diff --git a/.github/workflows/pythonpublish.yml b/.github/workflows/pythonpublish.yml index 053e474c8..fbdc3cd02 100644 --- a/.github/workflows/pythonpublish.yml +++ b/.github/workflows/pythonpublish.yml @@ -1,18 +1,10 @@ -# This workflows will upload a Python Package using Twine when a release is created -# For more information see: https://help.github.com/en/actions/language-and-framework-guides/using-python-with-github-actions#publishing-to-package-registries +name: PyPI 📦 Distribution -name: Upload Python Package - -on: - push: - tags: - - '*' +on: [push] jobs: - deploy: - + build: runs-on: ubuntu-latest - steps: - uses: actions/checkout@v2 - name: Set up Python @@ -21,13 +13,35 @@ jobs: python-version: '3.x' - name: Install dependencies run: | - python -m pip install --upgrade pip - pip install setuptools wheel twine - - name: Build and publish - env: - TWINE_USERNAME: __token__ - TWINE_PASSWORD: ${{ secrets.pypi_pass }} + pip install setuptools wheel + - name: Build distribution 📦 run: | pip install -r requirements.txt python setup.py sdist bdist_wheel - twine upload dist/* + - uses: actions/upload-artifact@v2 + with: + path: ${{ github.workspace }}/dist/* + + publish: + needs: [build] + runs-on: ubuntu-latest + if: startsWith(github.ref, 'refs/tags') + steps: + - uses: actions/download-artifact@v2 + with: + name: artifact + path: dist + + - name: Publish distribution 📦 to test PyPI + uses: pypa/gh-action-pypi-publish@master + with: + user: __token__ + password: ${{ secrets.testpypi_pass }} + repository_url: https://test.pypi.org/legacy/ + + - name: Publish distribution 📦 to PyPI + if: ${{ success() }} + uses: pypa/gh-action-pypi-publish@master + with: + user: __token__ + password: ${{ secrets.pypi_pass }} diff --git a/.travis.yml b/.travis.yml index bd635b3d6..1c1ddd01c 100644 --- a/.travis.yml +++ b/.travis.yml @@ -77,7 +77,10 @@ matrix: if [[ ! -f /c/Python36/python ]]; then choco install python --version=3.6.8 fi - #- choco install python + # Prevent worker settings failure + - powershell Start-Process -PassThru -Wait PowerShell -ArgumentList "'-Command Set-MpPreference -DisableArchiveScanning \$true'" + - powershell Start-Process -PassThru -Wait PowerShell -ArgumentList "'-Command Set-MpPreference -DisableBehaviorMonitoring \$true'" + - powershell Start-Process -PassThru -Wait PowerShell -ArgumentList "'-Command Set-MpPreference -DisableRealtimeMonitoring \$true'" #- choco install kb2999226 #- python -m pip install --upgrade pip install: diff --git a/CREDITS.TXT b/CREDITS.TXT index a807d0794..925530a3e 100644 --- a/CREDITS.TXT +++ b/CREDITS.TXT @@ -8,6 +8,10 @@ Advisor ======= NGUYEN Anh Quynh +Travis, Website and Documentations +================================== +FOO Kevin (chfl4gs) + Core Developers =============== DING tianze (D1iv3) @@ -18,11 +22,10 @@ Earl MARCUS (klks84) klks84@gmail.com Key Contributors (in no particular order) ========================================= -FOO Kevin (chfl4gs) kabeor 0ssigeno liba2k -assaf_carlsba +assafcarlsbad ucgJhe jhumble @@ -53,4 +56,4 @@ phdphuc sashs knownsec hwiosec -iamyeh \ No newline at end of file +iamyeh diff --git a/ChangeLog b/ChangeLog index 58ca7d87d..3a8651c94 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,14 @@ This file details the changelog of Qiling Framework. +------------------------------------ +[Version 1.1-rc1]: July 17th, 2020 + +- More refactors and bug fixes +- More detailed debug output +- Fix MIPS_EB overflow issue +- Introduce heap sanitizer + + ------------------------------------ [Version 1.1-alpha2]: June 26th, 2020 diff --git a/MANIFEST.in b/MANIFEST.in index 0a5c71565..b0454715a 100644 --- a/MANIFEST.in +++ b/MANIFEST.in @@ -1,2 +1,3 @@ recursive-include qiling/extensions/debugger/gdbserver/xml * +recursive-include qiling/extensions/windows_sdk/defs * recursive-include qiling/profiles * diff --git a/README.md b/README.md index 7af8f1d90..8b8822f67 100644 --- a/README.md +++ b/README.md @@ -4,7 +4,7 @@ ---

- +

