Windows 2000 System Services列表(http://webcrazy.yeah.net)
来源：互联网 发布：最励志的一句话知乎 编辑：程序博客网 时间：2024/06/06 17:42
Windows 2000 System Services列表
WebCrazy(tsu00@263.net)
Windows 2000 Server Build 2195 SP0 中文版共从ntoskrnl.exe(x86单处理器版本)中导出248个System Services,而从win2k.sys中导出639个System Services。SoftICE for Windows NT/2000的ntcall命令可以将这些System Service显示出,可参阅《SoftICE Command Reference》。以下我列出所有的System Service。最可供参考的是各个System Service对应的函数名。一般情况下,Microsoft都提供一Windows API对应一System Service。如从以下一行:
0020 0008:804A0C2D params=0B NtCreateFile
可看出其对应Windows API CreateFile。
应该说明的是这个列表与Windows NT/2000的版本息息相关,不同的build号,装了不同的sp包,这个列表一般都有所不同。系统具体如何管理这些System Services,请参阅《 再谈Windows NT/2000内部数据结构》。
要跟踪系统调用这近千个的System Service,请下载本站的一个小软件:Strace for Windows 2000!
:ntcall
Service table address: 804704D8 Number of services:000000F8
0000 0008:804AB3BF params=06 NtAcceptConnectPort
0001 0008:804AE86B params=08 NtAccessCheck
0002 0008:804BDEF3 params=0B NtAccessCheckAndAuditAlarm
0003 0008:8050B034 params=0B NtAccessCheckByType
0004 0008:804C11F4 params=10 NtAccessCheckByTypeAndAuditAlarm
0005 0008:80459214 params=0B NtAccessCheckByTypeResultList
0006 0008:8050C2FF params=10 NtAccessCheckByTypeResultListAndAuditAlarm
0007 0008:8050C33F params=11 NtAccessCheckByTypeResultListAndAuditAlarmByHan
0008 0008:804B581C params=03 NtAddAtom
0009 0008:80508874 params=06 NtAdjustGroupsToken
000A 0008:8049860A params=06 NtAdjustPrivilegesToken
000B 0008:804FC7E2 params=02 NtAlertResumeThread
000C 0008:804955F7 params=01 NtAlertThread
000D 0008:8049C8A6 params=01 NtAllocateLocallyUniqueId
000E 0008:80448472 params=03 NtAllocateUserPhysicalPages
000F 0008:804A8D50 params=04 NtAllocateUuids
0010 0008:804B6BFB params=06 NtAllocateVirtualMemory
0011 0008:804F0CEF params=02 NtAreMappedFilesTheSame
0012 0008:804FCB95 params=02 NtAssignProcessToJobObject
0013 0008:8040189A params=03 NtCallbackReturn
0014 0008:804D06CB params=02 NtCancelIoFile
0015 0008:80418F66 params=02 NtCancelTimer
0016 0008:804F69D4 params=01 NtCancelDeviceWakeupRequest
0017 0008:8049E0CC params=01 NtClearEvent
0018 0008:8044C422 params=01 NtClose
0019 0008:80496F58 params=03 NtCloseObjectAuditAlarm
001A 0008:804AB849 params=01 NtCompleteConnectPort
001B 0008:804AA9DA params=08 NtConnectPort
001C 0008:80465250 params=02 NtContinue
001D 0008:804F4BD5 params=03 NtCreateDirectoryObject
001E 0008:8049BC80 params=05 NtCreateEvent
001F 0008:804CA7A5 params=03 NtCreateEventPair
0020 0008:804A0C2D params=0B NtCreateFile
0021 0008:804C18F5 params=04 NtCreateIoCompletion
0022 0008:804FC8B8 params=03 NtCreateJobObject
0023 0008:804A83BE params=07 NtCreateKey
0024 0008:8048D3DA params=08 NtCreateMailslotFile
0025 0008:8049FCA5 params=04 NtCreateMutant
0026 0008:8049628A params=0E NtCreateNamedPipeFile
0027 0008:804EE260 params=04 NtCreatePagingFile
0028 0008:804A098F params=05 NtCreatePort
0029 0008:804AD948 params=08 NtCreateProcess
002A 0008:804C9D6F params=09 NtCreateProfile
002B 0008:804AEFF6 params=07 NtCreateSection
002C 0008:804970F9 params=05 NtCreateSemaphore
002D 0008:8049C6C4 params=04 NtCreateSymbolicLinkObject
002E 0008:804969C1 params=08 NtCreateThread
002F 0008:804C1C6E params=04 NtCreateTimer
0030 0008:8050E543 params=0D NtCreateToken
0031 0008:804EC375 params=05 NtCreateWaitablePort
0032 0008:804C0467 params=02 NtDelayExecution
0033 0008:804C0528 params=01 NtDeleteAtom
0034 0008:804D0833 params=01 NtDeleteFile
0035 0008:804BD3C5 params=01 NtDeleteKey
0036 0008:80491D0C params=03 NtDeleteObjectAuditAlarm
0037 0008:804A1309 params=02 NtDeleteValueKey
0038 0008:804A8EF6 params=0A NtDeviceIoControlFile
0039 0008:804C61B4 params=01 NtDisplayString
003A 0008:8049FE25 params=07 NtDuplicateObject
003B 0008:8049CF2E params=06 NtDuplicateToken
003C 0008:8049736D params=06 NtEnumerateKey
003D 0008:804C0A3C params=06 NtEnumerateValueKey
003E 0008:8049051D params=02 NtExtendSection
003F 0008:80509361 params=06 NtFilterToken
0040 0008:804B95ED params=03 NtFindAtom
0041 0008:804BA31A params=02 NtFlushBuffersFile
0042 0008:80496667 params=03 NtFlushInstructionCache
0043 0008:804AE2C6 params=01 NtFlushKey
0044 0008:804B0F9C params=04 NtFlushVirtualMemory
0045 0008:804F19A4 params=00 NtFlushWriteBuffer
0046 0008:80448A9D params=03 NtFreeUserPhysicalPages
0047 0008:804A9828 params=04 NtFreeVirtualMemory
0048 0008:804A8B14 params=0A NtFsControlFile
0049 0008:804C4F1B params=02 NtGetContextThread
004A 0008:804F69EA params=02 NtGetDevicePowerState
004B 0008:804BC159 params=04 NtGetPlugPlayEvent
004C 0008:80460086 params=00 NtGetTickCount
004D 0008:804490E4 params=07 NtGetWriteWatch
004E 0008:8050EFE4 params=01 NtImpersonateAnonymousToken
004F 0008:80495FCD params=02 NtImpersonateClientOfPort
0050 0008:80452C84 params=03 NtImpersonateThread
0051 0008:8051E159 params=01 NtInitializeRegistry
0052 0008:804F67D0 params=04 NtInitiatePowerAction
0053 0008:804F69DC params=00 NtIsSystemResumeAutomatic
0054 0008:804EC598 params=02 NtListenPort
0055 0008:8052A603 params=01 NtLoadDriver
0056 0008:8051EDF3 params=02 NtLoadKey
0057 0008:8045FA4E params=03 NtLoadKey2
0058 0008:804AA339 params=0A NtLockFile
0059 0008:804F19FB params=04 NtLockVirtualMemory
005A 0008:804B4D99 params=01 NtMakeTemporaryObject
005B 0008:80447B61 params=03 NtMapUserPhysicalPages
005C 0008:80447F74 params=03 NtMapUserPhysicalPagesScatter
005D 0008:804A8767 params=0A NtMapViewOfSection
005E 0008:8049844D params=09 NtNotifyChangeDirectoryFile
005F 0008:804A00E4 params=0A NtNotifyChangeKey
0060 0008:804A0112 params=0C NtNotifyChangeMultipleKeys
0061 0008:804B9BCA params=03 NtOpenDirectoryObject
0062 0008:804B570A params=03 NtOpenEvent
0063 0008:804CA891 params=03 NtOpenEventPair
0064 0008:804A35F9 params=06 NtOpenFile
0065 0008:804D4F31 params=03 NtOpenIoCompletion
0066 0008:804FCACD params=03 NtOpenJobObject
0067 0008:804AA4F2 params=03 NtOpenKey
0068 0008:804B86D0 params=03 NtOpenMutant
0069 0008:804A79E0 params=0C NtOpenObjectAuditAlarm
006A 0008:8049E77A params=04 NtOpenProcess
006B 0008:804B5234 params=03 NtOpenProcessToken
006C 0008:804AC198 params=03 NtOpenSection
006D 0008:804BC50F params=03 NtOpenSemaphore
006E 0008:804C0953 params=03 NtOpenSymbolicLinkObject
006F 0008:804B67E5 params=04 NtOpenThread
0070 0008:804A0E36 params=04 NtOpenThreadToken
0071 0008:804CA46B params=03 NtOpenTimer
0072 0008:804AFC32 params=03 NtPlugPlayControl
0073 0008:804C3755 params=05 NtPowerInformation
0074 0008:80495E38 params=03 NtPrivilegeCheck
0075 0008:8050BA39 params=05 NtPrivilegedServiceAuditAlarm
0076 0008:8050B815 params=06 NtPrivilegeObjectAuditAlarm
0077 0008:804B038B params=05 NtProtectVirtualMemory
0078 0008:804C1A4E params=02 NtPulseEvent
0079 0008:804AA8CE params=05 NtQueryInformationAtom
007A 0008:80499EE5 params=02 NtQueryAttributesFile
007B 0008:8049EB50 params=02 NtQueryDefaultLocale
007C 0008:804BE87B params=01 NtQueryDefaultUILanguage
007D 0008:804A2459 params=0B NtQueryDirectoryFile
007E 0008:804C33FE params=07 NtQueryDirectoryObject
007F 0008:804D5963 params=09 NtQueryEaFile
0080 0008:804AAF98 params=05 NtQueryEvent
0081 0008:804BCAB3 params=02 NtQueryFullAttributesFile
0082 0008:804AE525 params=05 NtQueryInformationFile
0083 0008:804ADF19 params=05 NtQueryInformationJobObject
0084 0008:804BE337 params=05 NtQueryIoCompletion
0085 0008:804EC616 params=05 NtQueryInformationPort
0086 0008:804B4426 params=05 NtQueryInformationProcess
0087 0008:804A9AB9 params=05 NtQueryInformationThread
0088 0008:804990BD params=05 NtQueryInformationToken
0089 0008:804BBCE1 params=01 NtQueryInstallUILanguage
008A 0008:804CA33D params=02 NtQueryIntervalProfile
008B 0008:8049923A params=05 NtQueryKey
008C 0008:8051F4A8 params=06 NtQueryMultipleValueKey
008D 0008:804CA604 params=05 NtQueryMutant
008E 0008:804BAE69 params=05 NtQueryObject
008F 0008:8051FB4C params=02 NtQueryOpenSubKeys
0090 0008:804B9B2D params=02 NtQueryPerformanceCounter
0091 0008:804D6865 params=09 NtQueryQuotaInformationFile
0092 0008:804989AC params=05 NtQuerySection
0093 0008:8044C94A params=05 NtQuerySecurityObject
0094 0008:804C9009 params=05 NtQuerySemaphore
0095 0008:804B984F params=03 NtQuerySymbolicLinkObject
0096 0008:804C97BE params=04 NtQuerySystemEnvironmentValue
0097 0008:804BF933 params=04 NtQuerySystemInformation
0098 0008:804BB77C params=01 NtQuerySystemTime
0099 0008:804BAD4C params=05 NtQueryTimer
009A 0008:804ACF1A params=03 NtQueryTimerResolution
009B 0008:8049A077 params=06 NtQueryValueKey
009C 0008:8049C3CD params=06 NtQueryVirtualMemory
009D 0008:8049EC21 params=05 NtQueryVolumeInformationFile
009E 0008:804B13FF params=05 NtQueueApcThread
009F 0008:80465298 params=03 NtRaiseException
00A0 0008:804C8C74 params=06 NtRaiseHardError
00A1 0008:804BB7FD params=09 NtReadFile
00A2 0008:804D7508 params=09 NtReadFileScatter
00A3 0008:804A9014 params=06 NtReadRequestData
00A4 0008:804BE05F params=05 NtReadVirtualMemory
00A5 0008:804959A2 params=01 NtRegisterThreadTerminatePort
00A6 0008:804BBC18 params=02 NtReleaseMutant
00A7 0008:804A71EB params=03 NtReleaseSemaphore
00A8 0008:804B219F params=05 NtRemoveIoCompletion
00A9 0008:8051F2D7 params=03 NtReplaceKey
00AA 0008:8049E519 params=02 NtReplyPort
00AB 0008:804B3E83 params=04 NtReplyWaitReceivePort
00AC 0008:8043374A params=05 NtReplyWaitReceivePortEx
00AD 0008:804EC819 params=02 NtReplyWaitReplyPort
00AE 0008:804F6972 params=01 NtRequestDeviceWakeup
00AF 0008:804B5A2E params=02 NtRequestPort
00B0 0008:804B3AC6 params=03 NtRequestWaitReplyPort
00B1 0008:804F677C params=01 NtRequestWakeupLatency
00B2 0008:8048C413 params=02 NtResetEvent
00B3 0008:804495CA params=03 NtResetWriteWatch
00B4 0008:8051EA0C params=03 NtRestoreKey
00B5 0008:804B4998 params=02 NtResumeThread
00B6 0008:80492F99 params=02 NtSaveKey
00B7 0008:8051EB70 params=03 NtSaveMergedKeys
00B8 0008:80432E23 params=09 NtSecureConnectPort
00B9 0008:804A0FA6 params=05 NtSetIoCompletion
00BA 0008:804914C5 params=02 NtSetContextThread
00BB 0008:804C8F0B params=01 NtSetDefaultHardErrorPort
00BC 0008:804C6470 params=02 NtSetDefaultLocale
00BD 0008:804C6A3E params=01 NtSetDefaultUILanguage
00BE 0008:804D5ED0 params=04 NtSetEaFile
00BF 0008:804A745D params=02 NtSetEvent
00C0 0008:804CAB33 params=01 NtSetHighEventPair
00C1 0008:804CAA79 params=01 NtSetHighWaitLowEventPair
00C2 0008:804C1308 params=05 NtSetInformationFile
00C3 0008:804FD998 params=04 NtSetInformationJobObject
00C4 0008:8051EFDD params=04 NtSetInformationKey
00C5 0008:804B7435 params=04 NtSetInformationObject
00C6 0008:8049BFC8 params=04 NtSetInformationProcess
00C7 0008:804C0067 params=04 NtSetInformationThread
00C8 0008:8050F572 params=04 NtSetInformationToken
00C9 0008:804CA32B params=02 NtSetIntervalProfile
00CA 0008:804910AD params=06 NtSetLdtEntries
00CB 0008:804CAADD params=01 NtSetLowEventPair
00CC 0008:804CAA15 params=01 NtSetLowWaitHighEventPair
00CD 0008:804D6DD0 params=04 NtSetQuotaInformationFile
00CE 0008:8044C855 params=03 NtSetSecurityObject
00CF 0008:804C9A48 params=02 NtSetSystemEnvironmentValue
00D0 0008:8048C5C0 params=03 NtSetSystemInformation
00D1 0008:80488947 params=03 NtSetSystemPowerState
00D2 0008:8048CBE7 params=02 NtSetSystemTime
00D3 0008:804B2CA2 params=02 NtSetThreadExecutionState
00D4 0008:804190FF params=07 NtSetTimer
00D5 0008:804C1B95 params=03 NtSetTimerResolution
00D6 0008:804C93B5 params=01 NtSetUuidSeed
00D7 0008:804B8D90 params=06 NtSetValueKey
00D8 0008:804D6EEC params=05 NtSetVolumeInformationFile
00D9 0008:804C6182 params=01 NtShutdownSystem
00DA 0008:8044D2B1 params=04 NtSignalAndWaitForSingleObject
