000053, //83 │ +│ 85 │ NtGdiPatBlt │ 0x00000054, //84 │ +│ 86 │ NtUserMapVirtualKeyEx │ 0x00000055, //85 │ +│ 87 │ NtUserSetWindowLong │ 0x00000056, //86 │ +│ 88 │ NtGdiHfontCreate │ 0x00000057, //87 │ +│ 89 │ NtUserMoveWindow │ 0x00000058, //88 │ +│ 90 │ NtUserPostThreadMessage │ 0x00000059, //89 │ +│ 91 │ NtUserDrawIconEx │ 0x0000005A, //90 │ +│ 92 │ NtUserGetSystemMenu │ 0x0000005B, //91 │ +│ 93 │ NtGdiDrawStream │ 0x0000005C, //92 │ +│ 94 │ NtUserInternalGetWindowText │ 0x0000005D, //93 │ +│ 95 │ NtUserGetWindowDC │ 0x0000005E, //94 │ +│ 96 │ NtGdiInvertRgn │ 0x0000005F, //95 │ +│ 97 │ NtGdiGetRgnBox │ 0x00000060, //96 │ +│ 98 │ NtGdiGetAndSetDCDword │ 0x00000061, //97 │ +│ 99 │ NtGdiMaskBlt │ 0x00000062, //98 │ +│ 100 │ NtGdiGetWidthTable │ 0x00000063, //99 │ +│ 101 │ NtUserScrollDC │ 0x00000064, //100 │ +│ 102 │ NtUserGetObjectInformation │ 0x00000065, //101 │ +│ 103 │ NtGdiCreateBitmap │ 0x00000066, //102 │ +│ 104 │ NtUserFindWindowEx │ 0x00000067, //103 │ +│ 105 │ NtGdiPolyPatBlt │ 0x00000068, //104 │ +│ 106 │ NtUserUnhookWindowsHookEx │ 0x00000069, //105 │ +│ 107 │ NtGdiGetNearestColor │ 0x0000006A, //106 │ +│ 108 │ NtGdiTransformPoints │ 0x0000006B, //107 │ +│ 109 │ NtGdiGetDCPoint │ 0x0000006C, //108 │ +│ 110 │ NtGdiCreateDIBBrush │ 0x0000006D, //109 │ +│ 111 │ NtGdiGetTextMetricsW │ 0x0000006E, //110 │ +│ 112 │ NtUserCreateWindowEx │ 0x0000006F, //111 │ +│ 113 │ NtUserSetParent │ 0x00000070, //112 │ +│ 114 │ NtUserGetKeyboardState │ 0x00000071, //113 │ +│ 115 │ NtUserToUnicodeEx │ 0x00000072, //114 │ +│ 116 │ NtUserGetControlBrush │ 0x00000073, //115 │ +│ 117 │ NtUserGetClassName │ 0x00000074, //116 │ +│ 118 │ NtGdiAlphaBlend │ 0x00000075, //117 │ +│ 119 │ NtGdiOffsetRgn │ 0x00000076, //118 │ +│ 120 │ NtUserDefSetText │ 0x00000077, //119 │ +│ 121 │ NtGdiGetTextFaceW │ 0x00000078, //120 │ +│ 122 │ NtGdiStretchDIBitsInternal │ 0x00000079, //121 │ +│ 123 │ NtUserSendInput │ 0x0000007A, //122 │ +│ 124 │ NtUserGetThreadDesktop │ 0x0000007B, //123 │ +│ 125 │ NtGdiCreateRectRgn │ 0x0000007C, //124 │ +│ 126 │ NtGdiGetDIBitsInternal │ 0x0000007D, //125 │ +│ 127 │ NtUserGetUpdateRgn │ 0x0000007E, //126 │ +│ 128 │ NtGdiDeleteClientObj │ 0x0000007F, //127 │ +│ 129 │ NtUserGetIconSize │ 0x00000080, //128 │ +│ 130 │ NtUserFillWindow │ 0x00000081, //129 │ +│ 131 │ NtGdiExtCreateRegion │ 0x00000082, //130 │ +│ 132 │ NtGdiComputeXformCoefficients │ 0x00000083, //131 │ +│ 133 │ NtUserSetWindowsHookEx │ 0x00000084, //132 │ +│ 134 │ NtUserNotifyProcessCreate │ 0x00000085, //133 │ +│ 135 │ NtGdiUnrealizeObject │ 0x00000086, //134 │ +│ 136 │ NtUserGetTitleBarInfo │ 0x00000087, //135 │ +│ 137 │ NtGdiRectangle │ 0x00000088, //136 │ +│ 138 │ NtUserSetThreadDesktop │ 0x00000089, //137 │ +│ 139 │ NtUserGetDCEx │ 0x0000008A, //138 │ +│ 140 │ NtUserGetScrollBarInfo │ 0x0000008B, //139 │ +│ 141 │ NtGdiGetTextExtent │ 0x0000008C, //140 │ +│ 142 │ NtUserSetWindowFNID │ 0x0000008D, //141 │ +│ 143 │ NtGdiSetLayout │ 0x0000008E, //142 │ +│ 144 │ NtUserCalcMenuBar │ 0x0000008F, //143 │ +│ 145 │ NtUserThunkedMenuItemInfo │ 0x00000090, //144 │ +│ 146 │ NtGdiExcludeClipRect │ 0x00000091, //145 │ +│ 147 │ NtGdiCreateDIBSection │ 0x00000092, //146 │ +│ 148 │ NtGdiGetDCforBitmap │ 0x00000093, //147 │ +│ 149 │ NtUserDestroyCursor │ 0x00000094, //148 │ +│ 150 │ NtUserDestroyWindow │ 0x00000095, //149 │ +│ 151 │ NtGdiCreateDIBitmapInternal │ 0x00000096, //150 │ +│ 152 │ NtUserOpenWindowStation │ 0x00000097, //151 │ +│ 153 │ NtUserSetCursorIconData │ 0x00000098, //152 │ +│ 154 │ NtUserCloseDesktop │ 0x00000099, //153 │ +│ 155 │ NtUserOpenDesktop │ 0x0000009A, //154 │ +│ 156 │ NtUserSetProcessWindowStation │ 0x0000009B, //155 │ +│ 157 │ NtUserGetAtomName │ 0x0000009C, //156 │ +│ 158 │ NtGdiExtCreatePen │ 0x0000009D, //157 │ +│ 159 │ NtGdiCreatePaletteInternal │ 0x0000009E, //158 │ +│ 160 │ NtGdiSetBrushOrg │ 0x0000009F, //159 │ +│ 161 │ NtUserBuildNameList │ 0x000000A0, //160 │ +│ 162 │ NtGdiSetPixel │ 0x000000A1, //161 │ +│ 163 │ NtUserRegisterClassExWOW │ 0x000000A2, //162 │ +│ 164 │ NtGdiCreatePatternBrushInternal │ 0x000000A3, //163 │ +│ 165 │ NtUserGetAncestor │ 0x000000A4, //164 │ +│ 166 │ NtGdiGetOutlineTextMetricsInternalW │ 0x000000A5, //165 │ +│ 167 │ NtGdiSetBitmapBits │ 0x000000A6, //166 │ +│ 168 │ NtUserCloseWindowStation │ 0x000000A7, //167 │ +│ 169 │ NtUserGetDoubleClickTime │ 0x000000A8, //168 │ +│ 170 │ NtUserEnableScrollBar │ 0x000000A9, //169 │ +│ 171 │ NtGdiCreateSolidBrush │ 0x000000AA, //170 │ +│ 172 │ NtUserGetClassInfoEx │ 0x000000AB, //171 │ +│ 173 │ NtGdiCreateClientObj │ 0x000000AC, //172 │ +│ 174 │ NtUserUnregisterClass │ 0x000000AD, //173 │ +│ 175 │ NtUserDeleteMenu │ 0x000000AE, //174 │ +│ 176 │ NtGdiRectInRegion │ 0x000000AF, //175 │ +│ 177 │ NtUserScrollWindowEx │ 0x000000B0, //176 │ +│ 178 │ NtGdiGetPixel │ 0x000000B1, //177 │ +│ 179 │ NtUserSetClassLong │ 0x000000B2, //178 │ +│ 180 │ NtUserGetMenuBarInfo │ 0x000000B3, //179 │ +│ 181 │ NtGdiGetNearestPaletteIndex │ 0x000000B4, //180 │ +│ 182 │ NtGdiGetCharWidthW │ 0x000000B5, //181 │ +│ 183 │ NtUserInvalidateRgn │ 0x000000B6, //182 │ +│ 184 │ NtUserGetClipboardOwner │ 0x000000B7, //183 │ +│ 185 │ NtUserSetWindowRgn │ 0x000000B8, //184 │ +│ 186 │ NtUserBitBltSysBmp │ 0x000000B9, //185 │ +│ 187 │ NtGdiGetCharWidthInfo │ 0x000000BA, //186 │ +│ 188 │ NtUserValidateRect │ 0x000000BB, //187 │ +│ 189 │ NtUserCloseClipboard │ 0x000000BC, //188 │ +│ 190 │ NtUserOpenClipboard │ 0x000000BD, //189 │ +│ 191 │ NtUserSetClipboardData │ 0x000000BE, //190 │ +│ 192 │ NtUserEnableMenuItem │ 0x000000BF, //191 │ +│ 193 │ NtUserAlterWindowStyle │ 0x000000C0, //192 │ +│ 194 │ NtGdiFillRgn │ 0x000000C1, //193 │ +│ 195 │ NtUserGetWindowPlacement │ 0x000000C2, //194 │ +│ 196 │ NtGdiModifyWorldTransform │ 0x000000C3, //195 │ +│ 197 │ NtGdiGetFontData │ 0x000000C4, //196 │ +│ 198 │ NtUserGetOpenClipboardWindow │ 0x000000C5, //197 │ +│ 199 │ NtUserSetThreadState │ 0x000000C6, //198 │ +│ 200 │ NtGdiOpenDCW │ 0x000000C7, //199 │ +│ 201 │ NtUserTrackMouseEvent │ 0x000000C8, //200 │ +│ 202 │ NtGdiGetTransform │ 0x000000C9, //201 │ +│ 203 │ NtUserDestroyMenu │ 0x000000CA, //202 │ +│ 204 │ NtGdiGetBitmapBits │ 0x000000CB, //203 │ +│ 205 │ NtUserConsoleControl │ 0x000000CC, //204 │ +│ 206 │ NtUserSetActiveWindow │ 0x000000CD, //205 │ +│ 207 │ NtUserSetInformationThread │ 0x000000CE, //206 │ +│ 208 │ NtUserSetWindowPlacement │ 0x000000CF, //207 │ +│ 209 │ NtUserGetControlColor │ 0x000000D0, //208 │ +│ 210 │ NtGdiSetMetaRgn │ 0x000000D1, //209 │ +│ 211 │ NtGdiSetMiterLimit │ 0x000000D2, //210 │ +│ 212 │ NtGdiSetVirtualResolution │ 0x000000D3, //211 │ +│ 213 │ NtGdiGetRasterizerCaps │ 0x000000D4, //212 │ +│ 214 │ NtUserSetWindowWord │ 0x000000D5, //213 │ +│ 215 │ NtUserGetClipboardFormatName │ 0x000000D6, //214 │ +│ 216 │ NtUserRealInternalGetMessage │ 0x000000D7, //215 │ +│ 217 │ NtUserCreateLocalMemHandle │ 0x000000D8, //216 │ +│ 218 │ NtUserAttachThreadInput │ 0x000000D9, //217 │ +│ 219 │ NtGdiCreateHalftonePalette │ 0x000000DA, //218 │ +│ 220 │ NtUserPaintMenuBar │ 0x000000DB, //219 │ +│ 221 │ NtUserSetKeyboardState │ 0x000000DC, //220 │ +│ 222 │ NtGdiCombineTransform │ 0x000000DD, //221 │ +│ 223 │ NtUserCreateAcceleratorTable │ 0x000000DE, //222 │ +│ 224 │ NtUserGetCursorFrameInfo │ 0x000000DF, //223 │ +│ 225 │ NtUserGetAltTabInfo │ 0x000000E0, //224 │ +│ 226 │ NtUserGetCaretBlinkTime │ 0x000000E1, //225 │ +│ 227 │ NtGdiQueryFontAssocInfo │ 0x000000E2, //226 │ +│ 228 │ NtUserProcessConnect │ 0x000000E3, //227 │ +│ 229 │ NtUserEnumDisplayDevices │ 0x000000E4, //228 │ +│ 230 │ NtUserEmptyClipboard │ 0x000000E5, //229 │ +│ 231 │ NtUserGetClipboardData │ 0x000000E6, //230 │ +│ 232 │ NtUserRemoveMenu │ 0x000000E7, //231 │ +│ 233 │ NtGdiSetBoundsRect │ 0x000000E8, //232 │ +│ 234 │ NtGdiGetBitmapDimension │ 0x000000E9, //233 │ +│ 235 │ NtUserConvertMemHandle │ 0x000000EA, //234 │ +│ 236 │ NtUserDestroyAcceleratorTable │ 0x000000EB, //235 │ +│ 237 │ NtUserGetGUIThreadInfo │ 0x000000EC, //236 │ +│ 238 │ NtGdiCloseFigure │ 0x000000ED, //237 │ +│ 239 │ NtUserSetWindowsHookAW │ 0x000000EE, //238 │ +│ 240 │ NtUserSetMenuDefaultItem │ 0x000000EF, //239 │ +│ 241 │ NtUserCheckMenuItem │ 0x000000F0, //240 │ +│ 242 │ NtUserSetWinEventHook │ 0x000000F1, //241 │ +│ 243 │ NtUserUnhookWinEvent │ 0x000000F2, //242 │ +│ 244 │ NtUserLockWindowUpdate │ 0x000000F3, //243 │ +│ 245 │ NtUserSetSystemMenu │ 0x000000F4, //244 │ +│ 246 │ NtUserThunkedMenuInfo │ 0x000000F5, //245 │ +│ 247 │ NtGdiBeginPath │ 0x000000F6, //246 │ +│ 248 │ NtGdiEndPath │ 0x000000F7, //247 │ +│ 249 │ NtGdiFillPath │ 0x000000F8, //248 │ +│ 250 │ NtUserDdeInitialize │ 0x000000F9, //249 │ +│ 251 │ NtUserModifyUserStartupInfoFlags │ 0x000000FA, //250 │ +│ 252 │ NtUserCountClipboardFormats │ 0x000000FB, //251 │ +│ 253 │ NtGdiAddFontMemResourceEx │ 0x000000FC, //252 │ +│ 254 │ NtGdiEqualRgn │ 0x000000FD, //253 │ +│ 255 │ NtGdiGetSystemPaletteUse │ 0x000000FE, //254 │ +│ 256 │ NtGdiRemoveFontMemResourceEx │ 0x000000FF, //255 │ +│ 257 │ NtUserEnumDisplaySettings │ 0x00000100, //256 │ +│ 258 │ NtUserPaintDesktop │ 0x00000101, //257 │ +│ 259 │ NtGdiExtEscape │ 0x00000102, //258 │ +│ 260 │ NtGdiSetBitmapDimension │ 0x00000103, //259 │ +│ 261 │ NtGdiSetFontEnumeration │ 0x00000104, //260 │ +│ 262 │ NtUserChangeClipboardChain │ 0x00000105, //261 │ +│ 263 │ NtUserSetClipboardViewer │ 0x00000106, //262 │ +│ 264 │ NtUserShowWindowAsync │ 0x00000107, //263 │ +│ 265 │ NtGdiCreateColorSpace │ 0x00000108, //264 │ +│ 266 │ NtGdiDeleteColorSpace │ 0x00000109, //265 │ +│ 267 │ NtUserActivateKeyboardLayout │ 0x0000010A, //266 │ +│ 268 │ NtBindCompositionSurface │ 0x0000010B, //267 │ +│ 269 │ NtCloseCompositionInputSink │ 0x0000010C, //268 │ +│ 270 │ NtCompositionInputThread │ 0x0000010D, //269 │ +│ 271 │ NtCompositionSetDropTarget │ 0x0000010E, //270 │ +│ 272 │ NtCompositorNotifyExitWindows │ 0x0000010F, //271 │ +│ 273 │ NtConfigureInputSpace │ 0x00000110, //272 │ +│ 274 │ NtCreateCompositionInputSink │ 0x00000111, //273 │ +│ 275 │ NtCreateCompositionSurfaceHandle │ 0x00000112, //274 │ +│ 276 │ NtCreateImplicitCompositionInputSink │ 0x00000113, //275 │ +│ 277 │ NtDCompositionAddCrossDeviceVisualChild │ 0x00000114, //276 │ +│ 278 │ NtDCompositionBeginFrame │ 0x00000115, //277 │ +│ 279 │ NtDCompositionBoostCompositorClock │ 0x00000116, //278 │ +│ 280 │ NtDCompositionCommitChannel │ 0x00000117, //279 │ +│ 281 │ NtDCompositionCommitSynchronizationObject │ 0x00000118, //280 │ +│ 282 │ NtDCompositionConfirmFrame │ 0x00000119, //281 │ +│ 283 │ NtDCompositionConnectPipe │ 0x0000011A, //282 │ +│ 284 │ NtDCompositionCreateAndBindSharedSection │ 0x0000011B, //283 │ +│ 285 │ NtDCompositionCreateChannel │ 0x0000011C, //284 │ +│ 286 │ NtDCompositionCreateConnection │ 0x0000011D, //285 │ +│ 287 │ NtDCompositionCreateDwmChannel │ 0x0000011E, //286 │ +│ 288 │ NtDCompositionCreateSharedResourceHandle │ 0x0000011F, //287 │ +│ 289 │ NtDCompositionCreateSynchronizationObject │ 0x00000120, //288 │ +│ 290 │ NtDCompositionDestroyChannel │ 0x00000121, //289 │ +│ 291 │ NtDCompositionDestroyConnection │ 0x00000122, //290 │ +│ 292 │ NtDCompositionDuplicateHandleToProcess │ 0x00000123, //291 │ +│ 293 │ NtDCompositionDuplicateSwapchainHandleToDwm │ 0x00000124, //292 │ +│ 294 │ NtDCompositionEnableMMCSS │ 0x00000125, //293 │ +│ 295 │ NtDCompositionGetBatchId │ 0x00000126, //294 │ +│ 296 │ NtDCompositionGetChannels │ 0x00000127, //295 │ +│ 297 │ NtDCompositionGetConnectionBatch │ 0x00000128, //296 │ +│ 298 │ NtDCompositionGetDeletedResources │ 0x00000129, //297 │ +│ 299 │ NtDCompositionGetFrameId │ 0x0000012A, //298 │ +│ 300 │ NtDCompositionGetFrameIdFromBatchId │ 0x0000012B, //299 │ +│ 301 │ NtDCompositionGetFrameLegacyTokens │ 0x0000012C, //300 │ +│ 302 │ NtDCompositionGetFrameStatistics │ 0x0000012D, //301 │ +│ 303 │ NtDCompositionGetFrameSurfaceUpdates │ 0x0000012E, //302 │ +│ 304 │ NtDCompositionGetMaterialProperty │ 0x0000012F, //303 │ +│ 305 │ NtDCompositionGetStatistics │ 0x00000130, //304 │ +│ 306 │ NtDCompositionGetTargetStatistics │ 0x00000131, //305 │ +│ 307 │ NtDCompositionNotifySuperWetInkWork │ 0x00000132, //306 │ +│ 308 │ NtDCompositionProcessChannelBatchBuffer │ 0x00000133, //307 │ +│ 309 │ NtDCompositionReferenceSharedResourceOnDwmChannel │ 0x00000134, //308 │ +│ 310 │ NtDCompositionRegisterThumbnailVisual │ 0x00000135, //309 │ +│ 311 │ NtDCompositionRegisterVirtualDesktopVisual │ 0x00000136, //310 │ +│ 312 │ NtDCompositionReleaseAllResources │ 0x00000137, //311 │ +│ 313 │ NtDCompositionRemoveCrossDeviceVisualChild │ 0x00000138, //312 │ +│ 314 │ NtDCompositionSetBlurredWallpaperSurface │ 0x00000139, //313 │ +│ 315 │ NtDCompositionSetChannelCommitCompletionEvent │ 0x0000013A, //314 │ +│ 316 │ NtDCompositionSetChannelConnectionId │ 0x0000013B, //315 │ +│ 317 │ NtDCompositionSetChildRootVisual │ 0x0000013C, //316 │ +│ 318 │ NtDCompositionSetDebugCounter │ 0x0000013D, //317 │ +│ 319 │ NtDCompositionSetMaterialProperty │ 0x0000013E, //318 │ +│ 320 │ NtDCompositionSubmitDWMBatch │ 0x0000013F, //319 │ +│ 321 │ NtDCompositionSuspendAnimations │ 0x00000140, //320 │ +│ 322 │ NtDCompositionSynchronize │ 0x00000141, //321 │ +│ 323 │ NtDCompositionTelemetrySetApplicationId │ 0x00000142, //322 │ +│ 324 │ NtDCompositionUpdatePointerCapture │ 0x00000143, //323 │ +│ 325 │ NtDCompositionWaitForChannel │ 0x00000144, //324 │ +│ 326 │ NtDCompositionWaitForCompositorClock │ 0x00000145, //325 │ +│ 327 │ NtDesktopCaptureBits │ 0x00000146, //326 │ +│ 328 │ NtDuplicateCompositionInputSink │ 0x00000147, //327 │ +│ 329 │ NtDxgkCancelPresents │ 0x00000148, //328 │ +│ 330 │ NtDxgkCheckSinglePlaneForMultiPlaneOverlaySupport │ 0x00000149, //329 │ +│ 331 │ NtDxgkConnectDoorbell │ 0x0000014A, //330 │ +│ 332 │ NtDxgkCreateDoorbell │ 0x0000014B, //331 │ +│ 333 │ NtDxgkCreateNativeFence │ 0x0000014C, //332 │ +│ 334 │ NtDxgkCreateTrackedWorkload │ 0x0000014D, //333 │ +│ 335 │ NtDxgkDestroyDoorbell │ 0x0000014E, //334 │ +│ 336 │ NtDxgkDestroyTrackedWorkload │ 0x0000014F, //335 │ +│ 337 │ NtDxgkDispMgrOperation │ 0x00000150, //336 │ +│ 338 │ NtDxgkDisplayPortOperation │ 0x00000151, //337 │ +│ 339 │ NtDxgkDuplicateHandle │ 0x00000152, //338 │ +│ 340 │ NtDxgkEnumAdapters3 │ 0x00000153, //339 │ +│ 341 │ NtDxgkEnumProcesses │ 0x00000154, //340 │ +│ 342 │ NtDxgkGetAvailableTrackedWorkloadIndex │ 0x00000155, //341 │ +│ 343 │ NtDxgkGetProcessList │ 0x00000156, //342 │ +│ 344 │ NtDxgkGetProperties │ 0x00000157, //343 │ +│ 345 │ NtDxgkGetTrackedWorkloadStatistics │ 0x00000158, //344 │ +│ 346 │ NtDxgkNotifyWorkSubmission │ 0x00000159, //345 │ +│ 347 │ NtDxgkOpenNativeFenceFromNtHandle │ 0x0000015A, //346 │ +│ 348 │ NtDxgkOutputDuplPresentToHwQueue │ 0x0000015B, //347 │ +│ 349 │ NtDxgkPinResources │ 0x0000015C, //348 │ +│ 350 │ NtDxgkRegisterVailProcess │ 0x0000015D, //349 │ +│ 351 │ NtDxgkResetTrackedWorkloadStatistics │ 0x0000015E, //350 │ +│ 352 │ NtDxgkSetProperties │ 0x0000015F, //351 │ +│ 353 │ NtDxgkSubmitPresentBltToHwQueue │ 0x00000160, //352 │ +│ 354 │ NtDxgkSubmitPresentToHwQueue │ 0x00000161, //353 │ +│ 355 │ NtDxgkUnpinResources │ 0x00000162, //354 │ +│ 356 │ NtDxgkUpdateTrackedWorkload │ 0x00000163, //355 │ +│ 357 │ NtDxgkVailConnect │ 0x00000164, //356 │ +│ 358 │ NtDxgkVailDisconnect │ 0x00000165, //357 │ +│ 359 │ NtDxgkVailPromoteCompositionSurface │ 0x00000166, //358 │ +│ 360 │ NtEnableOneCoreTransformMode │ 0x00000167, //359 │ +│ 361 │ NtFlipObjectAddContent │ 0x00000168, //360 │ +│ 362 │ NtFlipObjectAddPoolBuffer │ 0x00000169, //361 │ +│ 363 │ NtFlipObjectConsumerAcquirePresent │ 0x0000016A, //362 │ +│ 364 │ NtFlipObjectConsumerAdjustUsageReference │ 0x0000016B, //363 │ +│ 365 │ NtFlipObjectConsumerBeginProcessPresent │ 0x0000016C, //364 │ +│ 366 │ NtFlipObjectConsumerEndProcessPresent │ 0x0000016D, //365 │ +│ 367 │ NtFlipObjectConsumerPostMessage │ 0x0000016E, //366 │ +│ 368 │ NtFlipObjectConsumerQueryBufferInfo │ 0x0000016F, //367 │ +│ 369 │ NtFlipObjectCreate │ 0x00000170, //368 │ +│ 370 │ NtFlipObjectDisconnectEndpoint │ 0x00000171, //369 │ +│ 371 │ NtFlipObjectEnablePresentStatisticsType │ 0x00000172, //370 │ +│ 372 │ NtFlipObjectOpen │ 0x00000173, //371 │ +│ 373 │ NtFlipObjectPresentCancel │ 0x00000174, //372 │ +│ 374 │ NtFlipObjectQueryBufferAvailableEvent │ 0x00000175, //373 │ +│ 375 │ NtFlipObjectQueryEndpointConnected │ 0x00000176, //374 │ +│ 376 │ NtFlipObjectQueryLostEvent │ 0x00000177, //375 │ +│ 377 │ NtFlipObjectQueryNextMessageToProducer │ 0x00000178, //376 │ +│ 378 │ NtFlipObjectReadNextMessageToProducer │ 0x00000179, //377 │ +│ 379 │ NtFlipObjectRemoveContent │ 0x0000017A, //378 │ +│ 380 │ NtFlipObjectRemovePoolBuffer │ 0x0000017B, //379 │ +│ 381 │ NtFlipObjectSetContent │ 0x0000017C, //380 │ +│ 382 │ NtGdiAbortDoc │ 0x0000017D, //381 │ +│ 383 │ NtGdiAbortPath │ 0x0000017E, //382 │ +│ 384 │ NtGdiAddEmbFontToDC │ 0x0000017F, //383 │ +│ 385 │ NtGdiAddFontResourceW │ 0x00000180, //384 │ +│ 386 │ NtGdiAddInitialFonts │ 0x00000181, //385 │ +│ 387 │ NtGdiAddRemoteFontToDC │ 0x00000182, //386 │ +│ 388 │ NtGdiAddRemoteMMInstanceToDC │ 0x00000183, //387 │ +│ 389 │ NtGdiAngleArc │ 0x00000184, //388 │ +│ 390 │ NtGdiAnyLinkedFonts │ 0x00000185, //389 │ +│ 391 │ NtGdiArcInternal │ 0x00000186, //390 │ +│ 392 │ NtGdiBRUSHOBJ_DeleteRbrush │ 0x00000187, //391 │ +│ 393 │ NtGdiBRUSHOBJ_hGetColorTransform │ 0x00000188, //392 │ +│ 394 │ NtGdiBRUSHOBJ_pvAllocRbrush │ 0x00000189, //393 │ +│ 395 │ NtGdiBRUSHOBJ_pvGetRbrush │ 0x0000018A, //394 │ +│ 396 │ NtGdiBRUSHOBJ_ulGetBrushColor │ 0x0000018B, //395 │ +│ 397 │ NtGdiBeginGdiRendering │ 0x0000018C, //396 │ +│ 398 │ NtGdiCLIPOBJ_bEnum │ 0x0000018D, //397 │ +│ 399 │ NtGdiCLIPOBJ_cEnumStart │ 0x0000018E, //398 │ +│ 400 │ NtGdiCLIPOBJ_ppoGetPath │ 0x0000018F, //399 │ +│ 401 │ NtGdiCancelDC │ 0x00000190, //400 │ +│ 402 │ NtGdiChangeGhostFont │ 0x00000191, //401 │ +│ 403 │ NtGdiCheckBitmapBits │ 0x00000192, //402 │ +│ 404 │ NtGdiClearBitmapAttributes │ 0x00000193, //403 │ +│ 405 │ NtGdiClearBrushAttributes │ 0x00000194, //404 │ +│ 406 │ NtGdiColorCorrectPalette │ 0x00000195, //405 │ +│ 407 │ NtGdiConfigureOPMProtectedOutput │ 0x00000196, //406 │ +│ 408 │ NtGdiConvertMetafileRect │ 0x00000197, //407 │ +│ 409 │ NtGdiCreateBitmapFromDxSurface │ 0x00000198, //408 │ +│ 410 │ NtGdiCreateBitmapFromDxSurface2 │ 0x00000199, //409 │ +│ 411 │ NtGdiCreateColorTransform │ 0x0000019A, //410 │ +│ 412 │ NtGdiCreateEllipticRgn │ 0x0000019B, //411 │ +│ 413 │ NtGdiCreateHatchBrushInternal │ 0x0000019C, //412 │ +│ 414 │ NtGdiCreateMetafileDC │ 0x0000019D, //413 │ +│ 415 │ NtGdiCreateOPMProtectedOutput │ 0x0000019E, //414 │ +│ 416 │ NtGdiCreateOPMProtectedOutputs │ 0x0000019F, //415 │ +│ 417 │ NtGdiCreateRoundRectRgn │ 0x000001A0, //416 │ +│ 418 │ NtGdiCreateServerMetaFile │ 0x000001A1, //417 │ +│ 419 │ NtGdiCreateSessionMappedDIBSection │ 0x000001A2, //418 │ +│ 420 │ NtGdiDDCCIGetCapabilitiesString │ 0x000001A3, //419 │ +│ 421 │ NtGdiDDCCIGetCapabilitiesStringLength │ 0x000001A4, //420 │ +│ 422 │ NtGdiDDCCIGetTimingReport │ 0x000001A5, //421 │ +│ 423 │ NtGdiDDCCIGetVCPFeature │ 0x000001A6, //422 │ +│ 424 │ NtGdiDDCCISaveCurrentSettings │ 0x000001A7, //423 │ +│ 425 │ NtGdiDDCCISetVCPFeature │ 0x000001A8, //424 │ +│ 426 │ NtGdiDdCreateFullscreenSprite │ 0x000001A9, //425 │ +│ 427 │ NtGdiDdDDIAbandonSwapChain │ 0x000001AA, //426 │ +│ 428 │ NtGdiDdDDIAcquireKeyedMutex │ 0x000001AB, //427 │ +│ 429 │ NtGdiDdDDIAcquireKeyedMutex2 │ 0x000001AC, //428 │ +│ 430 │ NtGdiDdDDIAcquireSwapChain │ 0x000001AD, //429 │ +│ 431 │ NtGdiDdDDIAddSurfaceToSwapChain │ 0x000001AE, //430 │ +│ 432 │ NtGdiDdDDIAdjustFullscreenGamma │ 0x000001AF, //431 │ +│ 433 │ NtGdiDdDDICacheHybridQueryValue │ 0x000001B0, //432 │ +│ 434 │ NtGdiDdDDIChangeVideoMemoryReservation │ 0x000001B1, //433 │ +│ 435 │ NtGdiDdDDICheckExclusiveOwnership │ 0x000001B2, //434 │ +│ 436 │ NtGdiDdDDICheckMonitorPowerState │ 0x000001B3, //435 │ +│ 437 │ NtGdiDdDDICheckMultiPlaneOverlaySupport │ 0x000001B4, //436 │ +│ 438 │ NtGdiDdDDICheckMultiPlaneOverlaySupport2 │ 0x000001B5, //437 │ +│ 439 │ NtGdiDdDDICheckMultiPlaneOverlaySupport3 │ 0x000001B6, //438 │ +│ 440 │ NtGdiDdDDICheckOcclusion │ 0x000001B7, //439 │ +│ 441 │ NtGdiDdDDICheckSharedResourceAccess │ 0x000001B8, //440 │ +│ 442 │ NtGdiDdDDICheckVidPnExclusiveOwnership │ 0x000001B9, //441 │ +│ 443 │ NtGdiDdDDICloseAdapter │ 0x000001BA, //442 │ +│ 444 │ NtGdiDdDDIConfigureSharedResource │ 0x000001BB, //443 │ +│ 445 │ NtGdiDdDDICreateAllocation │ 0x000001BC, //444 │ +│ 446 │ NtGdiDdDDICreateBundleObject │ 0x000001BD, //445 │ +│ 447 │ NtGdiDdDDICreateContext │ 0x000001BE, //446 │ +│ 448 │ NtGdiDdDDICreateContextVirtual │ 0x000001BF, //447 │ +│ 449 │ NtGdiDdDDICreateDCFromMemory │ 0x000001C0, //448 │ +│ 450 │ NtGdiDdDDICreateDevice │ 0x000001C1, //449 │ +│ 451 │ NtGdiDdDDICreateHwContext │ 0x000001C2, //450 │ +│ 452 │ NtGdiDdDDICreateHwQueue │ 0x000001C3, //451 │ +│ 453 │ NtGdiDdDDICreateKeyedMutex │ 0x000001C4, //452 │ +│ 454 │ NtGdiDdDDICreateKeyedMutex2 │ 0x000001C5, //453 │ +│ 455 │ NtGdiDdDDICreateOutputDupl │ 0x000001C6, //454 │ +│ 456 │ NtGdiDdDDICreateOverlay │ 0x000001C7, //455 │ +│ 457 │ NtGdiDdDDICreatePagingQueue │ 0x000001C8, //456 │ +│ 458 │ NtGdiDdDDICreateProtectedSession │ 0x000001C9, //457 │ +│ 459 │ NtGdiDdDDICreateSwapChain │ 0x000001CA, //458 │ +│ 460 │ NtGdiDdDDICreateSynchronizationObject │ 0x000001CB, //459 │ +│ 461 │ NtGdiDdDDIDDisplayEnum │ 0x000001CC, //460 │ +│ 462 │ NtGdiDdDDIDestroyAllocation │ 0x000001CD, //461 │ +│ 463 │ NtGdiDdDDIDestroyAllocation2 │ 0x000001CE, //462 │ +│ 464 │ NtGdiDdDDIDestroyContext │ 0x000001CF, //463 │ +│ 465 │ NtGdiDdDDIDestroyDCFromMemory │ 0x000001D0, //464 │ +│ 466 │ NtGdiDdDDIDestroyDevice │ 0x000001D1, //465 │ +│ 467 │ NtGdiDdDDIDestroyHwContext │ 0x000001D2, //466 │ +│ 468 │ NtGdiDdDDIDestroyHwQueue │ 0x000001D3, //467 │ +│ 469 │ NtGdiDdDDIDestroyKeyedMutex │ 0x000001D4, //468 │ +│ 470 │ NtGdiDdDDIDestroyOutputDupl │ 0x000001D5, //469 │ +│ 471 │ NtGdiDdDDIDestroyOverlay │ 0x000001D6, //470 │ +│ 472 │ NtGdiDdDDIDestroyPagingQueue │ 0x000001D7, //471 │ +│ 473 │ NtGdiDdDDIDestroyProtectedSession │ 0x000001D8, //472 │ +│ 474 │ NtGdiDdDDIDestroySynchronizationObject │ 0x000001D9, //473 │ +│ 475 │ NtGdiDdDDIDispMgrCreate │ 0x000001DA, //474 │ +│ 476 │ NtGdiDdDDIDispMgrSourceOperation │ 0x000001DB, //475 │ +│ 477 │ NtGdiDdDDIDispMgrTargetOperation │ 0x000001DC, //476 │ +│ 478 │ NtGdiDdDDIEnumAdapters │ 0x000001DD, //477 │ +│ 479 │ NtGdiDdDDIEnumAdapters2 │ 0x000001DE, //478 │ +│ 480 │ NtGdiDdDDIEscape │ 0x000001DF, //479 │ +│ 481 │ NtGdiDdDDIEvict │ 0x000001E0, //480 │ +│ 482 │ NtGdiDdDDIExtractBundleObject │ 0x000001E1, //481 │ +│ 483 │ NtGdiDdDDIFlipOverlay │ 0x000001E2, //482 │ +│ 484 │ NtGdiDdDDIFlushHeapTransitions │ 0x000001E3, //483 │ +│ 485 │ NtGdiDdDDIFreeGpuVirtualAddress │ 0x000001E4, //484 │ +│ 486 │ NtGdiDdDDIGetAllocationPriority │ 0x000001E5, //485 │ +│ 487 │ NtGdiDdDDIGetCachedHybridQueryValue │ 0x000001E6, //486 │ +│ 488 │ NtGdiDdDDIGetContextInProcessSchedulingPriority │ 0x000001E7, //487 │ +│ 489 │ NtGdiDdDDIGetContextSchedulingPriority │ 0x000001E8, //488 │ +│ 490 │ NtGdiDdDDIGetDWMVerticalBlankEvent │ 0x000001E9, //489 │ +│ 491 │ NtGdiDdDDIGetDeviceState │ 0x000001EA, //490 │ +│ 492 │ NtGdiDdDDIGetDisplayModeList │ 0x000001EB, //491 │ +│ 493 │ NtGdiDdDDIGetMemoryBudgetTarget │ 0x000001EC, //492 │ +│ 494 │ NtGdiDdDDIGetMultiPlaneOverlayCaps │ 0x000001ED, //493 │ +│ 495 │ NtGdiDdDDIGetMultisampleMethodList │ 0x000001EE, //494 │ +│ 496 │ NtGdiDdDDIGetOverlayState │ 0x000001EF, //495 │ +│ 497 │ NtGdiDdDDIGetPostCompositionCaps │ 0x000001F0, //496 │ +│ 498 │ NtGdiDdDDIGetPresentHistory │ 0x000001F1, //497 │ +│ 499 │ NtGdiDdDDIGetPresentQueueEvent │ 0x000001F2, //498 │ +│ 500 │ NtGdiDdDDIGetProcessDeviceRemovalSupport │ 0x000001F3, //499 │ +│ 501 │ NtGdiDdDDIGetProcessSchedulingPriorityBand │ 0x000001F4, //500 │ +│ 502 │ NtGdiDdDDIGetProcessSchedulingPriorityClass │ 0x000001F5, //501 │ +│ 503 │ NtGdiDdDDIGetResourcePresentPrivateDriverData │ 0x000001F6, //502 │ +│ 504 │ NtGdiDdDDIGetRuntimeData │ 0x000001F7, //503 │ +│ 505 │ NtGdiDdDDIGetScanLine │ 0x000001F8, //504 │ +│ 506 │ NtGdiDdDDIGetSetSwapChainMetadata │ 0x000001F9, //505 │ +│ 507 │ NtGdiDdDDIGetSharedPrimaryHandle │ 0x000001FA, //506 │ +│ 508 │ NtGdiDdDDIGetSharedResourceAdapterLuid │ 0x000001FB, //507 │ +│ 509 │ NtGdiDdDDIGetSharedResourceAdapterLuidFlipManager │ 0x000001FC, //508 │ +│ 510 │ NtGdiDdDDIGetSwapChainSurfacePhysicalAddress │ 0x000001FD, //509 │ +│ 511 │ NtGdiDdDDIGetYieldPercentage │ 0x000001FE, //510 │ +│ 512 │ NtGdiDdDDIInvalidateActiveVidPn │ 0x000001FF, //511 │ +│ 513 │ NtGdiDdDDIInvalidateCache │ 0x00000200, //512 │ +│ 514 │ NtGdiDdDDILock │ 0x00000201, //513 │ +│ 515 │ NtGdiDdDDILock2 │ 0x00000202, //514 │ +│ 516 │ NtGdiDdDDIMakeResident │ 0x00000203, //515 │ +│ 517 │ NtGdiDdDDIMapGpuVirtualAddress │ 0x00000204, //516 │ +│ 518 │ NtGdiDdDDIMarkDeviceAsError │ 0x00000205, //517 │ +│ 519 │ NtGdiDdDDINetDispGetNextChunkInfo │ 0x00000206, //518 │ +│ 520 │ NtGdiDdDDINetDispQueryMiracastDisplayDeviceStatus │ 0x00000207, //519 │ +│ 521 │ NtGdiDdDDINetDispQueryMiracastDisplayDeviceSupport │ 0x00000208, //520 │ +│ 522 │ NtGdiDdDDINetDispStartMiracastDisplayDevice │ 0x00000209, //521 │ +│ 523 │ NtGdiDdDDINetDispStopMiracastDisplayDevice │ 0x0000020A, //522 │ +│ 524 │ NtGdiDdDDIOfferAllocations │ 0x0000020B, //523 │ +│ 525 │ NtGdiDdDDIOpenAdapterFromDeviceName │ 0x0000020C, //524 │ +│ 526 │ NtGdiDdDDIOpenAdapterFromHdc │ 0x0000020D, //525 │ +│ 527 │ NtGdiDdDDIOpenAdapterFromLuid │ 0x0000020E, //526 │ +│ 528 │ NtGdiDdDDIOpenBundleObjectNtHandleFromName │ 0x0000020F, //527 │ +│ 529 │ NtGdiDdDDIOpenKeyedMutex │ 0x00000210, //528 │ +│ 530 │ NtGdiDdDDIOpenKeyedMutex2 │ 0x00000211, //529 │ +│ 531 │ NtGdiDdDDIOpenKeyedMutexFromNtHandle │ 0x00000212, //530 │ +│ 532 │ NtGdiDdDDIOpenNtHandleFromName │ 0x00000213, //531 │ +│ 533 │ NtGdiDdDDIOpenProtectedSessionFromNtHandle │ 0x00000214, //532 │ +│ 534 │ NtGdiDdDDIOpenResource │ 0x00000215, //533 │ +│ 535 │ NtGdiDdDDIOpenResourceFromNtHandle │ 0x00000216, //534 │ +│ 536 │ NtGdiDdDDIOpenSwapChain │ 0x00000217, //535 │ +│ 537 │ NtGdiDdDDIOpenSyncObjectFromNtHandle │ 0x00000218, //536 │ +│ 538 │ NtGdiDdDDIOpenSyncObjectFromNtHandle2 │ 0x00000219, //537 │ +│ 539 │ NtGdiDdDDIOpenSyncObjectNtHandleFromName │ 0x0000021A, //538 │ +│ 540 │ NtGdiDdDDIOpenSynchronizationObject │ 0x0000021B, //539 │ +│ 541 │ NtGdiDdDDIOutputDuplGetFrameInfo │ 0x0000021C, //540 │ +│ 542 │ NtGdiDdDDIOutputDuplGetMetaData │ 0x0000021D, //541 │ +│ 543 │ NtGdiDdDDIOutputDuplGetPointerShapeData │ 0x0000021E, //542 │ +│ 544 │ NtGdiDdDDIOutputDuplPresent │ 0x0000021F, //543 │ +│ 545 │ NtGdiDdDDIOutputDuplReleaseFrame │ 0x00000220, //544 │ +│ 546 │ NtGdiDdDDIPollDisplayChildren │ 0x00000221, //545 │ +│ 547 │ NtGdiDdDDIPresent │ 0x00000222, //546 │ +│ 548 │ NtGdiDdDDIPresentMultiPlaneOverlay │ 0x00000223, //547 │ +│ 549 │ NtGdiDdDDIPresentMultiPlaneOverlay2 │ 0x00000224, //548 │ +│ 550 │ NtGdiDdDDIPresentMultiPlaneOverlay3 │ 0x00000225, //549 │ +│ 551 │ NtGdiDdDDIPresentRedirected │ 0x00000226, //550 │ +│ 552 │ NtGdiDdDDIQueryAdapterInfo │ 0x00000227, //551 │ +│ 553 │ NtGdiDdDDIQueryAllocationResidency │ 0x00000228, //552 │ +│ 554 │ NtGdiDdDDIQueryClockCalibration │ 0x00000229, //553 │ +│ 555 │ NtGdiDdDDIQueryFSEBlock │ 0x0000022A, //554 │ +│ 556 │ NtGdiDdDDIQueryProcessOfferInfo │ 0x0000022B, //555 │ +│ 557 │ NtGdiDdDDIQueryProtectedSessionInfoFromNtHandle │ 0x0000022C, //556 │ +│ 558 │ NtGdiDdDDIQueryProtectedSessionStatus │ 0x0000022D, //557 │ +│ 559 │ NtGdiDdDDIQueryRemoteVidPnSourceFromGdiDisplayName │ 0x0000022E, //558 │ +│ 560 │ NtGdiDdDDIQueryResourceInfo │ 0x0000022F, //559 │ +│ 561 │ NtGdiDdDDIQueryResourceInfoFromNtHandle │ 0x00000230, //560 │ +│ 562 │ NtGdiDdDDIQueryStatistics │ 0x00000231, //561 │ +│ 563 │ NtGdiDdDDIQueryVidPnExclusiveOwnership │ 0x00000232, //562 │ +│ 564 │ NtGdiDdDDIQueryVideoMemoryInfo │ 0x00000233, //563 │ +│ 565 │ NtGdiDdDDIReclaimAllocations │ 0x00000234, //564 │ +│ 566 │ NtGdiDdDDIReclaimAllocations2 │ 0x00000235, //565 │ +│ 567 │ NtGdiDdDDIReleaseKeyedMutex │ 0x00000236, //566 │ +│ 568 │ NtGdiDdDDIReleaseKeyedMutex2 │ 0x00000237, //567 │ +│ 569 │ NtGdiDdDDIReleaseProcessVidPnSourceOwners │ 0x00000238, //568 │ +│ 570 │ NtGdiDdDDIReleaseSwapChain │ 0x00000239, //569 │ +│ 571 │ NtGdiDdDDIRemoveSurfaceFromSwapChain │ 0x0000023A, //570 │ +│ 572 │ NtGdiDdDDIRender │ 0x0000023B, //571 │ +│ 573 │ NtGdiDdDDIReserveGpuVirtualAddress │ 0x0000023C, //572 │ +│ 574 │ NtGdiDdDDISetAllocationPriority │ 0x0000023D, //573 │ +│ 575 │ NtGdiDdDDISetContextInProcessSchedulingPriority │ 0x0000023E, //574 │ +│ 576 │ NtGdiDdDDISetContextSchedulingPriority │ 0x0000023F, //575 │ +│ 577 │ NtGdiDdDDISetDisplayMode │ 0x00000240, //576 │ +│ 578 │ NtGdiDdDDISetDodIndirectSwapchain │ 0x00000241, //577 │ +│ 579 │ NtGdiDdDDISetFSEBlock │ 0x00000242, //578 │ +│ 580 │ NtGdiDdDDISetGammaRamp │ 0x00000243, //579 │ +│ 581 │ NtGdiDdDDISetHwProtectionTeardownRecovery │ 0x00000244, //580 │ +│ 582 │ NtGdiDdDDISetMemoryBudgetTarget │ 0x00000245, //581 │ +│ 583 │ NtGdiDdDDISetMonitorColorSpaceTransform │ 0x00000246, //582 │ +│ 584 │ NtGdiDdDDISetProcessDeviceRemovalSupport │ 0x00000247, //583 │ +│ 585 │ NtGdiDdDDISetProcessSchedulingPriorityBand │ 0x00000248, //584 │ +│ 586 │ NtGdiDdDDISetProcessSchedulingPriorityClass │ 0x00000249, //585 │ +│ 587 │ NtGdiDdDDISetQueuedLimit │ 0x0000024A, //586 │ +│ 588 │ NtGdiDdDDISetStablePowerState │ 0x0000024B, //587 │ +│ 589 │ NtGdiDdDDISetStereoEnabled │ 0x0000024C, //588 │ +│ 590 │ NtGdiDdDDISetSyncRefreshCountWaitTarget │ 0x0000024D, //589 │ +│ 591 │ NtGdiDdDDISetVidPnSourceHwProtection │ 0x0000024E, //590 │ +│ 592 │ NtGdiDdDDISetVidPnSourceOwner │ 0x0000024F, //591 │ +│ 593 │ NtGdiDdDDISetYieldPercentage │ 0x00000250, //592 │ +│ 594 │ NtGdiDdDDIShareObjects │ 0x00000251, //593 │ +│ 595 │ NtGdiDdDDISharedPrimaryLockNotification │ 0x00000252, //594 │ +│ 596 │ NtGdiDdDDISharedPrimaryUnLockNotification │ 0x00000253, //595 │ +│ 597 │ NtGdiDdDDISignalSynchronizationObject │ 0x00000254, //596 │ +│ 598 │ NtGdiDdDDISignalSynchronizationObjectFromCpu │ 0x00000255, //597 │ +│ 599 │ NtGdiDdDDISignalSynchronizationObjectFromGpu │ 0x00000256, //598 │ +│ 600 │ NtGdiDdDDISignalSynchronizationObjectFromGpu2 │ 0x00000257, //599 │ +│ 601 │ NtGdiDdDDISubmitCommand │ 0x00000258, //600 │ +│ 602 │ NtGdiDdDDISubmitCommandToHwQueue │ 0x00000259, //601 │ +│ 603 │ NtGdiDdDDISubmitSignalSyncObjectsToHwQueue │ 0x0000025A, //602 │ +│ 604 │ NtGdiDdDDISubmitWaitForSyncObjectsToHwQueue │ 0x0000025B, //603 │ +│ 605 │ NtGdiDdDDITrimProcessCommitment │ 0x0000025C, //604 │ +│ 606 │ NtGdiDdDDIUnOrderedPresentSwapChain │ 0x0000025D, //605 │ +│ 607 │ NtGdiDdDDIUnlock │ 0x0000025E, //606 │ +│ 608 │ NtGdiDdDDIUnlock2 │ 0x0000025F, //607 │ +│ 609 │ NtGdiDdDDIUpdateAllocationProperty │ 0x00000260, //608 │ +│ 610 │ NtGdiDdDDIUpdateGpuVirtualAddress │ 0x00000261, //609 │ +│ 611 │ NtGdiDdDDIUpdateOverlay │ 0x00000262, //610 │ +│ 612 │ NtGdiDdDDIWaitForIdle │ 0x00000263, //611 │ +│ 613 │ NtGdiDdDDIWaitForSynchronizationObject │ 0x00000264, //612 │ +│ 614 │ NtGdiDdDDIWaitForSynchronizationObjectFromCpu │ 0x00000265, //613 │ +│ 615 │ NtGdiDdDDIWaitForSynchronizationObjectFromGpu │ 0x00000266, //614 │ +│ 616 │ NtGdiDdDDIWaitForVerticalBlankEvent │ 0x00000267, //615 │ +│ 617 │ NtGdiDdDDIWaitForVerticalBlankEvent2 │ 0x00000268, //616 │ +│ 618 │ NtGdiDdDestroyFullscreenSprite │ 0x00000269, //617 │ +│ 619 │ NtGdiDdNotifyFullscreenSpriteUpdate │ 0x0000026A, //618 │ +│ 620 │ NtGdiDdQueryVisRgnUniqueness │ 0x0000026B, //619 │ +│ 621 │ NtGdiDeleteColorTransform │ 0x0000026C, //620 │ +│ 622 │ NtGdiDescribePixelFormat │ 0x0000026D, //621 │ +│ 623 │ NtGdiDestroyOPMProtectedOutput │ 0x0000026E, //622 │ +│ 624 │ NtGdiDestroyPhysicalMonitor │ 0x0000026F, //623 │ +│ 625 │ NtGdiDoBanding │ 0x00000270, //624 │ +│ 626 │ NtGdiDrawEscape │ 0x00000271, //625 │ +│ 627 │ NtGdiDwmCreatedBitmapRemotingOutput │ 0x00000272, //626 │ +│ 628 │ NtGdiEllipse │ 0x00000273, //627 │ +│ 629 │ NtGdiEnableEudc │ 0x00000274, //628 │ +│ 630 │ NtGdiEndDoc │ 0x00000275, //629 │ +│ 631 │ NtGdiEndGdiRendering │ 0x00000276, //630 │ +│ 632 │ NtGdiEndPage │ 0x00000277, //631 │ +│ 633 │ NtGdiEngAlphaBlend │ 0x00000278, //632 │ +│ 634 │ NtGdiEngAssociateSurface │ 0x00000279, //633 │ +│ 635 │ NtGdiEngBitBlt │ 0x0000027A, //634 │ +│ 636 │ NtGdiEngCheckAbort │ 0x0000027B, //635 │ +│ 637 │ NtGdiEngComputeGlyphSet │ 0x0000027C, //636 │ +│ 638 │ NtGdiEngCopyBits │ 0x0000027D, //637 │ +│ 639 │ NtGdiEngCreateBitmap │ 0x0000027E, //638 │ +│ 640 │ NtGdiEngCreateClip │ 0x0000027F, //639 │ +│ 641 │ NtGdiEngCreateDeviceBitmap │ 0x00000280, //640 │ +│ 642 │ NtGdiEngCreateDeviceSurface │ 0x00000281, //641 │ +│ 643 │ NtGdiEngCreatePalette │ 0x00000282, //642 │ +│ 644 │ NtGdiEngDeleteClip │ 0x00000283, //643 │ +│ 645 │ NtGdiEngDeletePalette │ 0x00000284, //644 │ +│ 646 │ NtGdiEngDeletePath │ 0x00000285, //645 │ +│ 647 │ NtGdiEngDeleteSurface │ 0x00000286, //646 │ +│ 648 │ NtGdiEngEraseSurface │ 0x00000287, //647 │ +│ 649 │ NtGdiEngFillPath │ 0x00000288, //648 │ +│ 650 │ NtGdiEngGradientFill │ 0x00000289, //649 │ +│ 651 │ NtGdiEngLineTo │ 0x0000028A, //650 │ +│ 652 │ NtGdiEngLockSurface │ 0x0000028B, //651 │ +│ 653 │ NtGdiEngMarkBandingSurface │ 0x0000028C, //652 │ +│ 654 │ NtGdiEngPaint │ 0x0000028D, //653 │ +│ 655 │ NtGdiEngPlgBlt │ 0x0000028E, //654 │ +│ 656 │ NtGdiEngStretchBlt │ 0x0000028F, //655 │ +│ 657 │ NtGdiEngStretchBltROP │ 0x00000290, //656 │ +│ 658 │ NtGdiEngStrokeAndFillPath │ 0x00000291, //657 │ +│ 659 │ NtGdiEngStrokePath │ 0x00000292, //658 │ +│ 660 │ NtGdiEngTextOut │ 0x00000293, //659 │ +│ 661 │ NtGdiEngTransparentBlt │ 0x00000294, //660 │ +│ 662 │ NtGdiEngUnlockSurface │ 0x00000295, //661 │ +│ 663 │ NtGdiEnsureDpiDepDefaultGuiFontForPlateau │ 0x00000296, //662 │ +│ 664 │ NtGdiEnumFonts │ 0x00000297, //663 │ +│ 665 │ NtGdiEnumObjects │ 0x00000298, //664 │ +│ 666 │ NtGdiEudcLoadUnloadLink │ 0x00000299, //665 │ +│ 667 │ NtGdiExtFloodFill │ 0x0000029A, //666 │ +│ 668 │ NtGdiFONTOBJ_cGetAllGlyphHandles │ 0x0000029B, //667 │ +│ 669 │ NtGdiFONTOBJ_cGetGlyphs │ 0x0000029C, //668 │ +│ 670 │ NtGdiFONTOBJ_pQueryGlyphAttrs │ 0x0000029D, //669 │ +│ 671 │ NtGdiFONTOBJ_pfdg │ 0x0000029E, //670 │ +│ 672 │ NtGdiFONTOBJ_pifi │ 0x0000029F, //671 │ +│ 673 │ NtGdiFONTOBJ_pvTrueTypeFontFile │ 0x000002A0, //672 │ +│ 674 │ NtGdiFONTOBJ_pxoGetXform │ 0x000002A1, //673 │ +│ 675 │ NtGdiFONTOBJ_vGetInfo │ 0x000002A2, //674 │ +│ 676 │ NtGdiFlattenPath │ 0x000002A3, //675 │ +│ 677 │ NtGdiFontIsLinked │ 0x000002A4, //676 │ +│ 678 │ NtGdiForceUFIMapping │ 0x000002A5, //677 │ +│ 679 │ NtGdiFrameRgn │ 0x000002A6, //678 │ +│ 680 │ NtGdiFullscreenControl │ 0x000002A7, //679 │ +│ 681 │ NtGdiGetBitmapDpiScaleValue │ 0x000002A8, //680 │ +│ 682 │ NtGdiGetBoundsRect │ 0x000002A9, //681 │ +│ 683 │ NtGdiGetCOPPCompatibleOPMInformation │ 0x000002AA, //682 │ +│ 684 │ NtGdiGetCertificate │ 0x000002AB, //683 │ +│ 685 │ NtGdiGetCertificateByHandle │ 0x000002AC, //684 │ +│ 686 │ NtGdiGetCertificateSize │ 0x000002AD, //685 │ +│ 687 │ NtGdiGetCertificateSizeByHandle │ 0x000002AE, //686 │ +│ 688 │ NtGdiGetCharABCWidthsW │ 0x000002AF, //687 │ +│ 689 │ NtGdiGetCharacterPlacementW │ 0x000002B0, //688 │ +│ 690 │ NtGdiGetColorAdjustment │ 0x000002B1, //689 │ +│ 691 │ NtGdiGetColorSpaceforBitmap │ 0x000002B2, //690 │ +│ 692 │ NtGdiGetCurrentDpiInfo │ 0x000002B3, //691 │ +│ 693 │ NtGdiGetDCDpiScaleValue │ 0x000002B4, //692 │ +│ 694 │ NtGdiGetDeviceCaps │ 0x000002B5, //693 │ +│ 695 │ NtGdiGetDeviceCapsAll │ 0x000002B6, //694 │ +│ 696 │ NtGdiGetDeviceWidth │ 0x000002B7, //695 │ +│ 697 │ NtGdiGetDhpdev │ 0x000002B8, //696 │ +│ 698 │ NtGdiGetETM │ 0x000002B9, //697 │ +│ 699 │ NtGdiGetEmbUFI │ 0x000002BA, //698 │ +│ 700 │ NtGdiGetEmbedFonts │ 0x000002BB, //699 │ +│ 701 │ NtGdiGetEntry │ 0x000002BC, //700 │ +│ 702 │ NtGdiGetEudcTimeStampEx │ 0x000002BD, //701 │ +│ 703 │ NtGdiGetFontFileData │ 0x000002BE, //702 │ +│ 704 │ NtGdiGetFontFileInfo │ 0x000002BF, //703 │ +│ 705 │ NtGdiGetFontResourceInfoInternalW │ 0x000002C0, //704 │ +│ 706 │ NtGdiGetFontUnicodeRanges │ 0x000002C1, //705 │ +│ 707 │ NtGdiGetGlyphIndicesW │ 0x000002C2, //706 │ +│ 708 │ NtGdiGetGlyphIndicesWInternal │ 0x000002C3, //707 │ +│ 709 │ NtGdiGetGlyphOutline │ 0x000002C4, //708 │ +│ 710 │ NtGdiGetKerningPairs │ 0x000002C5, //709 │ +│ 711 │ NtGdiGetLinkedUFIs │ 0x000002C6, //710 │ +│ 712 │ NtGdiGetMiterLimit │ 0x000002C7, //711 │ +│ 713 │ NtGdiGetMonitorID │ 0x000002C8, //712 │ +│ 714 │ NtGdiGetNumberOfPhysicalMonitors │ 0x000002C9, //713 │ +│ 715 │ NtGdiGetOPMInformation │ 0x000002CA, //714 │ +│ 716 │ NtGdiGetOPMRandomNumber │ 0x000002CB, //715 │ +│ 717 │ NtGdiGetObjectBitmapHandle │ 0x000002CC, //716 │ +│ 718 │ NtGdiGetPath │ 0x000002CD, //717 │ +│ 719 │ NtGdiGetPerBandInfo │ 0x000002CE, //718 │ +│ 720 │ NtGdiGetPhysicalMonitorDescription │ 0x000002CF, //719 │ +│ 721 │ NtGdiGetPhysicalMonitors │ 0x000002D0, //720 │ +│ 722 │ NtGdiGetProcessSessionFonts │ 0x000002D1, //721 │ +│ 723 │ NtGdiGetPublicFontTableChangeCookie │ 0x000002D2, //722 │ +│ 724 │ NtGdiGetRealizationInfo │ 0x000002D3, //723 │ +│ 725 │ NtGdiGetServerMetaFileBits │ 0x000002D4, //724 │ +│ 726 │ NtGdiGetSpoolMessage │ 0x000002D5, //725 │ +│ 727 │ NtGdiGetStats │ 0x000002D6, //726 │ +│ 728 │ NtGdiGetStringBitmapW │ 0x000002D7, //727 │ +│ 729 │ NtGdiGetSuggestedOPMProtectedOutputArraySize │ 0x000002D8, //728 │ +│ 730 │ NtGdiGetTextExtentExW │ 0x000002D9, //729 │ +│ 731 │ NtGdiGetUFI │ 0x000002DA, //730 │ +│ 732 │ NtGdiGetUFIPathname │ 0x000002DB, //731 │ +│ 733 │ NtGdiGradientFill │ 0x000002DC, //732 │ +│ 734 │ NtGdiHLSurfGetInformation │ 0x000002DD, //733 │ +│ 735 │ NtGdiHLSurfSetInformation │ 0x000002DE, //734 │ +│ 736 │ NtGdiHT_Get8BPPFormatPalette │ 0x000002DF, //735 │ +│ 737 │ NtGdiHT_Get8BPPMaskPalette │ 0x000002E0, //736 │ +│ 738 │ NtGdiIcmBrushInfo │ 0x000002E1, //737 │ +│ 739 │ NtGdiInit │ 0x000002E2, //738 │ +│ 740 │ NtGdiInitSpool │ 0x000002E3, //739 │ +│ 741 │ NtGdiMakeFontDir │ 0x000002E4, //740 │ +│ 742 │ NtGdiMakeInfoDC │ 0x000002E5, //741 │ +│ 743 │ NtGdiMakeObjectUnXferable │ 0x000002E6, //742 │ +│ 744 │ NtGdiMakeObjectXferable │ 0x000002E7, //743 │ +│ 745 │ NtGdiMirrorWindowOrg │ 0x000002E8, //744 │ +│ 746 │ NtGdiMonoBitmap │ 0x000002E9, //745 │ +│ 747 │ NtGdiMoveTo │ 0x000002EA, //746 │ +│ 748 │ NtGdiOffsetClipRgn │ 0x000002EB, //747 │ +│ 749 │ NtGdiPATHOBJ_bEnum │ 0x000002EC, //748 │ +│ 750 │ NtGdiPATHOBJ_bEnumClipLines │ 0x000002ED, //749 │ +│ 751 │ NtGdiPATHOBJ_vEnumStart │ 0x000002EE, //750 │ +│ 752 │ NtGdiPATHOBJ_vEnumStartClipLines │ 0x000002EF, //751 │ +│ 753 │ NtGdiPATHOBJ_vGetBounds │ 0x000002F0, //752 │ +│ 754 │ NtGdiPathToRegion │ 0x000002F1, //753 │ +│ 755 │ NtGdiPlgBlt │ 0x000002F2, //754 │ +│ 756 │ NtGdiPolyDraw │ 0x000002F3, //755 │ +│ 757 │ NtGdiPolyTextOutW │ 0x000002F4, //756 │ +│ 758 │ NtGdiPtInRegion │ 0x000002F5, //757 │ +│ 759 │ NtGdiPtVisible │ 0x000002F6, //758 │ +│ 760 │ NtGdiQueryFonts │ 0x000002F7, //759 │ +│ 761 │ NtGdiRemoveFontResourceW │ 0x000002F8, //760 │ +│ 762 │ NtGdiRemoveMergeFont │ 0x000002F9, //761 │ +│ 763 │ NtGdiResetDC │ 0x000002FA, //762 │ +│ 764 │ NtGdiResizePalette │ 0x000002FB, //763 │ +│ 765 │ NtGdiRoundRect │ 0x000002FC, //764 │ +│ 766 │ NtGdiSTROBJ_bEnum │ 0x000002FD, //765 │ +│ 767 │ NtGdiSTROBJ_bEnumPositionsOnly │ 0x000002FE, //766 │ +│ 768 │ NtGdiSTROBJ_bGetAdvanceWidths │ 0x000002FF, //767 │ +│ 769 │ NtGdiSTROBJ_dwGetCodePage │ 0x00000300, //768 │ +│ 770 │ NtGdiSTROBJ_vEnumStart │ 0x00000301, //769 │ +│ 771 │ NtGdiScaleRgn │ 0x00000302, //770 │ +│ 772 │ NtGdiScaleValues │ 0x00000303, //771 │ +│ 773 │ NtGdiScaleViewportExtEx │ 0x00000304, //772 │ +│ 774 │ NtGdiScaleWindowExtEx │ 0x00000305, //773 │ +│ 775 │ NtGdiSelectBrush │ 0x00000306, //774 │ +│ 776 │ NtGdiSelectClipPath │ 0x00000307, //775 │ +│ 777 │ NtGdiSelectPen │ 0x00000308, //776 │ +│ 778 │ NtGdiSetBitmapAttributes │ 0x00000309, //777 │ +│ 779 │ NtGdiSetBrushAttributes │ 0x0000030A, //778 │ +│ 780 │ NtGdiSetColorAdjustment │ 0x0000030B, //779 │ +│ 781 │ NtGdiSetColorSpace │ 0x0000030C, //780 │ +│ 782 │ NtGdiSetFontXform │ 0x0000030D, //781 │ +│ 783 │ NtGdiSetIcmMode │ 0x0000030E, //782 │ +│ 784 │ NtGdiSetLinkedUFIs │ 0x0000030F, //783 │ +│ 785 │ NtGdiSetMagicColors │ 0x00000310, //784 │ +│ 786 │ NtGdiSetOPMSigningKeyAndSequenceNumbers │ 0x00000311, //785 │ +│ 787 │ NtGdiSetPUMPDOBJ │ 0x00000312, //786 │ +│ 788 │ NtGdiSetPixelFormat │ 0x00000313, //787 │ +│ 789 │ NtGdiSetRectRgn │ 0x00000314, //788 │ +│ 790 │ NtGdiSetSizeDevice │ 0x00000315, //789 │ +│ 791 │ NtGdiSetSystemPaletteUse │ 0x00000316, //790 │ +│ 792 │ NtGdiSetTextJustification │ 0x00000317, //791 │ +│ 793 │ NtGdiSetUMPDSandboxState │ 0x00000318, //792 │ +│ 794 │ NtGdiStartDoc │ 0x00000319, //793 │ +│ 795 │ NtGdiStartPage │ 0x0000031A, //794 │ +│ 796 │ NtGdiStrokeAndFillPath │ 0x0000031B, //795 │ +│ 797 │ NtGdiStrokePath │ 0x0000031C, //796 │ +│ 798 │ NtGdiSwapBuffers │ 0x0000031D, //797 │ +│ 799 │ NtGdiTransparentBlt │ 0x0000031E, //798 │ +│ 800 │ NtGdiUMPDEngFreeUserMem │ 0x0000031F, //799 │ +│ 801 │ NtGdiUnloadPrinterDriver │ 0x00000320, //800 │ +│ 802 │ NtGdiUnmapMemFont │ 0x00000321, //801 │ +│ 803 │ NtGdiUpdateColors │ 0x00000322, //802 │ +│ 804 │ NtGdiUpdateTransform │ 0x00000323, //803 │ +│ 805 │ NtGdiWaitForTextReady │ 0x00000324, //804 │ +│ 806 │ NtGdiWidenPath │ 0x00000325, //805 │ +│ 807 │ NtGdiXFORMOBJ_bApplyXform │ 0x00000326, //806 │ +│ 808 │ NtGdiXFORMOBJ_iGetXform │ 0x00000327, //807 │ +│ 809 │ NtGdiXLATEOBJ_cGetPalette │ 0x00000328, //808 │ +│ 810 │ NtGdiXLATEOBJ_hGetColorTransform │ 0x00000329, //809 │ +│ 811 │ NtGdiXLATEOBJ_iXlate │ 0x0000032A, //810 │ +│ 812 │ NtUserGetOwnerTransformedMonitorRect │ 0x0000032B, //811 │ +│ 813 │ NtHWCursorUpdatePointer │ 0x0000032C, //812 │ +│ 814 │ NtInputSpaceRegionFromPoint │ 0x0000032D, //813 │ +│ 815 │ NtIsOneCoreTransformMode │ 0x0000032E, //814 │ +│ 816 │ NtKSTInitialize │ 0x0000032F, //815 │ +│ 817 │ NtKSTWait │ 0x00000330, //816 │ +│ 818 │ NtMITAccessibilityTimerNotification │ 0x00000331, //817 │ +│ 819 │ NtMITActivateInputProcessing │ 0x00000332, //818 │ +│ 820 │ NtMITConfigureVirtualTouchpad │ 0x00000333, //819 │ +│ 821 │ NtMITCoreMsgKOpenConnectionTo │ 0x00000334, //820 │ +│ 822 │ NtMITDeactivateInputProcessing │ 0x00000335, //821 │ +│ 823 │ NtMITDisableMouseIntercept │ 0x00000336, //822 │ +│ 824 │ NtMITDispatchCompletion │ 0x00000337, //823 │ +│ 825 │ NtMITEnableMouseIntercept │ 0x00000338, //824 │ +│ 826 │ NtMITGetCursorUpdateHandle │ 0x00000339, //825 │ +│ 827 │ NtMITInitMinuserThread │ 0x0000033A, //826 │ +│ 828 │ NtMITMinuserSetInputTransformOffset │ 0x0000033B, //827 │ +│ 829 │ NtMITMinuserWindowDestroyed │ 0x0000033C, //828 │ +│ 830 │ NtMITPostMouseInputMessage │ 0x0000033D, //829 │ +│ 831 │ NtMITPostThreadEventMessage │ 0x0000033E, //830 │ +│ 832 │ NtMITPostWindowEventMessage │ 0x0000033F, //831 │ +│ 833 │ NtMITPrepareReceiveInputMessage │ 0x00000340, //832 │ +│ 834 │ NtMITPrepareSendInputMessage │ 0x00000341, //833 │ +│ 835 │ NtMITProcessDelegateCapturedPointers │ 0x00000342, //834 │ +│ 836 │ NtMITSetInputCallbacks │ 0x00000343, //835 │ +│ 837 │ NtMITSetInputDelegationMode │ 0x00000344, //836 │ +│ 838 │ NtMITSetInputObservationState │ 0x00000345, //837 │ +│ 839 │ NtMITSetKeyboardInputRoutingPolicy │ 0x00000346, //838 │ +│ 840 │ NtMITSetKeyboardOverriderState │ 0x00000347, //839 │ +│ 841 │ NtMITSetLastInputRecipient │ 0x00000348, //840 │ +│ 842 │ NtMITSynthesizeKeyboardInput │ 0x00000349, //841 │ +│ 843 │ NtMITSynthesizeMouseInput │ 0x0000034A, //842 │ +│ 844 │ NtMITSynthesizeTouchInput │ 0x0000034B, //843 │ +│ 845 │ NtMITUninitMinuserThread │ 0x0000034C, //844 │ +│ 846 │ NtMITUpdateInputGlobals │ 0x0000034D, //845 │ +│ 847 │ NtMapVisualRelativePoints │ 0x0000034E, //846 │ +│ 848 │ NtMinGetInputTransform │ 0x0000034F, //847 │ +│ 849 │ NtMinInteropCoreMessagingWithInput │ 0x00000350, //848 │ +│ 850 │ NtMinQPeekForInput │ 0x00000351, //849 │ +│ 851 │ NtMinQSuspendInputProcessing │ 0x00000352, //850 │ +│ 852 │ NtMinQUpdateWakeMask │ 0x00000353, //851 │ +│ 853 │ NtModerncoreBeginLayoutUpdate │ 0x00000354, //852 │ +│ 854 │ NtModerncoreCreateDCompositionHwndTarget │ 0x00000355, //853 │ +│ 855 │ NtModerncoreCreateGDIHwndTarget │ 0x00000356, //854 │ +│ 856 │ NtModerncoreDestroyDCompositionHwndTarget │ 0x00000357, //855 │ +│ 857 │ NtModerncoreDestroyGDIHwndTarget │ 0x00000358, //856 │ +│ 858 │ NtModerncoreEnableResizeLayoutSynchronization │ 0x00000359, //857 │ +│ 859 │ NtModerncoreGetNavigationWindowVisual │ 0x0000035A, //858 │ +│ 860 │ NtModerncoreGetResizeDCompositionSynchronizationObject │ 0x0000035B, //859 │ +│ 861 │ NtModerncoreGetWindowContentVisual │ 0x0000035C, //860 │ +│ 862 │ NtModerncoreIdleTimerThread │ 0x0000035D, //861 │ +│ 863 │ NtModerncoreIsResizeLayoutSynchronizationEnabled │ 0x0000035E, //862 │ +│ 864 │ NtModerncoreProcessConnect │ 0x0000035F, //863 │ +│ 865 │ NtModerncoreRegisterEnhancedNavigationWindowHandle │ 0x00000360, //864 │ +│ 866 │ NtModerncoreRegisterNavigationWindowHandle │ 0x00000361, //865 │ +│ 867 │ NtModerncoreSetNavigationServiceSid │ 0x00000362, //866 │ +│ 868 │ NtModerncoreUnregisterNavigationWindowHandle │ 0x00000363, //867 │ +│ 869 │ NtNotifyPresentToCompositionSurface │ 0x00000364, //868 │ +│ 870 │ NtOpenCompositionSurfaceDirtyRegion │ 0x00000365, //869 │ +│ 871 │ NtOpenCompositionSurfaceRealizationInfo │ 0x00000366, //870 │ +│ 872 │ NtOpenCompositionSurfaceSectionInfo │ 0x00000367, //871 │ +│ 873 │ NtQueryCompositionInputIsImplicit │ 0x00000368, //872 │ +│ 874 │ NtQueryCompositionInputQueueAndTransform │ 0x00000369, //873 │ +│ 875 │ NtQueryCompositionInputSink │ 0x0000036A, //874 │ +│ 876 │ NtQueryCompositionInputSinkLuid │ 0x0000036B, //875 │ +│ 877 │ NtQueryCompositionInputSinkViewId │ 0x0000036C, //876 │ +│ 878 │ NtQueryCompositionSurfaceBinding │ 0x0000036D, //877 │ +│ 879 │ NtQueryCompositionSurfaceFrameRate │ 0x0000036E, //878 │ +│ 880 │ NtQueryCompositionSurfaceHDRMetaData │ 0x0000036F, //879 │ +│ 881 │ NtQueryCompositionSurfaceRenderingRealization │ 0x00000370, //880 │ +│ 882 │ NtQueryCompositionSurfaceStatistics │ 0x00000371, //881 │ +│ 883 │ NtRIMAddInputObserver │ 0x00000372, //882 │ +│ 884 │ NtRIMAreSiblingDevices │ 0x00000373, //883 │ +│ 885 │ NtRIMDeviceIoControl │ 0x00000374, //884 │ +│ 886 │ NtRIMEnableMonitorMappingForDevice │ 0x00000375, //885 │ +│ 887 │ NtRIMFreeInputBuffer │ 0x00000376, //886 │ +│ 888 │ NtRIMGetDevicePreparsedData │ 0x00000377, //887 │ +│ 889 │ NtRIMGetDevicePreparsedDataLockfree │ 0x00000378, //888 │ +│ 890 │ NtRIMGetDeviceProperties │ 0x00000379, //889 │ +│ 891 │ NtRIMGetDevicePropertiesLockfree │ 0x0000037A, //890 │ +│ 892 │ NtRIMGetPhysicalDeviceRect │ 0x0000037B, //891 │ +│ 893 │ NtRIMGetSourceProcessId │ 0x0000037C, //892 │ +│ 894 │ NtRIMObserveNextInput │ 0x0000037D, //893 │ +│ 895 │ NtRIMOnAsyncPnpWorkNotification │ 0x0000037E, //894 │ +│ 896 │ NtRIMOnPnpNotification │ 0x0000037F, //895 │ +│ 897 │ NtRIMOnTimerNotification │ 0x00000380, //896 │ +│ 898 │ NtRIMQueryDevicePath │ 0x00000381, //897 │ +│ 899 │ NtRIMReadInput │ 0x00000382, //898 │ +│ 900 │ NtRIMRegisterForInputEx │ 0x00000383, //899 │ +│ 901 │ NtRIMRemoveInputObserver │ 0x00000384, //900 │ +│ 902 │ NtRIMSetDeadzoneRotation │ 0x00000385, //901 │ +│ 903 │ NtRIMSetExtendedDeviceProperty │ 0x00000386, //902 │ +│ 904 │ NtRIMSetTestModeStatus │ 0x00000387, //903 │ +│ 905 │ NtRIMUnregisterForInput │ 0x00000388, //904 │ +│ 906 │ NtRIMUpdateInputObserverRegistration │ 0x00000389, //905 │ +│ 907 │ NtSetCompositionSurfaceAnalogExclusive │ 0x0000038A, //906 │ +│ 908 │ NtSetCompositionSurfaceBufferUsage │ 0x0000038B, //907 │ +│ 909 │ NtSetCompositionSurfaceDirectFlipState │ 0x0000038C, //908 │ +│ 910 │ NtSetCompositionSurfaceIndependentFlipInfo │ 0x0000038D, //909 │ +│ 911 │ NtSetCompositionSurfaceStatistics │ 0x0000038E, //910 │ +│ 912 │ NtSetCursorInputSpace │ 0x0000038F, //911 │ +│ 913 │ NtSetPointerDeviceInputSpace │ 0x00000390, //912 │ +│ 914 │ NtSetShellCursorState │ 0x00000391, //913 │ +│ 915 │ NtTokenManagerConfirmOutstandingAnalogToken │ 0x00000392, //914 │ +│ 916 │ NtTokenManagerCreateCompositionTokenHandle │ 0x00000393, //915 │ +│ 917 │ NtTokenManagerCreateFlipObjectReturnTokenHandle │ 0x00000394, //916 │ +│ 918 │ NtTokenManagerCreateFlipObjectTokenHandle │ 0x00000395, //917 │ +│ 919 │ NtTokenManagerGetAnalogExclusiveSurfaceUpdates │ 0x00000396, //918 │ +│ 920 │ NtTokenManagerGetAnalogExclusiveTokenEvent │ 0x00000397, //919 │ +│ 921 │ NtTokenManagerOpenSectionAndEvents │ 0x00000398, //920 │ +│ 922 │ NtTokenManagerThread │ 0x00000399, //921 │ +│ 923 │ NtUnBindCompositionSurface │ 0x0000039A, //922 │ +│ 924 │ NtUpdateInputSinkTransforms │ 0x0000039B, //923 │ +│ 925 │ NtUserAcquireIAMKey │ 0x0000039C, //924 │ +│ 926 │ NtUserAcquireInteractiveControlBackgroundAccess │ 0x0000039D, //925 │ +│ 927 │ NtUserAddClipboardFormatListener │ 0x0000039E, //926 │ +│ 928 │ NtUserAddVisualIdentifier │ 0x0000039F, //927 │ +│ 929 │ NtUserAllowSetForegroundWindow │ 0x000003A0, //928 │ +│ 930 │ NtUserArrangeIconicWindows │ 0x000003A1, //929 │ +│ 931 │ NtUserAssociateInputContext │ 0x000003A2, //930 │ +│ 932 │ NtUserAutoPromoteMouseInPointer │ 0x000003A3, //931 │ +│ 933 │ NtUserAutoRotateScreen │ 0x000003A4, //932 │ +│ 934 │ NtUserBeginDeferWindowPos │ 0x000003A5, //933 │ +│ 935 │ NtUserBeginLayoutUpdate │ 0x000003A6, //934 │ +│ 936 │ NtUserBlockInput │ 0x000003A7, //935 │ +│ 937 │ NtUserBroadcastImeShowStatusChange │ 0x000003A8, //936 │ +│ 938 │ NtUserBroadcastThemeChangeEvent │ 0x000003A9, //937 │ +│ 939 │ NtUserBuildHimcList │ 0x000003AA, //938 │ +│ 940 │ NtUserBuildPropList │ 0x000003AB, //939 │ +│ 941 │ NtUserCalculatePopupWindowPosition │ 0x000003AC, //940 │ +│ 942 │ NtUserCanBrokerForceForeground │ 0x000003AD, //941 │ +│ 943 │ NtUserCancelQueueEventCompletionPacket │ 0x000003AE, //942 │ +│ 944 │ NtUserChangeDisplaySettings │ 0x000003AF, //943 │ +│ 945 │ NtUserChangeWindowMessageFilter │ 0x000003B0, //944 │ +│ 946 │ NtUserChangeWindowMessageFilterEx │ 0x000003B1, //945 │ +│ 947 │ NtUserCheckAccessForIntegrityLevel │ 0x000003B2, //946 │ +│ 948 │ NtUserCheckImeShowStatusInThread │ 0x000003B3, //947 │ +│ 949 │ NtUserCheckProcessForClipboardAccess │ 0x000003B4, //948 │ +│ 950 │ NtUserCheckProcessSession │ 0x000003B5, //949 │ +│ 951 │ NtUserCheckWindowThreadDesktop │ 0x000003B6, //950 │ +│ 952 │ NtUserChildWindowFromPointEx │ 0x000003B7, //951 │ +│ 953 │ NtUserCitSetInfo │ 0x000003B8, //952 │ +│ 954 │ NtUserClearForeground │ 0x000003B9, //953 │ +│ 955 │ NtUserClearRunWakeBit │ 0x000003BA, //954 │ +│ 956 │ NtUserClearWakeMask │ 0x000003BB, //955 │ +│ 957 │ NtUserClearWindowState │ 0x000003BC, //956 │ +│ 958 │ NtUserClipCursor │ 0x000003BD, //957 │ +│ 959 │ NtUserCompositionInputSinkLuidFromPoint │ 0x000003BE, //958 │ +│ 960 │ NtUserCompositionInputSinkViewInstanceIdFromPoint │ 0x000003BF, //959 │ +│ 961 │ NtUserConfigureActivationObject │ 0x000003C0, //960 │ +│ 962 │ NtUserConfirmResizeCommit │ 0x000003C1, //961 │ +│ 963 │ NtUserCreateActivationObject │ 0x000003C2, //962 │ +│ 964 │ NtUserCreateBaseWindow │ 0x000003C3, //963 │ +│ 965 │ NtUserCreateDCompositionHwndTarget │ 0x000003C4, //964 │ +│ 966 │ NtUserCreateDesktopEx │ 0x000003C5, //965 │ +│ 967 │ NtUserCreateEmptyCursorObject │ 0x000003C6, //966 │ +│ 968 │ NtUserCreateInputContext │ 0x000003C7, //967 │ +│ 969 │ NtUserCreateMenu │ 0x000003C8, //968 │ +│ 970 │ NtUserCreatePalmRejectionDelayZone │ 0x000003C9, //969 │ +│ 971 │ NtUserCreatePopupMenu │ 0x000003CA, //970 │ +│ 972 │ NtUserCreateSystemThreads │ 0x000003CB, //971 │ +│ 973 │ NtUserCreateWindowStation │ 0x000003CC, //972 │ +│ 974 │ NtUserCsDdeUninitialize │ 0x000003CD, //973 │ +│ 975 │ NtUserCtxDisplayIOCtl │ 0x000003CE, //974 │ +│ 976 │ NtUserDWP_GetEnabledPopupOffset │ 0x000003CF, //975 │ +│ 977 │ NtUserDeferWindowDpiChanges │ 0x000003D0, //976 │ +│ 978 │ NtUserDeferWindowPosAndBand │ 0x000003D1, //977 │ +│ 979 │ NtUserDeferredDesktopRotation │ 0x000003D2, //978 │ +│ 980 │ NtUserDelegateCapturePointers │ 0x000003D3, //979 │ +│ 981 │ NtUserDelegateInput │ 0x000003D4, //980 │ +│ 982 │ NtUserDeregisterShellHookWindow │ 0x000003D5, //981 │ +│ 983 │ NtUserDestroyActivationObject │ 0x000003D6, //982 │ +│ 984 │ NtUserDestroyCaret │ 0x000003D7, //983 │ +│ 985 │ NtUserDestroyDCompositionHwndTarget │ 0x000003D8, //984 │ +│ 986 │ NtUserDestroyInputContext │ 0x000003D9, //985 │ +│ 987 │ NtUserDestroyPalmRejectionDelayZone │ 0x000003DA, //986 │ +│ 988 │ NtUserDisableImmersiveOwner │ 0x000003DB, //987 │ +│ 989 │ NtUserDisableProcessWindowFiltering │ 0x000003DC, //988 │ +│ 990 │ NtUserDisableProcessWindowsGhosting │ 0x000003DD, //989 │ +│ 991 │ NtUserDisableThreadIme │ 0x000003DE, //990 │ +│ 992 │ NtUserDiscardPointerFrameMessages │ 0x000003DF, //991 │ +│ 993 │ NtUserDisplayConfigGetDeviceInfo │ 0x000003E0, //992 │ +│ 994 │ NtUserDisplayConfigSetDeviceInfo │ 0x000003E1, //993 │ +│ 995 │ NtUserDoInitMessagePumpHook │ 0x000003E2, //994 │ +│ 996 │ NtUserDoSoundConnect │ 0x000003E3, //995 │ +│ 997 │ NtUserDoSoundDisconnect │ 0x000003E4, //996 │ +│ 998 │ NtUserDoUninitMessagePumpHook │ 0x000003E5, //997 │ +│ 999 │ NtUserDownlevelTouchpad │ 0x000003E6, //998 │ +│ 1000 │ NtUserDragDetect │ 0x000003E7, //999 │ +│ 1001 │ NtUserDragObject │ 0x000003E8, //1000 │ +│ 1002 │ NtUserDrainThreadCoreMessagingCompletions │ 0x000003E9, //1001 │ +│ 1003 │ NtUserDrawAnimatedRects │ 0x000003EA, //1002 │ +│ 1004 │ NtUserDrawCaption │ 0x000003EB, //1003 │ +│ 1005 │ NtUserDrawCaptionTemp │ 0x000003EC, //1004 │ +│ 1006 │ NtUserDrawMenuBar │ 0x000003ED, //1005 │ +│ 1007 │ NtUserDrawMenuBarTemp │ 0x000003EE, //1006 │ +│ 1008 │ NtUserDwmGetRemoteSessionOcclusionEvent │ 0x000003EF, //1007 │ +│ 1009 │ NtUserDwmGetRemoteSessionOcclusionState │ 0x000003F0, //1008 │ +│ 1010 │ NtUserDwmKernelShutdown │ 0x000003F1, //1009 │ +│ 1011 │ NtUserDwmKernelStartup │ 0x000003F2, //1010 │ +│ 1012 │ NtUserDwmLockScreenUpdates │ 0x000003F3, //1011 │ +│ 1013 │ NtUserDwmValidateWindow │ 0x000003F4, //1012 │ +│ 1014 │ NtUserEnableChildWindowDpiMessage │ 0x000003F5, //1013 │ +│ 1015 │ NtUserEnableIAMAccess │ 0x000003F6, //1014 │ +│ 1016 │ NtUserEnableModernAppWindowKeyboardIntercept │ 0x000003F7, //1015 │ +│ 1017 │ NtUserEnableMouseInPointer │ 0x000003F8, //1016 │ +│ 1018 │ NtUserEnableMouseInPointerForThread │ 0x000003F9, //1017 │ +│ 1019 │ NtUserEnableMouseInPointerForWindow │ 0x000003FA, //1018 │ +│ 1020 │ NtUserEnableMouseInputForCursorSuppression │ 0x000003FB, //1019 │ +│ 1021 │ NtUserEnableNonClientDpiScaling │ 0x000003FC, //1020 │ +│ 1022 │ NtUserEnableResizeLayoutSynchronization │ 0x000003FD, //1021 │ +│ 1023 │ NtUserEnableSessionForMMCSS │ 0x000003FE, //1022 │ +│ 1024 │ NtUserEnableShellWindowManagementBehavior │ 0x000003FF, //1023 │ +│ 1025 │ NtUserEnableSoftwareCursorForScreenCapture │ 0x00000400, //1024 │ +│ 1026 │ NtUserEnableTouchPad │ 0x00000401, //1025 │ +│ 1027 │ NtUserEnableWindow │ 0x00000402, //1026 │ +│ 1028 │ NtUserEnableWindowGDIScaledDpiMessage │ 0x00000403, //1027 │ +│ 1029 │ NtUserEnableWindowResizeOptimization │ 0x00000404, //1028 │ +│ 1030 │ NtUserEndMenu │ 0x00000405, //1029 │ +│ 1031 │ NtUserEnsureDpiDepSysMetCacheForPlateau │ 0x00000406, //1030 │ +│ 1032 │ NtUserEnumClipboardFormats │ 0x00000407, //1031 │ +│ 1033 │ NtUserEvent │ 0x00000408, //1032 │ +│ 1034 │ NtUserFlashWindowEx │ 0x00000409, //1033 │ +│ 1035 │ NtUserForceEnableNumpadTranslation │ 0x0000040A, //1034 │ +│ 1036 │ NtUserForceWindowToDpiForTest │ 0x0000040B, //1035 │ +│ 1037 │ NtUserFrostCrashedWindow │ 0x0000040C, //1036 │ +│ 1038 │ NtUserSetSensorPresence │ 0x0000040D, //1037 │ +│ 1039 │ NtUserFunctionalizeDisplayConfig │ 0x0000040E, //1038 │ +│ 1040 │ NtUserGetActiveProcessesDpis │ 0x0000040F, //1039 │ +│ 1041 │ NtUserGetAppImeLevel │ 0x00000410, //1040 │ +│ 1042 │ NtUserGetAutoRotationState │ 0x00000411, //1041 │ +│ 1043 │ NtUserGetCIMSSM │ 0x00000412, //1042 │ +│ 1044 │ NtUserGetCaretPos │ 0x00000413, //1043 │ +│ 1045 │ NtUserGetClassIcoCur │ 0x00000414, //1044 │ +│ 1046 │ NtUserGetClipCursor │ 0x00000415, //1045 │ +│ 1047 │ NtUserGetClipboardAccessToken │ 0x00000416, //1046 │ +│ 1048 │ NtUserGetClipboardMetadata │ 0x00000417, //1047 │ +│ 1049 │ NtUserGetClipboardViewer │ 0x00000418, //1048 │ +│ 1050 │ NtUserGetComboBoxInfo │ 0x00000419, //1049 │ +│ 1051 │ NtUserGetCurrentDpiInfoForWindow │ 0x0000041A, //1050 │ +│ 1052 │ NtUserGetCurrentInputMessageSource │ 0x0000041B, //1051 │ +│ 1053 │ NtUserGetCursor │ 0x0000041C, //1052 │ +│ 1054 │ NtUserGetCursorInfo │ 0x0000041D, //1053 │ +│ 1055 │ NtUserGetCursorPos │ 0x0000041E, //1054 │ +│ 1056 │ NtUserGetDCompositionHwndBitmap │ 0x0000041F, //1055 │ +│ 1057 │ NtUserGetDManipHookInitFunction │ 0x00000420, //1056 │ +│ 1058 │ NtUserGetDesktopID │ 0x00000421, //1057 │ +│ 1059 │ NtUserGetDesktopVisualTransform │ 0x00000422, //1058 │ +│ 1060 │ NtUserGetDeviceChangeInfo │ 0x00000423, //1059 │ +│ 1061 │ NtUserGetDisplayAutoRotationPreferences │ 0x00000424, //1060 │ +│ 1062 │ NtUserGetDisplayAutoRotationPreferencesByProcessId │ 0x00000425, //1061 │ +│ 1063 │ NtUserGetDisplayConfigBufferSizes │ 0x00000426, //1062 │ +│ 1064 │ NtUserGetDpiForCurrentProcess │ 0x00000427, //1063 │ +│ 1065 │ NtUserGetDpiForMonitor │ 0x00000428, //1064 │ +│ 1066 │ NtUserGetExtendedPointerDeviceProperty │ 0x00000429, //1065 │ +│ 1067 │ NtUserGetGestureConfig │ 0x0000042A, //1066 │ +│ 1068 │ NtUserGetGestureExtArgs │ 0x0000042B, //1067 │ +│ 1069 │ NtUserGetGestureInfo │ 0x0000042C, //1068 │ +│ 1070 │ NtUserGetGuiResources │ 0x0000042D, //1069 │ +│ 1071 │ NtUserGetHDevName │ 0x0000042E, //1070 │ +│ 1072 │ NtUserGetHimetricScaleFactorFromPixelLocation │ 0x0000042F, //1071 │ +│ 1073 │ NtUserGetIMEShowStatus │ 0x00000430, //1072 │ +│ 1074 │ NtUserGetImeHotKey │ 0x00000431, //1073 │ +│ 1075 │ NtUserGetImeInfoEx │ 0x00000432, //1074 │ +│ 1076 │ NtUserGetInputContainerId │ 0x00000433, //1075 │ +│ 1077 │ NtUserGetInputDesktop │ 0x00000434, //1076 │ +│ 1078 │ NtUserGetInputEvent │ 0x00000435, //1077 │ +│ 1079 │ NtUserGetInputLocaleInfo │ 0x00000436, //1078 │ +│ 1080 │ NtUserGetInteractiveControlDeviceInfo │ 0x00000437, //1079 │ +│ 1081 │ NtUserGetInteractiveControlInfo │ 0x00000438, //1080 │ +│ 1082 │ NtUserGetInteractiveCtrlSupportedWaveforms │ 0x00000439, //1081 │ +│ 1083 │ NtUserGetInternalWindowPos │ 0x0000043A, //1082 │ +│ 1084 │ NtUserGetKeyNameText │ 0x0000043B, //1083 │ +│ 1085 │ NtUserGetKeyboardLayout │ 0x0000043C, //1084 │ +│ 1086 │ NtUserGetKeyboardLayoutName │ 0x0000043D, //1085 │ +│ 1087 │ NtUserGetKeyboardType │ 0x0000043E, //1086 │ +│ 1088 │ NtUserGetLayeredWindowAttributes │ 0x0000043F, //1087 │ +│ 1089 │ NtUserGetListBoxInfo │ 0x00000440, //1088 │ +│ 1090 │ NtUserGetMenuIndex │ 0x00000441, //1089 │ +│ 1091 │ NtUserGetMenuItemRect │ 0x00000442, //1090 │ +│ 1092 │ NtUserGetMessagePos │ 0x00000443, //1091 │ +│ 1093 │ NtUserGetMinuserIdForBaseWindow │ 0x00000444, //1092 │ +│ 1094 │ NtUserGetModernAppWindow │ 0x00000445, //1093 │ +│ 1095 │ NtUserGetMouseMovePointsEx │ 0x00000446, //1094 │ +│ 1096 │ NtUserGetOemBitmapSize │ 0x00000447, //1095 │ +│ 1097 │ NtUserGetPhysicalDeviceRect │ 0x00000448, //1096 │ +│ 1098 │ NtUserGetPointerCursorId │ 0x00000449, //1097 │ +│ 1099 │ NtUserGetPointerDevice │ 0x0000044A, //1098 │ +│ 1100 │ NtUserGetPointerDeviceCursors │ 0x0000044B, //1099 │ +│ 1101 │ NtUserGetPointerDeviceInputSpace │ 0x0000044C, //1100 │ +│ 1102 │ NtUserGetPointerDeviceOrientation │ 0x0000044D, //1101 │ +│ 1103 │ NtUserGetPointerDeviceProperties │ 0x0000044E, //1102 │ +│ 1104 │ NtUserGetPointerDeviceRects │ 0x0000044F, //1103 │ +│ 1105 │ NtUserGetPointerDevices │ 0x00000450, //1104 │ +│ 1106 │ NtUserGetPointerFrameTimes │ 0x00000451, //1105 │ +│ 1107 │ NtUserGetPointerInfoList │ 0x00000452, //1106 │ +│ 1108 │ NtUserGetPointerInputTransform │ 0x00000453, //1107 │ +│ 1109 │ NtUserGetPointerProprietaryId │ 0x00000454, //1108 │ +│ 1110 │ NtUserGetPointerType │ 0x00000455, //1109 │ +│ 1111 │ NtUserGetPrecisionTouchPadConfiguration │ 0x00000456, //1110 │ +│ 1112 │ NtUserGetPriorityClipboardFormat │ 0x00000457, //1111 │ +│ 1113 │ NtUserGetProcessDefaultLayout │ 0x00000458, //1112 │ +│ 1114 │ NtUserGetProcessDpiAwarenessContext │ 0x00000459, //1113 │ +│ 1115 │ NtUserGetProcessUIContextInformation │ 0x0000045A, //1114 │ +│ 1116 │ NtUserGetQueueIocp │ 0x0000045B, //1115 │ +│ 1117 │ NtUserGetQueueStatus │ 0x0000045C, //1116 │ +│ 1118 │ NtUserGetQueueStatusReadonly │ 0x0000045D, //1117 │ +│ 1119 │ NtUserGetRawInputBuffer │ 0x0000045E, //1118 │ +│ 1120 │ NtUserGetRawInputData │ 0x0000045F, //1119 │ +│ 1121 │ NtUserGetRawInputDeviceInfo │ 0x00000460, //1120 │ +│ 1122 │ NtUserGetRawInputDeviceList │ 0x00000461, //1121 │ +│ 1123 │ NtUserGetRawPointerDeviceData │ 0x00000462, //1122 │ +│ 1124 │ NtUserGetRegisteredRawInputDevices │ 0x00000463, //1123 │ +│ 1125 │ NtUserGetRequiredCursorSizes │ 0x00000464, //1124 │ +│ 1126 │ NtUserGetResizeDCompositionSynchronizationObject │ 0x00000465, //1125 │ +│ 1127 │ NtUserGetSendMessageReceiver │ 0x00000466, //1126 │ +│ 1128 │ NtUserGetSharedWindowData │ 0x00000467, //1127 │ +│ 1129 │ NtUserGetSysMenuOffset │ 0x00000468, //1128 │ +│ 1130 │ NtUserGetSystemContentRects │ 0x00000469, //1129 │ +│ 1131 │ NtUserGetSystemDpiForProcess │ 0x0000046A, //1130 │ +│ 1132 │ NtUserGetTopLevelWindow │ 0x0000046B, //1131 │ +│ 1133 │ NtUserGetTouchInputInfo │ 0x0000046C, //1132 │ +│ 1134 │ NtUserGetTouchValidationStatus │ 0x0000046D, //1133 │ +│ 1135 │ NtUserGetUniformSpaceMapping │ 0x0000046E, //1134 │ +│ 1136 │ NtUserGetUnpredictedMessagePos │ 0x0000046F, //1135 │ +│ 1137 │ NtUserGetUpdatedClipboardFormats │ 0x00000470, //1136 │ +│ 1138 │ NtUserGetWOWClass │ 0x00000471, //1137 │ +│ 1139 │ NtUserGetWinStationInfo │ 0x00000472, //1138 │ +│ 1140 │ NtUserGetWindowBand │ 0x00000473, //1139 │ +│ 1141 │ NtUserGetWindowCompositionAttribute │ 0x00000474, //1140 │ +│ 1142 │ NtUserGetWindowCompositionInfo │ 0x00000475, //1141 │ +│ 1143 │ NtUserGetWindowContextHelpId │ 0x00000476, //1142 │ +│ 1144 │ NtUserGetWindowDisplayAffinity │ 0x00000477, //1143 │ +│ 1145 │ NtUserGetWindowFeedbackSetting │ 0x00000478, //1144 │ +│ 1146 │ NtUserGetWindowMinimizeRect │ 0x00000479, //1145 │ +│ 1147 │ NtUserGetWindowProcessHandle │ 0x0000047A, //1146 │ +│ 1148 │ NtUserGetWindowRgnEx │ 0x0000047B, //1147 │ +│ 1149 │ NtUserGetWindowThreadProcessId │ 0x0000047C, //1148 │ +│ 1150 │ NtUserGetWindowTrackInfoAsync │ 0x0000047D, //1149 │ +│ 1151 │ NtUserGhostWindowFromHungWindow │ 0x0000047E, //1150 │ +│ 1152 │ NtUserHandleDelegatedInput │ 0x0000047F, //1151 │ +│ 1153 │ NtUserHandleSystemThreadCreationFailure │ 0x00000480, //1152 │ +│ 1154 │ NtUserHardErrorControl │ 0x00000481, //1153 │ +│ 1155 │ NtUserHideCursorNoCapture │ 0x00000482, //1154 │ +│ 1156 │ NtUserHidePointerContactVisualization │ 0x00000483, //1155 │ +│ 1157 │ NtUserHiliteMenuItem │ 0x00000484, //1156 │ +│ 1158 │ NtUserHungWindowFromGhostWindow │ 0x00000485, //1157 │ +│ 1159 │ NtUserHwndQueryRedirectionInfo │ 0x00000486, //1158 │ +│ 1160 │ NtUserHwndSetRedirectionInfo │ 0x00000487, //1159 │ +│ 1161 │ NtUserImpersonateDdeClientWindow │ 0x00000488, //1160 │ +│ 1162 │ NtUserInheritWindowMonitor │ 0x00000489, //1161 │ +│ 1163 │ NtUserInitAnsiOem │ 0x0000048A, //1162 │ +│ 1164 │ NtUserInitRunThread │ 0x0000048B, //1163 │ +│ 1165 │ NtUserInitThreadCoreMessagingIocp │ 0x0000048C, //1164 │ +│ 1166 │ NtUserInitialize │ 0x0000048D, //1165 │ +│ 1167 │ NtUserInitializeClientPfnArrays │ 0x0000048E, //1166 │ +│ 1168 │ NtUserInitializeGenericHidInjection │ 0x0000048F, //1167 │ +│ 1169 │ NtUserInitializeInputDeviceInjection │ 0x00000490, //1168 │ +│ 1170 │ NtUserInitializePointerDeviceInjection │ 0x00000491, //1169 │ +│ 1171 │ NtUserInitializePointerDeviceInjectionEx │ 0x00000492, //1170 │ +│ 1172 │ NtUserInitializeTouchInjection │ 0x00000493, //1171 │ +│ 1173 │ NtUserInjectDeviceInput │ 0x00000494, //1172 │ +│ 1174 │ NtUserInjectGenericHidInput │ 0x00000495, //1173 │ +│ 1175 │ NtUserInjectGesture │ 0x00000496, //1174 │ +│ 1176 │ NtUserInjectKeyboardInput │ 0x00000497, //1175 │ +│ 1177 │ NtUserInjectMouseInput │ 0x00000498, //1176 │ +│ 1178 │ NtUserInjectPointerInput │ 0x00000499, //1177 │ +│ 1179 │ NtUserInjectTouchInput │ 0x0000049A, //1178 │ +│ 1180 │ NtUserInteractiveControlQueryUsage │ 0x0000049B, //1179 │ +│ 1181 │ NtUserInternalGetWindowIcon │ 0x0000049C, //1180 │ +│ 1182 │ NtUserInternalToUnicode │ 0x0000049D, //1181 │ +│ 1183 │ NtUserIsChildWindowDpiMessageEnabled │ 0x0000049E, //1182 │ +│ 1184 │ NtUserIsMouseInPointerEnabled │ 0x0000049F, //1183 │ +│ 1185 │ NtUserIsMouseInputEnabled │ 0x000004A0, //1184 │ +│ 1186 │ NtUserIsNonClientDpiScalingEnabled │ 0x000004A1, //1185 │ +│ 1187 │ NtUserIsResizeLayoutSynchronizationEnabled │ 0x000004A2, //1186 │ +│ 1188 │ NtUserIsTopLevelWindow │ 0x000004A3, //1187 │ +│ 1189 │ NtUserIsTouchWindow │ 0x000004A4, //1188 │ +│ 1190 │ NtUserIsWindowBroadcastingDpiToChildren │ 0x000004A5, //1189 │ +│ 1191 │ NtUserIsWindowGDIScaledDpiMessageEnabled │ 0x000004A6, //1190 │ +│ 1192 │ NtUserKillSystemTimer │ 0x000004A7, //1191 │ +│ 1193 │ NtUserLW_LoadFonts │ 0x000004A8, //1192 │ +│ 1194 │ NtUserLayoutCompleted │ 0x000004A9, //1193 │ +│ 1195 │ NtUserLinkDpiCursor │ 0x000004AA, //1194 │ +│ 1196 │ NtUserLoadCursorsAndIcons │ 0x000004AB, //1195 │ +│ 1197 │ NtUserLoadKeyboardLayoutEx │ 0x000004AC, //1196 │ +│ 1198 │ NtUserLoadUserApiHook │ 0x000004AD, //1197 │ +│ 1199 │ NtUserLockCursor │ 0x000004AE, //1198 │ +│ 1200 │ NtUserLockSetForegroundWindow │ 0x000004AF, //1199 │ +│ 1201 │ NtUserLockWindowStation │ 0x000004B0, //1200 │ +│ 1202 │ NtUserLockWorkStation │ 0x000004B1, //1201 │ +│ 1203 │ NtUserLogicalToPerMonitorDPIPhysicalPoint │ 0x000004B2, //1202 │ +│ 1204 │ NtUserLogicalToPhysicalDpiPointForWindow │ 0x000004B3, //1203 │ +│ 1205 │ NtUserLogicalToPhysicalPoint │ 0x000004B4, //1204 │ +│ 1206 │ NtUserMNDragLeave │ 0x000004B5, //1205 │ +│ 1207 │ NtUserMNDragOver │ 0x000004B6, //1206 │ +│ 1208 │ NtUserMagControl │ 0x000004B7, //1207 │ +│ 1209 │ NtUserMagGetContextInformation │ 0x000004B8, //1208 │ +│ 1210 │ NtUserMagSetContextInformation │ 0x000004B9, //1209 │ +│ 1211 │ NtUserMapDesktopObject │ 0x000004BA, //1210 │ +│ 1212 │ NtUserMapPointsByVisualIdentifier │ 0x000004BB, //1211 │ +│ 1213 │ NtUserMarkWindowForRawMouse │ 0x000004BC, //1212 │ +│ 1214 │ NtUserMenuItemFromPoint │ 0x000004BD, //1213 │ +│ 1215 │ NtUserMessageBeep │ 0x000004BE, //1214 │ +│ 1216 │ NtUserMinInitialize │ 0x000004BF, //1215 │ +│ 1217 │ NtUserMinMaximize │ 0x000004C0, //1216 │ +│ 1218 │ NtUserModifyWindowTouchCapability │ 0x000004C1, //1217 │ +│ 1219 │ NtUserMsgWaitForMultipleObjectsEx │ 0x000004C2, //1218 │ +│ 1220 │ NtUserNavigateFocus │ 0x000004C3, //1219 │ +│ 1221 │ NtUserNlsKbdSendIMENotification │ 0x000004C4, //1220 │ +│ 1222 │ NtUserNotifyIMEStatus │ 0x000004C5, //1221 │ +│ 1223 │ NtUserNotifyOverlayWindow │ 0x000004C6, //1222 │ +│ 1224 │ NtUserOpenInputDesktop │ 0x000004C7, //1223 │ +│ 1225 │ NtUserOpenThreadDesktop │ 0x000004C8, //1224 │ +│ 1226 │ NtUserPaintMonitor │ 0x000004C9, //1225 │ +│ 1227 │ NtUserPerMonitorDPIPhysicalToLogicalPoint │ 0x000004CA, //1226 │ +│ 1228 │ NtUserPhysicalToLogicalDpiPointForWindow │ 0x000004CB, //1227 │ +│ 1229 │ NtUserPhysicalToLogicalPoint │ 0x000004CC, //1228 │ +│ 1230 │ NtUserPlayEventSound │ 0x000004CD, //1229 │ +│ 1231 │ NtUserPostKeyboardInputMessage │ 0x000004CE, //1230 │ +│ 1232 │ NtUserPostQuitMessage │ 0x000004CF, //1231 │ +│ 1233 │ NtUserPrepareForLogoff │ 0x000004D0, //1232 │ +│ 1234 │ NtUserPrintWindow │ 0x000004D1, //1233 │ +│ 1235 │ NtUserProcessInkFeedbackCommand │ 0x000004D2, //1234 │ +│ 1236 │ NtUserPromoteMouseInPointer │ 0x000004D3, //1235 │ +│ 1237 │ NtUserPromotePointer │ 0x000004D4, //1236 │ +│ 1238 │ NtUserQueryBSDRWindow │ 0x000004D5, //1237 │ +│ 1239 │ NtUserQueryDisplayConfig │ 0x000004D6, //1238 │ +│ 1240 │ NtUserQueryInformationThread │ 0x000004D7, //1239 │ +│ 1241 │ NtUserQueryInputContext │ 0x000004D8, //1240 │ +│ 1242 │ NtUserQuerySendMessage │ 0x000004D9, //1241 │ +│ 1243 │ NtUserRealChildWindowFromPoint │ 0x000004DA, //1242 │ +│ 1244 │ NtUserRealWaitMessageEx │ 0x000004DB, //1243 │ +│ 1245 │ NtUserRealizePalette │ 0x000004DC, //1244 │ +│ 1246 │ NtUserReassociateQueueEventCompletionPacket │ 0x000004DD, //1245 │ +│ 1247 │ NtUserRedrawFrame │ 0x000004DE, //1246 │ +│ 1248 │ NtUserRedrawFrameAndHook │ 0x000004DF, //1247 │ +│ 1249 │ NtUserRedrawTitle │ 0x000004E0, //1248 │ +│ 1250 │ NtUserRegisterBSDRWindow │ 0x000004E1, //1249 │ +│ 1251 │ NtUserRegisterDManipHook │ 0x000004E2, //1250 │ +│ 1252 │ NtUserRegisterEdgy │ 0x000004E3, //1251 │ +│ 1253 │ NtUserRegisterErrorReportingDialog │ 0x000004E4, //1252 │ +│ 1254 │ NtUserRegisterForCustomDockTargets │ 0x000004E5, //1253 │ +│ 1255 │ NtUserRegisterForTooltipDismissNotification │ 0x000004E6, //1254 │ +│ 1256 │ NtUserRegisterGhostWindow │ 0x000004E7, //1255 │ +│ 1257 │ NtUserRegisterHotKey │ 0x000004E8, //1256 │ +│ 1258 │ NtUserRegisterLPK │ 0x000004E9, //1257 │ +│ 1259 │ NtUserRegisterLogonProcess │ 0x000004EA, //1258 │ +│ 1260 │ NtUserRegisterManipulationThread │ 0x000004EB, //1259 │ +│ 1261 │ NtUserRegisterPointerDeviceNotifications │ 0x000004EC, //1260 │ +│ 1262 │ NtUserRegisterPointerInputTarget │ 0x000004ED, //1261 │ +│ 1263 │ NtUserRegisterRawInputDevices │ 0x000004EE, //1262 │ +│ 1264 │ NtUserRegisterServicesProcess │ 0x000004EF, //1263 │ +│ 1265 │ NtUserRegisterSessionPort │ 0x000004F0, //1264 │ +│ 1266 │ NtUserRegisterShellHookWindow │ 0x000004F1, //1265 │ +│ 1267 │ NtUserRegisterShellPTPListener │ 0x000004F2, //1266 │ +│ 1268 │ NtUserRegisterSiblingFrostWindow │ 0x000004F3, //1267 │ +│ 1269 │ NtUserRegisterSystemThread │ 0x000004F4, //1268 │ +│ 1270 │ NtUserRegisterTasklist │ 0x000004F5, //1269 │ +│ 1271 │ NtUserRegisterTouchHitTestingWindow │ 0x000004F6, //1270 │ +│ 1272 │ NtUserRegisterTouchPadCapable │ 0x000004F7, //1271 │ +│ 1273 │ NtUserRegisterUserApiHook │ 0x000004F8, //1272 │ +│ 1274 │ NtUserRegisterWindowArrangementCallout │ 0x000004F9, //1273 │ +│ 1275 │ NtUserReleaseCapture │ 0x000004FA, //1274 │ +│ 1276 │ NtUserReleaseDC │ 0x000004FB, //1275 │ +│ 1277 │ NtUserReleaseDwmHitTestWaiters │ 0x000004FC, //1276 │ +│ 1278 │ NtUserRemoteConnect │ 0x000004FD, //1277 │ +│ 1279 │ NtUserRemoteConnectState │ 0x000004FE, //1278 │ +│ 1280 │ NtUserRemoteConsoleShadowStop │ 0x000004FF, //1279 │ +│ 1281 │ NtUserRemoteDisconnect │ 0x00000500, //1280 │ +│ 1282 │ NtUserRemoteNotify │ 0x00000501, //1281 │ +│ 1283 │ NtUserRemotePassthruDisable │ 0x00000502, //1282 │ +│ 1284 │ NtUserRemotePassthruEnable │ 0x00000503, //1283 │ +│ 1285 │ NtUserRemoteReconnect │ 0x00000504, //1284 │ +│ 1286 │ NtUserRemoteRedrawRectangle │ 0x00000505, //1285 │ +│ 1287 │ NtUserRemoteRedrawScreen │ 0x00000506, //1286 │ +│ 1288 │ NtUserRemoteShadowCleanup │ 0x00000507, //1287 │ +│ 1289 │ NtUserRemoteShadowSetup │ 0x00000508, //1288 │ +│ 1290 │ NtUserRemoteShadowStart │ 0x00000509, //1289 │ +│ 1291 │ NtUserRemoteShadowStop │ 0x0000050A, //1290 │ +│ 1292 │ NtUserRemoteStopScreenUpdates │ 0x0000050B, //1291 │ +│ 1293 │ NtUserRemoteThinwireStats │ 0x0000050C, //1292 │ +│ 1294 │ NtUserRemoveClipboardFormatListener │ 0x0000050D, //1293 │ +│ 1295 │ NtUserRemoveInjectionDevice │ 0x0000050E, //1294 │ +│ 1296 │ NtUserRemoveQueueCompletion │ 0x0000050F, //1295 │ +│ 1297 │ NtUserRemoveVisualIdentifier │ 0x00000510, //1296 │ +│ 1298 │ NtUserReplyMessage │ 0x00000511, //1297 │ +│ 1299 │ NtUserReportInertia │ 0x00000512, //1298 │ +│ 1300 │ NtUserResetDblClk │ 0x00000513, //1299 │ +│ 1301 │ NtUserResolveDesktopForWOW │ 0x00000514, //1300 │ +│ 1302 │ NtUserRestoreWindowDpiChanges │ 0x00000515, //1301 │ +│ 1303 │ NtUserScaleSystemMetricForDPIWithoutCache │ 0x00000516, //1302 │ +│ 1304 │ NtUserScheduleDispatchNotification │ 0x00000517, //1303 │ +│ 1305 │ NtUserSendEventMessage │ 0x00000518, //1304 │ +│ 1306 │ NtUserSendInteractiveControlHapticsReport │ 0x00000519, //1305 │ +│ 1307 │ NtUserSetActivationFilter │ 0x0000051A, //1306 │ +│ 1308 │ NtUserSetActiveProcessForMonitor │ 0x0000051B, //1307 │ +│ 1309 │ NtUserSetAdditionalForegroundBoostProcesses │ 0x0000051C, //1308 │ +│ 1310 │ NtUserSetAppImeLevel │ 0x0000051D, //1309 │ +│ 1311 │ NtUserSetAutoRotation │ 0x0000051E, //1310 │ +│ 1312 │ NtUserSetBridgeWindowChild │ 0x0000051F, //1311 │ +│ 1313 │ NtUserSetBrokeredForeground │ 0x00000520, //1312 │ +│ 1314 │ NtUserSetCalibrationData │ 0x00000521, //1313 │ +│ 1315 │ NtUserSetCancelRotationDelayHintWindow │ 0x00000522, //1314 │ +│ 1316 │ NtUserSetCaretBlinkTime │ 0x00000523, //1315 │ +│ 1317 │ NtUserSetCaretPos │ 0x00000524, //1316 │ +│ 1318 │ NtUserSetChildWindowNoActivate │ 0x00000525, //1317 │ +│ 1319 │ NtUserSetClassWord │ 0x00000526, //1318 │ +│ 1320 │ NtUserSetCoreWindow │ 0x00000527, //1319 │ +│ 1321 │ NtUserSetCoreWindowPartner │ 0x00000528, //1320 │ +│ 1322 │ NtUserSetCursorIconDataEx │ 0x00000529, //1321 │ +│ 1323 │ NtUserSetCursorPos │ 0x0000052A, //1322 │ +│ 1324 │ NtUserSetDesktopColorTransform │ 0x0000052B, //1323 │ +│ 1325 │ NtUserSetDesktopVisualInputSink │ 0x0000052C, //1324 │ +│ 1326 │ NtUserSetDialogControlDpiChangeBehavior │ 0x0000052D, //1325 │ +│ 1327 │ NtUserSetDialogPointer │ 0x0000052E, //1326 │ +│ 1328 │ NtUserSetDialogSystemMenu │ 0x0000052F, //1327 │ +│ 1329 │ NtUserSetDisplayAutoRotationPreferences │ 0x00000530, //1328 │ +│ 1330 │ NtUserSetDisplayConfig │ 0x00000531, //1329 │ +│ 1331 │ NtUserSetDisplayMapping │ 0x00000532, //1330 │ +│ 1332 │ NtUserSetDoubleClickTime │ 0x00000533, //1331 │ +│ 1333 │ NtUserSetDpiForWindow │ 0x00000534, //1332 │ +│ 1334 │ NtUserSetFallbackForeground │ 0x00000535, //1333 │ +│ 1335 │ NtUserSetFeatureReportResponse │ 0x00000536, //1334 │ +│ 1336 │ NtUserSetForegroundRedirectionForActivationObject │ 0x00000537, //1335 │ +│ 1337 │ NtUserSetForegroundWindow │ 0x00000538, //1336 │ +│ 1338 │ NtUserSetForegroundWindowForApplication │ 0x00000539, //1337 │ +│ 1339 │ NtUserSetFullscreenMagnifierOffsetsDWMUpdated │ 0x0000053A, //1338 │ +│ 1340 │ NtUserSetGestureConfig │ 0x0000053B, //1339 │ +│ 1341 │ NtUserSetImeHotKey │ 0x0000053C, //1340 │ +│ 1342 │ NtUserSetImeInfoEx │ 0x0000053D, //1341 │ +│ 1343 │ NtUserSetImeOwnerWindow │ 0x0000053E, //1342 │ +│ 1344 │ NtUserSetInputServiceState │ 0x0000053F, //1343 │ +│ 1345 │ NtUserSetInteractiveControlFocus │ 0x00000540, //1344 │ +│ 1346 │ NtUserSetInteractiveCtrlRotationAngle │ 0x00000541, //1345 │ +│ 1347 │ NtUserSetInternalWindowPos │ 0x00000542, //1346 │ +│ 1348 │ NtUserSetLayeredWindowAttributes │ 0x00000543, //1347 │ +│ 1349 │ NtUserSetMagnificationDesktopMagnifierOffsetsDWMUpdated │ 0x00000544, //1348 │ +│ 1350 │ NtUserSetManipulationInputTarget │ 0x00000545, //1349 │ +│ 1351 │ NtUserSetMenu │ 0x00000546, //1350 │ +│ 1352 │ NtUserSetMenuContextHelpId │ 0x00000547, //1351 │ +│ 1353 │ NtUserSetMenuFlagRtoL │ 0x00000548, //1352 │ +│ 1354 │ NtUserSetMessageExtraInfo │ 0x00000549, //1353 │ +│ 1355 │ NtUserSetMirrorRendering │ 0x0000054A, //1354 │ +│ 1356 │ NtUserSetModernAppWindow │ 0x0000054B, //1355 │ +│ 1357 │ NtUserSetMonitorWorkArea │ 0x0000054C, //1356 │ +│ 1358 │ NtUserSetMouseInputRateLimitingTimer │ 0x0000054D, //1357 │ +│ 1359 │ NtUserSetMsgBox │ 0x0000054E, //1358 │ +│ 1360 │ NtUserSetObjectInformation │ 0x0000054F, //1359 │ +│ 1361 │ NtUserSetPrecisionTouchPadConfiguration │ 0x00000550, //1360 │ +│ 1362 │ NtUserSetProcessDefaultLayout │ 0x00000551, //1361 │ +│ 1363 │ NtUserSetProcessDpiAwarenessContext │ 0x00000552, //1362 │ +│ 1364 │ NtUserSetProcessInteractionFlags │ 0x00000553, //1363 │ +│ 1365 │ NtUserSetProcessLaunchForegroundPolicy │ 0x00000554, //1364 │ +│ 1366 │ NtUserSetProcessMousewheelRoutingMode │ 0x00000555, //1365 │ +│ 1367 │ NtUserSetProcessRestrictionExemption │ 0x00000556, //1366 │ +│ 1368 │ NtUserSetProcessUIAccessZorder │ 0x00000557, //1367 │ +│ 1369 │ NtUserSetProgmanWindow │ 0x00000558, //1368 │ +│ 1370 │ NtUserSetSharedWindowData │ 0x00000559, //1369 │ +│ 1371 │ NtUserSetShellChangeNotifyHWND │ 0x0000055A, //1370 │ +│ 1372 │ NtUserSetShellWindowEx │ 0x0000055B, //1371 │ +│ 1373 │ NtUserSetSysColors │ 0x0000055C, //1372 │ +│ 1374 │ NtUserSetSysMenu │ 0x0000055D, //1373 │ +│ 1375 │ NtUserSetSystemContentRects │ 0x0000055E, //1374 │ +│ 1376 │ NtUserSetSystemCursor │ 0x0000055F, //1375 │ +│ 1377 │ NtUserSetSystemTimer │ 0x00000560, //1376 │ +│ 1378 │ NtUserSetTSFEventState │ 0x00000561, //1377 │ +│ 1379 │ NtUserSetTargetForResourceBrokering │ 0x00000562, //1378 │ +│ 1380 │ NtUserSetTaskmanWindow │ 0x00000563, //1379 │ +│ 1381 │ NtUserSetThreadInputBlocked │ 0x00000564, //1380 │ +│ 1382 │ NtUserSetThreadLayoutHandles │ 0x00000565, //1381 │ +│ 1383 │ NtUserSetThreadQueueMergeSetting │ 0x00000566, //1382 │ +│ 1384 │ NtUserSetVisible │ 0x00000567, //1383 │ +│ 1385 │ NtUserSetWaitForQueueAttach │ 0x00000568, //1384 │ +│ 1386 │ NtUserSetWatermarkStrings │ 0x00000569, //1385 │ +│ 1387 │ NtUserSetWindowBand │ 0x0000056A, //1386 │ +│ 1388 │ NtUserSetWindowCompositionAttribute │ 0x0000056B, //1387 │ +│ 1389 │ NtUserSetWindowCompositionTransition │ 0x0000056C, //1388 │ +│ 1390 │ NtUserSetWindowContextHelpId │ 0x0000056D, //1389 │ +│ 1391 │ NtUserSetWindowDisplayAffinity │ 0x0000056E, //1390 │ +│ 1392 │ NtUserSetWindowFeedbackSetting │ 0x0000056F, //1391 │ +│ 1393 │ NtUserSetWindowRgnEx │ 0x00000570, //1392 │ +│ 1394 │ NtUserSetWindowShowState │ 0x00000571, //1393 │ +│ 1395 │ NtUserSetWindowState │ 0x00000572, //1394 │ +│ 1396 │ NtUserSetWindowStationUser │ 0x00000573, //1395 │ +│ 1397 │ NtUserShellMigrateWindow │ 0x00000574, //1396 │ +│ 1398 │ NtUserShellRegisterHotKey │ 0x00000575, //1397 │ +│ 1399 │ NtUserShellSetWindowPos │ 0x00000576, //1398 │ +│ 1400 │ NtUserShowCursor │ 0x00000577, //1399 │ +│ 1401 │ NtUserShowOwnedPopups │ 0x00000578, //1400 │ +│ 1402 │ NtUserShowStartGlass │ 0x00000579, //1401 │ +│ 1403 │ NtUserShowSystemCursor │ 0x0000057A, //1402 │ +│ 1404 │ NtUserShutdownBlockReasonCreate │ 0x0000057B, //1403 │ +│ 1405 │ NtUserShutdownBlockReasonQuery │ 0x0000057C, //1404 │ +│ 1406 │ NtUserShutdownReasonDestroy │ 0x0000057D, //1405 │ +│ 1407 │ NtUserSignalRedirectionStartComplete │ 0x0000057E, //1406 │ +│ 1408 │ NtUserSlicerControl │ 0x0000057F, //1407 │ +│ 1409 │ NtUserSoundSentry │ 0x00000580, //1408 │ +│ 1410 │ NtUserStopAndEndInertia │ 0x00000581, //1409 │ +│ 1411 │ NtUserSwapMouseButton │ 0x00000582, //1410 │ +│ 1412 │ NtUserSwitchDesktop │ 0x00000583, //1411 │ +│ 1413 │ NtUserSwitchToThisWindow │ 0x00000584, //1412 │ +│ 1414 │ NtUserSystemParametersInfoForDpi │ 0x00000585, //1413 │ +│ 1415 │ NtUserTestForInteractiveUser │ 0x00000586, //1414 │ +│ 1416 │ NtUserThreadMessageQueueAttached │ 0x00000587, //1415 │ +│ 1417 │ NtUserTraceLoggingSendMixedModeTelemetry │ 0x00000588, //1416 │ +│ 1418 │ NtUserTrackPopupMenuEx │ 0x00000589, //1417 │ +│ 1419 │ NtUserTransformPoint │ 0x0000058A, //1418 │ +│ 1420 │ NtUserTransformRect │ 0x0000058B, //1419 │ +│ 1421 │ NtUserUndelegateInput │ 0x0000058C, //1420 │ +│ 1422 │ NtUserUnhookWindowsHook │ 0x0000058D, //1421 │ +│ 1423 │ NtUserUnloadKeyboardLayout │ 0x0000058E, //1422 │ +│ 1424 │ NtUserUnlockWindowStation │ 0x0000058F, //1423 │ +│ 1425 │ NtUserUnregisterHotKey │ 0x00000590, //1424 │ +│ 1426 │ NtUserUnregisterSessionPort │ 0x00000591, //1425 │ +│ 1427 │ NtUserUnregisterUserApiHook │ 0x00000592, //1426 │ +│ 1428 │ NtUserUpdateClientRect │ 0x00000593, //1427 │ +│ 1429 │ NtUserUpdateDefaultDesktopThumbnail │ 0x00000594, //1428 │ +│ 1430 │ NtUserUpdateInputContext │ 0x00000595, //1429 │ +│ 1431 │ NtUserUpdateInstance │ 0x00000596, //1430 │ +│ 1432 │ NtUserUpdateLayeredWindow │ 0x00000597, //1431 │ +│ 1433 │ NtUserUpdatePerUserImmEnabling │ 0x00000598, //1432 │ +│ 1434 │ NtUserUpdatePerUserSystemParameters │ 0x00000599, //1433 │ +│ 1435 │ NtUserUpdateWindow │ 0x0000059A, //1434 │ +│ 1436 │ NtUserUpdateWindowInputSinkHints │ 0x0000059B, //1435 │ +│ 1437 │ NtUserUpdateWindowTrackingInfo │ 0x0000059C, //1436 │ +│ 1438 │ NtUserUpdateWindows │ 0x0000059D, //1437 │ +│ 1439 │ NtUserUserHandleGrantAccess │ 0x0000059E, //1438 │ +│ 1440 │ NtUserUserPowerCalloutWorker │ 0x0000059F, //1439 │ +│ 1441 │ NtUserValidateHandleSecure │ 0x000005A0, //1440 │ +│ 1442 │ NtUserValidateRgn │ 0x000005A1, //1441 │ +│ 1443 │ NtUserWaitAvailableMessageEx │ 0x000005A2, //1442 │ +│ 1444 │ NtUserWaitForInputIdle │ 0x000005A3, //1443 │ +│ 1445 │ NtUserWaitForRedirectionStartComplete │ 0x000005A4, //1444 │ +│ 1446 │ NtUserWakeRITForShutdown │ 0x000005A5, //1445 │ +│ 1447 │ NtUserWindowFromDC │ 0x000005A6, //1446 │ +│ 1448 │ NtUserWindowFromPhysicalPoint │ 0x000005A7, //1447 │ +│ 1449 │ NtUserZapActiveAndFocus │ 0x000005A8, //1448 │ +│ 1450 │ NtValidateCompositionSurfaceHandle │ 0x000005A9, //1449 │ +│ 1451 │ NtVisualCaptureBits │ 0x000005AA, //1450 │ +│ 1452 │ NtUserSetClassLongPtr │ 0x000005AB, //1451 │ +│ 1453 │ NtUserSetWindowLongPtr │ 0x000005AC, //1452 │ +└──────┴─────────────────────────────────────────────────────────┴────────────────────┘ From 704789fb0712539aa4818654519cfd27616023f7 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 1 Dec 2024 15:54:49 +0800 Subject: [PATCH 27/37] start binding --- sdk/bindgen/bind_test.go | 70 ++++++++++++++++++++++++++++++++++++++++ 1 file changed, 70 insertions(+) diff --git a/sdk/bindgen/bind_test.go b/sdk/bindgen/bind_test.go index 8dca68ad..0b9aad1a 100644 --- a/sdk/bindgen/bind_test.go +++ b/sdk/bindgen/bind_test.go @@ -2,6 +2,7 @@ package bindgen import ( "path/filepath" + "strconv" "strings" "testing" "unicode" @@ -42,6 +43,73 @@ func TestMergeHeader(t *testing.T) { stream.WriteBinaryFile("merged_headers.h", g.Buffer) } +func TestName(t *testing.T) { + // maps.CollectSafeSliceMap() + // maps.CollectSet() + safeSliceMap := maps.CollectSafeSliceMap[string, int](func(yield func(string, int) bool) { + yield("a", 0) + yield("b", 1) + yield("c", 2) + yield("d", 3) + yield("e", 4) + yield("f", 5) + yield("g", 6) + yield("h", 7) + yield("i", 8) + yield("j", 9) + yield("k", 10) + yield("l", 11) + yield("m", 12) + yield("n", 13) + yield("o", 14) + yield("p", 15) + yield("q", 16) + yield("r", 17) + yield("s", 18) + yield("t", 19) + yield("u", 20) + yield("v", 21) + yield("w", 22) + yield("x", 23) + yield("y", 24) + yield("z", 25) + }) + safeSliceMap.Range(func(key string, value int) bool { + //println(strconv.Quote(key), value) + //safeSliceMap.DeleteFunc(func(s string, i int) bool {//todo bug + // return safeSliceMap.Has(key) + //}) + if safeSliceMap.Has(key) { + // safeSliceMap.Delete(key) //ok + } + return true + }) + println(safeSliceMap.Len()) + // return + + // safeSliceMap.Set()//todo 增加update empty方法，set的时候key存在的情况下不要更新他，输入信息即可 + + for k, v := range safeSliceMap.All() { + println(strconv.Quote(k), v) + safeSliceMap.Delete(k) // todo bug + } + + return + + m := map[string]string{ + "a": "b", + "c": "d", + } + for k := range m { + println(k) + } + for k, v := range m { + println(k, v) + delete(m, k) + } + println(len(m)) +} + func TestBindMacros(t *testing.T) { headerFile := "merged_headers.h" macros := extractMacros(stream.NewBuffer(headerFile).ToLines()) @@ -56,7 +124,9 @@ func TestBindMacros(t *testing.T) { macros.Range(func(key string, value string) bool { if !m.Has(key) { // mylog.Warning(key, value) + macros.Lock() macros.Delete(key) + macros.Unlock() // return true } // mylog.Warning(key, value) From 9fe8def14c448fcb2e841a1b8c96644e73cf89df Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 1 Dec 2024 16:45:10 +0800 Subject: [PATCH 28/37] fix https://github.com/goradd/maps/issues/15 --- sdk/bindgen/constants/constants_gen_test.go | 1 - 1 file changed, 1 deletion(-) diff --git a/sdk/bindgen/constants/constants_gen_test.go b/sdk/bindgen/constants/constants_gen_test.go index 9a78c9e1..6b6cb4c0 100644 --- a/sdk/bindgen/constants/constants_gen_test.go +++ b/sdk/bindgen/constants/constants_gen_test.go @@ -7,7 +7,6 @@ import ( "testing" "github.com/ddkwork/golibrary/mylog" - "github.com/ddkwork/golibrary/stream" ) From eba1a7374fdfbd5bac8a4c29a62c9b651d04f571 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 1 Dec 2024 17:52:29 +0800 Subject: [PATCH 29/37] fix https://github.com/goradd/maps/issues/15 --- sdk/bindgen/bind_test.go | 8 +++----- sdk/bindgen/command_test.go | 6 ++---- sdk/bindgen/constants/constants_gen_test.go | 2 +- sdk/bindgen/macros_decode.go | 6 ++---- ux/ark/ark.go | 3 +-- ux/ark/ark_test.go | 4 +--- 6 files changed, 10 insertions(+), 19 deletions(-) diff --git a/sdk/bindgen/bind_test.go b/sdk/bindgen/bind_test.go index 0b9aad1a..a94d6f29 100644 --- a/sdk/bindgen/bind_test.go +++ b/sdk/bindgen/bind_test.go @@ -7,8 +7,6 @@ import ( "testing" "unicode" - "github.com/goradd/maps" - "github.com/ddkwork/app/bindgen/clang" "github.com/ddkwork/app/bindgen/gengo" "github.com/ddkwork/golibrary/mylog" @@ -118,8 +116,8 @@ func TestBindMacros(t *testing.T) { mylog.Trace("number of macros", macros.Len()) var ( - enumDebuggers = new(maps.SafeSliceMap[string, string]) - enumIoctls = new(maps.SafeSliceMap[string, string]) + enumDebuggers = new(safemap.SafeMap[string, string]) + enumIoctls = new(safemap.SafeMap[string, string]) ) macros.Range(func(key string, value string) bool { if !m.Has(key) { @@ -331,7 +329,7 @@ typedef struct _LIST_ENTRY { #endif ` -var m = new(maps.SafeSliceMap[string, string]) +var m = new(safemap.SafeMap[string, string]) func init() { m.Set("PAGE_SIZE", "4096") diff --git a/sdk/bindgen/command_test.go b/sdk/bindgen/command_test.go index b3f9c367..c4a45724 100644 --- a/sdk/bindgen/command_test.go +++ b/sdk/bindgen/command_test.go @@ -8,8 +8,6 @@ import ( "strings" "testing" - "github.com/goradd/maps" - "github.com/ddkwork/HyperDbg/sdk" "github.com/ddkwork/golibrary/mylog" @@ -73,7 +71,7 @@ func TestUnmarshalCommandJson(t *testing.T) { func TestCommandGenerate(t *testing.T) { t.Skip("not well") - m := new(maps.SafeSliceMap[string, string]) + m := safemap.NewOrdered[string, string]() m.Set("debugging", "debugging") m.Set("extension", "extension") m.Set("hwdbg", "hwdbg") @@ -110,7 +108,7 @@ func commandGenerate(kindName, path string) { return err }) - m := new(maps.SafeSliceMap[string, string]) + m := safemap.NewOrdered[string, string]() for _, command := range commands { m.Set(command.FullName, command.FullName) // todo this must be use Cmd,then it will return the right command } diff --git a/sdk/bindgen/constants/constants_gen_test.go b/sdk/bindgen/constants/constants_gen_test.go index 6b6cb4c0..b7cda6a5 100644 --- a/sdk/bindgen/constants/constants_gen_test.go +++ b/sdk/bindgen/constants/constants_gen_test.go @@ -20,7 +20,7 @@ func TestGenConstants(t *testing.T) { } func genConstants(fileName string) { - m := new(maps.SafeSliceMap[string, string]) + m := safemap.NewOrdered[string, string]() for i, s := range stream.NewBuffer(fileName).ToLines() { if i == 4 { // break // test diff --git a/sdk/bindgen/macros_decode.go b/sdk/bindgen/macros_decode.go index 750d8a23..bc1b9869 100644 --- a/sdk/bindgen/macros_decode.go +++ b/sdk/bindgen/macros_decode.go @@ -2,12 +2,10 @@ package bindgen import ( "strings" - - "github.com/goradd/maps" ) -func extractMacros(lines []string) *maps.SafeSliceMap[string, string] { - macros := new(maps.SafeSliceMap[string, string]) +func extractMacros(lines []string) *safemap.SafeMap[string, string] { + macros := new(safemap.SafeMap[string, string]) macros.Set("PAGE_SIZE", "4096") var macroName string var macroValue strings.Builder diff --git a/ux/ark/ark.go b/ux/ark/ark.go index 52d9ffe0..4d825dad 100644 --- a/ux/ark/ark.go +++ b/ux/ark/ark.go @@ -11,7 +11,6 @@ import ( "github.com/ddkwork/golibrary/mylog" "github.com/ddkwork/golibrary/stream" "github.com/ddkwork/unison" - "github.com/goradd/maps" ) func main() { @@ -66,7 +65,7 @@ func Layout() *unison.Panel { widget.SetScrollLayout(splitPanel, 2) left := widget.NewTableScrollPanel(table, header) - layouts := new(maps.SafeSliceMap[ArksType, func() unison.Paneler]) + layouts := new(safemap.SafeMap[ArksType, func() unison.Paneler]) layouts.Set(KernelTablesType, func() unison.Paneler { table, header := widget.NewTable(ms.NtApi{}, widget.TableContext[ms.NtApi]{ ContextMenuItems: nil, diff --git a/ux/ark/ark_test.go b/ux/ark/ark_test.go index 5269d236..9b16cf64 100644 --- a/ux/ark/ark_test.go +++ b/ux/ark/ark_test.go @@ -3,14 +3,12 @@ package ark import ( "testing" - "github.com/goradd/maps" - "github.com/ddkwork/golibrary/stream" ) func TestName(t *testing.T) { g := stream.NewGeneratedFile() - m := new(maps.SafeSliceMap[string, string]) + m := safemap.NewOrdered[string, string]() m.Set("kernelTables", "kernelTables") m.Set("explorer", "explorer") m.Set("taskManager", "taskManager") From 7ec82370e2cba78a7c9adbe3a3d753beaa458703 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 1 Dec 2024 18:10:46 +0800 Subject: [PATCH 30/37] fix https://github.com/goradd/maps/issues/15 --- sdk/bindgen/bind_test.go | 6 +++--- sdk/bindgen/macros_decode.go | 4 ++-- ux/ark/ark.go | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/sdk/bindgen/bind_test.go b/sdk/bindgen/bind_test.go index a94d6f29..22d63b73 100644 --- a/sdk/bindgen/bind_test.go +++ b/sdk/bindgen/bind_test.go @@ -116,8 +116,8 @@ func TestBindMacros(t *testing.T) { mylog.Trace("number of macros", macros.Len()) var ( - enumDebuggers = new(safemap.SafeMap[string, string]) - enumIoctls = new(safemap.SafeMap[string, string]) + enumDebuggers = new(safemap.M[string, string]) + enumIoctls = new(safemap.M[string, string]) ) macros.Range(func(key string, value string) bool { if !m.Has(key) { @@ -329,7 +329,7 @@ typedef struct _LIST_ENTRY { #endif ` -var m = new(safemap.SafeMap[string, string]) +var m = new(safemap.M[string, string]) func init() { m.Set("PAGE_SIZE", "4096") diff --git a/sdk/bindgen/macros_decode.go b/sdk/bindgen/macros_decode.go index bc1b9869..e89641b7 100644 --- a/sdk/bindgen/macros_decode.go +++ b/sdk/bindgen/macros_decode.go @@ -4,8 +4,8 @@ import ( "strings" ) -func extractMacros(lines []string) *safemap.SafeMap[string, string] { - macros := new(safemap.SafeMap[string, string]) +func extractMacros(lines []string) *safemap.M[string, string] { + macros := new(safemap.M[string, string]) macros.Set("PAGE_SIZE", "4096") var macroName string var macroValue strings.Builder diff --git a/ux/ark/ark.go b/ux/ark/ark.go index 4d825dad..76127038 100644 --- a/ux/ark/ark.go +++ b/ux/ark/ark.go @@ -65,7 +65,7 @@ func Layout() *unison.Panel { widget.SetScrollLayout(splitPanel, 2) left := widget.NewTableScrollPanel(table, header) - layouts := new(safemap.SafeMap[ArksType, func() unison.Paneler]) + layouts := new(safemap.M[ArksType, func() unison.Paneler]) layouts.Set(KernelTablesType, func() unison.Paneler { table, header := widget.NewTable(ms.NtApi{}, widget.TableContext[ms.NtApi]{ ContextMenuItems: nil, From 9817aab0602f7ce94290e37c7c0f6c681fdddbc6 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 1 Dec 2024 19:32:33 +0800 Subject: [PATCH 31/37] init --- sdk/init.go | 2 +- ux/ark/ark.go | 5 +++-- ux/ux.go | 54 +++++++++++++++++++++++++-------------------------- 3 files changed, 31 insertions(+), 30 deletions(-) diff --git a/sdk/init.go b/sdk/init.go index b0eff297..ebeb66d3 100644 --- a/sdk/init.go +++ b/sdk/init.go @@ -22,7 +22,7 @@ var TargetFilePath = "" func init() { runtime.LockOSThread() m := stream.ReadEmbedFileMap(data, "bin") - sha := sha256.Sum256(m.Get("libhyperdbg.dll")) + sha := sha256.Sum256(m.GetMust("libhyperdbg.dll")) dir := filepath.Join(mylog.Check2(os.UserCacheDir()), "hyperdbg", "cache", base64.RawURLEncoding.EncodeToString(sha[:])) mylog.Check(windows.SetDllDirectory(dir)) TargetFilePath = filepath.Join(dir, "hyperkd.sys") diff --git a/ux/ark/ark.go b/ux/ark/ark.go index 76127038..e66a0985 100644 --- a/ux/ark/ark.go +++ b/ux/ark/ark.go @@ -9,6 +9,7 @@ import ( "github.com/ddkwork/app/ms/packer" "github.com/ddkwork/app/widget" "github.com/ddkwork/golibrary/mylog" + "github.com/ddkwork/golibrary/safemap" "github.com/ddkwork/golibrary/stream" "github.com/ddkwork/unison" ) @@ -111,7 +112,7 @@ func Layout() *unison.Panel { }) right := widget.NewPanel() - right.AddChild((layouts.Get(KernelTablesType))()) // todo make a welcoming page + right.AddChild((layouts.GetMust(KernelTablesType))()) // todo make a welcoming page splitPanel.AddChild(left) splitPanel.AddChild(right) @@ -124,7 +125,7 @@ func Layout() *unison.Panel { switch n.Data.Name { case KernelTablesType: right.RemoveAllChildren() - paneler := (layouts.Get(KernelTablesType))() + paneler := (layouts.GetMust(KernelTablesType))() right.AddChild(paneler) splitPanel.AddChild(right) diff --git a/ux/ux.go b/ux/ux.go index 6356c272..aa8bc6ed 100644 --- a/ux/ux.go +++ b/ux/ux.go @@ -189,52 +189,52 @@ func (t *toolbar) Elems() []*unison.Button { func newToolbar() *toolbar { m := stream.ReadEmbedFileMap(bar, "asserts/bar") return &toolbar{ - open: widget.NewImageButton("open", m.Get("open.png"), func() {}), - restart: widget.NewImageButton("restart", m.Get("restart.png"), func() { + open: widget.NewImageButton("open", m.GetMust("open.png"), func() {}), + restart: widget.NewImageButton("restart", m.GetMust("restart.png"), func() { mylog.Warning("RestartProcess", sdk.RestartProcess()) }), - close: widget.NewImageButton("close", m.Get("close.png"), func() { // exit command ? + close: widget.NewImageButton("close", m.GetMust("close.png"), func() { // exit command ? mylog.Warning("KillProcess", sdk.KillProcess()) }), - run: widget.NewImageButton("run", m.Get("run.png"), func() { + run: widget.NewImageButton("run", m.GetMust("run.png"), func() { targetExePathPtr := windows.StringToUTF16Ptr(TargetExePath) targetExePathInt32Ptr := (*int32)(unsafe.Pointer(targetExePathPtr)) mylog.Warning("StartProcess", sdk.StartProcess(targetExePathInt32Ptr)) }), - runthread: widget.NewImageButton("runthread", m.Get("runthread.png"), func() {}), - pause: widget.NewImageButton("pause", m.Get("pause.png"), func() { + runthread: widget.NewImageButton("runthread", m.GetMust("runthread.png"), func() {}), + pause: widget.NewImageButton("pause", m.GetMust("pause.png"), func() { mylog.Warning("PauseKernelEvents", sdk.PauseKernelEvents()) }), - stepin: widget.NewImageButton("stepin", m.Get("stepin.png"), func() { + stepin: widget.NewImageButton("stepin", m.GetMust("stepin.png"), func() { // todo set F7 shortcut mylog.Warning("StepInto", sdk.StepIn()) }), - stepover: widget.NewImageButton("stepover", m.Get("stepover.png"), func() { + stepover: widget.NewImageButton("stepover", m.GetMust("stepover.png"), func() { mylog.Warning("StepOut", sdk.StepOut()) // todo set args }), - trin: widget.NewImageButton("trin", m.Get("trin.png"), func() {}), - trover: widget.NewImageButton("trover", m.Get("trover.png"), func() {}), - tillret: widget.NewImageButton("tillret", m.Get("tillret.png"), func() {}), - tilluser: widget.NewImageButton("tilluser", m.Get("tilluser.png"), func() {}), - log: widget.NewImageButton("log", m.Get("log.png"), func() {}), - modules: widget.NewImageButton("modules", m.Get("modules.png"), func() {}), - windows: widget.NewImageButton("windows", m.Get("windows.png"), func() {}), - threads: widget.NewImageButton("threads", m.Get("threads.png"), func() {}), - cpu: widget.NewImageButton("cpu", m.Get("cpu.png"), func() { + trin: widget.NewImageButton("trin", m.GetMust("trin.png"), func() {}), + trover: widget.NewImageButton("trover", m.GetMust("trover.png"), func() {}), + tillret: widget.NewImageButton("tillret", m.GetMust("tillret.png"), func() {}), + tilluser: widget.NewImageButton("tilluser", m.GetMust("tilluser.png"), func() {}), + log: widget.NewImageButton("log", m.GetMust("log.png"), func() {}), + modules: widget.NewImageButton("modules", m.GetMust("modules.png"), func() {}), + windows: widget.NewImageButton("windows", m.GetMust("windows.png"), func() {}), + threads: widget.NewImageButton("threads", m.GetMust("threads.png"), func() {}), + cpu: widget.NewImageButton("cpu", m.GetMust("cpu.png"), func() { mylog.Todo("goto cpu tab page") // dock.SetCurrentDockable(p.cpu) }), - search: widget.NewImageButton("search", m.Get("search.png"), func() {}), - trace: widget.NewImageButton("trace", m.Get("trace.png"), func() {}), - bpoints: widget.NewImageButton("bpoints", m.Get("bpoints.png"), func() { + search: widget.NewImageButton("search", m.GetMust("search.png"), func() {}), + trace: widget.NewImageButton("trace", m.GetMust("trace.png"), func() {}), + bpoints: widget.NewImageButton("bpoints", m.GetMust("bpoints.png"), func() { mylog.Warning("breakpoint list", sdk.BreakpointList()) }), - bpmem: widget.NewImageButton("bpmem", m.Get("bpmem.png"), func() {}), - bphard: widget.NewImageButton("bphard", m.Get("bphard.png"), func() {}), - options: widget.NewImageButton("options", m.Get("options.png"), func() {}), - scylla: widget.NewImageButton("scylla", m.Get("scylla.png"), func() {}), - about: widget.NewImageButton("about", m.Get("about.png"), func() {}), - settings: widget.NewImageButton("settings", m.Get("settings.png"), func() { - app.RunWithIco("settings", m.Get("settings.png"), func(w *unison.Window) { + bpmem: widget.NewImageButton("bpmem", m.GetMust("bpmem.png"), func() {}), + bphard: widget.NewImageButton("bphard", m.GetMust("bphard.png"), func() {}), + options: widget.NewImageButton("options", m.GetMust("options.png"), func() {}), + scylla: widget.NewImageButton("scylla", m.GetMust("scylla.png"), func() {}), + about: widget.NewImageButton("about", m.GetMust("about.png"), func() {}), + settings: widget.NewImageButton("settings", m.GetMust("settings.png"), func() { + app.RunWithIco("settings", m.GetMust("settings.png"), func(w *unison.Window) { content := w.Content() content.SetLayout(&unison.FlexLayout{Columns: 1}) content.AddChild(widget.NewVSpacer()) From a89e029bdcd705c9298931d5869addfdda997c77 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 1 Dec 2024 19:46:29 +0800 Subject: [PATCH 32/37] init --- sdk/bindgen/bind_test.go | 6 +++--- sdk/bindgen/command_test.go | 6 ++++-- sdk/bindgen/macros_decode.go | 2 ++ 3 files changed, 9 insertions(+), 5 deletions(-) diff --git a/sdk/bindgen/bind_test.go b/sdk/bindgen/bind_test.go index 22d63b73..e91c4767 100644 --- a/sdk/bindgen/bind_test.go +++ b/sdk/bindgen/bind_test.go @@ -7,6 +7,8 @@ import ( "testing" "unicode" + "github.com/ddkwork/golibrary/safemap" + "github.com/ddkwork/app/bindgen/clang" "github.com/ddkwork/app/bindgen/gengo" "github.com/ddkwork/golibrary/mylog" @@ -44,7 +46,7 @@ func TestMergeHeader(t *testing.T) { func TestName(t *testing.T) { // maps.CollectSafeSliceMap() // maps.CollectSet() - safeSliceMap := maps.CollectSafeSliceMap[string, int](func(yield func(string, int) bool) { + safeSliceMap := safemap.NewOrdered(func(yield func(string, int) bool) { yield("a", 0) yield("b", 1) yield("c", 2) @@ -122,9 +124,7 @@ func TestBindMacros(t *testing.T) { macros.Range(func(key string, value string) bool { if !m.Has(key) { // mylog.Warning(key, value) - macros.Lock() macros.Delete(key) - macros.Unlock() // return true } // mylog.Warning(key, value) diff --git a/sdk/bindgen/command_test.go b/sdk/bindgen/command_test.go index c4a45724..93847121 100644 --- a/sdk/bindgen/command_test.go +++ b/sdk/bindgen/command_test.go @@ -8,6 +8,8 @@ import ( "strings" "testing" + "github.com/ddkwork/golibrary/safemap" + "github.com/ddkwork/HyperDbg/sdk" "github.com/ddkwork/golibrary/mylog" @@ -71,7 +73,7 @@ func TestUnmarshalCommandJson(t *testing.T) { func TestCommandGenerate(t *testing.T) { t.Skip("not well") - m := safemap.NewOrdered[string, string]() + m := new(safemap.M[string, string]) m.Set("debugging", "debugging") m.Set("extension", "extension") m.Set("hwdbg", "hwdbg") @@ -108,7 +110,7 @@ func commandGenerate(kindName, path string) { return err }) - m := safemap.NewOrdered[string, string]() + m := new(safemap.M[string, string]) for _, command := range commands { m.Set(command.FullName, command.FullName) // todo this must be use Cmd,then it will return the right command } diff --git a/sdk/bindgen/macros_decode.go b/sdk/bindgen/macros_decode.go index e89641b7..2dc60923 100644 --- a/sdk/bindgen/macros_decode.go +++ b/sdk/bindgen/macros_decode.go @@ -2,6 +2,8 @@ package bindgen import ( "strings" + + "github.com/ddkwork/golibrary/safemap" ) func extractMacros(lines []string) *safemap.M[string, string] { From 05f011df5cd07b576a6d7035f10db254370ed1c2 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Sun, 1 Dec 2024 19:50:50 +0800 Subject: [PATCH 33/37] init --- sdk/bindgen/bind_test.go | 3 +- sdk/bindgen/merged_headers.h | 213 +++++++++++++++++++---------------- sdk/sdk.go | 38 +++---- 3 files changed, 134 insertions(+), 120 deletions(-) diff --git a/sdk/bindgen/bind_test.go b/sdk/bindgen/bind_test.go index e91c4767..e847a6f8 100644 --- a/sdk/bindgen/bind_test.go +++ b/sdk/bindgen/bind_test.go @@ -125,11 +125,12 @@ func TestBindMacros(t *testing.T) { if !m.Has(key) { // mylog.Warning(key, value) macros.Delete(key) - // return true + return true } // mylog.Warning(key, value) return true }) + return g := stream.NewGeneratedFile() g.P("package sdk") diff --git a/sdk/bindgen/merged_headers.h b/sdk/bindgen/merged_headers.h index 59d89f34..ab27d2ed 100644 --- a/sdk/bindgen/merged_headers.h +++ b/sdk/bindgen/merged_headers.h @@ -1,3 +1,15 @@ + +typedef unsigned char uint8_t; // 无符号8位整数 +typedef unsigned short uint16_t; // 无符号16位整数 +typedef unsigned int uint32_t; // 无符号32位整数 +typedef unsigned long long uint64_t; // 无符号64位整数 +typedef signed char int8_t; // 有符号8位整数 +typedef signed short int16_t; // 有符号16位整数 +typedef signed int int32_t; // 有符号32位整数 +typedef signed long long int64_t; // 有符号64位整数 +typedef int bool; // 使用 typedef 定义 bool 类型 + +typedef int* intptr_t; //bugfix.h #ifndef size_t #define size_t int @@ -221,8 +233,8 @@ typedef struct _CR3_TYPE * @brief enum for reasons why debuggee is paused * */ -typedef enum _DEBUGGEE_PAUSING_REASON -{ +typedef enum DEBUGGEE_PAUSING_REASON_ { + // // For both kernel & user debugger @@ -258,8 +270,8 @@ typedef enum _DEBUGGEE_PAUSING_REASON * @brief enum for requested action for HyperDbg packet * */ -typedef enum _DEBUGGER_REMOTE_PACKET_REQUESTED_ACTION -{ +typedef enum DEBUGGER_REMOTE_PACKET_REQUESTED_ACTION_ { + // // Debugger to debuggee (user-mode execution) @@ -355,8 +367,8 @@ typedef enum _DEBUGGER_REMOTE_PACKET_REQUESTED_ACTION * @warning used in hwdbg * */ -typedef enum _DEBUGGER_REMOTE_PACKET_TYPE -{ +typedef enum DEBUGGER_REMOTE_PACKET_TYPE_ { + // // Debugger to debuggee (vmx-root) @@ -1088,8 +1100,8 @@ const unsigned char BuildSignature[] = { * @brief Different levels of paging * */ -typedef enum _PAGING_LEVEL -{ +typedef enum PAGING_LEVEL_ { + PagingLevelPageTable = 0, PagingLevelPageDirectory, PagingLevelPageDirectoryPointerTable, @@ -1104,8 +1116,8 @@ typedef enum _PAGING_LEVEL * @brief Inum of intentions for buffers (buffer tag) * */ -typedef enum _POOL_ALLOCATION_INTENTION -{ +typedef enum POOL_ALLOCATION_INTENTION_ { + TRACKING_HOOKED_PAGES, EXEC_TRAMPOLINE, SPLIT_2MB_PAGING_TO_4KB_PAGE, @@ -1133,8 +1145,8 @@ typedef enum _POOL_ALLOCATION_INTENTION // Debug Registers Modifications // ////////////////////////////////////////////////// -typedef enum _DEBUG_REGISTER_TYPE -{ +typedef enum DEBUG_REGISTER_TYPE_ { + BREAK_ON_INSTRUCTION_FETCH, BREAK_ON_WRITE_ONLY, BREAK_ON_IO_READ_OR_WRITE_NOT_SUPPORTED, @@ -1145,8 +1157,8 @@ typedef enum _DEBUG_REGISTER_TYPE // Execution Stages // ////////////////////////////////////////////////// -typedef enum _VMX_EXECUTION_MODE -{ +typedef enum VMX_EXECUTION_MODE_ { + VmxExecutionModeNonRoot = FALSE, VmxExecutionModeRoot = TRUE } VMX_EXECUTION_MODE; @@ -1155,8 +1167,8 @@ typedef enum _VMX_EXECUTION_MODE * @brief Type of calling the event * */ -typedef enum _VMM_CALLBACK_EVENT_CALLING_STAGE_TYPE -{ +typedef enum VMM_CALLBACK_EVENT_CALLING_STAGE_TYPE_ { + VMM_CALLBACK_CALLING_STAGE_INVALID_EVENT_EMULATION = 0, VMM_CALLBACK_CALLING_STAGE_PRE_EVENT_EMULATION = 1, VMM_CALLBACK_CALLING_STAGE_POST_EVENT_EMULATION = 2, @@ -1168,8 +1180,8 @@ typedef enum _VMM_CALLBACK_EVENT_CALLING_STAGE_TYPE * @brief enum to query different process and thread interception mechanisms * */ -typedef enum _DEBUGGER_THREAD_PROCESS_TRACING -{ +typedef enum DEBUGGER_THREAD_PROCESS_TRACING_ { + DEBUGGER_THREAD_PROCESS_TRACING_INTERCEPT_CLOCK_INTERRUPTS_FOR_THREAD_CHANGE, DEBUGGER_THREAD_PROCESS_TRACING_INTERCEPT_CLOCK_INTERRUPTS_FOR_PROCESS_CHANGE, @@ -1318,8 +1330,8 @@ typedef struct _DEBUGGEE_UD_PAUSED_PACKET * @brief Type of transferring buffer between user-to-kernel * */ -typedef enum _NOTIFY_TYPE -{ +typedef enum NOTIFY_TYPE_ { + IRP_BASED, EVENT_BASED } NOTIFY_TYPE; @@ -1374,8 +1386,8 @@ typedef struct _DIRECT_VMCALL_PARAMETERS * @brief different type of memory addresses * */ -typedef enum _DEBUGGER_HOOK_MEMORY_TYPE -{ +typedef enum DEBUGGER_HOOK_MEMORY_TYPE_ { + DEBUGGER_MEMORY_HOOK_VIRTUAL_ADDRESS, DEBUGGER_MEMORY_HOOK_PHYSICAL_ADDRESS } DEBUGGER_HOOK_MEMORY_TYPE; @@ -2086,8 +2098,8 @@ typedef struct _VMX_SEGMENT_SELECTOR * @brief Exceptions enum * */ -typedef enum _EXCEPTION_VECTORS -{ +typedef enum EXCEPTION_VECTORS_ { + EXCEPTION_VECTOR_DIVIDE_ERROR, EXCEPTION_VECTOR_DEBUG_BREAKPOINT, EXCEPTION_VECTOR_NMI, @@ -2140,8 +2152,8 @@ typedef enum _EXCEPTION_VECTORS * @brief The status of triggering events * */ -typedef enum _VMM_CALLBACK_TRIGGERING_EVENT_STATUS_TYPE -{ +typedef enum VMM_CALLBACK_TRIGGERING_EVENT_STATUS_TYPE_ { + VMM_CALLBACK_TRIGGERING_EVENT_STATUS_SUCCESSFUL_NO_INITIALIZED = 0, VMM_CALLBACK_TRIGGERING_EVENT_STATUS_SUCCESSFUL = 0, VMM_CALLBACK_TRIGGERING_EVENT_STATUS_SUCCESSFUL_IGNORE_EVENT = 1, @@ -2158,8 +2170,8 @@ typedef enum _VMM_CALLBACK_TRIGGERING_EVENT_STATUS_TYPE * @brief enum to show type of all HyperDbg events * */ -typedef enum _VMM_EVENT_TYPE_ENUM -{ +typedef enum VMM_EVENT_TYPE_ENUM_ { + // // EPT Memory Monitoring Events @@ -2242,8 +2254,8 @@ typedef enum _VMM_EVENT_TYPE_ENUM * @brief Type of Actions * */ -typedef enum _DEBUGGER_EVENT_ACTION_TYPE_ENUM -{ +typedef enum DEBUGGER_EVENT_ACTION_TYPE_ENUM_ { + BREAK_TO_DEBUGGER, RUN_SCRIPT, RUN_CUSTOM_CODE @@ -2254,8 +2266,8 @@ typedef enum _DEBUGGER_EVENT_ACTION_TYPE_ENUM * @brief Type of handling !syscall or !sysret * */ -typedef enum _DEBUGGER_EVENT_SYSCALL_SYSRET_TYPE -{ +typedef enum DEBUGGER_EVENT_SYSCALL_SYSRET_TYPE_ { + DEBUGGER_EVENT_SYSCALL_SYSRET_SAFE_ACCESS_MEMORY = 0, DEBUGGER_EVENT_SYSCALL_SYSRET_HANDLE_ALL_UD = 1, @@ -2267,8 +2279,8 @@ typedef enum _DEBUGGER_EVENT_SYSCALL_SYSRET_TYPE * @brief Type of mode change traps * */ -typedef enum _DEBUGGER_EVENT_MODE_TYPE -{ +typedef enum DEBUGGER_EVENT_MODE_TYPE_ { + DEBUGGER_EVENT_MODE_TYPE_USER_MODE_AND_KERNEL_MODE = 1, DEBUGGER_EVENT_MODE_TYPE_USER_MODE = 3, DEBUGGER_EVENT_MODE_TYPE_KERNEL_MODE = 0, @@ -2280,8 +2292,8 @@ typedef enum _DEBUGGER_EVENT_MODE_TYPE * @brief Type of tracing events * */ -typedef enum _DEBUGGER_EVENT_TRACE_TYPE -{ +typedef enum DEBUGGER_EVENT_TRACE_TYPE_ { + DEBUGGER_EVENT_TRACE_TYPE_INVALID = 0, DEBUGGER_EVENT_TRACE_TYPE_STEP_IN = 1, DEBUGGER_EVENT_TRACE_TYPE_STEP_OUT = 2, @@ -2293,8 +2305,8 @@ typedef enum _DEBUGGER_EVENT_TRACE_TYPE * @brief different types of modifying events request (enable/disable/clear) * */ -typedef enum _DEBUGGER_MODIFY_EVENTS_TYPE -{ +typedef enum DEBUGGER_MODIFY_EVENTS_TYPE_ { + DEBUGGER_MODIFY_EVENTS_QUERY_STATE, DEBUGGER_MODIFY_EVENTS_ENABLE, DEBUGGER_MODIFY_EVENTS_DISABLE, @@ -2353,8 +2365,8 @@ typedef struct _DEBUGGER_EVENT_OPTIONS * @brief Things to consider when applying resources * */ -typedef enum _PROTECTED_HV_RESOURCES_PASSING_OVERS -{ +typedef enum PROTECTED_HV_RESOURCES_PASSING_OVERS_ { + // // for exception bitmap // @@ -2388,8 +2400,8 @@ typedef enum _PROTECTED_HV_RESOURCES_PASSING_OVERS * @brief Type of protected (multi-used) resources * */ -typedef enum _PROTECTED_HV_RESOURCES_TYPE -{ +typedef enum PROTECTED_HV_RESOURCES_TYPE_ { + PROTECTED_HV_RESOURCES_EXCEPTION_BITMAP, PROTECTED_HV_RESOURCES_EXTERNAL_INTERRUPT_EXITING, @@ -2561,8 +2573,8 @@ typedef struct _DEBUGGER_EVENT_AND_ACTION_RESULT * @warning This file should be changed along with hwdbg files * */ -typedef enum _HWDBG_ACTION_ENUMS -{ +typedef enum HWDBG_ACTION_ENUMS_ { + hwdbgActionSendInstanceInfo = 1, hwdbgActionConfigureScriptBuffer = 2, @@ -2573,8 +2585,8 @@ typedef enum _HWDBG_ACTION_ENUMS * @warning This file should be changed along with hwdbg files * */ -typedef enum _HWDBG_RESPONSE_ENUMS -{ +typedef enum HWDBG_RESPONSE_ENUMS_ { + hwdbgResponseSuccessOrErrorMessage = 1, hwdbgResponseInstanceInfo = 2, @@ -2585,8 +2597,8 @@ typedef enum _HWDBG_RESPONSE_ENUMS * @warning This file should be changed along with hwdbg files * */ -typedef enum _HWDBG_SUCCESS_OR_ERROR_ENUMS -{ +typedef enum HWDBG_SUCCESS_OR_ERROR_ENUMS_ { + hwdbgOperationWasSuccessful = 0x7FFFFFFF, hwdbgErrorInvalidPacket = 1, @@ -3157,7 +3169,7 @@ typedef struct _PCI_TREE * */ #pragma once -#include "Pcie.h" +//#include "Pcie.h" #define SIZEOF_DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS \ sizeof(DEBUGGER_READ_PAGE_TABLE_ENTRIES_DETAILS) @@ -3234,8 +3246,8 @@ typedef struct _DEBUGGER_PAGE_IN_REQUEST * @brief different modes of reconstruct requests * */ -typedef enum _REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE -{ +typedef enum REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE_ { + REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE_UNKNOWN = 0, REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE_USER_MODE, REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE_KERNEL_MODE, @@ -3245,8 +3257,8 @@ typedef enum _REVERSING_MACHINE_RECONSTRUCT_MEMORY_MODE * @brief different types of reconstruct requests * */ -typedef enum _REVERSING_MACHINE_RECONSTRUCT_MEMORY_TYPE -{ +typedef enum REVERSING_MACHINE_RECONSTRUCT_MEMORY_TYPE_ { + REVERSING_MACHINE_RECONSTRUCT_MEMORY_TYPE_UNKNOWN = 0, REVERSING_MACHINE_RECONSTRUCT_MEMORY_TYPE_RECONSTRUCT, REVERSING_MACHINE_RECONSTRUCT_MEMORY_TYPE_PATTERN, @@ -3298,8 +3310,8 @@ typedef struct _DEBUGGER_DT_COMMAND_OPTIONS * @brief different types of prealloc requests * */ -typedef enum _DEBUGGER_PREALLOC_COMMAND_TYPE -{ +typedef enum DEBUGGER_PREALLOC_COMMAND_TYPE_ { + DEBUGGER_PREALLOC_COMMAND_TYPE_THREAD_INTERCEPTION, DEBUGGER_PREALLOC_COMMAND_TYPE_MONITOR, DEBUGGER_PREALLOC_COMMAND_TYPE_EPTHOOK, @@ -3333,8 +3345,8 @@ typedef struct _DEBUGGER_PREALLOC_COMMAND * @brief different types of preactivate requests * */ -typedef enum _DEBUGGER_PREACTIVATE_COMMAND_TYPE -{ +typedef enum DEBUGGER_PREACTIVATE_COMMAND_TYPE_ { + DEBUGGER_PREACTIVATE_COMMAND_TYPE_MODE, } DEBUGGER_PREACTIVATE_COMMAND_TYPE; @@ -3362,8 +3374,8 @@ typedef struct _DEBUGGER_PREACTIVATE_COMMAND * @brief different types of reading memory * */ -typedef enum _DEBUGGER_READ_READING_TYPE -{ +typedef enum DEBUGGER_READ_READING_TYPE_ { + READ_FROM_KERNEL, READ_FROM_VMX_ROOT } DEBUGGER_READ_READING_TYPE; @@ -3372,8 +3384,8 @@ typedef enum _DEBUGGER_READ_READING_TYPE * @brief different type of addresses * */ -typedef enum _DEBUGGER_READ_MEMORY_TYPE -{ +typedef enum DEBUGGER_READ_MEMORY_TYPE_ { + DEBUGGER_READ_PHYSICAL_ADDRESS, DEBUGGER_READ_VIRTUAL_ADDRESS } DEBUGGER_READ_MEMORY_TYPE; @@ -3382,8 +3394,8 @@ typedef enum _DEBUGGER_READ_MEMORY_TYPE * @brief different address mode * */ -typedef enum _DEBUGGER_READ_MEMORY_ADDRESS_MODE -{ +typedef enum DEBUGGER_READ_MEMORY_ADDRESS_MODE_ { + DEBUGGER_READ_ADDRESS_MODE_32_BIT, DEBUGGER_READ_ADDRESS_MODE_64_BIT @@ -3394,8 +3406,8 @@ typedef enum _DEBUGGER_READ_MEMORY_ADDRESS_MODE * the