Qiling is an advanced binary emulation framework, with the following features: @@ -27,7 +27,7 @@ Visit our website https://www.qiling.io for more information. #### License -This project is released and distributed under [free software license GPLv2](COPYING). +This project is released and distributed under [free software license GPLv2](https://github.com/qilingframework/qiling/blob/master/COPYING). --- @@ -199,5 +199,15 @@ Contact us at email info@qiling.io, or via Twitter [@qiling_io](https://twitter. - YU tong (sp1ke) - Earl Marcus (klks84) klks84@gmail.com -#### Travis-CI, Docker and Website +#### Travis-CI, Docker, Website and Documentation + - FOO Kevin (chfl4gs) + +#### Key Contributors (in no particular order) + +- kabeor +- 0ssigeno +- liba2k +- assafcarlsbad +- ucgJhe +- jhumble diff --git a/examples/ntQuerySystemInfo_x86.py b/examples/ntQuerySystemInfo_x86.py new file mode 100644 index 000000000..5016ba7fe --- /dev/null +++ b/examples/ntQuerySystemInfo_x86.py @@ -0,0 +1,16 @@ +#!/usr/bin/env python3 +# +# Cross Platform and Multi Architecture Advanced Binary Emulation Framework +# Built on top of Unicorn emulator (www.unicorn-engine.org) +import sys +sys.path.append("..") +from qiling import * + +if __name__ == "__main__": + ql = Qiling( + ["rootfs/x86_windows/bin/NtQuerySystemInformation.exe"], + "rootfs/x86_windows", + output="default", + libcache = True + ) + ql.run() diff --git a/examples/rootfs/x8664_efi/bin/EfiPoolFault.efi b/examples/rootfs/x8664_efi/bin/EfiPoolFault.efi new file mode 100644 index 000000000..8d7bdad34 Binary files /dev/null and b/examples/rootfs/x8664_efi/bin/EfiPoolFault.efi differ diff --git a/examples/rootfs/x86_linux/bin/x86_fetch_urandom b/examples/rootfs/x86_linux/bin/x86_fetch_urandom new file mode 100755 index 000000000..26ba9b3a8 Binary files /dev/null and b/examples/rootfs/x86_linux/bin/x86_fetch_urandom differ diff --git a/examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe b/examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe new file mode 100755 index 000000000..6b6877521 Binary files /dev/null and b/examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe differ diff --git a/examples/src/windows/NtQuerySystemInfo.c b/examples/src/windows/NtQuerySystemInfo.c new file mode 100644 index 000000000..f843e5a50 --- /dev/null +++ b/examples/src/windows/NtQuerySystemInfo.c @@ -0,0 +1,39 @@ +#include +#include +#include +#include +#pragma comment(lib ,"ntdll.lib") +typedef struct _SYSTEM_BASIC_INFORMATION2 +{ + ULONG Reserved; + ULONG TimerResolution; + ULONG PageSize; + ULONG NumberOfPhysicalPages; + ULONG LowestPhysicalPageNumber; + ULONG HighestPhysicalPageNumber; + ULONG AllocationGranularity; + ULONG_PTR MinimumUserModeAddress; + ULONG_PTR MaximumUserModeAddress; + ULONG_PTR ActiveProcessorsAffinityMask; + CCHAR NumberOfProcessors; +} SYSTEM_BASIC_INFORMATION2, * PSYSTEM_BASIC_INFORMATION2; +int main() +{ + ULONG whyme=0; + SYSTEM_BASIC_INFORMATION2 sbi; + + NTSTATUS status = NtQuerySystemInformation(SystemBasicInformation, &sbi, sizeof(SYSTEM_BASIC_INFORMATION2), &whyme); + printf("Size : 0x%x Status: 0x%x\n", whyme,status); + + printf("ActiveProcessorsAffinityMask : 0x%x\n", sbi.ActiveProcessorsAffinityMask); + printf("AllocationGranularity : 0x%x\n", sbi.AllocationGranularity); + printf("HighestPhysicalPageNumber : 0x%x\n", sbi.HighestPhysicalPageNumber); + printf("LowestPhysicalPageNumber : 0x%x\n", sbi.LowestPhysicalPageNumber); + printf("MaximumUserModeAddress : 0x%x\n", sbi.MaximumUserModeAddress); + printf("MinimumUserModeAddress : 0x%x\n", sbi.MinimumUserModeAddress); + printf("NumberOfPhysicalPages : 0x%x\n", sbi.NumberOfPhysicalPages); + printf("NumberOfProcessors : 0x%x\n", sbi.NumberOfProcessors); + printf("PageSize : 0x%x\n", sbi.PageSize); + printf("TimerResolution : 0x%x\n", sbi.TimerResolution); + +} diff --git a/examples/uefi_sanitized_heap.py b/examples/uefi_sanitized_heap.py new file mode 100644 index 000000000..5cdb35cc3 --- /dev/null +++ b/examples/uefi_sanitized_heap.py @@ -0,0 +1,48 @@ +import os +import sys +from qiling import Qiling +from qiling.extensions.sanitizers.heap import QlSanitizedMemoryHeap + +def my_abort(msg): + print(f"\n*** {msg} ***\n") + os.abort() + +def enable_sanitized_heap(ql, fault_rate=0): + ql.loader.heap = QlSanitizedMemoryHeap(ql, ql.loader.heap) + ql.loader.heap.pool_fault_rate = fault_rate + ql.loader.heap.oob_handler = lambda *args: my_abort("Out-of-bounds read detected") + ql.loader.heap.bo_handler = lambda *args: my_abort("Buffer overflow/underflow detected") + ql.loader.heap.bad_free_handler = lambda *args: my_abort("Double free or bad free detected") + ql.loader.heap.uaf_handler = lambda *args: my_abort("Use-after-free detected") + +def sanitized_emulate(path, rootfs, fault_type, output="debug", enable_trace=False): + ql = Qiling([path], rootfs, output=output) + ql.env['FaultType'] = fault_type + enable_sanitized_heap(ql) + ql.run() + if not ql.loader.heap.validate(): + my_abort("Canary corruption detected") + +def usage(): + print(""" +Usage: ./uefi_santizied_heap.py +Valid fault types: +0 - POOL_OVERFLOW_MEMCPY +1 - POOL_UNDERFLOW_MEMCPY +2 - POOL_OVERFLOW_USER, +3 - POOL_UNDERFLOW_USER +4 - POOL_OOB_READ_AHEAD +5 - POOL_OOB_READ_BEHIND +6 - POOL_DOUBLE_FREE +7 - POOL_INVALID_FREE +""") + sys.exit(0) + +if __name__ == "__main__": + if len(sys.argv) < 2: + usage() + + fault_type = bytes([int(sys.argv[1])]) + rootfs = os.path.join(os.getcwd(), 'rootfs', 'x8664_efi') + path = os.path.join(rootfs, 'bin', 'EfiPoolFault.efi') + sanitized_emulate(path, rootfs, fault_type, output='debug', enable_trace=True) diff --git a/qiling/const.py b/qiling/const.py index 788db19a3..5b251e8a6 100644 --- a/qiling/const.py +++ b/qiling/const.py @@ -51,6 +51,7 @@ class QL_INTERCEPT(IntEnum): D_PROT = 2 # Protocol level debug, print out open file flag D_CTNT = 3 # Print out content. File content or content of a tcp stream D_RPRT = 4 # Reporting output, main summarizing purposes +D_DRPT = 5 # Detailed Report, with address QL_DEBUGGER_ALL = [QL_DEBUGGER.IDAPRO, QL_DEBUGGER.GDB] QL_ARCH_ALL = [QL_ARCH.X86, QL_ARCH.X8664, QL_ARCH.ARM, QL_ARCH.ARM64, QL_ARCH.MIPS] @@ -80,4 +81,108 @@ class QL_INTERCEPT(IntEnum): "freebsd": QL_OS.FREEBSD, "windows": QL_OS.WINDOWS, "uefi": QL_OS.UEFI, +} + +reptypedict = { + "BSTR": "POINTER", + "DLGPROC": "POINTER", + "DWORDLONG": "ULONGLONG", + "DWORD_PTR": "POINTER", + "GROUP": "INT", + "HDC": "POINTER", + "HEAP_INFORMATION_CLASS": "UINT", + "HGLOBAL": "POINTER", + "HHOOK": "POINTER", + "HINSTANCE": "HANDLE", + "HINTERNET": "POINTER", + "HKEY": "HANDLE", + "HLOCAL": "POINTER", + "HMODULE": "HANDLE", + "HOOKPROC": "POINTER", + "HRSRC": "POINTER", + "HWND": "HANDLE", + "INSTALLSTATE": "POINTER", + "INTERNET_PORT": "DWORD", + "INT_PTR": "POINTER", + "LARGE_INTEGER": "POINTER", + "LCID": "POINTER", + "LONG": "ULONGLONG", + "LPARAM": "POINTER", + "LPBOOL": "POINTER", + "LPBYTE": "POINTER", + "LPCCH": "POINTER", + "LPCONTEXT": "POINTER", + "LPCPINFO": "POINTER", + "LPCRITICAL_SECTION": "POINTER", + "LPCSTR": "STRING", + "LPCVOID": "POINTER", + "LPCWCH": "POINTER", + "LPCWSTR": "WSTRING", + "LPDWORD": "POINTER", + "LPFILETIME": "POINTER", + "LPINTERNET_BUFFERSA": "POINT", + "LPMESSAGEFILTER": "POINTER", + "LPMODULEINFO": "POINTER", + "LPNLSVERSIONINFO": "POINTER", + "LPOSVERSIONINFOA": "STRING", + "LPOSVERSIONINFOEXW": "POINTER", + "LPOSVERSIONINFOW": "WSTRING", + "LPOVERLAPPED": "POINTER", + "LPPOINT": "POINTER", + "LPPROCESSENTRY32W": "POINTER", + "LPSECURITY_ATTRIBUTES": "POINTER", + "LPSTARTUPINFOA": "POINTER", + "LPSTARTUPINFOW": "POINTER", + "LPSTR": "POINTER", + "LPSYSTEMTIME": "POINTER", + "LPSYSTEM_INFO": "POINTER", + "LPTHREAD_START_ROUTINE": "POINTER", + "LPTOP_LEVEL_EXCEPTION_FILTER": "DWORD", + "LPUNKNOWN": "POINTER", + "LPVOID": "POINTER", + "LPWCH": "POINTER", + "LPWIN32_FIND_DATAA": "POINTER", + "LPWORD": "POINTER", + "LPWSADATA": "STRING", + "LPWSAPROTOCOL_INFOA": "POINTER", + "LPWSTR": "POINTER", + "MSIHANDLE": "POINTER", + "OBJECT_INFORMATION_CLASS": "INT", + "OLECHAR": "WSTRING", + "PBOOL": "POINTER", + "PCACTCTXW": "POINTER", + "PCNZCH": "STRING", + "PDWORD": "POINTER", + "PFLS_CALLBACK_FUNCTION": "POINTER", + "PHKEY": "POINTER", + "PMEMORY_BASIC_INFORMATION": "POINTER", + "PROCESSINFOCLASS": "INT", + "PSECURITY_DESCRIPTOR": "POINTER", + "PSID": "HANDLE", + "PSID_IDENTIFIER_AUTHORITY": "POINTER", + "PSLIST_HEADER": "POINTER", + "PSRWLOCK": "POINTER", + "PULONG": "POINTER", + "PVECTORED_EXCEPTION_HANDLER": "HANDLE", + "PVOID": "POINTER", + "REFCLSID": "POINTER", + "REFIID": "POINTER", + "REGSAM": "POINTER", + "SHELLEXECUTEINFOA": "POINTER", + "SHELLEXECUTEINFOW": "POINTER", + "SHFILEINFOW": "POINTER", + "SOCKET": "INT", + "SOLE_AUTHENTICATION_SERVICE": "POINTER", + "TOKEN_INFORMATION_CLASS": "DWORD", + "UINT_PTR": "POINTER", + "ULONG": "UINT", + "ULONG_PTR": "POINTER", + "WORD": "DWORD", + "WPARAM": "UINT", + "_EXCEPTION_POINTERS": "POINTER", + "int": "INT", + "size_t": "UINT", + "sockaddr": "POINTER", + "unsigned int": "UINT", + "void": "POINTER" } \ No newline at end of file diff --git a/qiling/core.py b/qiling/core.py index d054c5be2..6273075ad 100644 --- a/qiling/core.py +++ b/qiling/core.py @@ -18,7 +18,7 @@ from .core_utils import QLCoreUtils from .extensions.debugger