00DB 0008:804C9FE0 params=01 NtStartProfile
00DC 0008:804CA287 params=01 NtStopProfile
00DD 0008:804C522B params=02 NtSuspendThread
00DE 0008:8052A462 params=06 NtSystemDebugControl
00DF 0008:804FE766 params=02 NtTerminateJobObject
00E0 0008:804A2FAC params=02 NtTerminateProcess
00E1 0008:804BDF29 params=02 NtTerminateThread
00E2 0008:804B5218 params=00 NtTestAlert
00E3 0008:8052A7D0 params=01 NtUnloadDriver
00E4 0008:8051EE05 params=01 NtUnloadKey
00E5 0008:804A81B4 params=05 NtUnlockFile
00E6 0008:804C0554 params=04 NtUnlockVirtualMemory
00E7 0008:804BA027 params=02 NtUnmapViewOfSection
00E8 0008:804C3B5D params=02 NtVdmControl
00E9 0008:8044D4A2 params=05 NtWaitForMultipleObjects
00EA 0008:8049ADC3 params=03 NtWaitForSingleObject
00EB 0008:804CA9B7 params=01 NtWaitHighEventPair
00EC 0008:804CA959 params=01 NtWaitLowEventPair
00ED 0008:80497920 params=09 NtWriteFile
00EE 0008:804D7D76 params=09 NtWriteFileGather
00EF 0008:804B848C params=06 NtWriteRequestData
00F0 0008:804AC248 params=05 NtWriteVirtualMemory
00F1 0008:804EB56F params=02 NtCreateChannel
00F2 0008:804EB56F params=02 NtCreateChannel
00F3 0008:804EB56F params=02 NtCreateChannel
00F4 0008:80432D65 params=03 NtReplyWaitSendChannel
00F5 0008:80445DB5 params=04 MmMemoryUsage
00F6 0008:804F69D4 params=01 NtCancelDeviceWakeupRequest
00F7 0008:80432D6D params=00 NtYieldExecution
Service table address: A0186BC0 Number of services:0000027F
1000 0008:A01094E2 params=01 NtGdiAbortDoc
1001 0008:A01219E2 params=01 NtGdiAbortPath
1002 0008:A0003E72 params=06 NtGdiAddFontResourceW
1003 0008:A01160FA params=04 NtGdiAddRemoteFontToDC
1004 0008:A0123843 params=05 NtGdiAddFontMemResourceEx
1005 0008:A0109B0C params=02 NtGdiRemoveMergeFont
1006 0008:A010A1E6 params=03 NtGdiAddRemoteMMInstanceToDC
1007 0008:A0106FB1 params=0C NtGdiAlphaBlend
1008 0008:A0122F7E params=06 NtGdiAngleArc
1009 0008:A00AA5B4 params=00 NtGdiAnyLinkedFonts
100A 0008:A0123725 params=01 NtGdiFontIsLinked
100B 0008:A00BB83F params=0A NtGdiArcInternal
100C 0008:A0082128 params=01 NtGdiBeginPath
100D 0008:A001B344 params=0B NtGdiBitBlt
100E 0008:A01234E0 params=01 NtGdiCancelDC
100F 0008:A0125354 params=08 NtGdiCheckBitmapBits
1010 0008:A008209C params=01 NtGdiCloseFigure
1011 0008:A01254AE params=06 NtGdiColorCorrectPalette
1012 0008:A005F6C4 params=04 NtGdiCombineRgn
1013 0008:A0079AD1 params=03 NtGdiCombineTransform
1014 0008:A00661CB params=01 NtGdiComputeXformCoefficients
1015 0008:A0040082 params=04 NtGdiConsoleTextOut
1016 0008:A007498E params=02 NtGdiConvertMetafileRect
1017 0008:A002D968 params=05 NtGdiCreateBitmap
1018 0008:A005CE0C params=01 NtGdiCreateClientObj
1019 0008:A009D3DD params=01 NtGdiCreateColorSpace
101A 0008:A0125007 params=08 NtGdiCreateColorTransform
101B 0008:A0029297 params=03 NtGdiCreateCompatibleBitmap
101C 0008:A001FEEE params=01 NtGdiCreateCompatibleDC
101D 0008:A0069475 params=06 NtGdiCreateDIBBrush
101E 0008:A004866E params=0B NtGdiCreateDIBitmapInternal
101F 0008:A005B055 params=09 NtGdiCreateDIBSection
1020 0008:A010D03C params=04 NtGdiCreateEllipticRgn
1021 0008:A0092FD9 params=01 NtGdiCreateHalftonePalette
1022 0008:A009652C params=03 NtGdiCreateHatchBrushInternal
1023 0008:A0071E8F params=01 NtGdiCreateMetafileDC
1024 0008:A00687CD params=02 NtGdiCreatePaletteInternal
1025 0008:A005B56F params=03 NtGdiCreatePatternBrushInternal
1026 0008:A00587E5 params=04 NtGdiCreatePen
1027 0008:A005BF41 params=04 NtGdiCreateRectRgn
1028 0008:A010D151 params=06 NtGdiCreateRoundRectRgn
1029 0008:A00DD23F params=06 NtGdiCreateServerMetaFile
102A 0008:A002E0EC params=02 NtGdiCreateSolidBrush
102B 0008:A0127E16 params=04 NtGdiD3dContextCreate
102C 0008:A01281B5 params=01 NtGdiD3dContextDestroy
102D 0008:A0128246 params=01 NtGdiD3dContextDestroyAll
102E 0008:A012861E params=01 NtGdiD3dValidateTextureStageState
102F 0008:A01282B4 params=07 NtGdiD3dDrawPrimitives2
1030 0008:A01287F0 params=01 NtGdiDdGetDriverState
1031 0008:A012B6D3 params=03 NtGdiDdAddAttachedSurface
1032 0008:A012D628 params=03 NtGdiDdAlphaBlt
1033 0008:A00BE4A8 params=02 NtGdiDdAttachSurface
1034 0008:A012CDA8 params=02 NtGdiDdBeginMoCompFrame
1035 0008:A012A368 params=03 NtGdiDdBlt
1036 0008:A008F85C params=02 NtGdiDdCanCreateSurface
1037 0008:A012AFB0 params=02 NtGdiDdCanCreateD3DBuffer
1038 0008:A012BF17 params=02 NtGdiDdColorControl
1039 0008:A008E4C3 params=01 NtGdiDdCreateDirectDrawObject
103A 0008:A008F0A2 params=08 NtGdiDdCreateSurface
103B 0008:A008F0A2 params=08 NtGdiDdCreateSurface
103C 0008:A012C76A params=02 NtGdiDdCreateMoComp
103D 0008:A00BE1E5 params=06 NtGdiDdCreateSurfaceObject
103E 0008:A00902B4 params=01 NtGdiDdDeleteDirectDrawObject
103F 0008:A009036D params=01 NtGdiDdDeleteSurfaceObject
1040 0008:A012CD39 params=02 NtGdiDdDestroyMoComp
1041 0008:A00BEDC5 params=02 NtGdiDdDestroySurface
1042 0008:A012B60A params=01 NtGdiDdDestroyD3DBuffer
1043 0008:A012D012 params=02 NtGdiDdEndMoCompFrame
1044 0008:A00BEA69 params=05 NtGdiDdFlip
1045 0008:A012BD7E params=02 NtGdiDdFlipToGDISurface
1046 0008:A00BDDC7 params=02 NtGdiDdGetAvailDriverMemory
1047 0008:A012ACEE params=02 NtGdiDdGetBltStatus
1048 0008:A00BE355 params=02 NtGdiDdGetDC
1049 0008:A008F4B8 params=02 NtGdiDdGetDriverInfo
104A 0008:A012C1CF params=03 NtGdiDdGetDxHandle
104B 0008:A00BE5F0 params=02 NtGdiDdGetFlipStatus
104C 0008:A012CBE4 params=02 NtGdiDdGetInternalMoCompInfo
104D 0008:A012CA01 params=02 NtGdiDdGetMoCompBuffInfo
104E 0008:A012C313 params=02 NtGdiDdGetMoCompGuids
104F 0008:A012C4C7 params=02 NtGdiDdGetMoCompFormats
1050 0008:A012BB38 params=02 NtGdiDdGetScanLine
1051 0008:A008FA5F params=03 NtGdiDdLock
1052 0008:A012AADA params=02 NtGdiDdLockD3D
1053 0008:A008F2E1 params=0B NtGdiDdQueryDirectDrawObject
1054 0008:A012D4E1 params=02 NtGdiDdQueryMoCompStatus
1055 0008:A008F1B1 params=02 NtGdiDdReenableDirectDrawObject
1056 0008:A00BDC3E params=01 NtGdiDdReleaseDC
1057 0008:A012D19A params=02 NtGdiDdRenderMoComp
1058 0008:A009E92D params=02 NtGdiDdResetVisrgn
1059 0008:A00BD839 params=02 NtGdiDdSetColorKey
105A 0008:A012BC66 params=02 NtGdiDdSetExclusiveMode
105B 0008:A012DAD0 params=03 NtGdiDdSetGammaRamp
105C 0008:A012DC42 params=03 NtGdiDdCreateSurfaceEx
105D 0008:A012B9DA params=03 NtGdiDdSetOverlayPosition
105E 0008:A00BECC9 params=02 NtGdiDdUnattachSurface
105F 0008:A008FB41 params=02 NtGdiDdUnlock
1060 0008:A012ABDD params=02 NtGdiDdUnlockD3D
1061 0008:A00BE74A params=03 NtGdiDdUpdateOverlay
1062 0008:A012AE25 params=02 NtGdiDdWaitForVerticalBlank
1063 0008:A012EE56 params=02 NtGdiDvpCanCreateVideoPort
1064 0008:A013064F params=02 NtGdiDvpColorControl
1065 0008:A012EF9E params=02 NtGdiDvpCreateVideoPort
1066 0008:A012F1EE params=02 NtGdiDvpDestroyVideoPort
1067 0008:A012F25D params=04 NtGdiDvpFlipVideoPort
1068 0008:A012F3DC params=02 NtGdiDvpGetVideoPortBandwidth
1069 0008:A012F57B params=02 NtGdiDvpGetVideoPortField
106A 0008:A012F6B4 params=02 NtGdiDvpGetVideoPortFlipStatus
106B 0008:A012F7CA params=02 NtGdiDvpGetVideoPortInputFormats
106C 0008:A012FB7B params=02 NtGdiDvpGetVideoPortLine
106D 0008:A012F991 params=02 NtGdiDvpGetVideoPortOutputFormats
106E 0008:A012FC61 params=02 NtGdiDvpGetVideoPortConnectInfo
106F 0008:A012FE1E params=02 NtGdiDvpGetVideoSignalStatus
1070 0008:A012FF04 params=04 NtGdiDvpUpdateVideoPort
1071 0008:A013051F params=02 NtGdiDvpWaitForVideoPortSync
1072 0008:A005CDD9 params=01 NtGdiDeleteClientObj
1073 0008:A009D482 params=01 NtGdiDeleteColorSpace
1074 0008:A012527D params=02 NtGdiDeleteColorTransform
1075 0008:A002161D params=01 NtGdiDeleteObjectApp
1076 0008:A009EBEF params=04 NtGdiDescribePixelFormat
1077 0008:A00BF9B3 params=02 NtGdiGetPerBandInfo
1078 0008:A00BF1EB params=04 NtGdiDoBanding
1079 0008:A005AB35 params=06 NtGdiDoPalette
107A 0008:A012309F params=04 NtGdiDrawEscape
107B 0008:A0082DF1 params=05 NtGdiEllipse
107C 0008:A000B19A params=01 NtGdiEnableEudc
107D 0008:A0070295 params=01 NtGdiEndDoc
107E 0008:A006FF6A params=01 NtGdiEndPage
107F 0008:A0082066 params=01 NtGdiEndPath
1080 0008:A00AD466 params=05 NtGdiEnumFontChunk
1081 0008:A00AD5CD params=01 NtGdiEnumFontClose
1082 0008:A00ACCA2 params=07 NtGdiEnumFontOpen
1083 0008:A00B3512 params=04 NtGdiEnumObjects
1084 0008:A00B7C39 params=02 NtGdiEqualRgn
1085 0008:A0132C42 params=04 NtGdiEudcEnumFaceNameLinkW
1086 0008:A0132AA5 params=07 NtGdiEudcLoadUnloadLink
1087 0008:A003CA50 params=05 NtGdiExcludeClipRect
1088 0008:A0086F77 params=0B NtGdiExtCreatePen
1089 0008:A006F5AD params=03 NtGdiExtCreateRegion
108A 0008:A00B2E12 params=08 NtGdiExtEscape
108B 0008:A0133BFF params=05 NtGdiExtFloodFill
108C 0008:A002873A params=03 NtGdiExtGetObjectW
108D 0008:A0021B1A params=03 NtGdiExtSelectClipRgn
108E 0008:A0067926 params=09 NtGdiExtTextOutW
108F 0008:A00948AF params=01 NtGdiFillPath
1090 0008:A00B617B params=03 NtGdiFillRgn
1091 0008:A0121AFA params=01 NtGdiFlattenPath
1092 0008:A001A344 params=00 NtGdiFlushUserBatch
1093 0008:A0017DB4 params=00 GreFlush
1094 0008:A012417C params=02 NtGdiForceUFIMapping
1095 0008:A010D23C params=05 NtGdiFrameRgn
1096 0008:A0110C02 params=05 NtGdiFullscreenControl
1097 0008:A0081565 params=04 NtGdiGetAndSetDCDword
1098 0008:A00255F3 params=02 NtGdiGetAppClipBox
1099 0008:A005B2DF params=03 NtGdiGetBitmapBits
109A 0008:A00BDF03 params=02 NtGdiGetBitmapDimension
109B 0008:A00AAC75 params=03 NtGdiGetBoundsRect
109C 0008:A00B6968 params=06 NtGdiGetCharABCWidthsW
109D 0008:A01221AA params=06 NtGdiGetCharacterPlacementW
109E 0008:A0022444 params=01 NtGdiGetCharSet
109F 0008:A0069708 params=06 NtGdiGetCharWidthW
10A0 0008:A00B6D60 params=02 NtGdiGetCharWidthInfo
10A1 0008:A0123343 params=02 NtGdiGetColorAdjustment
10A2 0008:A0134508 params=01 NtGdiGetColorSpaceforBitmap
10A3 0008:A002F1B2 params=03 NtGdiGetDCDword
10A4 0008:A00293B2 params=01 NtGdiGetDCforBitmap
10A5 0008:A00293D8 params=02 NtGdiGetDCObject
10A6 0008:A00D9A1E params=03 NtGdiGetDCPoint
10A7 0008:A0123590 params=02 NtGdiGetDeviceCaps
10A8 0008:A01256FA params=02 NtGdiGetDeviceGammaRamp
10A9 0008:A00B1A2D params=02 NtGdiGetDeviceCapsAll
10AA 0008:A0038145 params=09 NtGdiGetDIBitsInternal
10AB 0008:A0078D7B params=02 NtGdiGetETM
10AC 0008:A01324A2 params=03 NtGdiGetEudcTimeStampEx
10AD 0008:A00A3190 params=05 NtGdiGetFontData
10AE 0008:A0123B0D params=07 NtGdiGetFontResourceInfoInternalW
10AF 0008:A0124556 params=05 NtGdiGetGlyphIndicesW
10B0 0008:A01243FD params=06 NtGdiGetGlyphIndicesWInternal
10B1 0008:A01231BF params=08 NtGdiGetGlyphOutline
10B2 0008:A0078F28 params=03 NtGdiGetKerningPairs
10B3 0008:A0109657 params=03 NtGdiGetLinkedUFIs
10B4 0008:A0122FF7 params=02 NtGdiGetMiterLimit
10B5 0008:A01154D8 params=03 NtGdiGetMonitorID
10B6 0008:A00604DF params=02 NtGdiGetNearestColor
10B7 0008:A007B200 params=02 NtGdiGetNearestPaletteIndex
10B8 0008:A00AA766 params=02 NtGdiGetObjectBitmapHandle
10B9 0008:A00ADBC3 params=04 NtGdiGetOutlineTextMetricsInternalW
10BA 0008:A0121FAD params=04 NtGdiGetPath
10BB 0008:A009280A params=03 NtGdiGetPixel
10BC 0008:A002F8EC params=03 NtGdiGetRandomRgn
10BD 0008:A00D804C params=02 NtGdiGetRasterizerCaps
10BE 0008:A0124611 params=02 NtGdiGetRealizationInfo
10BF 0008:A00A9677 params=03 NtGdiGetRegionData
10C0 0008:A00671AB params=02 NtGdiGetRgnBox
10C1 0008:A00DD5E8 params=07 NtGdiGetServerMetaFileBits
10C2 0008:A00A288B params=04 NtGdiGetSpoolMessage
10C3 0008:A0135567 params=05 NtGdiGetStats
10C4 0008:A001B00D params=01 NtGdiGetStockObject
10C5 0008:A009A6DF params=05 NtGdiGetStringBitmapW
