gistfile1.txt

bp GDI32!NtGdiAbortDoc ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiAbortPath ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiAddEmbFontToDC ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiAddFontMemResourceEx ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiAddFontResourceW ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiAddRemoteFontToDC ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiAddRemoteMMInstanceToDC ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiAlphaBlend ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiAngleArc ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiAnyLinkedFonts ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiArcInternal ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiBeginGdiRendering ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiBeginPath ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiBitBlt ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiBRUSHOBJ_DeleteRbrush ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiBRUSHOBJ_hGetColorTransform ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiBRUSHOBJ_pvAllocRbrush ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiBRUSHOBJ_pvGetRbrush ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiBRUSHOBJ_ulGetBrushColor ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCancelDC ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiChangeGhostFont ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCheckBitmapBits ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiClearBitmapAttributes ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiClearBrushAttributes ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCLIPOBJ_bEnum ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCLIPOBJ_cEnumStart ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCLIPOBJ_ppoGetPath ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCloseFigure ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiColorCorrectPalette ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCombineRgn ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCombineTransform ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiComputeXformCoefficients ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiConfigureOPMProtectedOutput ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiConvertMetafileRect ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateBitmap ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateBitmapFromDxSurface ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateBitmapFromDxSurface2 ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateClientObj ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateColorSpace ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateColorTransform ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateCompatibleBitmap ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateCompatibleDC ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateDIBBrush ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateDIBitmapInternal ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateDIBSection ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateEllipticRgn ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateHalftonePalette ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateHatchBrushInternal ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateMetafileDC ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateOPMProtectedOutput ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateOPMProtectedOutputs ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreatePaletteInternal ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreatePatternBrushInternal ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreatePen ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateRectRgn ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateRoundRectRgn ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateServerMetaFile ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateSessionMappedDIBSection ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiCreateSolidBrush ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiD3dContextCreate ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiD3dContextDestroy ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiD3dContextDestroyAll ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiD3dDrawPrimitives2 ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiD3dValidateTextureStageState ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdAddAttachedSurface ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdAlphaBlt ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdAttachSurface ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdBeginMoCompFrame ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdBlt ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdCanCreateD3DBuffer ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdCanCreateSurface ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDDCCIGetCapabilitiesString ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDDCCIGetCapabilitiesStringLength ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDDCCIGetTimingReport ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDDCCIGetVCPFeature ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDDCCISaveCurrentSettings ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDDCCISetVCPFeature ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdColorControl ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdCreateD3DBuffer ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdCreateDirectDrawObject ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdCreateFullscreenSprite ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdCreateMoComp ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdCreateSurface ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdCreateSurfaceEx ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdCreateSurfaceObject ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIAbandonSwapChain ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIAcquireKeyedMutex ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIAcquireKeyedMutex2 ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIAcquireSwapChain ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIAdjustFullscreenGamma ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICacheHybridQueryValue ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIChangeVideoMemoryReservation ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICheckExclusiveOwnership ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICheckMonitorPowerState ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICheckMultiPlaneOverlaySupport ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICheckMultiPlaneOverlaySupport2 ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICheckMultiPlaneOverlaySupport3 ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICheckOcclusion ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICheckSharedResourceAccess ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICheckVidPnExclusiveOwnership ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICloseAdapter ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIConfigureSharedResource ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICreateAllocation ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICreateContext ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICreateContextVirtual ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICreateDCFromMemory ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICreateDevice ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICreateKeyedMutex ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICreateKeyedMutex2 ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICreateOutputDupl ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICreateOverlay ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICreatePagingQueue ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICreateSwapChain ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDICreateSynchronizationObject ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIDestroyAllocation ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIDestroyAllocation2 ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIDestroyContext ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIDestroyDCFromMemory ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIDestroyDevice ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIDestroyKeyedMutex ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIDestroyOutputDupl ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIDestroyOverlay ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIDestroyPagingQueue ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIDestroySynchronizationObject ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIEnumAdapters ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIEnumAdapters2 ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIEscape ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIEvict ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIFlipOverlay ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIFlushHeapTransitions ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIFreeGpuVirtualAddress ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIGetCachedHybridQueryValue ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIGetContextInProcessSchedulingPriority ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIGetContextSchedulingPriority ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIGetDeviceState ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIGetDisplayModeList ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIGetDWMVerticalBlankEvent ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIGetMultisampleMethodList ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIGetOverlayState ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIGetPresentHistory ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIGetPresentQueueEvent ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIGetProcessSchedulingPriorityClass ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIGetResourcePresentPrivateDriverData ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIGetRuntimeData ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIGetScanLine ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIGetSetSwapChainMetadata ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIGetSharedPrimaryHandle ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIGetSharedResourceAdapterLuid ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIInvalidateActiveVidPn ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIInvalidateCache ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDILock ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDILock2 ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIMakeResident ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIMapGpuVirtualAddress ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIMarkDeviceAsError ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDINetDispGetNextChunkInfo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDINetDispQueryMiracastDisplayDeviceStatus ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDINetDispQueryMiracastDisplayDeviceSupport ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDINetDispStartMiracastDisplayDevice ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDINetDispStopMiracastDisplayDevice ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDINetDispStopSessions ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIOfferAllocations ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIOpenAdapterFromDeviceName ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIOpenAdapterFromHdc ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIOpenAdapterFromLuid ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIOpenKeyedMutex ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIOpenKeyedMutex2 ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIOpenNtHandleFromName ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIOpenResource ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIOpenResourceFromNtHandle ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIOpenSwapChain ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIOpenSynchronizationObject ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIOpenSyncObjectFromNtHandle ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIOpenSyncObjectFromNtHandle2 ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIOpenSyncObjectNtHandleFromName ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIOutputDuplGetFrameInfo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIOutputDuplGetMetaData ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIOutputDuplGetPointerShapeData ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIOutputDuplPresent ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIOutputDuplReleaseFrame ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIPinDirectFlipResources ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIPollDisplayChildren ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIPresent ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIPresentMultiPlaneOverlay ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIPresentMultiPlaneOverlay2 ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIPresentMultiPlaneOverlay3 ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIQueryAdapterInfo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIQueryAllocationResidency ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIQueryClockCalibration ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIQueryFSEBlock ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIQueryProcessOfferInfo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIQueryRemoteVidPnSourceFromGdiDisplayName ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIQueryResourceInfo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIQueryResourceInfoFromNtHandle ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIQueryStatistics ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIQueryVideoMemoryInfo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIQueryVidPnExclusiveOwnership ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIReclaimAllocations ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIReclaimAllocations2 ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIReleaseKeyedMutex ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIReleaseKeyedMutex2 ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIReleaseProcessVidPnSourceOwners ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIReleaseSwapChain ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIRender ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIReserveGpuVirtualAddress ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISetAllocationPriority ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISetContextInProcessSchedulingPriority ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISetContextSchedulingPriority ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISetDisplayMode ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISetDisplayPrivateDriverFormat ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISetDodIndirectSwapchain ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISetFSEBlock ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISetGammaRamp ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISetHwProtectionTeardownRecovery ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISetProcessSchedulingPriorityClass ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISetQueuedLimit ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISetStablePowerState ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISetStereoEnabled ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISetSyncRefreshCountWaitTarget ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISetVidPnSourceHwProtection ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISetVidPnSourceOwner ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISetVidPnSourceOwner1 ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISharedPrimaryLockNotification ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISharedPrimaryUnLockNotification ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIShareObjects ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISignalSynchronizationObject ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISignalSynchronizationObjectFromCpu ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISignalSynchronizationObjectFromGpu ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISignalSynchronizationObjectFromGpu2 ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDISubmitCommand ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDITrimProcessCommitment ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIUnlock ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIUnlock2 ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIUnpinDirectFlipResources ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIUpdateAllocationProperty ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIUpdateGpuVirtualAddress ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIUpdateOverlay ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIWaitForIdle ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIWaitForSynchronizationObject ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIWaitForSynchronizationObjectFromCpu ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIWaitForSynchronizationObjectFromGpu ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIWaitForVerticalBlankEvent ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDDIWaitForVerticalBlankEvent2 ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDeleteDirectDrawObject ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDeleteSurfaceObject ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDestroyD3DBuffer ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDestroyFullscreenSprite ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDestroyMoComp ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdDestroySurface ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdEndMoCompFrame ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdFlip ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdFlipToGDISurface ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdGetAvailDriverMemory ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdGetBltStatus ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdGetDC ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdGetDriverInfo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdGetDriverState ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdGetDxHandle ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdGetFlipStatus ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdGetInternalMoCompInfo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdGetMoCompBuffInfo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdGetMoCompFormats ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdGetMoCompGuids ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdGetScanLine ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdLock ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdLockD3D ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdNotifyFullscreenSpriteUpdate ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdQueryDirectDrawObject ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdQueryMoCompStatus ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdQueryVisRgnUniqueness ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdReenableDirectDrawObject ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdReleaseDC ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdRenderMoComp ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdResetVisrgn ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdSetColorKey ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdSetExclusiveMode ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdSetGammaRamp ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdSetOverlayPosition ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdUnattachSurface ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdUnlock ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdUnlockD3D ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdUpdateOverlay ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDdWaitForVerticalBlank ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDeleteClientObj ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDeleteColorSpace ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDeleteColorTransform ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDeleteObjectApp ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDescribePixelFormat ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDestroyOPMProtectedOutput ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDestroyPhysicalMonitor ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDoBanding ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDoPalette ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDrawEscape ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDrawStream ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDvpAcquireNotification ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDvpCanCreateVideoPort ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDvpColorControl ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDvpCreateVideoPort ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDvpDestroyVideoPort ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDvpFlipVideoPort ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDvpGetVideoPortBandwidth ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDvpGetVideoPortConnectInfo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDvpGetVideoPortField ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDvpGetVideoPortFlipStatus ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDvpGetVideoPortInputFormats ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDvpGetVideoPortLine ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDvpGetVideoPortOutputFormats ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDvpGetVideoSignalStatus ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDvpReleaseNotification ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDvpUpdateVideoPort ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDvpWaitForVideoPortSync ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDwmCreatedBitmapRemotingOutput ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiDxgGenericThunk ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEllipse ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEnableEudc ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEndDoc ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEndGdiRendering ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEndPage ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEndPath ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngAlphaBlend ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngAssociateSurface ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngBitBlt ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngCheckAbort ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngComputeGlyphSet ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngCopyBits ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngCreateBitmap ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngCreateClip ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngCreateDeviceBitmap ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngCreateDeviceSurface ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngCreatePalette ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngDeleteClip ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngDeletePalette ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngDeletePath ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngDeleteSurface ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngEraseSurface ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngFillPath ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngGradientFill ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngLineTo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngLockSurface ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngMarkBandingSurface ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngPaint ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngPlgBlt ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngStretchBlt ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngStretchBltROP ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngStrokeAndFillPath ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngStrokePath ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngTextOut ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngTransparentBlt ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEngUnlockSurface ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEnumFonts ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEnumObjects ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEqualRgn ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiEudcLoadUnloadLink ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiExcludeClipRect ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiExtCreatePen ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiExtCreateRegion ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiExtEscape ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiExtFloodFill ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiExtGetObjectW ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiExtSelectClipRgn ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiExtTextOutW ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiFillPath ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiFillRgn ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiFlattenPath ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiFlush ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiFontIsLinked ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiFONTOBJ_cGetAllGlyphHandles ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiFONTOBJ_cGetGlyphs ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiFONTOBJ_pfdg ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiFONTOBJ_pifi ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiFONTOBJ_pQueryGlyphAttrs ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiFONTOBJ_pvTrueTypeFontFile ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiFONTOBJ_pxoGetXform ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiFONTOBJ_vGetInfo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiForceUFIMapping ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiFrameRgn ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiFullscreenControl ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetAndSetDCDword ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetAppClipBox ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetBitmapBits ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetBitmapDimension ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetBoundsRect ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetCertificate ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetCertificateByHandle ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetCertificateSize ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetCertificateSizeByHandle ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetCharABCWidthsW ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetCharacterPlacementW ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetCharSet ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetCharWidthInfo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetCharWidthW ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetColorAdjustment ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetColorSpaceforBitmap ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetCOPPCompatibleOPMInformation ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetCurrentDpiInfo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetDCDword ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetDCforBitmap ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetDCObject ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetDCPoint ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetDeviceCaps ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetDeviceCapsAll ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetDeviceGammaRamp ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetDeviceWidth ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetDhpdev ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetDIBitsInternal ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetEmbedFonts ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetEmbUFI ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetEntry ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetETM ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetEudcTimeStampEx ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetFontData ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetFontFileData ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetFontFileInfo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetFontResourceInfoInternalW ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetFontUnicodeRanges ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetGlyphIndicesW ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetGlyphIndicesWInternal ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetGlyphOutline ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetKerningPairs ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetLinkedUFIs ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetMiterLimit ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetMonitorID ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetNearestColor ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetNearestPaletteIndex ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetNumberOfPhysicalMonitors ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetObjectBitmapHandle ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetOPMInformation ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetOPMRandomNumber ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetOutlineTextMetricsInternalW ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetPath ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetPerBandInfo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetPhysicalMonitorDescription ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetPhysicalMonitors ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetPixel ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetRandomRgn ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetRasterizerCaps ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetRealizationInfo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetRegionData ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetRgnBox ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetServerMetaFileBits ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetSpoolMessage ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetStats ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetStringBitmapW ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetSuggestedOPMProtectedOutputArraySize ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetSystemPaletteUse ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetTextCharsetInfo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetTextExtent ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetTextExtentExW ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetTextFaceW ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetTextMetricsW ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetTransform ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetUFI ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetUFIPathname ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGetWidthTable ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiGradientFill ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiHfontCreate ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiHLSurfGetInformation ".echo 'Found a win32k syscall';k;g"






bp GDI32!NtGdiHLSurfSetInformation ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiHT_Get8BPPFormatPalette ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiHT_Get8BPPMaskPalette ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiIcmBrushInfo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiInit ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiInitSpool ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiIntersectClipRect ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiInvertRgn ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiLineTo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiMakeFontDir ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiMakeInfoDC ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiMakeObjectUnXferable ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiMakeObjectXferable ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiMaskBlt ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiMirrorWindowOrg ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiModifyWorldTransform ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiMonoBitmap ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiMoveTo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiOffsetClipRgn ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiOffsetRgn ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiOpenDCW ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiPatBlt ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiPATHOBJ_bEnum ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiPATHOBJ_bEnumClipLines ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiPATHOBJ_vEnumStart ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiPATHOBJ_vEnumStartClipLines ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiPATHOBJ_vGetBounds ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiPathToRegion ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiPlgBlt ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiPolyDraw ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiPolyPatBlt ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiPolyPolyDraw ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiPolyTextOutW ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiPtInRegion ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiPtVisible ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiQueryFontAssocInfo ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiQueryFonts ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiRectangle ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiRectInRegion ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiRectVisible ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiRemoveFontMemResourceEx ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiRemoveFontResourceW ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiRemoveMergeFont ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiResetDC ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiResizePalette ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiRestoreDC ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiRoundRect ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSaveDC ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiScaleViewportExtEx ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiScaleWindowExtEx ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSelectBitmap ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSelectBrush ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSelectClipPath ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSelectFont ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSelectPen ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetBitmapAttributes ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetBitmapBits ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetBitmapDimension ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetBoundsRect ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetBrushAttributes ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetBrushOrg ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetColorAdjustment ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetColorSpace ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetDeviceGammaRamp ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetDIBitsToDeviceInternal ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetFontEnumeration ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetFontXform ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetIcmMode ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetLayout ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetLinkedUFIs ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetMagicColors ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetMetaRgn ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetMiterLimit ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetOPMSigningKeyAndSequenceNumbers ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetPixel ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetPixelFormat ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetPUMPDOBJ ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetRectRgn ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetSizeDevice ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetSystemPaletteUse ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetTextJustification ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetUMPDSandboxState ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSetVirtualResolution ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiStartDoc ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiStartPage ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiStretchBlt ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiStretchDIBitsInternal ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSTROBJ_bEnum ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSTROBJ_bEnumPositionsOnly ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSTROBJ_bGetAdvanceWidths ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSTROBJ_dwGetCodePage ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSTROBJ_vEnumStart ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiStrokeAndFillPath ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiStrokePath ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiSwapBuffers ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiTransformPoints ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiTransparentBlt ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiUMPDEngFreeUserMem ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiUnloadPrinterDriver ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiUnmapMemFont ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiUnrealizeObject ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiUpdateColors ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiUpdateTransform ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiWidenPath ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiXFORMOBJ_bApplyXform ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiXFORMOBJ_iGetXform ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiXLATEOBJ_cGetPalette ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiXLATEOBJ_hGetColorTransform ".echo 'Found a win32k syscall';k;g"
