[ros-dev] XP, System Call List, Wrong size?

[James Tabor]

 From the SDK!
Come on! get upto date!

W32KAPI BOOL APIENTRY
NtGdiAlphaBlend(
     __in HDC hdcDst,
     __in LONG DstX,
     __in LONG DstY,
     __in LONG DstCx,
     __in LONG DstCy,
     __in HDC hdcSrc,
     __in LONG SrcX,
     __in LONG SrcY,
     __in LONG SrcCx,
     __in LONG SrcCy,
     __in BLENDFUNCTION BlendFunction,
     __in HANDLE hcmXform // I saw a zero here.
     );


We have this in psdk/ntgdi.h
W32KAPI
BOOL
APIENTRY
NtGdiSetIcmMode(
     IN HDC hdc,
     IN ULONG nCommand, // see below,,,, I saw 1 -> 4 here.
     IN ULONG ulMode
     );

/* NtGdiSetIcmMode */
#define ICM_SET_MODE                1
#define ICM_SET_CALIBRATE_MODE      2
#define ICM_SET_COLOR_MODE          3
#define ICM_CHECK_COLOR_MODE        4

Using a good hook and compare eax to the list will set you free.
James