10C6 0008:A0068AF2 params=01 NtGdiGetSystemPaletteUse
10C7 0008:A0065B26 params=03 NtGdiGetTextCharsetInfo
10C8 0008:A0039EE7 params=05 NtGdiGetTextExtent
10C9 0008:A0098EEC params=08 NtGdiGetTextExtentExW
10CA 0008:A003E679 params=04 NtGdiGetTextFaceW
10CB 0008:A005FEA3 params=03 NtGdiGetTextMetricsW
10CC 0008:A0071CAF params=03 NtGdiGetTransform
10CD 0008:A0123C84 params=06 NtGdiGetUFI
10CE 0008:A0123D62 params=0A NtGdiGetUFIPathname
10CF 0008:A0124573 params=02 NtGdiGetFontUnicodeRanges
10D0 0008:A00395AA params=07 NtGdiGetWidthTable
10D1 0008:A01188FC params=06 NtGdiGradientFill
10D2 0008:A0030683 params=05 NtGdiHfontCreate
10D3 0008:A0125D37 params=08 NtGdiIcmBrushInfo
10D4 0008:A008A30F params=00 NtGdiInit
10D5 0008:A000434B params=00 NtGdiInitSpool
10D6 0008:A0026CF5 params=05 NtGdiIntersectClipRect
10D7 0008:A0067FD9 params=02 NtGdiInvertRgn
10D8 0008:A0058971 params=03 NtGdiLineTo
10D9 0008:A0124300 params=05 NtGdiMakeFontDir
10DA 0008:A00AA48B params=02 NtGdiMakeInfoDC
10DB 0008:A0096540 params=0D NtGdiMaskBlt
10DC 0008:A0071ECE params=03 NtGdiModifyWorldTransform
10DD 0008:A01273D5 params=01 NtGdiMonoBitmap
10DE 0008:A012350C params=04 NtGdiMoveTo
10DF 0008:A00A24F6 params=03 NtGdiOffsetClipRgn
10E0 0008:A0069B43 params=03 NtGdiOffsetRgn
10E1 0008:A00489A8 params=07 NtGdiOpenDCW
10E2 0008:A003C6E3 params=06 NtGdiPatBlt
10E3 0008:A0029E4D params=05 NtGdiPolyPatBlt
10E4 0008:A0121D2E params=01 NtGdiPathToRegion
10E5 0008:A0119FEC params=0B NtGdiPlgBlt
10E6 0008:A0122A70 params=04 NtGdiPolyDraw
10E7 0008:A003C41C params=05 NtGdiPolyPolyDraw
10E8 0008:A0122B8F params=04 NtGdiPolyTextOutW
10E9 0008:A01236FC params=03 NtGdiPtInRegion
10EA 0008:A010D729 params=03 NtGdiPtVisible
10EB 0008:A00AA4DE params=03 NtGdiQueryFonts
10EC 0008:A008A2F3 params=01 NtGdiQueryFontAssocInfo
10ED 0008:A0080B37 params=05 NtGdiRectangle
10EE 0008:A0123614 params=02 NtGdiRectInRegion
10EF 0008:A0047177 params=02 NtGdiRectVisible
10F0 0008:A0123969 params=06 NtGdiRemoveFontResourceW
10F1 0008:A0123AF6 params=01 NtGdiRemoveFontMemResourceEx
10F2 0008:A0079504 params=05 NtGdiResetDC
10F3 0008:A0127685 params=02 NtGdiResizePalette
10F4 0008:A0028D4A params=02 NtGdiRestoreDC
10F5 0008:A00DA867 params=07 NtGdiRoundRect
10F6 0008:A0028E18 params=01 NtGdiSaveDC
10F7 0008:A011975F params=06 NtGdiScaleViewportExtEx
10F8 0008:A0124024 params=06 NtGdiScaleWindowExtEx
10F9 0008:A0019874 params=02 NtGdiSelectBitmap
10FA 0008:A01234EC params=02 NtGdiSelectBrush
10FB 0008:A00BF8E1 params=02 NtGdiSelectClipPath
10FC 0008:A0065590 params=02 NtGdiSelectFont
10FD 0008:A01234FC params=02 NtGdiSelectPen
10FE 0008:A00688C1 params=03 NtGdiSetBitmapBits
10FF 0008:A01240EE params=04 NtGdiSetBitmapDimension
1100 0008:A00AAC19 params=03 NtGdiSetBoundsRect
1101 0008:A007AFAD params=04 NtGdiSetBrushOrg
1102 0008:A01233BA params=02 NtGdiSetColorAdjustment
1103 0008:A009D367 params=02 NtGdiSetColorSpace
1104 0008:A0125A93 params=02 NtGdiSetDeviceGammaRamp
1105 0008:A00292AB params=10 NtGdiSetDIBitsToDeviceInternal
1106 0008:A000B4E9 params=01 NtGdiSetFontEnumeration
1107 0008:A006FA48 params=03 NtGdiSetFontXform
1108 0008:A006FD22 params=03 NtGdiSetIcmMode
1109 0008:A00C09B6 params=03 NtGdiSetLinkedUFIs
110A 0008:A0127B8B params=03 NtGdiSetMagicColors
110B 0008:A0071FE7 params=01 NtGdiSetMetaRgn
110C 0008:A0071F7B params=03 NtGdiSetMiterLimit
110D 0008:A0124018 params=01 NtGdiGetDeviceWidth
110E 0008:A012400C params=01 NtGdiMirrorWindowOrg
110F 0008:A00302CA params=03 NtGdiSetLayout
1110 0008:A00925EB params=04 NtGdiSetPixel
1111 0008:A01365E1 params=02 NtGdiSetPixelFormat
1112 0008:A01235F9 params=05 NtGdiSetRectRgn
1113 0008:A01235A0 params=02 NtGdiSetSystemPaletteUse
1114 0008:A01358FB params=03 NtGdiSetTextJustification
1115 0008:A00919DE params=03 NtGdiSetupPublicCFONT
1116 0008:A006FBB5 params=05 NtGdiSetVirtualResolution
1117 0008:A006F8BE params=03 NtGdiSetSizeDevice
1118 0008:A0071AA4 params=04 NtGdiStartDoc
1119 0008:A0070474 params=01 NtGdiStartPage
111A 0008:A003022B params=0C NtGdiStretchBlt
111B 0008:A0059D6F params=10 NtGdiStretchDIBitsInternal
111C 0008:A00BF555 params=01 NtGdiStrokeAndFillPath
111D 0008:A0121E76 params=01 NtGdiStrokePath
111E 0008:A01367B4 params=01 NtGdiSwapBuffers
111F 0008:A0081472 params=05 NtGdiTransformPoints
1120 0008:A009E2EE params=0B NtGdiTransparentBlt
1121 0008:A0124203 params=02 NtGdiUnloadPrinterDriver
1122 0008:A012383D params=01 NtGdiUnmapMemFont
1123 0008:A01235ED params=01 NtGdiUnrealizeObject
1124 0008:A0127841 params=01 NtGdiUpdateColors
1125 0008:A0121B91 params=01 NtGdiWidenPath
1126 0008:A008C8AA params=02 NtUserActivateKeyboardLayout
1127 0008:A0066215 params=03 NtUserAlterWindowStyle
1128 0008:A0063401 params=03 NtUserAssociateInputContext
1129 0008:A00A57F3 params=03 NtUserAttachThreadInput
112A 0008:A0025EF3 params=02 NtUserBeginPaint
112B 0008:A0069B03 params=08 NtUserBitBltSysBmp
112C 0008:A00E534F params=01 NtUserBlockInput
112D 0008:A000919C params=04 NtUserBuildHimcList
112E 0008:A0041D01 params=07 NtUserBuildHwndList
112F 0008:A009AFBC params=04 NtUserBuildNameList
1130 0008:A00E5071 params=04 NtUserBuildPropList
1131 0008:A00A4247 params=02 NtUserCallHwnd
1132 0008:A002F888 params=02 NtUserCallHwndLock
1133 0008:A000B627 params=02 NtUserCallHwndOpt
1134 0008:A0065897 params=03 NtUserCallHwndParam
1135 0008:A0065529 params=03 NtUserCallHwndParamLock
1136 0008:A0066136 params=02 NtUserCallMsgFilter
1137 0008:A003F4EC params=04 NtUserCallNextHookEx
1138 0008:A00167F8 params=01 NtUserCallNoParam
1139 0008:A0016832 params=02 NtUserCallOneParam
113A 0008:A0065714 params=03 NtUserCallTwoParam
113B 0008:A009C2F0 params=02 NtUserChangeClipboardChain
113C 0008:A00E557B params=05 NtUserChangeDisplaySettings
113D 0008:A008C30C params=02 NtUserCheckImeHotKey
113E 0008:A009C92E params=03 NtUserCheckMenuItem
113F 0008:A009C54F params=04 NtUserChildWindowFromPointEx
1140 0008:A00E3E98 params=01 NtUserClipCursor
1141 0008:A0067DF2 params=00 NtUserCloseClipboard
1142 0008:A00A3F81 params=01 NtUserCloseDesktop
1143 0008:A00A3F43 params=01 NtUserCloseWindowStation
1144 0008:A008C0EC params=03 NtUserConsoleControl
1145 0008:A00B574C params=02 NtUserConvertMemHandle
1146 0008:A00A37D3 params=03 NtUserCopyAcceleratorTable
1147 0008:A006A0A6 params=00 NtUserCountClipboardFormats
1148 0008:A00A5D9A params=02 NtUserCreateAcceleratorTable
1149 0008:A00669ED params=04 NtUserCreateCaret
114A 0008:A000539B params=05 NtUserCreateDesktop
114B 0008:A00A6826 params=01 NtUserCreateInputContext
114C 0008:A007ADF7 params=04 NtUserCreateLocalMemHandle
114D 0008:A0034EDD params=0D NtUserCreateWindowEx
114E 0008:A0004908 params=06 NtUserCreateWindowStation
114F 0008:A00BACA9 params=03 NtUserDdeGetQualityOfService
1150 0008:A009A165 params=05 NtUserDdeInitialize
1151 0008:A00E3FEB params=03 NtUserDdeSetQualityOfService
1152 0008:A003E3BB params=08 NtUserDeferWindowPos
1153 0008:A006A4F7 params=02 NtUserDefSetText
1154 0008:A00A69B7 params=03 NtUserDeleteMenu
1155 0008:A00B8194 params=01 NtUserDestroyAcceleratorTable
1156 0008:A004611F params=02 NtUserDestroyCursor
1157 0008:A0067315 params=01 NtUserDestroyInputContext
1158 0008:A0066387 params=01 NtUserDestroyMenu
1159 0008:A0047504 params=01 NtUserDestroyWindow
115A 0008:A000050C params=01 NtUserDisableThreadIme
115B 0008:A00208F6 params=01 NtUserDispatchMessage
115C 0008:A00E51B6 params=03 NtUserDragDetect
115D 0008:A00E2C7B params=05 NtUserDragObject
115E 0008:A00E4238 params=04 NtUserDrawAnimatedRects
115F 0008:A00E4311 params=04 NtUserDrawCaption
1160 0008:A0045976 params=07 NtUserDrawCaptionTemp
1161 0008:A0029F20 params=0B NtUserDrawIconEx
1162 0008:A00E55D1 params=05 NtUserDrawMenuBarTemp
1163 0008:A00B5539 params=00 NtUserEmptyClipboard
1164 0008:A006C00A params=03 NtUserEnableMenuItem
1165 0008:A0091EA6 params=03 NtUserEnableScrollBar
1166 0008:A0022F59 params=02 NtUserEndDeferWindowPosEx
1167 0008:A00E43DE params=00 NtUserEndMenu
1168 0008:A0025D32 params=02 NtUserEndPaint
1169 0008:A008E47B params=04 NtUserEnumDisplayDevices
116A 0008:A00B8840 params=04 NtUserEnumDisplayMonitors
116B 0008:A008DAA3 params=04 NtUserEnumDisplaySettings
116C 0008:A00E338B params=01 NtUserEvent
116D 0008:A003CBA1 params=02 NtUserExcludeUpdateRgn
116E 0008:A006A3B9 params=04 NtUserFillWindow
116F 0008:A002DE77 params=03 NtUserFindExistingCursorIcon
1170 0008:A0046B6F params=05 NtUserFindWindowEx
1171 0008:A00E7118 params=01 NtUserFlashWindowEx
1172 0008:A00E3BC9 params=06 NtUserGetAltTabInfo
1173 0008:A00E3B4C params=02 NtUserGetAncestor
1174 0008:A00E6DB0 params=01 NtUserGetAppImeLevel
1175 0008:A005F783 params=01 NtUserGetAsyncKeyState
1176 0008:A0066265 params=00 NtUserGetCaretBlinkTime
1177 0008:A00B4FB7 params=01 NtUserGetCaretPos
1178 0008:A005BBAA params=05 NtUserGetClassInfo
1179 0008:A0060078 params=03 NtUserGetClassName
117A 0008:A00B566F params=02 NtUserGetClipboardData
117B 0008:A006665F params=03 NtUserGetClipboardFormatName
117C 0008:A00662EE params=00 NtUserGetClipboardOwner
117D 0008:A0030297 params=00 NtUserGetClipboardSequenceNumber
117E 0008:A00E4424 params=00 NtUserGetClipboardViewer
117F 0008:A00E3F26 params=01 NtUserGetClipCursor
1180 0008:A00E38EA params=02 NtUserGetComboBoxInfo
1181 0008:A0027F77 params=03 NtUserGetControlBrush
1182 0008:A00AC31A params=04 NtUserGetControlColor
1183 0008:A006715F params=03 NtUserGetCPD
1184 0008:A006A16C params=04 NtUserGetCursorFrameInfo
1185 0008:A00E39C4 params=01 NtUserGetCursorInfo
1186 0008:A00215C6 params=01 NtUserGetDC
1187 0008:A0093048 params=03 NtUserGetDCEx
1188 0008:A004882E params=00 NtUserGetDoubleClickTime
1189 0008:A006031A params=00 NtUserGetForegroundWindow
118A 0008:A009C89D params=02 NtUserGetGuiResources
118B 0008:A00E375A params=02 NtUserGetGUIThreadInfo
118C 0008:A00468DD params=06 NtUserGetIconInfo
118D 0008:A0046845 params=04 NtUserGetIconSize
118E 0008:A00B79C8 params=04 NtUserGetImeHotKey
118F 0008:A0062105 params=02 NtUserGetImeInfoEx
1190 0008:A00E3430 params=03 NtUserGetInternalWindowPos
1191 0008:A00929E6 params=02 NtUserGetKeyboardLayoutList
1192 0008:A009A639 params=01 NtUserGetKeyboardLayoutName
1193 0008:A002F4F1 params=01 NtUserGetKeyboardState
1194 0008:A007AB94 params=03 NtUserGetKeyNameText
1195 0008:A001C028 params=01 NtUserGetKeyState
1196 0008:A00E399A params=01 NtUserGetListBoxInfo
1197 0008:A00E3CF2 params=04 NtUserGetMenuBarInfo
1198 0008:A00E40F5 params=02 NtUserGetMenuIndex
1199 0008:A00BDA40 params=04 NtUserGetMenuItemRect
119A 0008:A0017995 params=04 NtUserGetMessage
119B 0008:A00E49CC params=05 NtUserGetMouseMovePointsEx
119C 0008:A008AA06 params=05 NtUserGetObjectInformation
119D 0008:A006A0C5 params=00 NtUserGetOpenClipboardWindow
119E 0008:A00E4449 params=02 NtUserGetPriorityClipboardFormat
119F 0008:A008A29B params=00 NtUserGetProcessWindowStation
11A0 0008:A00E3A99 params=03 NtUserGetScrollBarInfo
11A1 0008:A0063F3C params=02 NtUserGetSystemMenu
11A2 0008:A008A21F params=02 NtUserGetThreadDesktop
11A3 0008:A0017E72 params=01 NtUserGetThreadState
11A4 0008:A00E381B params=02 NtUserGetTitleBarInfo
11A5 0008:A00618CD params=03 NtUserGetUpdateRect
11A6 0008:A0067B88 params=03 NtUserGetUpdateRgn
11A7 0008:A00662BC params=01 NtUserGetWindowDC
11A8 0008:A0093347 params=02 NtUserGetWindowPlacement
11A9 0008:A00D9975 params=02 NtUserGetWOWClass
11AA 0008:A00E276B params=03 NtUserHardErrorControl
11AB 0008:A00656B0 params=01 NtUserHideCaret
11AC 0008:A00A917D params=04 NtUserHiliteMenuItem