details of memory or disassemble them * */ -typedef enum _DEBUGGER_SHOW_MEMORY_STYLE -{ +typedef enum DEBUGGER_SHOW_MEMORY_STYLE_ { + DEBUGGER_SHOW_COMMAND_DT = 1, DEBUGGER_SHOW_COMMAND_DISASSEMBLE64, DEBUGGER_SHOW_COMMAND_DISASSEMBLE32, @@ -3456,8 +3468,8 @@ typedef struct _DEBUGGER_FLUSH_LOGGING_BUFFERS * @brief test query used for test purposed * */ -typedef enum _DEBUGGER_TEST_QUERY_STATE -{ +typedef enum DEBUGGER_TEST_QUERY_STATE_ { + TEST_QUERY_HALTING_CORE_STATUS = 1, // Query constant to show detail of halting of core TEST_QUERY_PREALLOCATED_POOL_STATE = 2, // Query pre-allocated pool state TEST_QUERY_TRAP_STATE = 3, // Query trap state @@ -3574,8 +3586,8 @@ typedef struct _DEBUGGER_SEND_USERMODE_MESSAGES_TO_DEBUGGER * @brief different types of actions on MSRs * */ -typedef enum _DEBUGGER_MSR_ACTION_TYPE -{ +typedef enum DEBUGGER_MSR_ACTION_TYPE_ { + DEBUGGER_MSR_READ, DEBUGGER_MSR_WRITE } DEBUGGER_MSR_ACTION_TYPE; @@ -3605,8 +3617,8 @@ typedef struct _DEBUGGER_READ_AND_WRITE_ON_MSR * @brief different type of addresses for editing memory * */ -typedef enum _DEBUGGER_EDIT_MEMORY_TYPE -{ +typedef enum DEBUGGER_EDIT_MEMORY_TYPE_ { + EDIT_VIRTUAL_MEMORY, EDIT_PHYSICAL_MEMORY } DEBUGGER_EDIT_MEMORY_TYPE; @@ -3615,8 +3627,8 @@ typedef enum _DEBUGGER_EDIT_MEMORY_TYPE * @brief size of editing memory * */ -typedef enum _DEBUGGER_EDIT_MEMORY_BYTE_SIZE -{ +typedef enum DEBUGGER_EDIT_MEMORY_BYTE_SIZE_ { + EDIT_BYTE, EDIT_DWORD, EDIT_QWORD @@ -3647,8 +3659,8 @@ typedef struct _DEBUGGER_EDIT_MEMORY * @brief different types of address for searching on memory * */ -typedef enum _DEBUGGER_SEARCH_MEMORY_TYPE -{ +typedef enum DEBUGGER_SEARCH_MEMORY_TYPE_ { + SEARCH_PHYSICAL_MEMORY, SEARCH_VIRTUAL_MEMORY, SEARCH_PHYSICAL_FROM_VIRTUAL_MEMORY, @@ -3659,8 +3671,8 @@ typedef enum _DEBUGGER_SEARCH_MEMORY_TYPE * @brief different sizes on searching memory * */ -typedef enum _DEBUGGER_SEARCH_MEMORY_BYTE_SIZE -{ +typedef enum DEBUGGER_SEARCH_MEMORY_BYTE_SIZE_ { + SEARCH_BYTE, SEARCH_DWORD, SEARCH_QWORD @@ -3759,8 +3771,8 @@ typedef struct _DEBUGGEE_CHANGE_CORE_PACKET * @brief different actions of switchings * */ -typedef enum _DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_TYPE -{ +typedef enum DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_TYPE_ { + DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_ATTACH, DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_DETACH, DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS_ACTION_REMOVE_HOOKS, @@ -3800,8 +3812,8 @@ typedef struct _DEBUGGER_ATTACH_DETACH_USER_MODE_PROCESS * @brief different type of process or thread queries * */ -typedef enum _DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_TYPES -{ +typedef enum DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_TYPES_ { + DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_QUERY_PROCESS_COUNT = 1, DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_QUERY_THREAD_COUNT = 2, DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_QUERY_PROCESS_LIST = 3, @@ -3815,8 +3827,8 @@ typedef enum _DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_TYPES * @brief different actions on showing or querying list of process or threads * */ -typedef enum _DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_ACTIONS -{ +typedef enum DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_ACTIONS_ { + DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_ACTION_SHOW_INSTANTLY = 1, DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_ACTION_QUERY_COUNT = 2, DEBUGGER_QUERY_ACTIVE_PROCESSES_OR_THREADS_ACTION_QUERY_SAVE_DETAILS = 3, @@ -3922,8 +3934,8 @@ typedef struct _DEBUGGER_SINGLE_CALLSTACK_FRAME * @brief callstack showing method * */ -typedef enum _DEBUGGER_CALLSTACK_DISPLAY_METHOD -{ +typedef enum DEBUGGER_CALLSTACK_DISPLAY_METHOD_ { + DEBUGGER_CALLSTACK_DISPLAY_METHOD_WITHOUT_PARAMS, DEBUGGER_CALLSTACK_DISPLAY_METHOD_WITH_PARAMS, @@ -4010,8 +4022,8 @@ typedef struct _DEBUGGER_EVENT_REQUEST_CUSTOM_CODE * @brief User-mode debugging actions * */ -typedef enum _DEBUGGER_UD_COMMAND_ACTION_TYPE -{ +typedef enum DEBUGGER_UD_COMMAND_ACTION_TYPE_ { + DEBUGGER_UD_COMMAND_ACTION_TYPE_NONE = 0, DEBUGGER_UD_COMMAND_ACTION_TYPE_PAUSE, DEBUGGER_UD_COMMAND_ACTION_TYPE_CONTINUE, @@ -4054,8 +4066,8 @@ typedef struct _DEBUGGER_UD_COMMAND_PACKET * @brief Debugger process switch and process details * */ -typedef enum _DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_TYPE -{ +typedef enum DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_TYPE_ { + DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_GET_PROCESS_DETAILS, DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_GET_PROCESS_LIST, @@ -4094,8 +4106,8 @@ typedef struct _DEBUGGEE_DETAILS_AND_SWITCH_PROCESS_PACKET * @brief Debugger thread switch and thread details * */ -typedef enum _DEBUGGEE_DETAILS_AND_SWITCH_THREAD_TYPE -{ +typedef enum DEBUGGEE_DETAILS_AND_SWITCH_THREAD_TYPE_ { + DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PERFORM_SWITCH, DEBUGGEE_DETAILS_AND_SWITCH_THREAD_GET_THREAD_DETAILS, @@ -4135,8 +4147,8 @@ typedef struct _DEBUGGEE_DETAILS_AND_SWITCH_THREAD_PACKET * @brief stepping and tracking types * */ -typedef enum _DEBUGGER_REMOTE_STEPPING_REQUEST -{ +typedef enum DEBUGGER_REMOTE_STEPPING_REQUEST_ { + DEBUGGER_REMOTE_STEPPING_REQUEST_STEP_IN, DEBUGGER_REMOTE_STEPPING_REQUEST_INSTRUMENTATION_STEP_IN, DEBUGGER_REMOTE_STEPPING_REQUEST_INSTRUMENTATION_STEP_IN_FOR_TRACKING, @@ -4176,8 +4188,8 @@ typedef struct _DEBUGGEE_STEP_PACKET * @brief Perform actions related to APIC * */ -typedef enum _DEBUGGER_APIC_REQUEST_TYPE -{ +typedef enum DEBUGGER_APIC_REQUEST_TYPE_ { + DEBUGGER_APIC_REQUEST_TYPE_READ_LOCAL_APIC, } DEBUGGER_APIC_REQUEST_TYPE; @@ -4353,8 +4365,8 @@ typedef struct _DEBUGGEE_BP_PACKET * @brief breakpoint modification types * */ -typedef enum _DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST -{ +typedef enum DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST_ { + DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST_LIST_BREAKPOINTS, DEBUGGEE_BREAKPOINT_MODIFICATION_REQUEST_ENABLE, @@ -4382,8 +4394,8 @@ typedef struct _DEBUGGEE_BP_LIST_OR_MODIFY_PACKET * @brief Whether a jump is taken or not taken * */ -typedef enum _DEBUGGER_CONDITIONAL_JUMP_STATUS -{ +typedef enum DEBUGGER_CONDITIONAL_JUMP_STATUS_ { + DEBUGGER_CONDITIONAL_JUMP_STATUS_ERROR = 0, DEBUGGER_CONDITIONAL_JUMP_STATUS_NOT_CONDITIONAL_JUMP, @@ -4746,7 +4758,7 @@ static const char *const FunctionNames[] = { "FUNC_WCSNCMP", }; -typedef enum REGS_ENUM { +typedef enum REGS_ENUM_ { REGISTER_RAX = 0, REGISTER_EAX = 1, REGISTER_AX = 2, @@ -5496,3 +5508,4 @@ SymCastingQueryForFiledsAndTypes(_In_ const char * StructName, #endif + diff --git a/sdk/sdk.go b/sdk/sdk.go index dff75720..c31ca8f9 100644 --- a/sdk/sdk.go +++ b/sdk/sdk.go @@ -793,12 +793,12 @@ type ScriptEngineGeneralRegisters struct { ReturnValue Uint64 } type Cr3Type struct { - Anon203_5 + Anon202_5 } -type Anon203_5 struct { +type Anon202_5 struct { Raw [1]int64 } -type Anon207_9 struct { +type Anon206_9 struct { Pcid Uint64 PageFrameNumber Uint64 Reserved1 Uint64 @@ -890,10 +890,10 @@ type EptSingleHookUnhookingDetails struct { PhysicalAddress SizeT OriginalEntry Uint64 } -type Anon1457_9 struct { +type Anon1456_9 struct { Raw [1]int32 } -type Anon1459_5 struct { +type Anon1458_5 struct { // [Bits 3:0] Segment type. Type Uint32 // [Bit 4] S - Descriptor type (0 = system; 1 = code or data). @@ -1865,8 +1865,8 @@ func init() { bindlib.Validate((*GuestExtraRegisters)(nil), 32, 8, "Cs", 0, "Ds", 2, "Fs", 4, "Gs", 6, "Es", 8, "Ss", 10, "Rflags", 16, "Rip", 24) bindlib.Validate((*ScriptEngineGeneralRegisters)(nil), 40, 8, "StackBuffer", 0, "GlobalVariablesList", 8, "StackIndx", 16, "StackBaseIndx", 24, "ReturnValue", 32) bindlib.Validate((*Cr3Type)(nil), 8, 8) - bindlib.Validate((*Anon203_5)(nil), 8, 8) - bindlib.Validate((*Anon207_9)(nil), 8, 8, "Pcid", 0, "PageFrameNumber", 1, "Reserved1", 6, "Reserved_2", 7, "PcidInvalidate", 7) + bindlib.Validate((*Anon202_5)(nil), 8, 8) + bindlib.Validate((*Anon206_9)(nil), 8, 8, "Pcid", 0, "PageFrameNumber", 1, "Reserved1", 6, "Reserved_2", 7, "PcidInvalidate", 7) bindlib.Validate((*DebuggerRemotePacket)(nil), 24, 8, "Checksum", 0, "Indicator", 8, "TypeOfThePacket", 16, "RequestedActionOfThePacket", 20) bindlib.Validate((*DebuggeeUserInputPacket)(nil), 12, 4, "CommandLen", 0, "IgnoreFinishedSignal", 4, "Result", 8) bindlib.Validate((*DebuggeeEventAndActionHeaderForRemotePacket)(nil), 4, 4, "Length", 0) @@ -1881,8 +1881,8 @@ func init() { bindlib.Validate((*EptHooksAddressDetailsForMemoryMonitor)(nil), 32, 8, "StartAddress", 0, "EndAddress", 8, "SetHookForRead", 16, "SetHookForWrite", 17, "SetHookForExec", 18, "MemoryType", 20, "Tag", 24) bindlib.Validate((*EptHooksAddressDetailsForEpthook2)(nil), 16, 8, "TargetAddress", 0, "HookFunction", 8) bindlib.Validate((*EptSingleHookUnhookingDetails)(nil), 24, 8, "CallerNeedsToRestoreEntryAndInvalidateEpt", 0, "RemoveBreakpointInterception", 1, "PhysicalAddress", 8, "OriginalEntry", 16) - bindlib.Validate((*Anon1457_9)(nil), 4, 4) - bindlib.Validate((*Anon1459_5)(nil), 4, 4, "Type", 0, "DescriptorType", 0, "DescriptorPrivilegeLevel", 0, "Present", 0, "Reserved1", 1, "AvailableBit", 1, "LongMode", 1, "DefaultBig", 1, "Granularity", 1, "Unusable", 2, "Reserved2", 2) + bindlib.Validate((*Anon1456_9)(nil), 4, 4) + bindlib.Validate((*Anon1458_5)(nil), 4, 4, "Type", 0, "DescriptorType", 0, "DescriptorPrivilegeLevel", 0, "Present", 0, "Reserved1", 1, "AvailableBit", 1, "LongMode", 1, "DefaultBig", 1, "Granularity", 1, "Unusable", 2, "Reserved2", 2) bindlib.Validate((*VmxSegmentSelector)(nil), 24, 8, "Selector", 0, "Attributes", 4, "Limit", 8, "Base", 16) bindlib.Validate((*DebuggerModifyEvents)(nil), 24, 8, "Tag", 0, "KernelStatus", 8, "TypeOfAction", 16, "IsEnabled", 20) bindlib.Validate((*DebuggerShortCircuitingEvent)(nil), 16, 8, "KernelStatus", 0, "IsShortCircuiting", 8) @@ -2553,34 +2553,34 @@ func SymCastingQueryForFiledsAndTypes(StructName *byte, FiledOfStructName *byte, return bindlib.UnmarshallSyscall[Boolean](__res) } -func (s Anon203_5) Flags() Uint64 { +func (s Anon202_5) Flags() Uint64 { return bindlib.ReadBitcast[Uint64](unsafe.Add(unsafe.Pointer(unsafe.SliceData(s.Raw[:])), 0)) } -func (s *Anon203_5) SetFlags(v Uint64) { +func (s *Anon202_5) SetFlags(v Uint64) { bindlib.WriteBitcast(unsafe.Add(unsafe.Pointer(unsafe.SliceData(s.Raw[:])), 0), v) } -func (s Anon203_5) Fields() Anon207_9 { - return bindlib.ReadBitcast[Anon207_9](unsafe.Add(unsafe.Pointer(unsafe.SliceData(s.Raw[:])), 0)) +func (s Anon202_5) Fields() Anon206_9 { + return bindlib.ReadBitcast[Anon206_9](unsafe.Add(unsafe.Pointer(unsafe.SliceData(s.Raw[:])), 0)) } -func (s *Anon203_5) SetFields(v Anon207_9) { +func (s *Anon202_5) SetFields(v Anon206_9) { bindlib.WriteBitcast(unsafe.Add(unsafe.Pointer(unsafe.SliceData(s.Raw[:])), 0), v) } -func (s Anon1457_9) Fields() Anon1459_5 { - return bindlib.ReadBitcast[Anon1459_5](unsafe.Add(unsafe.Pointer(unsafe.SliceData(s.Raw[:])), 0)) +func (s Anon1456_9) Fields() Anon1458_5 { + return bindlib.ReadBitcast[Anon1458_5](unsafe.Add(unsafe.Pointer(unsafe.SliceData(s.Raw[:])), 0)) } -func (s *Anon1457_9) SetFields(v Anon1459_5) { +func (s *Anon1456_9) SetFields(v Anon1458_5) { bindlib.WriteBitcast(unsafe.Add(unsafe.Pointer(unsafe.SliceData(s.Raw[:])), 0), v) } -func (s Anon1457_9) AsUInt() Uint32 { +func (s Anon1456_9) AsUInt() Uint32 { return bindlib.ReadBitcast[Uint32](unsafe.Add(unsafe.Pointer(unsafe.SliceData(s.Raw[:])), 0)) } -func (s *Anon1457_9) SetAsUInt(v Uint32) { +func (s *Anon1456_9) SetAsUInt(v Uint32) { bindlib.WriteBitcast(unsafe.Add(unsafe.Pointer(unsafe.SliceData(s.Raw[:])), 0), v) } From 0c2a6b7ed3bcf62c8d8462ddedfa55fa52f740d8 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Fri, 6 Dec 2024 15:53:16 +0800 Subject: [PATCH 34/37] init --- go.mod | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/go.mod b/go.mod index 5fcb4879..f10236b0 100644 --- a/go.mod +++ b/go.mod @@ -7,7 +7,7 @@ require ( github.com/ddkwork/golibrary v0.0.0-20241109061650-bd3e94f7b3cf github.com/ddkwork/unison v0.0.0-20241013162326-b9a18ce1a207 github.com/ebitengine/purego v0.8.0 - github.com/saferwall/pe v1.5.4 + github.com/saferwall/pe v1.5.6 github.com/tc-hib/winres v0.3.1 github.com/winlabs/gowin32 v0.0.0-20240930213947-f504d7e14639 golang.org/x/exp v0.0.0-20241009180824-f66d83c29e7c From c4019e6f0c5f22a89a2301986c6fff48109bfdcc Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Wed, 1 Jan 2025 17:33:44 +0800 Subject: [PATCH 35/37] dev --- go.mod | 14 +++++++------- go.sum | 9 +++++++++ 2 files changed, 16 insertions(+), 7 deletions(-) diff --git a/go.mod b/go.mod index f10236b0..ff99c6cd 100644 --- a/go.mod +++ b/go.mod @@ -4,15 +4,15 @@ go 1.23.3 require ( github.com/ddkwork/app v0.0.0-20241026164255-6ce9e6cb2eb3 - github.com/ddkwork/golibrary v0.0.0-20241109061650-bd3e94f7b3cf + github.com/ddkwork/golibrary v0.0.0-20250101083646-7f7ce7d4075c github.com/ddkwork/unison v0.0.0-20241013162326-b9a18ce1a207 github.com/ebitengine/purego v0.8.0 github.com/saferwall/pe v1.5.6 github.com/tc-hib/winres v0.3.1 github.com/winlabs/gowin32 v0.0.0-20240930213947-f504d7e14639 golang.org/x/exp v0.0.0-20241009180824-f66d83c29e7c - golang.org/x/image v0.21.0 - golang.org/x/sys v0.26.0 + golang.org/x/image v0.23.0 + golang.org/x/sys v0.28.0 ) @@ -52,11 +52,11 @@ require ( github.com/yuin/goldmark v1.7.6 // indirect golang.org/x/arch v0.8.0 // indirect golang.org/x/exp/shiny v0.0.0-20241009180824-f66d83c29e7c // indirect - golang.org/x/mod v0.21.0 // indirect - golang.org/x/sync v0.8.0 // indirect + golang.org/x/mod v0.22.0 // indirect + golang.org/x/sync v0.10.0 // indirect golang.org/x/term v0.25.0 // indirect - golang.org/x/text v0.19.0 // indirect - golang.org/x/tools v0.26.0 // indirect + golang.org/x/text v0.21.0 // indirect + golang.org/x/tools v0.28.0 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect mvdan.cc/gofumpt v0.7.0 // indirect ) diff --git a/go.sum b/go.sum index c153f744..24cd002e 100644 --- a/go.sum +++ b/go.sum @@ -38,6 +38,8 @@ github.com/ddkwork/golibrary v0.0.0-20241107065116-cabdcd45ad66 h1:gHbP8X6jzA3K2 github.com/ddkwork/golibrary v0.0.0-20241107065116-cabdcd45ad66/go.mod h1:yY9wkpVeSyhB6mJ3QQ7Fk4i9utgyaCZvEQ63Ym/SpuY= github.com/ddkwork/golibrary v0.0.0-20241109061650-bd3e94f7b3cf h1:KMEqQ0haYTMetpnMCEPC6ziMq2kbCevfr3KW9wnKli0= github.com/ddkwork/golibrary v0.0.0-20241109061650-bd3e94f7b3cf/go.mod h1:qiMzDxTwpLJ9hDTOdffR1FHJ44sZbshtVl5fvt2l/Cs= +github.com/ddkwork/golibrary v0.0.0-20250101083646-7f7ce7d4075c h1:aRjCD0Un5kbwxfXL0Bpiqc+FTm4xHMBZQRFftGbYT98= +github.com/ddkwork/golibrary v0.0.0-20250101083646-7f7ce7d4075c/go.mod h1:fzfhl61kUu+Sn22VCEojlYr9lE8X0SZmbOocICR+0s0= github.com/ddkwork/toolbox v0.0.0-20241013161004-026a13407120 h1:SuQKYhUQVHem+0sf44HfaAma/bh8bEk47FlymnrM4UY= github.com/ddkwork/toolbox v0.0.0-20241013161004-026a13407120/go.mod h1:RANTAgV00e+arxiVSAzl2dsoaj2+N2vcBZcfqwO3YfM= github.com/ddkwork/unison v0.0.0-20241013162326-b9a18ce1a207 h1:wZ/NeuNFKVLjNKxVu4C5x+UL6omuKmBZztwLQF06Sp4= @@ -108,6 +110,7 @@ github.com/rogpeppe/go-internal v1.12.0 h1:exVL4IDcn6na9z1rAb56Vxr+CgyK3nn3O+epU github.com/rogpeppe/go-internal v1.12.0/go.mod h1:E+RYuTGaKKdloAfM02xzb0FW3Paa99yedzYV+kq4uf4= github.com/saferwall/pe v1.5.4 h1:tLmMggEMUfeqrpJ25zS/okUQmyFdD5xWKL2+z9njCqg= github.com/saferwall/pe v1.5.4/go.mod h1:mJx+PuptmNpoPFBNhWs/uDMFL/kTHVZIkg0d4OUJFbQ= +github.com/saferwall/pe v1.5.6/go.mod h1:mJx+PuptmNpoPFBNhWs/uDMFL/kTHVZIkg0d4OUJFbQ= github.com/secDre4mer/pkcs7 v0.0.0-20240322103146-665324a4461d h1:RQqyEogx5J6wPdoxqL132b100j8KjcVHO1c0KLRoIhc= github.com/secDre4mer/pkcs7 v0.0.0-20240322103146-665324a4461d/go.mod h1:PegD7EVqlN88z7TpCqH92hHP+GBpfomGCCnw1PFtNOA= github.com/sergi/go-diff v1.3.1 h1:xkr+Oxo4BOQKmkn/B9eMK0g5Kg/983T9DqqPHwYqD+8= @@ -150,9 +153,11 @@ golang.org/x/exp/shiny v0.0.0-20241009180824-f66d83c29e7c h1:jTMrjjZRcSH/BDxWhXC golang.org/x/exp/shiny v0.0.0-20241009180824-f66d83c29e7c/go.mod h1:3F+MieQB7dRYLTmnncoFbb1crS5lfQoTfDgQy6K4N0o= golang.org/x/image v0.21.0 h1:c5qV36ajHpdj4Qi0GnE0jUc/yuo33OLFaa0d+crTD5s= golang.org/x/image v0.21.0/go.mod h1:vUbsLavqK/W303ZroQQVKQ+Af3Yl6Uz1Ppu5J/cLz78= +golang.org/x/image v0.23.0/go.mod h1:wJJBTdLfCCf3tiHa1fNxpZmUI4mmoZvwMCPP0ddoNKY= golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4= golang.org/x/mod v0.21.0 h1:vvrHzRwRfVKSiLrG+d4FMl/Qi4ukBCE6kZlTUkDYRT0= golang.org/x/mod v0.21.0/go.mod h1:6SkKJ3Xj0I0BrPOZoBy3bdMptDDU9oJrpohJ3eWZ1fY= +golang.org/x/mod v0.22.0/go.mod h1:6SkKJ3Xj0I0BrPOZoBy3bdMptDDU9oJrpohJ3eWZ1fY= golang.org/x/net v0.0.0-20180218175443-cbe0f9307d01/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= @@ -163,6 +168,7 @@ golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJ golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ= golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= +golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20200909081042-eff7692f9009/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= @@ -177,6 +183,7 @@ golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBc golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.26.0 h1:KHjCJyddX0LoSTb3J+vWpupP9p0oznkqVk/IfjymZbo= golang.org/x/sys v0.26.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.25.0 h1:WtHI/ltw4NvSUig5KARz9h521QvRC8RmF/cuYqifU24= @@ -188,11 +195,13 @@ golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= golang.org/x/text v0.19.0 h1:kTxAhCbGbxhK0IwgSKiMO5awPoDQ0RpfiVYBfK860YM= golang.org/x/text v0.19.