bp GDI32!NtGdiXLATEOBJ_iXlate ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserAcquireIAMKey ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserAcquireInteractiveControlBackgroundAccess ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserAttachThreadInput ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserBeginPaint ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserBlockInput ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserBroadcastThemeChangeEvent ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserCalcMenuBar ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserCalculatePopupWindowPosition ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserCanBrokerForceForeground ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserChangeWindowMessageFilterEx ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserCheckProcessForClipboardAccess ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserCheckProcessSession ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserCheckWindowThreadDesktop ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserChildWindowFromPointEx ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserClearForeground ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserClipCursor ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserCloseDesktop ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserCloseWindowStation ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserCompositionInputSinkLuidFromPoint ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserCopyAcceleratorTable ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserCreateAcceleratorTable ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserCreateDCompositionHwndTarget ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserDelegateCapturePointers ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserDelegateInput ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserDeleteMenu ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserDestroyDCompositionHwndTarget ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserDestroyMenu ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserDestroyWindow ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserDisableImmersiveOwner ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserDiscardPointerFrameMessages ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserDoSoundConnect ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserDoSoundDisconnect ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserDragDetect ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserDragObject ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserDrawAnimatedRects ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserDwmGetRemoteSessionOcclusionEvent ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserDwmGetRemoteSessionOcclusionState ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserDwmKernelShutdown ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserDwmKernelStartup ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserDwmValidateWindow ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserEnableChildWindowDpiMessage ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserEnableIAMAccess ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserEnableMouseInPointer ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserEnableMouseInputForCursorSuppression ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserEnableNonClientDpiScaling ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserEnableTouchPad ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserEndDeferWindowPosEx ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserEndMenu ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserEndPaint ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserEnumDisplayMonitors ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserExcludeUpdateRgn ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserFlashWindowEx ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserFrostCrashedWindow ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetAncestor ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetAutoRotationState ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetCaretBlinkTime ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetCaretPos ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetCIMSSM ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetClipboardAccessToken ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetClipCursor ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetComboBoxInfo ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetCurrentInputMessageSource ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetCursorInfo ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetDC ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetDCEx ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetDesktopID ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetDisplayAutoRotationPreferences ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetDisplayAutoRotationPreferencesByProcessId ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetDoubleClickTime ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetForegroundWindow ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetGestureConfig ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetGuiResources ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetGUIThreadInfo ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetInputLocaleInfo ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetInteractiveControlDeviceInfo ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetInteractiveControlInfo ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetInternalWindowPos ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetKeyboardLayoutList ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetKeyboardState ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetLayeredWindowAttributes ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetListBoxInfo ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetMenuBarInfo ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetMenuItemRect ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetMouseMovePointsEx ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetObjectInformation ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetOwnerTransformedMonitorRect ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetPhysicalDeviceRect ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetPointerCursorId ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetPointerDevice ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetPointerDeviceCursors ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetPointerDeviceProperties ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetPointerDeviceRects ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetPointerDevices ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetPointerFrameArrivalTimes ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetPointerInputTransform ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetPointerType ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetPrecisionTouchPadConfiguration ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetProcessUIContextInformation ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetProcessWindowStation ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetQueueStatusReadonly ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetRawInputData ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetRawInputDeviceList ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetRawPointerDeviceData ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetRegisteredRawInputDevices ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetScrollBarInfo ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetSystemMenu ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetThreadDesktop ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetTitleBarInfo ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetTopLevelWindow ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetTouchValidationStatus ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetWindowBand ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetWindowCompositionAttribute ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetWindowCompositionInfo ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetWindowDC ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetWindowDisplayAffinity ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetWindowFeedbackSetting ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetWindowMinimizeRect ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetWindowPlacement ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGetWindowRgnEx ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserGhostWindowFromHungWindow ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserHandleDelegatedInput ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserHidePointerContactVisualization ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserHiliteMenuItem ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserHungWindowFromGhostWindow ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserImpersonateDdeClientWindow ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserInheritWindowMonitor ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserInitializeInputDeviceInjection ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserInitializePointerDeviceInjection ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserInitializeTouchInjection ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserInjectDeviceInput ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserInjectKeyboardInput ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserInjectMouseInput ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserInjectPointerInput ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserInjectTouchInput ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserInteractiveControlQueryUsage ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserInternalClipCursor ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserInvalidateRect ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserInvalidateRgn ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserIsChildWindowDpiMessageEnabled ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserIsMouseInPointerEnabled ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserIsMouseInputEnabled ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserIsNonClientDpiScalingEnabled ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserIsTopLevelWindow ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserIsTouchWindow ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserIsWindowBroadcastingDpiToChildren ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserKillTimer ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserLayoutCompleted ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserLockWindowStation ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserLockWindowUpdate ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserLockWorkStation ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserLogicalToPerMonitorDPIPhysicalPoint ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserLogicalToPhysicalPoint ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserMagControl ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserMagGetContextInformation ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserMagSetContextInformation ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserMenuItemFromPoint ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserMoveWindow ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserNavigateFocus ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserOpenInputDesktop ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserOpenThreadDesktop ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserPaintMenuBar ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserPaintMonitor ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserPerMonitorDPIPhysicalToLogicalPoint ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserPhysicalToLogicalPoint ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserPrintWindow ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserPromotePointer ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserQueryBSDRWindow ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserQuerySendMessage ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserRealChildWindowFromPoint ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserRedrawWindow ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserRegisterBSDRWindow ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserRegisterErrorReportingDialog ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserRegisterHotKey ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserRegisterManipulationThread ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserRegisterPointerDeviceNotifications ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserRegisterRawInputDevices ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserRegisterServicesProcess ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserRegisterSessionPort ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserRegisterShellPTPListener ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserRegisterTasklist ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserRegisterTouchHitTestingWindow ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserRegisterTouchPadCapable ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserReleaseDwmHitTestWaiters ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserRemoveInjectionDevice ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserRemoveMenu ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserReportInertia ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserResolveDesktopForWOW ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSendEventMessage ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSendInput ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSendInteractiveControlHapticsReport ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetActivationFilter ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetActiveProcessForMonitor ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetActiveWindow ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetAutoRotation ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetBrokeredForeground ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetCalibrationData ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetCapture ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetChildWindowNoActivate ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetClassWord ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetCoreWindow ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetCoreWindowPartner ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetCursorContents ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetDisplayAutoRotationPreferences ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetDisplayMapping ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetFallbackForeground ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetFeatureReportResponse ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetFocus ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetGestureConfig ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetInteractiveControlFocus ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetInteractiveCtrlRotationAngle ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetInternalWindowPos ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetKeyboardState ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetLayeredWindowAttributes ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetMenuContextHelpId ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetMenuDefaultItem ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetMirrorRendering ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetPrecisionTouchPadConfiguration ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetProcessInteractionFlags ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetProcessRestrictionExemption ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetProcessWindowStation ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetShellWindowEx ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetSystemMenu ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetThreadInputBlocked ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetTimer ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetWindowArrangement ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetWindowBand ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetWindowCompositionTransition ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetWindowDisplayAffinity ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetWindowFeedbackSetting ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetWindowPlacement ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetWindowPos ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetWindowShowState ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSetWindowWord ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserShowScrollBar ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserShowSystemCursor ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserShowWindow ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserShowWindowAsync ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserShutdownBlockReasonQuery ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserShutdownReasonDestroy ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSignalRedirectionStartComplete ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSlicerControl ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserSoundSentry ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserTrackMouseEvent ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserTrackPopupMenuEx ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserUndelegateInput ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserUnhookWindowsHookEx ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserUnhookWinEvent ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserUnlockWindowStation ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserUnregisterHotKey ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserUnregisterSessionPort ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserUnregisterUserApiHook ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserUpdateDefaultDesktopThumbnail ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserUpdateWindowInputSinkHints ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserUpdateWindowTrackingInfo ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserUpdateWindowTransform ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserUserHandleGrantAccess ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserValidateRect ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserWaitAvailableMessageEx ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserWaitForRedirectionStartComplete ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserWaitMessage ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserWindowFromPhysicalPoint ".echo 'Found a win32k syscall';k;g"
bp USER32!NtUserWindowFromPoint ".echo 'Found a win32k syscall';k;g"