11AD 0008:A00E536B params=02 NtUserImpersonateDdeClientWindow
11AE 0008:A0014817 params=03 NtUserInitialize
11AF 0008:A00108A3 params=04 NtUserInitializeClientPfnArrays
11B0 0008:A00E351E params=0B NtUserInitTask
11B1 0008:A009C7F9 params=03 NtUserInternalGetWindowText
11B2 0008:A002F43D params=03 NtUserInvalidateRect
11B3 0008:A0068349 params=03 NtUserInvalidateRgn
11B4 0008:A005FA40 params=01 NtUserIsClipboardFormatAvailable
11B5 0008:A001AC2C params=02 NtUserKillTimer
11B6 0008:A00BA0DB params=06 NtUserLoadKeyboardLayoutEx
11B7 0008:A0009607 params=01 NtUserLockWindowStation
11B8 0008:A00D98F4 params=01 NtUserLockWindowUpdate
11B9 0008:A00E2A3A params=00 NtUserLockWorkStation
11BA 0008:A0067350 params=04 NtUserMapVirtualKeyEx
11BB 0008:A00E4D0A params=04 NtUserMenuItemFromPoint
11BC 0008:A001B89A params=07 NtUserMessageCall
11BD 0008:A00AC3D0 params=03 NtUserMinMaximize
11BE 0008:A00E45BC params=00 NtUserMNDragLeave
11BF 0008:A00E4502 params=02 NtUserMNDragOver
11C0 0008:A00A42BE params=02 NtUserModifyUserStartupInfoFlags
11C1 0008:A00A5633 params=06 NtUserMoveWindow
11C2 0008:A00610F4 params=03 NtUserNotifyIMEStatus
11C3 0008:A008A633 params=04 NtUserNotifyProcessCreate
11C4 0008:A00E3703 params=04 NtUserNotifyWinEvent
11C5 0008:A0067EAD params=02 NtUserOpenClipboard
11C6 0008:A00A421B params=03 NtUserOpenDesktop
11C7 0008:A000B699 params=03 NtUserOpenInputDesktop
11C8 0008:A009ADBC params=02 NtUserOpenWindowStation
11C9 0008:A008948B params=01 NtUserPaintDesktop
11CA 0008:A0017DBC params=05 NtUserPeekMessage
11CB 0008:A0018C7B params=04 NtUserPostMessage
11CC 0008:A0048BCE params=04 NtUserPostThreadMessage
11CD 0008:A008A7A4 params=03 NtUserProcessConnect
11CE 0008:A009E217 params=05 NtUserQueryInformationThread
11CF 0008:A00603BD params=02 NtUserQueryInputContext
11D0 0008:A00E523A params=01 NtUserQuerySendMessage
11D1 0008:A00E6EFF params=05 NtUserQueryUserCounters
11D2 0008:A002F5BE params=02 NtUserQueryWindow
11D3 0008:A00E3B93 params=03 NtUserRealChildWindowFromPoint
11D4 0008:A002F2B4 params=04 NtUserRedrawWindow
11D5 0008:A005B98B params=06 NtUserRegisterClassExWOW
11D6 0008:A0000C81 params=04 NtUserRegisterHotKey
11D7 0008:A00E365E params=01 NtUserRegisterTasklist
11D8 0008:A0020596 params=01 NtUserRegisterWindowMessage
11D9 0008:A0069191 params=03 NtUserRemoveMenu
11DA 0008:A0063B65 params=02 NtUserRemoveProp
11DB 0008:A009A4D9 params=04 NtUserResolveDesktop
11DC 0008:A00E2A8C params=01 NtUserResolveDesktopForWOW
11DD 0008:A00B76FB params=04 NtUserSBGetParms
11DE 0008:A0040899 params=07 NtUserScrollDC
11DF 0008:A00ABB92 params=08 NtUserScrollWindowEx
11E0 0008:A002895B params=03 NtUserSelectPalette
11E1 0008:A0088DAD params=03 NtUserSendInput
11E2 0008:A005CC07 params=06 NtUserSendMessageCallback
11E3 0008:A004732D params=04 NtUserSendNotifyMessage
11E4 0008:A006A44E params=01 NtUserSetActiveWindow
11E5 0008:A00E6D4A params=02 NtUserSetAppImeLevel
11E6 0008:A0065F2F params=01 NtUserSetCapture
11E7 0008:A00B7034 params=04 NtUserSetClassLong
11E8 0008:A00E4601 params=03 NtUserSetClassWord
11E9 0008:A00B598A params=03 NtUserSetClipboardData
11EA 0008:A009A07E params=01 NtUserSetClipboardViewer
11EB 0008:A008C828 params=02 NtUserSetConsoleReserveKeys
11EC 0008:A001C1AE params=01 NtUserSetCursor
11ED 0008:A00E4BCF params=02 NtUserSetCursorContents
11EE 0008:A00464EF params=04 NtUserSetCursorIconData
11EF 0008:A00E4166 params=02 NtUserSetDbgTag
11F0 0008:A0060FE9 params=01 NtUserSetFocus
11F1 0008:A00B9CF3 params=05 NtUserSetImeHotKey
11F2 0008:A000BF04 params=01 NtUserSetImeInfoEx
11F3 0008:A006259A params=02 NtUserSetImeOwnerWindow
11F4 0008:A008BF60 params=04 NtUserSetInformationProcess
11F5 0008:A008C7D4 params=04 NtUserSetInformationThread
11F6 0008:A00E3DC7 params=04 NtUserSetInternalWindowPos
11F7 0008:A006114D params=01 NtUserSetKeyboardState
11F8 0008:A000BFE1 params=01 NtUserSetLogonNotifyWindow
11F9 0008:A00AC0BD params=03 NtUserSetMenu
11FA 0008:A00E41DA params=02 NtUserSetMenuContextHelpId
11FB 0008:A00B8158 params=03 NtUserSetMenuDefaultItem
11FC 0008:A00E420E params=01 NtUserSetMenuFlagRtoL
11FD 0008:A00E27AD params=04 NtUserSetObjectInformation
11FE 0008:A00A5835 params=02 NtUserSetParent
11FF 0008:A00A41FD params=01 NtUserSetProcessWindowStation
1200 0008:A0063ADE params=03 NtUserSetProp
1201 0008:A00E414C params=02 NtUserSetRipFlags
1202 0008:A0018FE4 params=04 NtUserSetScrollInfo
1203 0008:A000AE4D params=02 NtUserSetShellWindowEx
1204 0008:A00E4634 params=04 NtUserSetSysColors
1205 0008:A00E4B7F params=02 NtUserSetSystemCursor
1206 0008:A00B75A0 params=02 NtUserSetSystemMenu
1207 0008:A00E5209 params=04 NtUserSetSystemTimer
1208 0008:A00A419E params=01 NtUserSetThreadDesktop
1209 0008:A00092D6 params=02 NtUserSetThreadLayoutHandles
120A 0008:A006A350 params=02 NtUserSetThreadState
120B 0008:A001ADEF params=04 NtUserSetTimer
120C 0008:A00345E1 params=02 NtUserSetWindowFNID
120D 0008:A0033F35 params=04 NtUserSetWindowLong
120E 0008:A0094D95 params=02 NtUserSetWindowPlacement
120F 0008:A0032167 params=07 NtUserSetWindowPos
1210 0008:A00A3765 params=03 NtUserSetWindowRgn
1211 0008:A000099C params=03 NtUserSetWindowsHookAW
1212 0008:A0068F92 params=06 NtUserSetWindowsHookEx
1213 0008:A0008F96 params=04 NtUserSetWindowStationUser
1214 0008:A0058038 params=03 NtUserSetWindowWord
1215 0008:A00E3688 params=08 NtUserSetWinEventHook
1216 0008:A00656E2 params=01 NtUserShowCaret
1217 0008:A00664CC params=03 NtUserShowScrollBar
1218 0008:A0060D91 params=02 NtUserShowWindow
1219 0008:A009A3C6 params=02 NtUserShowWindowAsync
121A 0008:A00E4DCD params=00 NtUserSoundSentry
121B 0008:A000B742 params=01 NtUserSwitchDesktop
121C 0008:A0036934 params=04 NtUserSystemParametersInfo
121D 0008:A00D9B82 params=01 NtUserTestForInteractiveUser
121E 0008:A00B7654 params=02 NtUserThunkedMenuInfo
121F 0008:A00A5EEF params=06 NtUserThunkedMenuItemInfo
1220 0008:A00A9907 params=07 NtUserToUnicodeEx
1221 0008:A009C44A params=01 NtUserTrackMouseEvent
1222 0008:A00E486A params=06 NtUserTrackPopupMenuEx
1223 0008:A009367E params=03 NtUserTranslateAccelerator
1224 0008:A003F950 params=02 NtUserTranslateMessage
1225 0008:A0068CFA params=01 NtUserUnhookWindowsHookEx
1226 0008:A00E36D7 params=01 NtUserUnhookWinEvent
1227 0008:A00E5192 params=01 NtUserUnloadKeyboardLayout
1228 0008:A00007C1 params=01 NtUserUnlockWindowStation
1229 0008:A0092253 params=03 NtUserUnregisterClass
122A 0008:A00E496E params=02 NtUserUnregisterHotKey
122B 0008:A0061EA6 params=03 NtUserUpdateInputContext
122C 0008:A00E32EC params=03 NtUserUpdateInstance
122D 0008:A00AB067 params=09 NtUserUpdateLayeredWindow
122E 0008:A00E7255 params=04 NtUserSetLayeredWindowAttributes
122F 0008:A000784F params=02 NtUserUpdatePerUserSystemParameters
1230 0008:A00E4E0F params=03 NtUserUserHandleGrantAccess
1231 0008:A00E4DF3 params=01 NtUserValidateHandleSecure
1232 0008:A003C843 params=02 NtUserValidateRect
1233 0008:A003FE73 params=03 NtUserVkKeyScanEx
1234 0008:A009B09E params=03 NtUserWaitForInputIdle
1235 0008:A00D6257 params=01 NtUserWaitForMsgAndEvent
1236 0008:A0017E4D params=00 NtUserWaitMessage
1237 0008:A00E27A8 params=06 NtUserWin32PoolAllocationStats
1238 0008:A005F75B params=02 NtUserWindowFromPoint
1239 0008:A00D9B1D params=00 NtUserYieldTask
123A 0008:A00E260D params=03 NtUserRemoteConnect
123B 0008:A00E2653 params=04 NtUserRemoteRedrawRectangle
123C 0008:A00E269C params=00 NtUserRemoteRedrawScreen
123D 0008:A00E26EC params=00 NtUserRemoteStopScreenUpdates
123E 0008:A00E2725 params=03 NtUserCtxDisplayIOCtl
123F 0008:A00714B5 params=03 NtGdiEngAssociateSurface
1240 0008:A00716F6 params=06 NtGdiEngCreateBitmap
1241 0008:A00712EC params=04 NtGdiEngCreateDeviceSurface
1242 0008:A0138DE7 params=04 NtGdiEngCreateDeviceBitmap
1243 0008:A00B11E7 params=06 NtGdiEngCreatePalette
1244 0008:A0139399 params=03 NtGdiEngComputeGlyphSet
1245 0008:A0136B7D params=06 NtGdiEngCopyBits
1246 0008:A00AEAFF params=01 NtGdiEngDeletePalette
1247 0008:A0070627 params=01 NtGdiEngDeleteSurface
1248 0008:A0138605 params=03 NtGdiEngEraseSurface
1249 0008:A0070605 params=01 NtGdiEngUnlockSurface
124A 0008:A007144C params=01 NtGdiEngLockSurface
124B 0008:A0073D52 params=0B NtGdiEngBitBlt
124C 0008:A00A1048 params=0B NtGdiEngStretchBlt
124D 0008:A013731B params=0B NtGdiEngPlgBlt
124E 0008:A00C0B98 params=01 NtGdiEngMarkBandingSurface
124F 0008:A00A1D15 params=08 NtGdiEngStrokePath
1250 0008:A0137971 params=07 NtGdiEngFillPath
1251 0008:A00C0367 params=0A NtGdiEngStrokeAndFillPath
1252 0008:A0137C08 params=05 NtGdiEngPaint
1253 0008:A009F0AF params=09 NtGdiEngLineTo
1254 0008:A0137DFB params=07 NtGdiEngAlphaBlend
1255 0008:A0137FF2 params=0A NtGdiEngGradientFill
1256 0008:A013825B params=08 NtGdiEngTransparentBlt
1257 0008:A0072369 params=0A NtGdiEngTextOut
1258 0008:A0136F8D params=0D NtGdiEngStretchBltROP
1259 0008:A013926B params=04 NtGdiXLATEOBJcGetPalette
125A 0008:A0139306 params=02 NtGdiXLATEOBJiXlate
125B 0008:A0139234 params=01 NtGdiXLATEOBJhGetColorTransform
125C 0008:A01387A9 params=03 NtGdiCLIPOBJbEnum
125D 0008:A0138765 params=05 NtGdiCLIPOBJcEnumStart
125E 0008:A01386E1 params=01 NtGdiCLIPOBJppoGetPath
125F 0008:A0138707 params=01 NtGdiEngDeletePath
1260 0008:A0138729 params=00 NtGdiEngCreateClip
1261 0008:A0138743 params=01 NtGdiEngDeleteClip
1262 0008:A01388BE params=01 NtGdiBRUSHOBJulGetBrushColor
1263 0008:A0138839 params=02 NtGdiBRUSHOBJpvAllocRbrush
1264 0008:A013887D params=01 NtGdiBRUSHOBJpvGetRbrush
1265 0008:A01388FF params=01 NtGdiBRUSHOBJhGetColorTransform
1266 0008:A0079856 params=05 NtGdiXFORMOBJbApplyXform
1267 0008:A006FC3E params=02 NtGdiXFORMOBJiGetXform
1268 0008:A00797EB params=03 NtGdiFONTOBJvGetInfo
1269 0008:A006FE46 params=01 NtGdiFONTOBJpxoGetXform
126A 0008:A0070CA1 params=05 NtGdiFONTOBJcGetGlyphs
126B 0008:A0070095 params=01 NtGdiFONTOBJpifi
126C 0008:A0138B10 params=01 NtGdiFONTOBJpfdg
126D 0008:A0138C0B params=02 NtGdiFONTOBJpQueryGlyphAttrs
126E 0008:A0139158 params=02 NtGdiFONTOBJpvTrueTypeFontFile
126F 0008:A0138A13 params=02 NtGdiFONTOBJcGetAllGlyphHandles
1270 0008:A0138D53 params=03 NtGdiSTROBJbEnum
1271 0008:A006FF54 params=03 NtGdiSTROBJbEnumPositionsOnly
1272 0008:A0079737 params=04 NtGdiSTROBJbGetAdvanceWidths
1273 0008:A006FCEF params=01 NtGdiSTROBJvEnumStart
1274 0008:A0138D8C params=01 NtGdiSTROBJdwGetCodePage
1275 0008:A0138E20 params=02 NtGdiPATHOBJvGetBounds
1276 0008:A0138EAC params=02 NtGdiPATHOBJbEnum
1277 0008:A0138F99 params=01 NtGdiPATHOBJvEnumStart
1278 0008:A0138FC5 params=04 NtGdiPATHOBJvEnumStartClipLines
1279 0008:A013906C params=03 NtGdiPATHOBJbEnumClipLines
127A 0008:A0138DC3 params=01 NtGdiGetDhpdev
127B 0008:A0139345 params=01 NtGdiEngCheckAbort
127C 0008:A0139409 params=04 NtGdiHTGet8BPPFormatPalette
127D 0008:A0139498 params=06 NtGdiHTGet8BPPMaskPalette
127E 0008:A0119AB8 params=01 NtGdiUpdateTransform
WebCrazy(tsu00@263.net)
Windows 2000 Server Build 2195 SP0 中文版共从ntoskrnl.exe(x86单处理器版本)中导出248个System Services,而从win2k.sys中导出639个System Services。SoftICE for Windows NT/2000的ntcall命令可以将这些System Service显示出,可参阅《SoftICE Command Reference》。以下我列出所有的System Service。最可供参考的是各个System Service对应的函数名。一般情况下,Microsoft都提供一Windows API对应一System Service。如从以下一行:
0020 0008:804A0C2D params=0B NtCreateFile
可看出其对应Windows API CreateFile。
应该说明的是这个列表与Windows NT/2000的版本息息相关,不同的build号,装了不同的sp包,这个列表一般都有所不同。系统具体如何管理这些System Services,请参阅《 再谈Windows NT/2000内部数据结构》。
要跟踪系统调用这近千个的System Service,请下载本站的一个小软件:Strace for Windows 2000!