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY= +golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ= golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc= golang.org/x/tools v0.26.0 h1:v/60pFQmzmT9ExmjDv2gGIfi3OqfKoEP6I5+umXlbnQ= golang.org/x/tools v0.26.0/go.mod h1:TPVVj70c7JJ3WCazhD8OdXcZg/og+b9+tH/KxylGwH0= +golang.org/x/tools v0.28.0/go.mod h1:dcIOrVd3mfQKTgrDVQHqCPMWy6lnhfhtX3hLXYVLfRw= golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk= From 4b78ac9c42900732fcb92aa17d74a8446f2fcb46 Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Wed, 1 Jan 2025 17:54:49 +0800 Subject: [PATCH 36/37] dev --- go.mod | 2 +- go.sum | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/go.mod b/go.mod index ff99c6cd..65642bcf 100644 --- a/go.mod +++ b/go.mod @@ -4,7 +4,7 @@ go 1.23.3 require ( github.com/ddkwork/app v0.0.0-20241026164255-6ce9e6cb2eb3 - github.com/ddkwork/golibrary v0.0.0-20250101083646-7f7ce7d4075c + github.com/ddkwork/golibrary v0.0.0-20250101093329-d96f6524ebe4 github.com/ddkwork/unison v0.0.0-20241013162326-b9a18ce1a207 github.com/ebitengine/purego v0.8.0 github.com/saferwall/pe v1.5.6 diff --git a/go.sum b/go.sum index 24cd002e..f03d465e 100644 --- a/go.sum +++ b/go.sum @@ -40,6 +40,8 @@ github.com/ddkwork/golibrary v0.0.0-20241109061650-bd3e94f7b3cf h1:KMEqQ0haYTMet github.com/ddkwork/golibrary v0.0.0-20241109061650-bd3e94f7b3cf/go.mod h1:qiMzDxTwpLJ9hDTOdffR1FHJ44sZbshtVl5fvt2l/Cs= github.com/ddkwork/golibrary v0.0.0-20250101083646-7f7ce7d4075c h1:aRjCD0Un5kbwxfXL0Bpiqc+FTm4xHMBZQRFftGbYT98= github.com/ddkwork/golibrary v0.0.0-20250101083646-7f7ce7d4075c/go.mod h1:fzfhl61kUu+Sn22VCEojlYr9lE8X0SZmbOocICR+0s0= +github.com/ddkwork/golibrary v0.0.0-20250101093329-d96f6524ebe4 h1:V32GfCpHQp5dZXTKw8K4BhKbtbmaUaP31t5eRpInN/g= +github.com/ddkwork/golibrary v0.0.0-20250101093329-d96f6524ebe4/go.mod h1:fzfhl61kUu+Sn22VCEojlYr9lE8X0SZmbOocICR+0s0= github.com/ddkwork/toolbox v0.0.0-20241013161004-026a13407120 h1:SuQKYhUQVHem+0sf44HfaAma/bh8bEk47FlymnrM4UY= github.com/ddkwork/toolbox v0.0.0-20241013161004-026a13407120/go.mod h1:RANTAgV00e+arxiVSAzl2dsoaj2+N2vcBZcfqwO3YfM= github.com/ddkwork/unison v0.0.0-20241013162326-b9a18ce1a207 h1:wZ/NeuNFKVLjNKxVu4C5x+UL6omuKmBZztwLQF06Sp4= From 2cd8b21b383b660f9fbb85fac740a137a489821f Mon Sep 17 00:00:00 2001 From: Admin <2762713521@qq.com> Date: Wed, 1 Jan 2025 18:21:55 +0800 Subject: [PATCH 37/37] dev --- go.mod | 28 ++++++---------- go.sum | 90 ++++++++++++++++------------------------------------ main_test.go | 4 +-- 3 files changed, 39 insertions(+), 83 deletions(-) diff --git a/go.mod b/go.mod index 65642bcf..5d65aee6 100644 --- a/go.mod +++ b/go.mod @@ -3,42 +3,34 @@ module github.com/ddkwork/HyperDbg go 1.23.3 require ( - github.com/ddkwork/app v0.0.0-20241026164255-6ce9e6cb2eb3 + github.com/ddkwork/app v0.0.0-20250101101805-a60d5b5cd452 github.com/ddkwork/golibrary v0.0.0-20250101093329-d96f6524ebe4 github.com/ddkwork/unison v0.0.0-20241013162326-b9a18ce1a207 - github.com/ebitengine/purego v0.8.0 + github.com/ebitengine/purego v0.8.1 github.com/saferwall/pe v1.5.6 github.com/tc-hib/winres v0.3.1 github.com/winlabs/gowin32 v0.0.0-20240930213947-f504d7e14639 - golang.org/x/exp v0.0.0-20241009180824-f66d83c29e7c golang.org/x/image v0.23.0 golang.org/x/sys v0.28.0 ) require ( - gioui.org v0.7.1 // indirect - gioui.org/cpu v0.0.0-20220412190645-f1e9e8c3b1f7 // indirect - gioui.org/shader v1.0.8 // indirect github.com/alecthomas/chroma/v2 v2.14.0 // indirect github.com/aquasecurity/table v1.8.0 // indirect github.com/axgle/mahonia v0.0.0-20180208002826-3358181d7394 // indirect github.com/cespare/xxhash/v2 v2.3.0 // indirect github.com/dave/dst v0.27.3 // indirect github.com/dc0d/caseconv v0.5.0 // indirect - github.com/ddkwork/toolbox v0.0.0-20241013161004-026a13407120 // indirect + github.com/ddkwork/toolbox v0.0.0-20241116165817-883d5d7d379c // indirect github.com/dlclark/regexp2 v1.11.4 // indirect - github.com/edsrzf/mmap-go v1.1.0 // indirect - github.com/fatih/color v1.17.0 // indirect - github.com/go-enry/go-enry/v2 v2.8.8 // indirect + github.com/edsrzf/mmap-go v1.2.0 // indirect + github.com/go-enry/go-enry/v2 v2.9.1 // indirect github.com/go-enry/go-oniguruma v1.2.1 // indirect - github.com/go-text/typesetting v0.1.2 // indirect github.com/google/go-cmp v0.6.0 // indirect github.com/google/uuid v1.6.0 // indirect - github.com/gorpher/gowin32 v0.0.11 // indirect + github.com/gorpher/gowin32 v0.0.12 // indirect github.com/hashicorp/go-version v1.7.0 // indirect - github.com/mattn/go-colorable v0.1.13 // indirect - github.com/mattn/go-isatty v0.0.20 // indirect github.com/mattn/go-runewidth v0.0.16 // indirect github.com/nfnt/resize v0.0.0-20180221191011-83c6a9932646 // indirect github.com/pkg/term v1.2.0-beta.2 // indirect @@ -49,12 +41,12 @@ require ( github.com/spf13/pflag v1.0.5 // indirect github.com/spyre-project/spyre v1.2.5 // indirect github.com/valyala/fastjson v1.6.4 // indirect - github.com/yuin/goldmark v1.7.6 // indirect - golang.org/x/arch v0.8.0 // indirect - golang.org/x/exp/shiny v0.0.0-20241009180824-f66d83c29e7c // indirect + github.com/yuin/goldmark v1.7.8 // indirect + golang.org/x/arch v0.12.0 // indirect + golang.org/x/exp v0.0.0-20241217172543-b2144cdd0a67 // indirect golang.org/x/mod v0.22.0 // indirect golang.org/x/sync v0.10.0 // indirect - golang.org/x/term v0.25.0 // indirect + golang.org/x/term v0.27.0 // indirect golang.org/x/text v0.21.0 // indirect golang.org/x/tools v0.28.0 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect diff --git a/go.sum b/go.sum index f03d465e..7e54cfb4 100644 --- a/go.sum +++ b/go.sum @@ -1,12 +1,3 @@ -eliasnaur.com/font v0.0.0-20230308162249-dd43949cb42d h1:ARo7NCVvN2NdhLlJE9xAbKweuI9L6UgfTbYb0YwPacY= -eliasnaur.com/font v0.0.0-20230308162249-dd43949cb42d/go.mod h1:OYVuxibdk9OSLX8vAqydtRPP87PyTFcT9uH3MlEGBQA= -gioui.org v0.7.1 h1:l7OVj47n1z8acaszQ6Wlu+Rxme+HqF3q8b+Fs68+x3w= -gioui.org v0.7.1/go.mod h1:5Kw/q7R1BWc5MKStuTNvhCgSrRqbfHc9Dzfjs4IGgZo= -gioui.org/cpu v0.0.0-20210808092351-bfe733dd3334/go.mod h1:A8M0Cn5o+vY5LTMlnRoK3O5kG+rH0kWfJjeKd9QpBmQ= -gioui.org/cpu v0.0.0-20220412190645-f1e9e8c3b1f7 h1:tNJdnP5CgM39PRc+KWmBRRYX/zJ+rd5XaYxY5d5veqA= -gioui.org/cpu v0.0.0-20220412190645-f1e9e8c3b1f7/go.mod h1:A8M0Cn5o+vY5LTMlnRoK3O5kG+rH0kWfJjeKd9QpBmQ= -gioui.org/shader v1.0.8 h1:6ks0o/A+b0ne7RzEqRZK5f4Gboz2CfG+mVliciy6+qA= -gioui.org/shader v1.0.8/go.mod h1:mWdiME581d/kV7/iEhLmUgUK5iZ09XR5XpduXzbePVM= github.com/PuerkitoBio/goquery v1.6.1/go.mod h1:GsLWisAFVj4WgDibEWF4pvYnkVQBpKBKeU+7zCJoLcc= github.com/alecthomas/assert/v2 v2.7.0 h1:QtqSACNS3tF7oasA8CU6A6sXZSBDqnm7RfpLl9bZqbE= github.com/alecthomas/assert/v2 v2.7.0/go.mod h1:Bze95FyfUr7x34QZrjL+XP+0qgp/zg8yS+TtBj1WA3k= @@ -32,38 +23,27 @@ github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8Yc github.com/daviddengcn/go-colortext v1.0.0/go.mod h1:zDqEI5NVUop5QPpVJUxE9UO10hRnmkD5G4Pmri9+m4c= github.com/dc0d/caseconv v0.5.0 h1:z3Ki2zszD03beetWyNAGa3NOAbnDJk+bX0tvcx9BKjQ= github.com/dc0d/caseconv v0.5.0/go.mod h1:/CrBBNtMoPTPf0INHrwyyhDrDjAJ9PFE+WuxSJHU0ZE= -github.com/ddkwork/app v0.0.0-20241026164255-6ce9e6cb2eb3 h1:MDWFPte1PFh1q/X2OgqjLzcAD1r6P/iWUXm5ggTazu8= -github.com/ddkwork/app v0.0.0-20241026164255-6ce9e6cb2eb3/go.mod h1:PbTemZHpbs+o8nJ9DoIGXSyhgwBV+LfyhcRQqfxFos8= -github.com/ddkwork/golibrary v0.0.0-20241107065116-cabdcd45ad66 h1:gHbP8X6jzA3K20RrF1fnyIIMkSSsRxpYxK8EnnPXEPo= -github.com/ddkwork/golibrary v0.0.0-20241107065116-cabdcd45ad66/go.mod h1:yY9wkpVeSyhB6mJ3QQ7Fk4i9utgyaCZvEQ63Ym/SpuY= -github.com/ddkwork/golibrary v0.0.0-20241109061650-bd3e94f7b3cf h1:KMEqQ0haYTMetpnMCEPC6ziMq2kbCevfr3KW9wnKli0= -github.com/ddkwork/golibrary v0.0.0-20241109061650-bd3e94f7b3cf/go.mod h1:qiMzDxTwpLJ9hDTOdffR1FHJ44sZbshtVl5fvt2l/Cs= -github.com/ddkwork/golibrary v0.0.0-20250101083646-7f7ce7d4075c h1:aRjCD0Un5kbwxfXL0Bpiqc+FTm4xHMBZQRFftGbYT98= -github.com/ddkwork/golibrary v0.0.0-20250101083646-7f7ce7d4075c/go.mod h1:fzfhl61kUu+Sn22VCEojlYr9lE8X0SZmbOocICR+0s0= +github.com/ddkwork/app v0.0.0-20250101101805-a60d5b5cd452 h1:5in/S6F167ncYDLWZ+rPZiwjkIM/xYf6QxKQQnlHmIs= +github.com/ddkwork/app v0.0.0-20250101101805-a60d5b5cd452/go.mod h1:0Mi2b0tP0v7quDcpTJcFXbeCwhyUrf+4gYxT9I1aycg= github.com/ddkwork/golibrary v0.0.0-20250101093329-d96f6524ebe4 h1:V32GfCpHQp5dZXTKw8K4BhKbtbmaUaP31t5eRpInN/g= github.com/ddkwork/golibrary v0.0.0-20250101093329-d96f6524ebe4/go.mod h1:fzfhl61kUu+Sn22VCEojlYr9lE8X0SZmbOocICR+0s0= -github.com/ddkwork/toolbox v0.0.0-20241013161004-026a13407120 h1:SuQKYhUQVHem+0sf44HfaAma/bh8bEk47FlymnrM4UY= -github.com/ddkwork/toolbox v0.0.0-20241013161004-026a13407120/go.mod h1:RANTAgV00e+arxiVSAzl2dsoaj2+N2vcBZcfqwO3YfM= +github.com/ddkwork/toolbox v0.0.0-20241116165817-883d5d7d379c h1:IkaNQOI8dyOYhZmy5EiFNwvddpRgz8iE0yN5HqT5uIc= +github.com/ddkwork/toolbox v0.0.0-20241116165817-883d5d7d379c/go.mod h1:nkUz5IjFYZwFla3os+RqqZfnxbv0Q3MXwwM7PGDrrjk= github.com/ddkwork/unison v0.0.0-20241013162326-b9a18ce1a207 h1:wZ/NeuNFKVLjNKxVu4C5x+UL6omuKmBZztwLQF06Sp4= github.com/ddkwork/unison v0.0.0-20241013162326-b9a18ce1a207/go.mod h1:bDSantghop7lzZbW7SlSxTWzyoHl9/7TA3M5EgvzxzQ= github.com/dlclark/regexp2 v1.11.4 h1:rPYF9/LECdNymJufQKmri9gV604RvvABwgOA8un7yAo= github.com/dlclark/regexp2 v1.11.4/go.mod h1:DHkYz0B9wPfa6wondMfaivmHpzrQ3v9q8cnmRbL6yW8= -github.com/ebitengine/purego v0.8.0 h1:JbqvnEzRvPpxhCJzJJ2y0RbiZ8nyjccVUrSM3q+GvvE= -github.com/ebitengine/purego v0.8.0/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= -github.com/edsrzf/mmap-go v1.1.0 h1:6EUwBLQ/Mcr1EYLE4Tn1VdW1A4ckqCQWZBw8Hr0kjpQ= +github.com/ebitengine/purego v0.8.1 h1:sdRKd6plj7KYW33EH5As6YKfe8m9zbN9JMrOjNVF/BE= +github.com/ebitengine/purego v0.8.1/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= github.com/edsrzf/mmap-go v1.1.0/go.mod h1:19H/e8pUPLicwkyNgOykDXkJ9F0MHE+Z52B8EIth78Q= -github.com/fatih/color v1.17.0 h1:GlRw1BRJxkpqUCBKzKOw098ed57fEsKeNjpTe3cSjK4= -github.com/fatih/color v1.17.0/go.mod h1:YZ7TlrGPkiz6ku9fK3TLD/pl3CpsiFyu8N92HLgmosI= -github.com/go-enry/go-enry/v2 v2.8.8 h1:EhfxWpw4DQ3WEFB1Y77X8vKqZL0D0EDUUWYDUAIv9/4= -github.com/go-enry/go-enry/v2 v2.8.8/go.mod h1:9yrj4ES1YrbNb1Wb7/PWYr2bpaCXUGRt0uafN0ISyG8= +github.com/edsrzf/mmap-go v1.2.0 h1:hXLYlkbaPzt1SaQk+anYwKSRNhufIDCchSPkUD6dD84= +github.com/edsrzf/mmap-go v1.2.0/go.mod h1:19H/e8pUPLicwkyNgOykDXkJ9F0MHE+Z52B8EIth78Q= +github.com/go-enry/go-enry/v2 v2.9.1 h1:G9iDteJ/Mc0F4Di5NeQknf83R2OkRbwY9cAYmcqVG6U= +github.com/go-enry/go-enry/v2 v2.9.1/go.mod h1:9yrj4ES1YrbNb1Wb7/PWYr2bpaCXUGRt0uafN0ISyG8= github.com/go-enry/go-oniguruma v1.2.1 h1:k8aAMuJfMrqm/56SG2lV9Cfti6tC4x8673aHCcBk+eo= github.com/go-enry/go-oniguruma v1.2.1/go.mod h1:bWDhYP+S6xZQgiRL7wlTScFYBe023B6ilRZbCAD5Hf4= github.com/go-quicktest/qt v1.101.0 h1:O1K29Txy5P2OK0dGo59b7b0LR6wKfIhttaAhHUyn7eI= github.com/go-quicktest/qt v1.101.0/go.mod h1:14Bz/f7NwaXPtdYEgzsx46kqSxVwTbzVZsDC26tQJow= -github.com/go-text/typesetting v0.1.2 h1:KmZOfoxrrYgghohzXgNY7aQPgQ4W+QeKPeRI8yqpDDE= -github.com/go-text/typesetting v0.1.2/go.mod h1:2+owI/sxa73XA581LAzVuEBZ3WEEV2pXeDswCH/3i1I= -github.com/go-text/typesetting-utils v0.0.0-20240317173224-1986cbe96c66 h1:GUrm65PQPlhFSKjLPGOZNPNxLCybjzjYBzjfoBGaDUY= -github.com/go-text/typesetting-utils v0.0.0-20240317173224-1986cbe96c66/go.mod h1:DDxDdQEnB70R8owOx3LVpEFvpMK9eeH1o2r0yZhFI9o= github.com/golangplus/bytes v0.0.0-20160111154220-45c989fe5450/go.mod h1:Bk6SMAONeMXrxql8uvOKuAZSu8aM5RUGv+1C6IJaEho= github.com/golangplus/bytes v1.0.0/go.mod h1:AdRaCFwmc/00ZzELMWb01soso6W1R/++O1XL80yAn+A= github.com/golangplus/fmt v1.0.0/go.mod h1:zpM0OfbMCjPtd2qkTD/jX2MgiFCqklhSUFyDW44gVQE= @@ -72,8 +52,8 @@ github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI= github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0= github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= -github.com/gorpher/gowin32 v0.0.11 h1:JTN4cHzjG6w2o3lTasRBTSjRQzWsU+uvv517EAmyyEg= -github.com/gorpher/gowin32 v0.0.11/go.mod h1:NI6b6VhHPJqz2D/0lWCAGCNbm4T9dyXhAjagT+Hye8Y= +github.com/gorpher/gowin32 v0.0.12 h1:UZsDF0QaQbJ+XZCB9B8lp0yjTWxlL5hh3e24KJgYtRw= +github.com/gorpher/gowin32 v0.0.12/go.mod h1:NI6b6VhHPJqz2D/0lWCAGCNbm4T9dyXhAjagT+Hye8Y= github.com/hashicorp/go-version v1.7.0 h1:5tqGy27NaOTB8yJKUZELlFAS/LTKJkrmONwQKeRZfjY= github.com/hashicorp/go-version v1.7.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09ZGVZPK5anwXA= github.com/hexops/gotextdiff v1.0.3 h1:gitA9+qJrrTCsiCl7+kh75nPqQt1cx4ZkudSTLoUqJM= @@ -86,11 +66,6 @@ github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE= github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk= github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY= github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE= -github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA= -github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg= -github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM= -github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY= -github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y= github.com/mattn/go-runewidth v0.0.16 h1:E5ScNMtiwvlvB5paMFdw9p4kSQzbXFikJ5SQO6TULQc= github.com/mattn/go-runewidth v0.0.16/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w= github.com/mitchellh/go-ps v1.0.0/go.mod h1:J4lOc8z8yJs6vUwklHw2XEIiT4z4C40KtWVN3nvg8Pg= @@ -110,8 +85,7 @@ github.com/rivo/uniseg v0.4.7 h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ= github.com/rivo/uniseg v0.4.7/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88= github.com/rogpeppe/go-internal v1.12.0 h1:exVL4IDcn6na9z1rAb56Vxr+CgyK3nn3O+epU5NdKM8= github.com/rogpeppe/go-internal v1.12.0/go.mod h1:E+RYuTGaKKdloAfM02xzb0FW3Paa99yedzYV+kq4uf4= -github.com/saferwall/pe v1.5.4 h1:tLmMggEMUfeqrpJ25zS/okUQmyFdD5xWKL2+z9njCqg= -github.com/saferwall/pe v1.5.4/go.mod h1:mJx+PuptmNpoPFBNhWs/uDMFL/kTHVZIkg0d4OUJFbQ= +github.com/saferwall/pe v1.5.6 h1:DrRLnoQFxHWJ5lJUmrH7X2L0xeUu6SUS95Dc61eW2Yc= github.com/saferwall/pe v1.5.6/go.mod h1:mJx+PuptmNpoPFBNhWs/uDMFL/kTHVZIkg0d4OUJFbQ= github.com/secDre4mer/pkcs7 v0.0.0-20240322103146-665324a4461d h1:RQqyEogx5J6wPdoxqL132b100j8KjcVHO1c0KLRoIhc= github.com/secDre4mer/pkcs7 v0.0.0-20240322103146-665324a4461d/go.mod h1:PegD7EVqlN88z7TpCqH92hHP+GBpfomGCCnw1PFtNOA= @@ -141,24 +115,20 @@ github.com/valyala/fastjson v1.6.4/go.mod h1:CLCAqky6SMuOcxStkYQvblddUtoRxhYMGLr github.com/winlabs/gowin32 v0.0.0-20240930213947-f504d7e14639 h1:9MJGHk/ErosklMjfeS3xTwvDUET8xHH+b9H2oi/GqbY= github.com/winlabs/gowin32 v0.0.0-20240930213947-f504d7e14639/go.mod h1:N51TYkG9JGR5sytj0EoPl31Xg2kuB507lxEmrwSNvfQ= github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY= -github.com/yuin/goldmark v1.7.6 h1:cZgJxVh5mL5cu8KOnwxvFJy5TFB0BHUskZZyq7TYbDg= -github.com/yuin/goldmark v1.7.6/go.mod h1:uzxRWxtg69N339t3louHJ7+O03ezfj6PlliRlaOzY1E= -golang.org/x/arch v0.8.0 h1:3wRIsP3pM4yUptoR96otTUOXI367OS0+c9eeRi9doIc= -golang.org/x/arch v0.8.0/go.mod h1:FEVrYAQjsQXMVJ1nsMoVVXPZg6p2JE2mx8psSWTDQys= +github.com/yuin/goldmark v1.7.8 h1:iERMLn0/QJeHFhxSt3p6PeN9mGnvIKSpG9YYorDMnic= +github.com/yuin/goldmark v1.7.8/go.mod h1:uzxRWxtg69N339t3louHJ7+O03ezfj6PlliRlaOzY1E= +golang.org/x/arch v0.12.0 h1:UsYJhbzPYGsT0HbEdmYcqtCv8UNGvnaL561NnIUvaKg= +golang.org/x/arch v0.12.0/go.mod h1:FEVrYAQjsQXMVJ1nsMoVVXPZg6p2JE2mx8psSWTDQys= golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= golang.org/x/crypto v0.0.0-20190820162420-60c769a6c586/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= golang.org/x/crypto v0.0.0-20210711020723-a769d52b0f97/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= -golang.org/x/exp v0.0.0-20241009180824-f66d83c29e7c h1:7dEasQXItcW1xKJ2+gg5VOiBnqWrJc+rq0DPKyvvdbY= -golang.org/x/exp v0.0.0-20241009180824-f66d83c29e7c/go.mod h1:NQtJDoLvd6faHhE7m4T/1IY708gDefGGjR/iUW8yQQ8= -golang.org/x/exp/shiny v0.0.0-20241009180824-f66d83c29e7c h1:jTMrjjZRcSH/BDxWhXCP6OWsfVgmnwI7J+F4/nyVXaU= -golang.org/x/exp/shiny v0.0.0-20241009180824-f66d83c29e7c/go.mod h1:3F+MieQB7dRYLTmnncoFbb1crS5lfQoTfDgQy6K4N0o= -golang.org/x/image v0.21.0 h1:c5qV36ajHpdj4Qi0GnE0jUc/yuo33OLFaa0d+crTD5s= -golang.org/x/image v0.21.0/go.mod h1:vUbsLavqK/W303ZroQQVKQ+Af3Yl6Uz1Ppu5J/cLz78= +golang.org/x/exp v0.0.0-20241217172543-b2144cdd0a67 h1:1UoZQm6f0P/ZO0w1Ri+f+ifG/gXhegadRdwBIXEFWDo= +golang.org/x/exp v0.0.0-20241217172543-b2144cdd0a67/go.mod h1:qj5a5QZpwLU2NLQudwIN5koi3beDhSAlJwa67PuM98c= +golang.org/x/image v0.23.0 h1:HseQ7c2OpPKTPVzNjG5fwJsOTCiiwS4QdsYi5XU6H68= golang.org/x/image v0.23.0/go.mod h1:wJJBTdLfCCf3tiHa1fNxpZmUI4mmoZvwMCPP0ddoNKY= golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4= -golang.org/x/mod v0.21.0 h1:vvrHzRwRfVKSiLrG+d4FMl/Qi4ukBCE6kZlTUkDYRT0= -golang.org/x/mod v0.21.0/go.mod h1:6SkKJ3Xj0I0BrPOZoBy3bdMptDDU9oJrpohJ3eWZ1fY= +golang.org/x/mod v0.22.0 h1:D4nJWe9zXqHOmWqj4VMOJhvzj7bEZg4wEYa759z1pH4= golang.org/x/mod v0.22.0/go.mod h1:6SkKJ3Xj0I0BrPOZoBy3bdMptDDU9oJrpohJ3eWZ1fY= golang.org/x/net v0.0.0-20180218175443-cbe0f9307d01/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= @@ -168,8 +138,7 @@ golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c= golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= -golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ= -golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= +golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ= golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= @@ -181,28 +150,23 @@ golang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c/go.mod h1:oPkhp1MJrh7nUepCBc golang.org/x/sys v0.0.0-20211216021012-1d35b9e2eb4e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.26.0 h1:KHjCJyddX0LoSTb3J+vWpupP9p0oznkqVk/IfjymZbo= -golang.org/x/sys v0.26.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA= golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= -golang.org/x/term v0.25.0 h1:WtHI/ltw4NvSUig5KARz9h521QvRC8RmF/cuYqifU24= -golang.org/x/term v0.25.0/go.mod h1:RPyXicDX+6vLxogjjRxjgD2TKtmAO6NZBsBRfrOLu7M= +golang.org/x/term v0.27.0 h1:WP60Sv1nlK1T6SupCHbXzSaN0b9wUmsPoRS9b61A23Q= +golang.org/x/term v0.27.0/go.mod h1:iMsnZpn0cago0GOrHO2+Y7u7JPn5AylBrcoWkElMTSM= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= -golang.org/x/text v0.19.0 h1:kTxAhCbGbxhK0IwgSKiMO5awPoDQ0RpfiVYBfK860YM= -golang.org/x/text v0.19.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY= +golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo= golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ= golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc= -golang.org/x/tools v0.26.0 h1:v/60pFQmzmT9ExmjDv2gGIfi3OqfKoEP6I5+umXlbnQ= -golang.org/x/tools v0.26.0/go.mod h1:TPVVj70c7JJ3WCazhD8OdXcZg/og+b9+tH/KxylGwH0= +golang.org/x/tools v0.28.0 h1:WuB6qZ4RPCQo5aP3WdKZS7i595EdWqWR8vqJTlwTVK8= golang.org/x/tools v0.28.0/go.mod h1:dcIOrVd3mfQKTgrDVQHqCPMWy6lnhfhtX3hLXYVLfRw= golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= diff --git a/main_test.go b/main_test.go index 068a40ea..c081751d 100644 --- a/main_test.go +++ b/main_test.go @@ -12,10 +12,10 @@ import ( ) func TestUpdateAppModule(t *testing.T) { - if !stream.IsDir("D:\\workspace\\workspace\\app") { + if !stream.IsDir("D:\\workspace\\workspace\\demo\\app") { return } - mylog.Check(os.Chdir("D:\\workspace\\workspace\\app")) + mylog.Check(os.Chdir("D:\\workspace\\workspace\\demo\\app")) session := stream.RunCommand("git log -1 --format=\"%H\"") mylog.Check(os.Chdir("D:\\workspace\\workspace\\gui")) id := mylog.Check2(strconv.Unquote(session.Output.String()))