:ntcall
Service table address: 804704D8 Number of services:000000F8
0000 0008:804AB3BF params=06 NtAcceptConnectPort
0001 0008:804AE86B params=08 NtAccessCheck
0002 0008:804BDEF3 params=0B NtAccessCheckAndAuditAlarm
0003 0008:8050B034 params=0B NtAccessCheckByType
0004 0008:804C11F4 params=10 NtAccessCheckByTypeAndAuditAlarm
0005 0008:80459214 params=0B NtAccessCheckByTypeResultList
0006 0008:8050C2FF params=10 NtAccessCheckByTypeResultListAndAuditAlarm
0007 0008:8050C33F params=11 NtAccessCheckByTypeResultListAndAuditAlarmByHan
0008 0008:804B581C params=03 NtAddAtom
0009 0008:80508874 params=06 NtAdjustGroupsToken
000A 0008:8049860A params=06 NtAdjustPrivilegesToken
000B 0008:804FC7E2 params=02 NtAlertResumeThread
000C 0008:804955F7 params=01 NtAlertThread
000D 0008:8049C8A6 params=01 NtAllocateLocallyUniqueId
000E 0008:80448472 params=03 NtAllocateUserPhysicalPages
000F 0008:804A8D50 params=04 NtAllocateUuids
0010 0008:804B6BFB params=06 NtAllocateVirtualMemory
0011 0008:804F0CEF params=02 NtAreMappedFilesTheSame
0012 0008:804FCB95 params=02 NtAssignProcessToJobObject
0013 0008:8040189A params=03 NtCallbackReturn
0014 0008:804D06CB params=02 NtCancelIoFile
0015 0008:80418F66 params=02 NtCancelTimer
0016 0008:804F69D4 params=01 NtCancelDeviceWakeupRequest
0017 0008:8049E0CC params=01 NtClearEvent
0018 0008:8044C422 params=01 NtClose
0019 0008:80496F58 params=03 NtCloseObjectAuditAlarm
001A 0008:804AB849 params=01 NtCompleteConnectPort
001B 0008:804AA9DA params=08 NtConnectPort
001C 0008:80465250 params=02 NtContinue
001D 0008:804F4BD5 params=03 NtCreateDirectoryObject
001E 0008:8049BC80 params=05 NtCreateEvent
001F 0008:804CA7A5 params=03 NtCreateEventPair
0020 0008:804A0C2D params=0B NtCreateFile
0021 0008:804C18F5 params=04 NtCreateIoCompletion
0022 0008:804FC8B8 params=03 NtCreateJobObject
0023 0008:804A83BE params=07 NtCreateKey
0024 0008:8048D3DA params=08 NtCreateMailslotFile
0025 0008:8049FCA5 params=04 NtCreateMutant
0026 0008:8049628A params=0E NtCreateNamedPipeFile
0027 0008:804EE260 params=04 NtCreatePagingFile
0028 0008:804A098F params=05 NtCreatePort
0029 0008:804AD948 params=08 NtCreateProcess
002A 0008:804C9D6F params=09 NtCreateProfile
002B 0008:804AEFF6 params=07 NtCreateSection
002C 0008:804970F9 params=05 NtCreateSemaphore
002D 0008:8049C6C4 params=04 NtCreateSymbolicLinkObject
002E 0008:804969C1 params=08 NtCreateThread
002F 0008:804C1C6E params=04 NtCreateTimer
0030 0008:8050E543 params=0D NtCreateToken
0031 0008:804EC375 params=05 NtCreateWaitablePort
0032 0008:804C0467 params=02 NtDelayExecution
0033 0008:804C0528 params=01 NtDeleteAtom
0034 0008:804D0833 params=01 NtDeleteFile
0035 0008:804BD3C5 params=01 NtDeleteKey
0036 0008:80491D0C params=03 NtDeleteObjectAuditAlarm
0037 0008:804A1309 params=02 NtDeleteValueKey
0038 0008:804A8EF6 params=0A NtDeviceIoControlFile
0039 0008:804C61B4 params=01 NtDisplayString
003A 0008:8049FE25 params=07 NtDuplicateObject
003B 0008:8049CF2E params=06 NtDuplicateToken
003C 0008:8049736D params=06 NtEnumerateKey
003D 0008:804C0A3C params=06 NtEnumerateValueKey
003E 0008:8049051D params=02 NtExtendSection
003F 0008:80509361 params=06 NtFilterToken
0040 0008:804B95ED params=03 NtFindAtom
0041 0008:804BA31A params=02 NtFlushBuffersFile
0042 0008:80496667 params=03 NtFlushInstructionCache
0043 0008:804AE2C6 params=01 NtFlushKey
0044 0008:804B0F9C params=04 NtFlushVirtualMemory
0045 0008:804F19A4 params=00 NtFlushWriteBuffer
0046 0008:80448A9D params=03 NtFreeUserPhysicalPages
0047 0008:804A9828 params=04 NtFreeVirtualMemory
0048 0008:804A8B14 params=0A NtFsControlFile
0049 0008:804C4F1B params=02 NtGetContextThread
004A 0008:804F69EA params=02 NtGetDevicePowerState
004B 0008:804BC159 params=04 NtGetPlugPlayEvent
004C 0008:80460086 params=00 NtGetTickCount
004D 0008:804490E4 params=07 NtGetWriteWatch
004E 0008:8050EFE4 params=01 NtImpersonateAnonymousToken
004F 0008:80495FCD params=02 NtImpersonateClientOfPort
0050 0008:80452C84 params=03 NtImpersonateThread
0051 0008:8051E159 params=01 NtInitializeRegistry
0052 0008:804F67D0 params=04 NtInitiatePowerAction
0053 0008:804F69DC params=00 NtIsSystemResumeAutomatic
0054 0008:804EC598 params=02 NtListenPort
0055 0008:8052A603 params=01 NtLoadDriver
0056 0008:8051EDF3 params=02 NtLoadKey
0057 0008:8045FA4E params=03 NtLoadKey2
0058 0008:804AA339 params=0A NtLockFile
0059 0008:804F19FB params=04 NtLockVirtualMemory
005A 0008:804B4D99 params=01 NtMakeTemporaryObject
005B 0008:80447B61 params=03 NtMapUserPhysicalPages
005C 0008:80447F74 params=03 NtMapUserPhysicalPagesScatter
005D 0008:804A8767 params=0A NtMapViewOfSection
005E 0008:8049844D params=09 NtNotifyChangeDirectoryFile
005F 0008:804A00E4 params=0A NtNotifyChangeKey
0060 0008:804A0112 params=0C NtNotifyChangeMultipleKeys
0061 0008:804B9BCA params=03 NtOpenDirectoryObject
0062 0008:804B570A params=03 NtOpenEvent
0063 0008:804CA891 params=03 NtOpenEventPair
0064 0008:804A35F9 params=06 NtOpenFile
0065 0008:804D4F31 params=03 NtOpenIoCompletion
0066 0008:804FCACD params=03 NtOpenJobObject
0067 0008:804AA4F2 params=03 NtOpenKey
0068 0008:804B86D0 params=03 NtOpenMutant
0069 0008:804A79E0 params=0C NtOpenObjectAuditAlarm
006A 0008:8049E77A params=04 NtOpenProcess
006B 0008:804B5234 params=03 NtOpenProcessToken
006C 0008:804AC198 params=03 NtOpenSection
006D 0008:804BC50F params=03 NtOpenSemaphore
006E 0008:804C0953 params=03 NtOpenSymbolicLinkObject
006F 0008:804B67E5 params=04 NtOpenThread
0070 0008:804A0E36 params=04 NtOpenThreadToken
0071 0008:804CA46B params=03 NtOpenTimer
0072 0008:804AFC32 params=03 NtPlugPlayControl
0073 0008:804C3755 params=05 NtPowerInformation
0074 0008:80495E38 params=03 NtPrivilegeCheck
0075 0008:8050BA39 params=05 NtPrivilegedServiceAuditAlarm
0076 0008:8050B815 params=06 NtPrivilegeObjectAuditAlarm
0077 0008:804B038B params=05 NtProtectVirtualMemory
0078 0008:804C1A4E params=02 NtPulseEvent
0079 0008:804AA8CE params=05 NtQueryInformationAtom
007A 0008:80499EE5 params=02 NtQueryAttributesFile
007B 0008:8049EB50 params=02 NtQueryDefaultLocale
007C 0008:804BE87B params=01 NtQueryDefaultUILanguage
007D 0008:804A2459 params=0B NtQueryDirectoryFile
007E 0008:804C33FE params=07 NtQueryDirectoryObject
007F 0008:804D5963 params=09 NtQueryEaFile
0080 0008:804AAF98 params=05 NtQueryEvent
0081 0008:804BCAB3 params=02 NtQueryFullAttributesFile
0082 0008:804AE525 params=05 NtQueryInformationFile
0083 0008:804ADF19 params=05 NtQueryInformationJobObject
0084 0008:804BE337 params=05 NtQueryIoCompletion
0085 0008:804EC616 params=05 NtQueryInformationPort
0086 0008:804B4426 params=05 NtQueryInformationProcess
0087 0008:804A9AB9 params=05 NtQueryInformationThread
0088 0008:804990BD params=05 NtQueryInformationToken
0089 0008:804BBCE1 params=01 NtQueryInstallUILanguage
008A 0008:804CA33D params=02 NtQueryIntervalProfile
008B 0008:8049923A params=05 NtQueryKey
008C 0008:8051F4A8 params=06 NtQueryMultipleValueKey
008D 0008:804CA604 params=05 NtQueryMutant
008E 0008:804BAE69 params=05 NtQueryObject
008F 0008:8051FB4C params=02 NtQueryOpenSubKeys
0090 0008:804B9B2D params=02 NtQueryPerformanceCounter
0091 0008:804D6865 params=09 NtQueryQuotaInformationFile
0092 0008:804989AC params=05 NtQuerySection
0093 0008:8044C94A params=05 NtQuerySecurityObject
0094 0008:804C9009 params=05 NtQuerySemaphore
0095 0008:804B984F params=03 NtQuerySymbolicLinkObject
0096 0008:804C97BE params=04 NtQuerySystemEnvironmentValue
0097 0008:804BF933 params=04 NtQuerySystemInformation
0098 0008:804BB77C params=01 NtQuerySystemTime
0099 0008:804BAD4C params=05 NtQueryTimer
009A 0008:804ACF1A params=03 NtQueryTimerResolution
009B 0008:8049A077 params=06 NtQueryValueKey
009C 0008:8049C3CD params=06 NtQueryVirtualMemory
009D 0008:8049EC21 params=05 NtQueryVolumeInformationFile
009E 0008:804B13FF params=05 NtQueueApcThread
009F 0008:80465298 params=03 NtRaiseException
00A0 0008:804C8C74 params=06 NtRaiseHardError
00A1 0008:804BB7FD params=09 NtReadFile
00A2 0008:804D7508 params=09 NtReadFileScatter
00A3 0008:804A9014 params=06 NtReadRequestData
00A4 0008:804BE05F params=05 NtReadVirtualMemory
00A5 0008:804959A2 params=01 NtRegisterThreadTerminatePort
00A6 0008:804BBC18 params=02 NtReleaseMutant
00A7 0008:804A71EB params=03 NtReleaseSemaphore
00A8 0008:804B219F params=05 NtRemoveIoCompletion
00A9 0008:8051F2D7 params=03 NtReplaceKey
00AA 0008:8049E519 params=02 NtReplyPort
00AB 0008:804B3E83 params=04 NtReplyWaitReceivePort
00AC 0008:8043374A params=05 NtReplyWaitReceivePortEx
00AD 0008:804EC819 params=02 NtReplyWaitReplyPort
00AE 0008:804F6972 params=01 NtRequestDeviceWakeup
00AF 0008:804B5A2E params=02 NtRequestPort
00B0 0008:804B3AC6 params=03 NtRequestWaitReplyPort
00B1 0008:804F677C params=01 NtRequestWakeupLatency
00B2 0008:8048C413 params=02 NtResetEvent
00B3 0008:804495CA params=03 NtResetWriteWatch
00B4 0008:8051EA0C params=03 NtRestoreKey
00B5 0008:804B4998 params=02 NtResumeThread
00B6 0008:80492F99 params=02 NtSaveKey
00B7 0008:8051EB70 params=03 NtSaveMergedKeys
00B8 0008:80432E23 params=09 NtSecureConnectPort
00B9 0008:804A0FA6 params=05 NtSetIoCompletion
00BA 0008:804914C5 params=02 NtSetContextThread
00BB 0008:804C8F0B params=01 NtSetDefaultHardErrorPort
00BC 0008:804C6470 params=02 NtSetDefaultLocale
00BD 0008:804C6A3E params=01 NtSetDefaultUILanguage
00BE 0008:804D5ED0 params=04 NtSetEaFile
00BF 0008:804A745D params=02 NtSetEvent
00C0 0008:804CAB33 params=01 NtSetHighEventPair
00C1 0008:804CAA79 params=01 NtSetHighWaitLowEventPair
00C2 0008:804C1308 params=05 NtSetInformationFile
00C3 0008:804FD998 params=04 NtSetInformationJobObject
00C4 0008:8051EFDD params=04 NtSetInformationKey
00C5 0008:804B7435 params=04 NtSetInformationObject
00C6 0008:8049BFC8 params=04 NtSetInformationProcess
00C7 0008:804C0067 params=04 NtSetInformationThread
00C8 0008:8050F572 params=04 NtSetInformationToken
00C9 0008:804CA32B params=02 NtSetIntervalProfile
00CA 0008:804910AD params=06 NtSetLdtEntries
00CB 0008:804CAADD params=01 NtSetLowEventPair
00CC 0008:804CAA15 params=01 NtSetLowWaitHighEventPair
00CD 0008:804D6DD0 params=04 NtSetQuotaInformationFile
00CE 0008:8044C855 params=03 NtSetSecurityObject
00CF 0008:804C9A48 params=02 NtSetSystemEnvironmentValue
00D0 0008:8048C5C0 params=03 NtSetSystemInformation
00D1 0008:80488947 params=03 NtSetSystemPowerState
00D2 0008:8048CBE7 params=02 NtSetSystemTime
00D3 0008:804B2CA2 params=02 NtSetThreadExecutionState
00D4 0008:804190FF params=07 NtSetTimer
00D5 0008:804C1B95 params=03 NtSetTimerResolution
00D6 0008:804C93B5 params=01 NtSetUuidSeed
00D7 0008:804B8D90 params=06 NtSetValueKey
00D8 0008:804D6EEC params=05 NtSetVolumeInformationFile
00D9 0008:804C6182 params=01 NtShutdownSystem
00DA 0008:8044D2B1 params=04 NtSignalAndWaitForSingleObject
00DB 0008:804C9FE0 params=01 NtStartProfile
00DC 0008:804CA287 params=01 NtStopProfile
00DD 0008:804C522B params=02 NtSuspendThread
00DE 0008:8052A462 params=06 NtSystemDebugControl
00DF 0008:804FE766 params=02 NtTerminateJobObject
00E0 0008:804A2FAC params=02 NtTerminateProcess
00E1 0008:804BDF29 params=02 NtTerminateThread
00E2 0008:804B5218 params=00 NtTestAlert
00E3 0008:8052A7D0 params=01 NtUnloadDriver
00E4 0008:8051EE05 params=01 NtUnloadKey
00E5 0008:804A81B4 params=05 NtUnlockFile
00E6 0008:804C0554 params=04 NtUnlockVirtualMemory
00E7 0008:804BA027 params=02 NtUnmapViewOfSection
00E8 0008:804C3B5D params=02 NtVdmControl
00E9 0008:8044D4A2 params=05 NtWaitForMultipleObjects
00EA 0008:8049ADC3 params=03 NtWaitForSingleObject
00EB 0008:804CA9B7 params=01 NtWaitHighEventPair
00EC 0008:804CA959 params=01 NtWaitLowEventPair
00ED 0008:80497920 params=09 NtWriteFile
00EE 0008:804D7D76 params=09 NtWriteFileGather
00EF 0008:804B848C params=06 NtWriteRequestData
00F0 0008:804AC248 params=05 NtWriteVirtualMemory
00F1 0008:804EB56F params=02 NtCreateChannel
00F2 0008:804EB56F params=02 NtCreateChannel
00F3 0008:804EB56F params=02 NtCreateChannel
00F4 0008:80432D65 params=03 NtReplyWaitSendChannel
00F5 0008:80445DB5 params=04 MmMemoryUsage
00F6 0008:804F69D4 params=01 NtCancelDeviceWakeupRequest
00F7 0008:80432D6D params=00 NtYieldExecution
Service table address: A0186BC0 Number of services:0000027F
1000 0008:A01094E2 params=01 NtGdiAbortDoc
1001 0008:A01219E2 params=01 NtGdiAbortPath
1002 0008:A0003E72 params=06 NtGdiAddFontResourceW
1003 0008:A01160FA params=04 NtGdiAddRemoteFontToDC
1004 0008:A0123843 params=05 NtGdiAddFontMemResourceEx
1005 0008:A0109B0C params=02 NtGdiRemoveMergeFont
1006 0008:A010A1E6 params=03 NtGdiAddRemoteMMInstanceToDC
1007 0008:A0106FB1 params=0C NtGdiAlphaBlend
1008 0008:A0122F7E params=06 NtGdiAngleArc
1009 0008:A00AA5B4 params=00 NtGdiAnyLinkedFonts
100A 0008:A0123725 params=01 NtGdiFontIsLinked
100B 0008:A00BB83F params=0A NtGdiArcInternal
100C 0008:A0082128 params=01 NtGdiBeginPath
100D 0008:A001B344 params=0B NtGdiBitBlt
100E 0008:A01234E0 params=01 NtGdiCancelDC
100F 0008:A0125354 params=08 NtGdiCheckBitmapBits
1010 0008:A008209C params=01 NtGdiCloseFigure
1011 0008:A01254AE params=06 NtGdiColorCorrectPalette
1012 0008:A005F6C4 params=04 NtGdiCombineRgn
1013 0008:A0079AD1 params=03 NtGdiCombineTransform
1014 0008:A00661CB params=01 NtGdiComputeXformCoefficients
1015 0008:A0040082 params=04 NtGdiConsoleTextOut
1016 0008:A007498E params=02 NtGdiConvertMetafileRect
1017 0008:A002D968 params=05 NtGdiCreateBitmap
1018 0008:A005CE0C params=01 NtGdiCreateClientObj
1019 0008:A009D3DD params=01 NtGdiCreateColorSpace
101A 0008:A0125007 params=08 NtGdiCreateColorTransform
101B 0008:A0029297 params=03 NtGdiCreateCompatibleBitmap
101C 0008:A001FEEE params=01 NtGdiCreateCompatibleDC
101D 0008:A0069475 params=06 NtGdiCreateDIBBrush
101E 0008:A004866E params=0B NtGdiCreateDIBitmapInternal
101F 0008:A005B055 params=09 NtGdiCreateDIBSection
1020 0008:A010D03C params=04 NtGdiCreateEllipticRgn
1021 0008:A0092FD9 params=01 NtGdiCreateHalftonePalette
1022 0008:A009652C params=03 NtGdiCreateHatchBrushInternal
1023 0008:A0071E8F params=01 NtGdiCreateMetafileDC
1024 0008:A00687CD params=02 NtGdiCreatePaletteInternal
1025 0008:A005B56F params=03 NtGdiCreatePatternBrushInternal
1026 0008:A00587E5 params=04 NtGdiCreatePen
1027 0008:A005BF41 params=04 NtGdiCreateRectRgn
1028 0008:A010D151 params=06 NtGdiCreateRoundRectRgn
1029 0008:A00DD23F params=06 NtGdiCreateServerMetaFile
102A 0008:A002E0EC params=02 NtGdiCreateSolidBrush
102B 0008:A0127E16 params=04 NtGdiD3dContextCreate
102C 0008:A01281B5 params=01 NtGdiD3dContextDestroy
102D 0008:A0128246 params=01 NtGdiD3dContextDestroyAll
102E 0008:A012861E params=01 NtGdiD3dValidateTextureStageState
102F 0008:A01282B4 params=07 NtGdiD3dDrawPrimitives2
1030 0008:A01287F0 params=01 NtGdiDdGetDriverState
1031 0008:A012B6D3 params=03 NtGdiDdAddAttachedSurface
1032 0008:A012D628 params=03 NtGdiDdAlphaBlt
1033 0008:A00BE4A8 params=02 NtGdiDdAttachSurface
1034 0008:A012CDA8 params=02 NtGdiDdBeginMoCompFrame
1035 0008:A012A368 params=03 NtGdiDdBlt
1036 0008:A008F85C params=02 NtGdiDdCanCreateSurface
1037 0008:A012AFB0 params=02 NtGdiDdCanCreateD3DBuffer
1038 0008:A012BF17 params=02 NtGdiDdColorControl
1039 0008:A008E4C3 params=01 NtGdiDdCreateDirectDrawObject
103A 0008:A008F0A2 params=08 NtGdiDdCreateSurface
103B 0008:A008F0A2 params=08 NtGdiDdCreateSurface
103C 0008:A012C76A params=02 NtGdiDdCreateMoComp
103D 0008:A00BE1E5 params=06 NtGdiDdCreateSurfaceObject
103E 0008:A00902B4 params=01 NtGdiDdDeleteDirectDrawObject
103F 0008:A009036D params=01 NtGdiDdDeleteSurfaceObject
1040 0008:A012CD39 params=02 NtGdiDdDestroyMoComp
1041 0008:A00BEDC5 params=02 NtGdiDdDestroySurface
1042 0008:A012B60A params=01 NtGdiDdDestroyD3DBuffer
1043 0008:A012D012 params=02 NtGdiDdEndMoCompFrame
1044 0008:A00BEA69 params=05 NtGdiDdFlip
1045 0008:A012BD7E params=02 NtGdiDdFlipToGDISurface
1046 0008:A00BDDC7 params=02 NtGdiDdGetAvailDriverMemory
1047 0008:A012ACEE params=02 NtGdiDdGetBltStatus
1048 0008:A00BE355 params=02 NtGdiDdGetDC
1049 0008:A008F4B8 params=02 NtGdiDdGetDriverInfo
104A 0008:A012C1CF params=03 NtGdiDdGetDxHandle
104B 0008:A00BE5F0 params=02 NtGdiDdGetFlipStatus
104C 0008:A012CBE4 params=02 NtGdiDdGetInternalMoCompInfo
104D 0008:A012CA01 params=02 NtGdiDdGetMoCompBuffInfo
104E 0008:A012C313 params=02 NtGdiDdGetMoCompGuids
104F 0008:A012C4C7 params=02 NtGdiDdGetMoCompFormats
1050 0008:A012BB38 params=02 NtGdiDdGetScanLine
1051 0008:A008FA5F params=03 NtGdiDdLock
1052 0008:A012AADA params=02 NtGdiDdLockD3D
1053 0008:A008F2E1 params=0B NtGdiDdQueryDirectDrawObject
1054 0008:A012D4E1 params=02 NtGdiDdQueryMoCompStatus
1055 0008:A008F1B1 params=02 NtGdiDdReenableDirectDrawObject
1056 0008:A00BDC3E params=01 NtGdiDdReleaseDC
1057 0008:A012D19A params=02 NtGdiDdRenderMoComp
1058 0008:A009E92D params=02 NtGdiDdResetVisrgn
1059 0008:A00BD839 params=02 NtGdiDdSetColorKey
105A 0008:A012BC66 params=02 NtGdiDdSetExclusiveMode
105B 0008:A012DAD0 params=03 NtGdiDdSetGammaRamp
105C 0008:A012DC42 params=03 NtGdiDdCreateSurfaceEx
105D 0008:A012B9DA params=03 NtGdiDdSetOverlayPosition
105E 0008:A00BECC9 params=02 NtGdiDdUnattachSurface
105F 0008:A008FB41 params=02 NtGdiDdUnlock
1060 0008:A012ABDD params=02 NtGdiDdUnlockD3D
1061 0008:A00BE74A params=03 NtGdiDdUpdateOverlay
1062 0008:A012AE25 params=02 NtGdiDdWaitForVerticalBlank
1063 0008:A012EE56 params=02 NtGdiDvpCanCreateVideoPort
1064 0008:A013064F params=02 NtGdiDvpColorControl
1065 0008:A012EF9E params=02 NtGdiDvpCreateVideoPort
1066 0008:A012F1EE params=02 NtGdiDvpDestroyVideoPort
1067 0008:A012F25D params=04 NtGdiDvpFlipVideoPort
1068 0008:A012F3DC params=02 NtGdiDvpGetVideoPortBandwidth
1069 0008:A012F57B params=02 NtGdiDvpGetVideoPortField
106A 0008:A012F6B4 params=02 NtGdiDvpGetVideoPortFlipStatus
106B 0008:A012F7CA params=02 NtGdiDvpGetVideoPortInputFormats
106C 0008:A012FB7B params=02 NtGdiDvpGetVideoPortLine
106D 0008:A012F991 params=02 NtGdiDvpGetVideoPortOutputFormats
106E 0008:A012FC61 params=02 NtGdiDvpGetVideoPortConnectInfo
106F 0008:A012FE1E params=02 NtGdiDvpGetVideoSignalStatus
1070 0008:A012FF04 params=04 NtGdiDvpUpdateVideoPort
1071 0008:A013051F params=02 NtGdiDvpWaitForVideoPortSync
1072 0008:A005CDD9 params=01 NtGdiDeleteClientObj
1073 0008:A009D482 params=01 NtGdiDeleteColorSpace
1074 0008:A012527D params=02 NtGdiDeleteColorTransform
1075 0008:A002161D params=01 NtGdiDeleteObjectApp
1076 0008:A009EBEF params=04 NtGdiDescribePixelFormat
1077 0008:A00BF9B3 params=02 NtGdiGetPerBandInfo
1078 0008:A00BF1EB params=04 NtGdiDoBanding
1079 0008:A005AB35 params=06 NtGdiDoPalette
107A 0008:A012309F params=04 NtGdiDrawEscape
107B 0008:A0082DF1 params=05 NtGdiEllipse
107C 0008:A000B19A params=01 NtGdiEnableEudc
107D 0008:A0070295 params=01 NtGdiEndDoc
107E 0008:A006FF6A params=01 NtGdiEndPage
107F 0008:A0082066 params=01 NtGdiEndPath
1080 0008:A00AD466 params=05 NtGdiEnumFontChunk
1081 0008:A00AD5CD params=01 NtGdiEnumFontClose
1082 0008:A00ACCA2 params=07 NtGdiEnumFontOpen
1083 0008:A00B3512 params=04 NtGdiEnumObjects
1084 0008:A00B7C39 params=02 NtGdiEqualRgn
1085 0008:A0132C42 params=04 NtGdiEudcEnumFaceNameLinkW
1086 0008:A0132AA5 params=07 NtGdiEudcLoadUnloadLink
1087 0008:A003CA50 params=05 NtGdiExcludeClipRect
1088 0008:A0086F77 params=0B NtGdiExtCreatePen
1089 0008:A006F5AD params=03 NtGdiExtCreateRegion
108A 0008:A00B2E12 params=08 NtGdiExtEscape
108B 0008:A0133BFF params=05 NtGdiExtFloodFill
108C 0008:A002873A params=03 NtGdiExtGetObjectW
108D 0008:A0021B1A params=03 NtGdiExtSelectClipRgn
108E 0008:A0067926 params=09 NtGdiExtTextOutW
108F 0008:A00948AF params=01 NtGdiFillPath
1090 0008:A00B617B params=03 NtGdiFillRgn
1091 0008:A0121AFA params=01 NtGdiFlattenPath
1092 0008:A001A344 params=00 NtGdiFlushUserBatch
1093 0008:A0017DB4 params=00 GreFlush
1094 0008:A012417C params=02 NtGdiForceUFIMapping
1095 0008:A010D23C params=05 NtGdiFrameRgn
1096 0008:A0110C02 params=05 NtGdiFullscreenControl
1097 0008:A0081565 params=04 NtGdiGetAndSetDCDword
1098 0008:A00255F3 params=02 NtGdiGetAppClipBox
1099 0008:A005B2DF params=03 NtGdiGetBitmapBits
109A 0008:A00BDF03 params=02 NtGdiGetBitmapDimension
109B 0008:A00AAC75 params=03 NtGdiGetBoundsRect
109C 0008:A00B6968 params=06 NtGdiGetCharABCWidthsW
109D 0008:A01221AA params=06 NtGdiGetCharacterPlacementW
109E 0008:A0022444 params=01 NtGdiGetCharSet
109F 0008:A0069708 params=06 NtGdiGetCharWidthW
10A0 0008:A00B6D60 params=02 NtGdiGetCharWidthInfo
10A1 0008:A0123343 params=02 NtGdiGetColorAdjustment
10A2 0008:A0134508 params=01 NtGdiGetColorSpaceforBitmap
10A3 0008:A002F1B2 params=03 NtGdiGetDCDword
10A4 0008:A00293B2 params=01 NtGdiGetDCforBitmap
10A5 0008:A00293D8 params=02 NtGdiGetDCObject
10A6 0008:A00D9A1E params=03 NtGdiGetDCPoint
10A7 0008:A0123590 params=02 NtGdiGetDeviceCaps
10A8 0008:A01256FA params=02 NtGdiGetDeviceGammaRamp
10A9 0008:A00B1A2D params=02 NtGdiGetDeviceCapsAll
10AA 0008:A0038145 params=09 NtGdiGetDIBitsInternal
10AB 0008:A0078D7B params=02 NtGdiGetETM
10AC 0008:A01324A2 params=03 NtGdiGetEudcTimeStampEx
10AD 0008:A00A3190 params=05 NtGdiGetFontData
10AE 0008:A0123B0D params=07 NtGdiGetFontResourceInfoInternalW
10AF 0008:A0124556 params=05 NtGdiGetGlyphIndicesW
10B0 0008:A01243FD params=06 NtGdiGetGlyphIndicesWInternal
10B1 0008:A01231BF params=08 NtGdiGetGlyphOutline
10B2 0008:A0078F28 params=03 NtGdiGetKerningPairs
10B3 0008:A0109657 params=03 NtGdiGetLinkedUFIs
10B4 0008:A0122FF7 params=02 NtGdiGetMiterLimit
10B5 0008:A01154D8 params=03 NtGdiGetMonitorID
10B6 0008:A00604DF params=02 NtGdiGetNearestColor
10B7 0008:A007B200 params=02 NtGdiGetNearestPaletteIndex
10B8 0008:A00AA766 params=02 NtGdiGetObjectBitmapHandle
10B9 0008:A00ADBC3 params=04 NtGdiGetOutlineTextMetricsInternalW
10BA 0008:A0121FAD params=04 NtGdiGetPath
10BB 0008:A009280A params=03 NtGdiGetPixel
10BC 0008:A002F8EC params=03 NtGdiGetRandomRgn
10BD 0008:A00D804C params=02 NtGdiGetRasterizerCaps
10BE 0008:A0124611 params=02 NtGdiGetRealizationInfo
10BF 0008:A00A9677 params=03 NtGdiGetRegionData
10C0 0008:A00671AB params=02 NtGdiGetRgnBox
10C1 0008:A00DD5E8 params=07 NtGdiGetServerMetaFileBits
10C2 0008:A00A288B params=04 NtGdiGetSpoolMessage
10C3 0008:A0135567 params=05 NtGdiGetStats
10C4 0008:A001B00D params=01 NtGdiGetStockObject
10C5 0008:A009A6DF params=05 NtGdiGetStringBitmapW
10C6 0008:A0068AF2 params=01 NtGdiGetSystemPaletteUse
10C7 0008:A0065B26 params=03 NtGdiGetTextCharsetInfo
10C8 0008:A0039EE7 params=05 NtGdiGetTextExtent
10C9 0008:A0098EEC params=08 NtGdiGetTextExtentExW
10CA 0008:A003E679 params=04 NtGdiGetTextFaceW
10CB 0008:A005FEA3 params=03 NtGdiGetTextMetricsW
10CC 0008:A0071CAF params=03 NtGdiGetTransform
10CD 0008:A0123C84 params=06 NtGdiGetUFI
10CE 0008:A0123D62 params=0A NtGdiGetUFIPathname
10CF 0008:A0124573 params=02 NtGdiGetFontUnicodeRanges
10D0 0008:A00395AA params=07 NtGdiGetWidthTable
10D1 0008:A01188FC params=06 NtGdiGradientFill
10D2 0008:A0030683 params=05 NtGdiHfontCreate
10D3 0008:A0125D37 params=08 NtGdiIcmBrushInfo
10D4 0008:A008A30F params=00 NtGdiInit
10D5 0008:A000434B params=00 NtGdiInitSpool
10D6 0008:A0026CF5 params=05 NtGdiIntersectClipRect
10D7 0008:A0067FD9 params=02 NtGdiInvertRgn
10D8 0008:A0058971 params=03 NtGdiLineTo
10D9 0008:A0124300 params=05 NtGdiMakeFontDir
10DA 0008:A00AA48B params=02 NtGdiMakeInfoDC
10DB 0008:A0096540 params=0D NtGdiMaskBlt
10DC 0008:A0071ECE params=03 NtGdiModifyWorldTransform
10DD 0008:A01273D5 params=01 NtGdiMonoBitmap
10DE 0008:A012350C params=04 NtGdiMoveTo
10DF 0008:A00A24F6 params=03 NtGdiOffsetClipRgn
10E0 0008:A0069B43 params=03 NtGdiOffsetRgn
10E1 0008:A00489A8 params=07 NtGdiOpenDCW
10E2 0008:A003C6E3 params=06 NtGdiPatBlt
10E3 0008:A0029E4D params=05 NtGdiPolyPatBlt
10E4 0008:A0121D2E params=01 NtGdiPathToRegion
10E5 0008:A0119FEC params=0B NtGdiPlgBlt
10E6 0008:A0122A70 params=04 NtGdiPolyDraw
10E7 0008:A003C41C params=05 NtGdiPolyPolyDraw
10E8 0008:A0122B8F params=04 NtGdiPolyTextOutW
10E9 0008:A01236FC params=03 NtGdiPtInRegion
10EA 0008:A010D729 params=03 NtGdiPtVisible
10EB 0008:A00AA4DE params=03 NtGdiQueryFonts
10EC 0008:A008A2F3 params=01 NtGdiQueryFontAssocInfo
10ED 0008:A0080B37 params=05 NtGdiRectangle
10EE 0008:A0123614 params=02 NtGdiRectInRegion
10EF 0008:A0047177 params=02 NtGdiRectVisible
10F0 0008:A0123969 params=06 NtGdiRemoveFontResourceW
10F1 0008:A0123AF6 params=01 NtGdiRemoveFontMemResourceEx
10F2 0008:A0079504 params=05 NtGdiResetDC
10F3 0008:A0127685 params=02 NtGdiResizePalette
10F4 0008:A0028D4A params=02 NtGdiRestoreDC
10F5 0008:A00DA867 params=07 NtGdiRoundRect
10F6 0008:A0028E18 params=01 NtGdiSaveDC
10F7 0008:A011975F params=06 NtGdiScaleViewportExtEx
10F8 0008:A0124024 params=06 NtGdiScaleWindowExtEx
10F9 0008:A0019874 params=02 NtGdiSelectBitmap
10FA 0008:A01234EC params=02 NtGdiSelectBrush
10FB 0008:A00BF8E1 params=02 NtGdiSelectClipPath
10FC 0008:A0065590 params=02 NtGdiSelectFont
10FD 0008:A01234FC params=02 NtGdiSelectPen
10FE 0008:A00688C1 params=03 NtGdiSetBitmapBits
10FF 0008:A01240EE params=04 NtGdiSetBitmapDimension
1100 0008:A00AAC19 params=03 NtGdiSetBoundsRect
1101 0008:A007AFAD params=04 NtGdiSetBrushOrg
1102 0008:A01233BA params=02 NtGdiSetColorAdjustment
1103 0008:A009D367 params=02 NtGdiSetColorSpace
1104 0008:A0125A93 params=02 NtGdiSetDeviceGammaRamp
1105 0008:A00292AB params=10 NtGdiSetDIBitsToDeviceInternal
1106 0008:A000B4E9 params=01 NtGdiSetFontEnumeration
1107 0008:A006FA48 params=03 NtGdiSetFontXform
1108 0008:A006FD22 params=03 NtGdiSetIcmMode
1109 0008:A00C09B6 params=03 NtGdiSetLinkedUFIs
110A 0008:A0127B8B params=03 NtGdiSetMagicColors
110B 0008:A0071FE7 params=01 NtGdiSetMetaRgn
110C 0008:A0071F7B params=03 NtGdiSetMiterLimit
110D 0008:A0124018 params=01 NtGdiGetDeviceWidth
110E 0008:A012400C params=01 NtGdiMirrorWindowOrg
110F 0008:A00302CA params=03 NtGdiSetLayout
1110 0008:A00925EB params=04 NtGdiSetPixel
1111 0008:A01365E1 params=02 NtGdiSetPixelFormat
1112 0008:A01235F9 params=05 NtGdiSetRectRgn
1113 0008:A01235A0 params=02 NtGdiSetSystemPaletteUse
1114 0008:A01358FB params=03 NtGdiSetTextJustification
1115 0008:A00919DE params=03 NtGdiSetupPublicCFONT
1116 0008:A006FBB5 params=05 NtGdiSetVirtualResolution
1117 0008:A006F8BE params=03 NtGdiSetSizeDevice
1118 0008:A0071AA4 params=04 NtGdiStartDoc
1119 0008:A0070474 params=01 NtGdiStartPage
111A 0008:A003022B params=0C NtGdiStretchBlt
111B 0008:A0059D6F params=10 NtGdiStretchDIBitsInternal
111C 0008:A00BF555 params=01 NtGdiStrokeAndFillPath
111D 0008:A0121E76 params=01 NtGdiStrokePath
111E 0008:A01367B4 params=01 NtGdiSwapBuffers
111F 0008:A0081472 params=05 NtGdiTransformPoints
1120 0008:A009E2EE params=0B NtGdiTransparentBlt
1121 0008:A0124203 params=02 NtGdiUnloadPrinterDriver
1122 0008:A012383D params=01 NtGdiUnmapMemFont
1123 0008:A01235ED params=01 NtGdiUnrealizeObject
1124 0008:A0127841 params=01 NtGdiUpdateColors
1125 0008:A0121B91 params=01 NtGdiWidenPath
1126 0008:A008C8AA params=02 NtUserActivateKeyboardLayout
1127 0008:A0066215 params=03 NtUserAlterWindowStyle
1128 0008:A0063401 params=03 NtUserAssociateInputContext
1129 0008:A00A57F3 params=03 NtUserAttachThreadInput
112A 0008:A0025EF3 params=02 NtUserBeginPaint
112B 0008:A0069B03 params=08 NtUserBitBltSysBmp
112C 0008:A00E534F params=01 NtUserBlockInput
112D 0008:A000919C params=04 NtUserBuildHimcList
112E 0008:A0041D01 params=07 NtUserBuildHwndList
112F 0008:A009AFBC params=04 NtUserBuildNameList
1130 0008:A00E5071 params=04 NtUserBuildPropList
1131 0008:A00A4247 params=02 NtUserCallHwnd
1132 0008:A002F888 params=02 NtUserCallHwndLock
1133 0008:A000B627 params=02 NtUserCallHwndOpt
1134 0008:A0065897 params=03 NtUserCallHwndParam
1135 0008:A0065529 params=03 NtUserCallHwndParamLock
1136 0008:A0066136 params=02 NtUserCallMsgFilter
1137 0008:A003F4EC params=04 NtUserCallNextHookEx
1138 0008:A00167F8 params=01 NtUserCallNoParam
1139 0008:A0016832 params=02 NtUserCallOneParam
113A 0008:A0065714 params=03 NtUserCallTwoParam
113B 0008:A009C2F0 params=02 NtUserChangeClipboardChain
113C 0008:A00E557B params=05 NtUserChangeDisplaySettings
113D 0008:A008C30C params=02 NtUserCheckImeHotKey
113E 0008:A009C92E params=03 NtUserCheckMenuItem
113F 0008:A009C54F params=04 NtUserChildWindowFromPointEx
1140 0008:A00E3E98 params=01 NtUserClipCursor
1141 0008:A0067DF2 params=00 NtUserCloseClipboard
1142 0008:A00A3F81 params=01 NtUserCloseDesktop
1143 0008:A00A3F43 params=01 NtUserCloseWindowStation
1144 0008:A008C0EC params=03 NtUserConsoleControl
1145 0008:A00B574C params=02 NtUserConvertMemHandle
1146 0008:A00A37D3 params=03 NtUserCopyAcceleratorTable
1147 0008:A006A0A6 params=00 NtUserCountClipboardFormats
1148 0008:A00A5D9A params=02 NtUserCreateAcceleratorTable
1149 0008:A00669ED params=04 NtUserCreateCaret
114A 0008:A000539B params=05 NtUserCreateDesktop
114B 0008:A00A6826 params=01 NtUserCreateInputContext
114C 0008:A007ADF7 params=04 NtUserCreateLocalMemHandle
114D 0008:A0034EDD params=0D NtUserCreateWindowEx
114E 0008:A0004908 params=06 NtUserCreateWindowStation
114F 0008:A00BACA9 params=03 NtUserDdeGetQualityOfService
1150 0008:A009A165 params=05 NtUserDdeInitialize
1151 0008:A00E3FEB params=03 NtUserDdeSetQualityOfService
1152 0008:A003E3BB params=08 NtUserDeferWindowPos
1153 0008:A006A4F7 params=02 NtUserDefSetText
1154 0008:A00A69B7 params=03 NtUserDeleteMenu
1155 0008:A00B8194 params=01 NtUserDestroyAcceleratorTable
1156 0008:A004611F params=02 NtUserDestroyCursor
1157 0008:A0067315 params=01 NtUserDestroyInputContext
1158 0008:A0066387 params=01 NtUserDestroyMenu
1159 0008:A0047504 params=01 NtUserDestroyWindow
115A 0008:A000050C params=01 NtUserDisableThreadIme
115B 0008:A00208F6 params=01 NtUserDispatchMessage
115C 0008:A00E51B6 params=03 NtUserDragDetect
115D 0008:A00E2C7B params=05 NtUserDragObject
115E 0008:A00E4238 params=04 NtUserDrawAnimatedRects
115F 0008:A00E4311 params=04 NtUserDrawCaption
1160 0008:A0045976 params=07 NtUserDrawCaptionTemp
1161 0008:A0029F20 params=0B NtUserDrawIconEx
1162 0008:A00E55D1 params=05 NtUserDrawMenuBarTemp
1163 0008:A00B5539 params=00 NtUserEmptyClipboard
1164 0008:A006C00A params=03 NtUserEnableMenuItem
1165 0008:A0091EA6 params=03 NtUserEnableScrollBar
1166 0008:A0022F59 params=02 NtUserEndDeferWindowPosEx
1167 0008:A00E43DE params=00 NtUserEndMenu
1168 0008:A0025D32 params=02 NtUserEndPaint
1169 0008:A008E47B params=04 NtUserEnumDisplayDevices
116A 0008:A00B8840 params=04 NtUserEnumDisplayMonitors
116B 0008:A008DAA3 params=04 NtUserEnumDisplaySettings
116C 0008:A00E338B params=01 NtUserEvent
116D 0008:A003CBA1 params=02 NtUserExcludeUpdateRgn
116E 0008:A006A3B9 params=04 NtUserFillWindow
116F 0008:A002DE77 params=03 NtUserFindExistingCursorIcon
1170 0008:A0046B6F params=05 NtUserFindWindowEx
1171 0008:A00E7118 params=01 NtUserFlashWindowEx
1172 0008:A00E3BC9 params=06 NtUserGetAltTabInfo
1173 0008:A00E3B4C params=02 NtUserGetAncestor
1174 0008:A00E6DB0 params=01 NtUserGetAppImeLevel
1175 0008:A005F783 params=01 NtUserGetAsyncKeyState
1176 0008:A0066265 params=00 NtUserGetCaretBlinkTime
1177 0008:A00B4FB7 params=01 NtUserGetCaretPos
1178 0008:A005BBAA params=05 NtUserGetClassInfo
1179 0008:A0060078 params=03 NtUserGetClassName
117A 0008:A00B566F params=02 NtUserGetClipboardData
117B 0008:A006665F params=03 NtUserGetClipboardFormatName
117C 0008:A00662EE params=00 NtUserGetClipboardOwner
117D 0008:A0030297 params=00 NtUserGetClipboardSequenceNumber
117E 0008:A00E4424 params=00 NtUserGetClipboardViewer
117F 0008:A00E3F26 params=01 NtUserGetClipCursor
1180 0008:A00E38EA params=02 NtUserGetComboBoxInfo
1181 0008:A0027F77 params=03 NtUserGetControlBrush
1182 0008:A00AC31A params=04 NtUserGetControlColor
1183 0008:A006715F params=03 NtUserGetCPD
1184 0008:A006A16C params=04 NtUserGetCursorFrameInfo
1185 0008:A00E39C4 params=01 NtUserGetCursorInfo
1186 0008:A00215C6 params=01 NtUserGetDC
1187 0008:A0093048 params=03 NtUserGetDCEx
1188 0008:A004882E params=00 NtUserGetDoubleClickTime
1189 0008:A006031A params=00 NtUserGetForegroundWindow
118A 0008:A009C89D params=02 NtUserGetGuiResources
118B 0008:A00E375A params=02 NtUserGetGUIThreadInfo
118C 0008:A00468DD params=06 NtUserGetIconInfo
118D 0008:A0046845 params=04 NtUserGetIconSize
118E 0008:A00B79C8 params=04 NtUserGetImeHotKey
118F 0008:A0062105 params=02 NtUserGetImeInfoEx
1190 0008:A00E3430 params=03 NtUserGetInternalWindowPos
1191 0008:A00929E6 params=02 NtUserGetKeyboardLayoutList
1192 0008:A009A639 params=01 NtUserGetKeyboardLayoutName
1193 0008:A002F4F1 params=01 NtUserGetKeyboardState
1194 0008:A007AB94 params=03 NtUserGetKeyNameText
1195 0008:A001C028 params=01 NtUserGetKeyState
1196 0008:A00E399A params=01 NtUserGetListBoxInfo
1197 0008:A00E3CF2 params=04 NtUserGetMenuBarInfo
1198 0008:A00E40F5 params=02 NtUserGetMenuIndex
1199 0008:A00BDA40 params=04 NtUserGetMenuItemRect
119A 0008:A0017995 params=04 NtUserGetMessage
119B 0008:A00E49CC params=05 NtUserGetMouseMovePointsEx
119C 0008:A008AA06 params=05 NtUserGetObjectInformation
119D 0008:A006A0C5 params=00 NtUserGetOpenClipboardWindow
119E 0008:A00E4449 params=02 NtUserGetPriorityClipboardFormat
119F 0008:A008A29B params=00 NtUserGetProcessWindowStation
11A0 0008:A00E3A99 params=03 NtUserGetScrollBarInfo
11A1 0008:A0063F3C params=02 NtUserGetSystemMenu
11A2 0008:A008A21F params=02 NtUserGetThreadDesktop
11A3 0008:A0017E72 params=01 NtUserGetThreadState
11A4 0008:A00E381B params=02 NtUserGetTitleBarInfo
11A5 0008:A00618CD params=03 NtUserGetUpdateRect
11A6 0008:A0067B88 params=03 NtUserGetUpdateRgn
11A7 0008:A00662BC params=01 NtUserGetWindowDC
11A8 0008:A0093347 params=02 NtUserGetWindowPlacement
11A9 0008:A00D9975 params=02 NtUserGetWOWClass
11AA 0008:A00E276B params=03 NtUserHardErrorControl
11AB 0008:A00656B0 params=01 NtUserHideCaret
11AC 0008:A00A917D params=04 NtUserHiliteMenuItem
11AD 0008:A00E536B params=02 NtUserImpersonateDdeClientWindow
11AE 0008:A0014817 params=03 NtUserInitialize
11AF 0008:A00108A3 params=04 NtUserInitializeClientPfnArrays
11B0 0008:A00E351E params=0B NtUserInitTask
11B1 0008:A009C7F9 params=03 NtUserInternalGetWindowText
11B2 0008:A002F43D params=03 NtUserInvalidateRect
11B3 0008:A0068349 params=03 NtUserInvalidateRgn
11B4 0008:A005FA40 params=01 NtUserIsClipboardFormatAvailable
11B5 0008:A001AC2C params=02 NtUserKillTimer
11B6 0008:A00BA0DB params=06 NtUserLoadKeyboardLayoutEx
11B7 0008:A0009607 params=01 NtUserLockWindowStation
11B8 0008:A00D98F4 params=01 NtUserLockWindowUpdate
11B9 0008:A00E2A3A params=00 NtUserLockWorkStation
11BA 0008:A0067350 params=04 NtUserMapVirtualKeyEx
11BB 0008:A00E4D0A params=04 NtUserMenuItemFromPoint
11BC 0008:A001B89A params=07 NtUserMessageCall
11BD 0008:A00AC3D0 params=03 NtUserMinMaximize
11BE 0008:A00E45BC params=00 NtUserMNDragLeave
11BF 0008:A00E4502 params=02 NtUserMNDragOver
11C0 0008:A00A42BE params=02 NtUserModifyUserStartupInfoFlags
11C1 0008:A00A5633 params=06 NtUserMoveWindow
11C2 0008:A00610F4 params=03 NtUserNotifyIMEStatus
11C3 0008:A008A633 params=04 NtUserNotifyProcessCreate
11C4 0008:A00E3703 params=04 NtUserNotifyWinEvent
11C5 0008:A0067EAD params=02 NtUserOpenClipboard
11C6 0008:A00A421B params=03 NtUserOpenDesktop
11C7 0008:A000B699 params=03 NtUserOpenInputDesktop
11C8 0008:A009ADBC params=02 NtUserOpenWindowStation
11C9 0008:A008948B params=01 NtUserPaintDesktop
11CA 0008:A0017DBC params=05 NtUserPeekMessage
11CB 0008:A0018C7B params=04 NtUserPostMessage
11CC 0008:A0048BCE params=04 NtUserPostThreadMessage
11CD 0008:A008A7A4 params=03 NtUserProcessConnect
11CE 0008:A009E217 params=05 NtUserQueryInformationThread
11CF 0008:A00603BD params=02 NtUserQueryInputContext
11D0 0008:A00E523A params=01 NtUserQuerySendMessage
11D1 0008:A00E6EFF params=05 NtUserQueryUserCounters
11D2 0008:A002F5BE params=02 NtUserQueryWindow
11D3 0008:A00E3B93 params=03 NtUserRealChildWindowFromPoint
11D4 0008:A002F2B4 params=04 NtUserRedrawWindow
11D5 0008:A005B98B params=06 NtUserRegisterClassExWOW
11D6 0008:A0000C81 params=04 NtUserRegisterHotKey
11D7 0008:A00E365E params=01 NtUserRegisterTasklist
11D8 0008:A0020596 params=01 NtUserRegisterWindowMessage
11D9 0008:A0069191 params=03 NtUserRemoveMenu
11DA 0008:A0063B65 params=02 NtUserRemoveProp
11DB 0008:A009A4D9 params=04 NtUserResolveDesktop
11DC 0008:A00E2A8C params=01 NtUserResolveDesktopForWOW
11DD 0008:A00B76FB params=04 NtUserSBGetParms
11DE 0008:A0040899 params=07 NtUserScrollDC
11DF 0008:A00ABB92 params=08 NtUserScrollWindowEx
11E0 0008:A002895B params=03 NtUserSelectPalette
11E1 0008:A0088DAD params=03 NtUserSendInput
11E2 0008:A005CC07 params=06 NtUserSendMessageCallback
11E3 0008:A004732D params=04 NtUserSendNotifyMessage
11E4 0008:A006A44E params=01 NtUserSetActiveWindow
11E5 0008:A00E6D4A params=02 NtUserSetAppImeLevel
11E6 0008:A0065F2F params=01 NtUserSetCapture
11E7 0008:A00B7034 params=04 NtUserSetClassLong
11E8 0008:A00E4601 params=03 NtUserSetClassWord
11E9 0008:A00B598A params=03 NtUserSetClipboardData
11EA 0008:A009A07E params=01 NtUserSetClipboardViewer
11EB 0008:A008C828 params=02 NtUserSetConsoleReserveKeys
11EC 0008:A001C1AE params=01 NtUserSetCursor
11ED 0008:A00E4BCF params=02 NtUserSetCursorContents
11EE 0008:A00464EF params=04 NtUserSetCursorIconData
11EF 0008:A00E4166 params=02 NtUserSetDbgTag
11F0 0008:A0060FE9 params=01 NtUserSetFocus
11F1 0008:A00B9CF3 params=05 NtUserSetImeHotKey
11F2 0008:A000BF04 params=01 NtUserSetImeInfoEx
11F3 0008:A006259A params=02 NtUserSetImeOwnerWindow
11F4 0008:A008BF60 params=04 NtUserSetInformationProcess
11F5 0008:A008C7D4 params=04 NtUserSetInformationThread
11F6 0008:A00E3DC7 params=04 NtUserSetInternalWindowPos
11F7 0008:A006114D params=01 NtUserSetKeyboardState
11F8 0008:A000BFE1 params=01 NtUserSetLogonNotifyWindow
11F9 0008:A00AC0BD params=03 NtUserSetMenu
11FA 0008:A00E41DA params=02 NtUserSetMenuContextHelpId
11FB 0008:A00B8158 params=03 NtUserSetMenuDefaultItem
11FC 0008:A00E420E params=01 NtUserSetMenuFlagRtoL
11FD 0008:A00E27AD params=04 NtUserSetObjectInformation
11FE 0008:A00A5835 params=02 NtUserSetParent
11FF 0008:A00A41FD params=01 NtUserSetProcessWindowStation
1200 0008:A0063ADE params=03 NtUserSetProp
1201 0008:A00E414C params=02 NtUserSetRipFlags
1202 0008:A0018FE4 params=04 NtUserSetScrollInfo
1203 0008:A000AE4D params=02 NtUserSetShellWindowEx
1204 0008:A00E4634 params=04 NtUserSetSysColors
1205 0008:A00E4B7F params=02 NtUserSetSystemCursor
1206 0008:A00B75A0 params=02 NtUserSetSystemMenu
1207 0008:A00E5209 params=04 NtUserSetSystemTimer
1208 0008:A00A419E params=01 NtUserSetThreadDesktop
1209 0008:A00092D6 params=02 NtUserSetThreadLayoutHandles
120A 0008:A006A350 params=02 NtUserSetThreadState
120B 0008:A001ADEF params=04 NtUserSetTimer
120C 0008:A00345E1 params=02 NtUserSetWindowFNID
120D 0008:A0033F35 params=04 NtUserSetWindowLong
120E 0008:A0094D95 params=02 NtUserSetWindowPlacement
120F 0008:A0032167 params=07 NtUserSetWindowPos
1210 0008:A00A3765 params=03 NtUserSetWindowRgn
1211 0008:A000099C params=03 NtUserSetWindowsHookAW
1212 0008:A0068F92 params=06 NtUserSetWindowsHookEx
1213 0008:A0008F96 params=04 NtUserSetWindowStationUser
1214 0008:A0058038 params=03 NtUserSetWindowWord
1215 0008:A00E3688 params=08 NtUserSetWinEventHook
1216 0008:A00656E2 params=01 NtUserShowCaret
1217 0008:A00664CC params=03 NtUserShowScrollBar
1218 0008:A0060D91 params=02 NtUserShowWindow
1219 0008:A009A3C6 params=02 NtUserShowWindowAsync
121A 0008:A00E4DCD params=00 NtUserSoundSentry
121B 0008:A000B742 params=01 NtUserSwitchDesktop
121C 0008:A0036934 params=04 NtUserSystemParametersInfo
121D 0008:A00D9B82 params=01 NtUserTestForInteractiveUser
121E 0008:A00B7654 params=02 NtUserThunkedMenuInfo
121F 0008:A00A5EEF params=06 NtUserThunkedMenuItemInfo
1220 0008:A00A9907 params=07 NtUserToUnicodeEx
1221 0008:A009C44A params=01 NtUserTrackMouseEvent
1222 0008:A00E486A params=06 NtUserTrackPopupMenuEx
1223 0008:A009367E params=03 NtUserTranslateAccelerator
1224 0008:A003F950 params=02 NtUserTranslateMessage
1225 0008:A0068CFA params=01 NtUserUnhookWindowsHookEx
1226 0008:A00E36D7 params=01 NtUserUnhookWinEvent
1227 0008:A00E5192 params=01 NtUserUnloadKeyboardLayout
1228 0008:A00007C1 params=01 NtUserUnlockWindowStation
1229 0008:A0092253 params=03 NtUserUnregisterClass
122A 0008:A00E496E params=02 NtUserUnregisterHotKey
122B 0008:A0061EA6 params=03 NtUserUpdateInputContext
122C 0008:A00E32EC params=03 NtUserUpdateInstance
122D 0008:A00AB067 params=09 NtUserUpdateLayeredWindow
122E 0008:A00E7255 params=04 NtUserSetLayeredWindowAttributes
122F 0008:A000784F params=02 NtUserUpdatePerUserSystemParameters
1230 0008:A00E4E0F params=03 NtUserUserHandleGrantAccess
1231 0008:A00E4DF3 params=01 NtUserValidateHandleSecure
1232 0008:A003C843 params=02 NtUserValidateRect
1233 0008:A003FE73 params=03 NtUserVkKeyScanEx
1234 0008:A009B09E params=03 NtUserWaitForInputIdle
1235 0008:A00D6257 params=01 NtUserWaitForMsgAndEvent
1236 0008:A0017E4D params=00 NtUserWaitMessage
1237 0008:A00E27A8 params=06 NtUserWin32PoolAllocationStats
1238 0008:A005F75B params=02 NtUserWindowFromPoint
1239 0008:A00D9B1D params=00 NtUserYieldTask
123A 0008:A00E260D params=03 NtUserRemoteConnect
123B 0008:A00E2653 params=04 NtUserRemoteRedrawRectangle
123C 0008:A00E269C params=00 NtUserRemoteRedrawScreen
123D 0008:A00E26EC params=00 NtUserRemoteStopScreenUpdates
123E 0008:A00E2725 params=03 NtUserCtxDisplayIOCtl
123F 0008:A00714B5 params=03 NtGdiEngAssociateSurface
1240 0008:A00716F6 params=06 NtGdiEngCreateBitmap
1241 0008:A00712EC params=04 NtGdiEngCreateDeviceSurface
1242 0008:A0138DE7 params=04 NtGdiEngCreateDeviceBitmap
1243 0008:A00B11E7 params=06 NtGdiEngCreatePalette
1244 0008:A0139399 params=03 NtGdiEngComputeGlyphSet
1245 0008:A0136B7D params=06 NtGdiEngCopyBits
1246 0008:A00AEAFF params=01 NtGdiEngDeletePalette
1247 0008:A0070627 params=01 NtGdiEngDeleteSurface
1248 0008:A0138605 params=03 NtGdiEngEraseSurface
1249 0008:A0070605 params=01 NtGdiEngUnlockSurface
124A 0008:A007144C params=01 NtGdiEngLockSurface
124B 0008:A0073D52 params=0B NtGdiEngBitBlt
124C 0008:A00A1048 params=0B NtGdiEngStretchBlt
124D 0008:A013731B params=0B NtGdiEngPlgBlt
124E 0008:A00C0B98 params=01 NtGdiEngMarkBandingSurface
124F 0008:A00A1D15 params=08 NtGdiEngStrokePath
1250 0008:A0137971 params=07 NtGdiEngFillPath
1251 0008:A00C0367 params=0A NtGdiEngStrokeAndFillPath
1252 0008:A0137C08 params=05 NtGdiEngPaint
1253 0008:A009F0AF params=09 NtGdiEngLineTo
1254 0008:A0137DFB params=07 NtGdiEngAlphaBlend
1255 0008:A0137FF2 params=0A NtGdiEngGradientFill
1256 0008:A013825B params=08 NtGdiEngTransparentBlt
1257 0008:A0072369 params=0A NtGdiEngTextOut
1258 0008:A0136F8D params=0D NtGdiEngStretchBltROP
1259 0008:A013926B params=04 NtGdiXLATEOBJcGetPalette
125A 0008:A0139306 params=02 NtGdiXLATEOBJiXlate
125B 0008:A0139234 params=01 NtGdiXLATEOBJhGetColorTransform
125C 0008:A01387A9 params=03 NtGdiCLIPOBJbEnum
125D 0008:A0138765 params=05 NtGdiCLIPOBJcEnumStart
125E 0008:A01386E1 params=01 NtGdiCLIPOBJppoGetPath
125F 0008:A0138707 params=01 NtGdiEngDeletePath
1260 0008:A0138729 params=00 NtGdiEngCreateClip
1261 0008:A0138743 params=01 NtGdiEngDeleteClip
1262 0008:A01388BE params=01 NtGdiBRUSHOBJulGetBrushColor
1263 0008:A0138839 params=02 NtGdiBRUSHOBJpvAllocRbrush
1264 0008:A013887D params=01 NtGdiBRUSHOBJpvGetRbrush
1265 0008:A01388FF params=01 NtGdiBRUSHOBJhGetColorTransform
1266 0008:A0079856 params=05 NtGdiXFORMOBJbApplyXform
1267 0008:A006FC3E params=02 NtGdiXFORMOBJiGetXform
1268 0008:A00797EB params=03 NtGdiFONTOBJvGetInfo
1269 0008:A006FE46 params=01 NtGdiFONTOBJpxoGetXform
126A 0008:A0070CA1 params=05 NtGdiFONTOBJcGetGlyphs
126B 0008:A0070095 params=01 NtGdiFONTOBJpifi
126C 0008:A0138B10 params=01 NtGdiFONTOBJpfdg
126D 0008:A0138C0B params=02 NtGdiFONTOBJpQueryGlyphAttrs
126E 0008:A0139158 params=02 NtGdiFONTOBJpvTrueTypeFontFile
126F 0008:A0138A13 params=02 NtGdiFONTOBJcGetAllGlyphHandles
1270 0008:A0138D53 params=03 NtGdiSTROBJbEnum
1271 0008:A006FF54 params=03 NtGdiSTROBJbEnumPositionsOnly
1272 0008:A0079737 params=04 NtGdiSTROBJbGetAdvanceWidths
1273 0008:A006FCEF params=01 NtGdiSTROBJvEnumStart
1274 0008:A0138D8C params=01 NtGdiSTROBJdwGetCodePage
1275 0008:A0138E20 params=02 NtGdiPATHOBJvGetBounds
1276 0008:A0138EAC params=02 NtGdiPATHOBJbEnum
1277 0008:A0138F99 params=01 NtGdiPATHOBJvEnumStart
1278 0008:A0138FC5 params=04 NtGdiPATHOBJvEnumStartClipLines
1279 0008:A013906C params=03 NtGdiPATHOBJbEnumClipLines
127A 0008:A0138DC3 params=01 NtGdiGetDhpdev
127B 0008:A0139345 params=01 NtGdiEngCheckAbort
127C 0008:A0139409 params=04 NtGdiHTGet8BPPFormatPalette
127D 0008:A0139498 params=06 NtGdiHTGet8BPPMaskPalette
127E 0008:A0119AB8 params=01 NtGdiUpdateTransform
- Windows 2000 System Services列表(http://webcrazy.yeah.net)
- Windows XP System Services(http://webcrazy.yeah.net)
- 小议Windows NT/2000分页机制(http://webcrazy.yeah.net)
- 浅析Windows NT/2000环境切换(http://webcrazy.yeah.net)
- 再谈Windows NT/2000环境切换(http://webcrazy.yeah.net)
- Windows NT/2000内部数据结构探究(http://webcrazy.yeah.net)
- 再谈Windows NT/2000内部数据结构(http://webcrazy.yeah.net)
- 探究Windows 2000/XP原型PTE(http://webcrazy.yeah.net)
- 深入Windows NT/2000模块的组织(http://webcrazy.yeah.net)
- 剖析Windows NT/2000内核对象组织(http://webcrazy.yeah.net)
- 分析Windows NT/2000堆内存与虚拟内存组织(http://webcrazy.yeah.net)
- 解析Windows NT/2000窗口对象的组织(http://webcrazy.yeah.net/)
- Windows 2000内核KPEB/KTEB详细结构(http://webcrazy.yeah.net/)
- Windows NT/2000/XP下不用驱动的Ring0代码实现(http://webcrazy.yeah.net)
- 浅谈Windows 2000/XP File Cache实现(http://webcrazy.yeah.net)
- 浅议Windows 2000/XP Pagefile组织管理(http://webcrazy.yeah.net)
- 探悉Windows 2000/XP Pool分配流程(http://webcrazy.yeah.net)
- 解读Windows 2000/XP分层驱动模型(http://webcrazy.yeah.net)
- 教育是中国发展的最短一块木板(转贴)
- 再谈Windows NT/2000内部数据结构(http://webcrazy.yeah.net)
- 用 Java 访问 Domino 的对象（三）
- 关于台海之战 zt
- 用 Java 访问 Domino 的对象（四）
- Windows 2000 System Services列表(http://webcrazy.yeah.net)
- C语言:结构体相关
- 有几天没来这里了，这里总是访问不了，反应迟钝。。。
- 深入Windows NT/2000模块的组织(http://webcrazy.yeah.net)
- 面试技巧：16个经典面试问题回答思路 a
- 如何知道有那些类调用了某一个特定类
- Osworkflow 中文教程
- 关于人口与计划生育的对话----自然资源用完了怎么办?
- 剖析Windows NT/2000内核对象组织(http://webcrazy.yeah.net)