import ql_debugger_init -__version__ = "1.1" + "-alpha2" +__version__ = "1.1" + "-rc1" class Qiling(QLCoreStructs, QLCoreHooks, QLCoreUtils): def __init__( diff --git a/qiling/core_struct.py b/qiling/core_struct.py index 0d6ac7d12..296d96637 100644 --- a/qiling/core_struct.py +++ b/qiling/core_struct.py @@ -21,19 +21,32 @@ def __init__(self): def unpack64(self, x): - return struct.unpack('Q', x)[0] + if self.archendian == QL_ENDIAN.EB: + return struct.unpack('>Q', x)[0] + else: + return struct.unpack('Q', x)[0] + def pack64(self, x): - return struct.pack('Q', x) + if self.archendian == QL_ENDIAN.EB: + return struct.pack('>Q', x) + else: + return struct.pack('Q', x) def pack64s(self, x): - return struct.pack('q', x) + if self.archendian == QL_ENDIAN.EB: + return struct.pack('>q', x) + else: + return struct.pack('q', x) def unpack64s(self, x): - return struct.unpack('q', x)[0] + if self.archendian == QL_ENDIAN.EB: + return struct.unpack('>q', x)[0] + else: + return struct.unpack('q', x)[0] def unpack32(self, x): diff --git a/qiling/core_utils.py b/qiling/core_utils.py index 3df0e326d..0ff5512d3 100644 --- a/qiling/core_utils.py +++ b/qiling/core_utils.py @@ -13,7 +13,7 @@ from .utils import loadertype_convert_str, ostype_convert_str, arch_convert_str from .utils import ql_setup_filter from .const import QL_OS, QL_OS_ALL, QL_ARCH, QL_ENDIAN, QL_OUTPUT -from .const import D_INFO +from .const import D_INFO, D_DRPT from .exception import QlErrorArch, QlErrorOsType, QlErrorOutput from .loader.utils import ql_checkostype @@ -61,10 +61,8 @@ def nprint(self, *args, **kw): if '_FalseFilter' in each_filter.__class__.__name__: each_console_handler.removeFilter(each_filter) - if isinstance(args, tuple) or isinstance(args, list): - msg = kw.get("sep", " ").join(args) - else: - msg = kw.get("sep", " ").join(str(args)) + args = map(str, args) + msg = kw.get("sep", " ").join(args) if kw.get("end", None) != None: msg += kw["end"] @@ -89,6 +87,9 @@ def dprint(self, level, *args, **kw): self.verbose = 99 if int(self.verbose) >= level and self.output in (QL_OUTPUT.DEBUG, QL_OUTPUT.DUMP): + if int(self.verbose) >= D_DRPT: + args = (("0x%x:" % self.reg.arch_pc), args) + self.nprint(*args, **kw) diff --git a/qiling/extensions/sanitizers/__init__.py b/qiling/extensions/sanitizers/__init__.py new file mode 100644 index 000000000..e69de29bb diff --git a/qiling/extensions/sanitizers/heap.py b/qiling/extensions/sanitizers/heap.py new file mode 100644 index 000000000..cc12bae42 --- /dev/null +++ b/qiling/extensions/sanitizers/heap.py @@ -0,0 +1,104 @@ +#!/usr/bin/env python3 +# +# Cross Platform and Multi Architecture Advanced Binary Emulation Framework +# Built on top of Unicorn emulator (www.unicorn-engine.org) + +import random + +class QlSanitizedMemoryHeap(): + """ + Clients can enable the santized heap using the following snippet: + + ql.loader.heap = qiling.os.memory.QlSanitizedMemoryHeap(ql, ql.loader.heap) + ql.loader.heap.oob_handler = my_oob_handler + ql.loader.heap.bo_handler = my_bo_handler + ql.loader.heap.bad_free_handler = my_bad_free_handler + ql.loader.heap.uaf_handler = my_uaf_handler + """ + + def __init__(self, ql, heap, fault_rate=0, canary_byte=b'\xCD'): + self.ql = ql + self.heap = heap + self.fault_rate = fault_rate + self.canary_byte = canary_byte + self.canaries = [] + + @staticmethod + def bo_handler(ql, access, addr, size, value): + """ + Called when a buffer overflow/underflow is detected. + """ + pass + + @staticmethod + def oob_handler(ql, access, addr, size, value): + """ + Called when an out-of-bounds element is accessed. + """ + pass + + @staticmethod + def uaf_handler(ql, access, addr, size, value): + """ + Called when a use-after-free is detected. + """ + pass + + @staticmethod + def bad_free_handler(ql, addr): + """ + Called when a bad/double free is detected. + """ + pass + + def alloc(self, size): + chance = random.randint(1, 100) + if chance <= self.fault_rate: + # Fail the allocation. + return 0 + + # Add 8 bytes to the requested size so as to accomodate the canaries. + addr = self.heap.alloc(size + 8) + self.ql.mem.write(addr, self.canary_byte * (size + 8)) + + # Install canary hooks for overflow/underflow detection. + underflow_canary = (addr, addr + 3) + self.ql.hook_mem_write(self.bo_handler, begin=underflow_canary[0], end=underflow_canary[1]) + self.ql.hook_mem_read(self.oob_handler, begin=underflow_canary[0], end=underflow_canary[1]) + self.canaries.append(underflow_canary) + + overflow_canary = (addr + 4 + size, addr + 4 + size + 3) + self.ql.hook_mem_write(self.bo_handler, begin=overflow_canary[0], end=overflow_canary[1]) + self.ql.hook_mem_read(self.oob_handler, begin=overflow_canary[0], end=overflow_canary[1]) + self.canaries.append(overflow_canary) + + return (addr + 4) + + def size(self, addr): + return self.heap.size(addr - 4) + + def free(self, addr): + chunk = self.heap._find(addr - 4) + + if not chunk: + self.bad_free_handler(self.ql, addr) + return False + + # Install the UAF canary hook. + self.ql.mem.write(addr, self.canary_byte * (chunk.size - 8)) + uaf_canary = (addr, addr + chunk.size - 8 - 1) + self.ql.hook_mem_valid(self.uaf_handler, begin=uaf_canary[0], end=uaf_canary[1]) + self.canaries.append(uaf_canary) + + # Make sure the chunk won't be re-used by the underlying heap. + self.heap.chunks.remove(chunk) + return True + + def validate(self): + for (canary_begin, canary_end) in self.canaries: + size = canary_end - canary_begin + 1 + canary = self.ql.mem.read(canary_begin, size) + if canary.count(self.canary_byte) != len(canary): + return False + return True + \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/__init__.py b/qiling/extensions/windows_sdk/__init__.py new file mode 100644 index 000000000..e69de29bb diff --git a/qiling/extensions/windows_sdk/defs/aclui_dll.json b/qiling/extensions/windows_sdk/defs/aclui_dll.json new file mode 100644 index 000000000..be2ab37fa --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/aclui_dll.json @@ -0,0 +1,32 @@ +{ + "CreateSecurityPage": [ + { + "name": "psi", + "type": "LPSECURITYINFO" + } + ], + "EditSecurity": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "psi", + "type": "LPSECURITYINFO" + } + ], + "EditSecurityAdvanced": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "psi", + "type": "LPSECURITYINFO" + }, + { + "name": "uSIPage", + "type": "SI_PAGE_TYPE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/advapi32_dll.json b/qiling/extensions/windows_sdk/defs/advapi32_dll.json new file mode 100644 index 000000000..edba41c7f --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/advapi32_dll.json @@ -0,0 +1,10562 @@ +{ + "PerfStartProvider": [ + { + "name": "ProviderGuid", + "type": "LPGUID" + }, + { + "name": "ControlCallback", + "type": "PERFLIBREQUEST" + }, + { + "name": "Provider", + "type": "PHANDLE" + } + ], + "PerfStartProviderEx": [ + { + "name": "ProviderGuid", + "type": "LPGUID" + }, + { + "name": "ProviderContext", + "type": "PPERF_PROVIDER_CONTEXT" + }, + { + "name": "Provider", + "type": "PHANDLE" + } + ], + "PerfStopProvider": [ + { + "name": "ProviderHandle", + "type": "HANDLE" + } + ], + "PerfSetCounterSetInfo": [ + { + "name": "ProviderHandle", + "type": "HANDLE" + }, + { + "name": "Template", + "type": "PPERF_COUNTERSET_INFO" + }, + { + "name": "TemplateSize", + "type": "ULONG" + } + ], + "PerfCreateInstance": [ + { + "name": "ProviderHandle", + "type": "HANDLE" + }, + { + "name": "CounterSetGuid", + "type": "LPCGUID" + }, + { + "name": "Name", + "type": "PCWSTR" + }, + { + "name": "Id", + "type": "ULONG" + } + ], + "PerfDeleteInstance": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "InstanceBlock", + "type": "PPERF_COUNTERSET_INSTANCE" + } + ], + "PerfQueryInstance": [ + { + "name": "ProviderHandle", + "type": "HANDLE" + }, + { + "name": "CounterSetGuid", + "type": "LPCGUID" + }, + { + "name": "Name", + "type": "PCWSTR" + }, + { + "name": "Id", + "type": "ULONG" + } + ], + "PerfSetCounterRefValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Address", + "type": "PVOID" + } + ], + "PerfSetULongCounterValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Value", + "type": "ULONG" + } + ], + "PerfSetULongLongCounterValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Value", + "type": "ULONGLONG" + } + ], + "PerfIncrementULongCounterValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Value", + "type": "ULONG" + } + ], + "PerfIncrementULongLongCounterValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Value", + "type": "ULONGLONG" + } + ], + "PerfDecrementULongCounterValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Value", + "type": "ULONG" + } + ], + "PerfDecrementULongLongCounterValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Value", + "type": "ULONGLONG" + } + ], + "PerfEnumerateCounterSet": [ + { + "name": "szMachine", + "type": "LPCWSTR" + }, + { + "name": "pCounterSetIds", + "type": "LPGUID" + }, + { + "name": "cCounterSetIds", + "type": "DWORD" + }, + { + "name": "pcCounterSetIdsActual", + "type": "LPDWORD" + } + ], + "PerfEnumerateCounterSetInstances": [ + { + "name": "szMachine", + "type": "LPCWSTR" + }, + { + "name": "pCounterSetId", + "type": "LPCGUID" + }, + { + "name": "pInstances", + "type": "PPERF_INSTANCE_HEADER" + }, + { + "name": "cbInstances", + "type": "DWORD" + }, + { + "name": "pcbInstancesActual", + "type": "LPDWORD" + } + ], + "PerfQueryCounterSetRegistrationInfo": [ + { + "name": "szMachine", + "type": "LPCWSTR" + }, + { + "name": "pCounterSetId", + "type": "LPCGUID" + }, + { + "name": "requestCode", + "type": "PerfRegInfoType" + }, + { + "name": "requestLangId", + "type": "DWORD" + }, + { + "name": "pbRegInfo", + "type": "LPBYTE" + }, + { + "name": "cbRegInfo", + "type": "DWORD" + }, + { + "name": "pcbRegInfoActual", + "type": "LPDWORD" + } + ], + "PerfOpenQueryHandle": [ + { + "name": "szMachine", + "type": "LPCWSTR" + }, + { + "name": "phQuery", + "type": "HANDLE" + } + ], + "PerfCloseQueryHandle": [ + { + "name": "hQuery", + "type": "HANDLE" + } + ], + "PerfQueryCounterInfo": [ + { + "name": "hQuery", + "type": "HANDLE" + }, + { + "name": "pCounters", + "type": "PPERF_COUNTER_IDENTIFIER" + }, + { + "name": "cbCounters", + "type": "DWORD" + }, + { + "name": "pcbCountersActual", + "type": "LPDWORD" + } + ], + "PerfQueryCounterData": [ + { + "name": "hQuery", + "type": "HANDLE" + }, + { + "name": "pCounterBlock", + "type": "PPERF_DATA_HEADER" + }, + { + "name": "cbCounterBlock", + "type": "DWORD" + }, + { + "name": "pcbCounterBlockActual", + "type": "LPDWORD" + } + ], + "PerfAddCounters": [ + { + "name": "hQuery", + "type": "HANDLE" + }, + { + "name": "pCounters", + "type": "PPERF_COUNTER_IDENTIFIER" + }, + { + "name": "cbCounters", + "type": "DWORD" + } + ], + "PerfDeleteCounters": [ + { + "name": "hQuery", + "type": "HANDLE" + }, + { + "name": "pCounters", + "type": "PPERF_COUNTER_IDENTIFIER" + }, + { + "name": "cbCounters", + "type": "DWORD" + } + ], + "SetServiceBits": [ + { + "name": "hServiceStatus", + "type": "SERVICE_STATUS_HANDLE" + }, + { + "name": "dwServiceBits", + "type": "DWORD" + }, + { + "name": "bSetBitsOn", + "type": "BOOL" + }, + { + "name": "bUpdateImmediately", + "type": "BOOL" + } + ], + "CreateProcessAsUserW": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpApplicationName", + "type": "LPCWSTR" + }, + { + "name": "lpCommandLine", + "type": "LPWSTR" + }, + { + "name": "lpProcessAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bInheritHandles", + "type": "BOOL" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "lpCurrentDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOW" + }, + { + "name": "lpProcessInformation", + "type": "LPPROCESS_INFORMATION" + } + ], + "SetThreadToken": [ + { + "name": "Thread", + "type": "PHANDLE" + }, + { + "name": "Token", + "type": "HANDLE" + } + ], + "OpenProcessToken": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "TokenHandle", + "type": "PHANDLE" + } + ], + "OpenThreadToken": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "OpenAsSelf", + "type": "BOOL" + }, + { + "name": "TokenHandle", + "type": "PHANDLE" + } + ], + "CreateProcessAsUserA": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpApplicationName", + "type": "LPCSTR" + }, + { + "name": "lpCommandLine", + "type": "LPSTR" + }, + { + "name": "lpProcessAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bInheritHandles", + "type": "BOOL" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "lpCurrentDirectory", + "type": "LPCSTR" + }, + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOA" + }, + { + "name": "lpProcessInformation", + "type": "LPPROCESS_INFORMATION" + } + ], + "QueryUsersOnEncryptedFile": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "pUsers", + "type": "PENCRYPTION_CERTIFICATE_HASH_LIST" + } + ], + "QueryRecoveryAgentsOnEncryptedFile": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "pRecoveryAgents", + "type": "PENCRYPTION_CERTIFICATE_HASH_LIST" + } + ], + "RemoveUsersFromEncryptedFile": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "pHashes", + "type": "PENCRYPTION_CERTIFICATE_HASH_LIST" + } + ], + "AddUsersToEncryptedFile": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "pEncryptionCertificates", + "type": "PENCRYPTION_CERTIFICATE_LIST" + } + ], + "SetUserFileEncryptionKey": [ + { + "name": "pEncryptionCertificate", + "type": "PENCRYPTION_CERTIFICATE" + } + ], + "FreeEncryptionCertificateHashList": [ + { + "name": "pUsers", + "type": "PENCRYPTION_CERTIFICATE_HASH_LIST" + } + ], + "EncryptionDisable": [ + { + "name": "DirPath", + "type": "LPCWSTR" + }, + { + "name": "Disable", + "type": "BOOL" + } + ], + "DuplicateEncryptionInfoFile": [ + { + "name": "SrcFileName", + "type": "LPCWSTR" + }, + { + "name": "DstFileName", + "type": "LPCWSTR" + }, + { + "name": "dwCreationDistribution", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "OpenThreadWaitChainSession": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "callback", + "type": "PWAITCHAINCALLBACK" + } + ], + "CloseThreadWaitChainSession": [ + { + "name": "WctHandle", + "type": "HWCT" + } + ], + "GetThreadWaitChain": [ + { + "name": "WctHandle", + "type": "HWCT" + }, + { + "name": "Context", + "type": "DWORD_PTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ThreadId", + "type": "DWORD" + }, + { + "name": "NodeCount", + "type": "LPDWORD" + }, + { + "name": "NodeInfoArray", + "type": "PWAITCHAIN_NODE_INFO" + }, + { + "name": "IsCycle", + "type": "LPBOOL" + } + ], + "RegisterWaitChainCOMCallback": [ + { + "name": "CallStateCallback", + "type": "PCOGETCALLSTATE" + }, + { + "name": "ActivationStateCallback", + "type": "PCOGETACTIVATIONSTATE" + } + ], + "EventRegister": [ + { + "name": "ProviderId", + "type": "LPCGUID" + }, + { + "name": "EnableCallback", + "type": "PENABLECALLBACK" + }, + { + "name": "CallbackContext", + "type": "PVOID" + }, + { + "name": "RegHandle", + "type": "PREGHANDLE" + } + ], + "EventUnregister": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + } + ], + "EventSetInformation": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "InformationClass", + "type": "EVENT_INFO_CLASS" + }, + { + "name": "EventInformation", + "type": "PVOID" + }, + { + "name": "InformationLength", + "type": "ULONG" + } + ], + "EventEnabled": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "EventDescriptor", + "type": "PCEVENT_DESCRIPTOR" + } + ], + "EventProviderEnabled": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "Level", + "type": "UCHAR" + }, + { + "name": "Keyword", + "type": "ULONGLONG" + } + ], + "EventWrite": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "EventDescriptor", + "type": "PCEVENT_DESCRIPTOR" + }, + { + "name": "UserDataCount", + "type": "ULONG" + }, + { + "name": "UserData", + "type": "PEVENT_DATA_DESCRIPTOR" + } + ], + "EventWriteTransfer": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "EventDescriptor", + "type": "PCEVENT_DESCRIPTOR" + }, + { + "name": "ActivityId", + "type": "LPCGUID" + }, + { + "name": "RelatedActivityId", + "type": "LPCGUID" + }, + { + "name": "UserDataCount", + "type": "ULONG" + }, + { + "name": "UserData", + "type": "PEVENT_DATA_DESCRIPTOR" + } + ], + "EventWriteEx": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "EventDescriptor", + "type": "PCEVENT_DESCRIPTOR" + }, + { + "name": "Filter", + "type": "ULONG64" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "ActivityId", + "type": "LPCGUID" + }, + { + "name": "RelatedActivityId", + "type": "LPCGUID" + }, + { + "name": "UserDataCount", + "type": "ULONG" + }, + { + "name": "UserData", + "type": "PEVENT_DATA_DESCRIPTOR" + } + ], + "EventWriteString": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "Level", + "type": "UCHAR" + }, + { + "name": "Keyword", + "type": "ULONGLONG" + }, + { + "name": "String", + "type": "PCWSTR" + } + ], + "EventActivityIdControl": [ + { + "name": "ControlCode", + "type": "ULONG" + }, + { + "name": "ActivityId", + "type": "LPGUID" + } + ], + "ChangeServiceConfigA": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwStartType", + "type": "DWORD" + }, + { + "name": "dwErrorControl", + "type": "DWORD" + }, + { + "name": "lpBinaryPathName", + "type": "LPCSTR" + }, + { + "name": "lpLoadOrderGroup", + "type": "LPCSTR" + }, + { + "name": "lpdwTagId", + "type": "LPDWORD" + }, + { + "name": "lpDependencies", + "type": "LPCSTR" + }, + { + "name": "lpServiceStartName", + "type": "LPCSTR" + }, + { + "name": "lpPassword", + "type": "LPCSTR" + }, + { + "name": "lpDisplayName", + "type": "LPCSTR" + } + ], + "ChangeServiceConfigW": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwStartType", + "type": "DWORD" + }, + { + "name": "dwErrorControl", + "type": "DWORD" + }, + { + "name": "lpBinaryPathName", + "type": "LPCWSTR" + }, + { + "name": "lpLoadOrderGroup", + "type": "LPCWSTR" + }, + { + "name": "lpdwTagId", + "type": "LPDWORD" + }, + { + "name": "lpDependencies", + "type": "LPCWSTR" + }, + { + "name": "lpServiceStartName", + "type": "LPCWSTR" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + }, + { + "name": "lpDisplayName", + "type": "LPCWSTR" + } + ], + "ChangeServiceConfig2A": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpInfo", + "type": "LPVOID" + } + ], + "ChangeServiceConfig2W": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpInfo", + "type": "LPVOID" + } + ], + "CloseServiceHandle": [ + { + "name": "hSCObject", + "type": "SC_HANDLE" + } + ], + "ControlService": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwControl", + "type": "DWORD" + }, + { + "name": "lpServiceStatus", + "type": "LPSERVICE_STATUS" + } + ], + "CreateServiceA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceName", + "type": "LPCSTR" + }, + { + "name": "lpDisplayName", + "type": "LPCSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwStartType", + "type": "DWORD" + }, + { + "name": "dwErrorControl", + "type": "DWORD" + }, + { + "name": "lpBinaryPathName", + "type": "LPCSTR" + }, + { + "name": "lpLoadOrderGroup", + "type": "LPCSTR" + }, + { + "name": "lpdwTagId", + "type": "LPDWORD" + }, + { + "name": "lpDependencies", + "type": "LPCSTR" + }, + { + "name": "lpServiceStartName", + "type": "LPCSTR" + }, + { + "name": "lpPassword", + "type": "LPCSTR" + } + ], + "CreateServiceW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceName", + "type": "LPCWSTR" + }, + { + "name": "lpDisplayName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwStartType", + "type": "DWORD" + }, + { + "name": "dwErrorControl", + "type": "DWORD" + }, + { + "name": "lpBinaryPathName", + "type": "LPCWSTR" + }, + { + "name": "lpLoadOrderGroup", + "type": "LPCWSTR" + }, + { + "name": "lpdwTagId", + "type": "LPDWORD" + }, + { + "name": "lpDependencies", + "type": "LPCWSTR" + }, + { + "name": "lpServiceStartName", + "type": "LPCWSTR" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + } + ], + "DeleteService": [ + { + "name": "hService", + "type": "SC_HANDLE" + } + ], + "EnumDependentServicesA": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwServiceState", + "type": "DWORD" + }, + { + "name": "lpServices", + "type": "LPENUM_SERVICE_STATUSA" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + }, + { + "name": "lpServicesReturned", + "type": "LPDWORD" + } + ], + "EnumDependentServicesW": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwServiceState", + "type": "DWORD" + }, + { + "name": "lpServices", + "type": "LPENUM_SERVICE_STATUSW" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + }, + { + "name": "lpServicesReturned", + "type": "LPDWORD" + } + ], + "EnumServicesStatusA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwServiceState", + "type": "DWORD" + }, + { + "name": "lpServices", + "type": "LPENUM_SERVICE_STATUSA" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + }, + { + "name": "lpServicesReturned", + "type": "LPDWORD" + }, + { + "name": "lpResumeHandle", + "type": "LPDWORD" + } + ], + "EnumServicesStatusW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwServiceState", + "type": "DWORD" + }, + { + "name": "lpServices", + "type": "LPENUM_SERVICE_STATUSW" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + }, + { + "name": "lpServicesReturned", + "type": "LPDWORD" + }, + { + "name": "lpResumeHandle", + "type": "LPDWORD" + } + ], + "EnumServicesStatusExA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "InfoLevel", + "type": "SC_ENUM_TYPE" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwServiceState", + "type": "DWORD" + }, + { + "name": "lpServices", + "type": "LPBYTE" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + }, + { + "name": "lpServicesReturned", + "type": "LPDWORD" + }, + { + "name": "lpResumeHandle", + "type": "LPDWORD" + }, + { + "name": "pszGroupName", + "type": "LPCSTR" + } + ], + "EnumServicesStatusExW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "InfoLevel", + "type": "SC_ENUM_TYPE" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwServiceState", + "type": "DWORD" + }, + { + "name": "lpServices", + "type": "LPBYTE" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + }, + { + "name": "lpServicesReturned", + "type": "LPDWORD" + }, + { + "name": "lpResumeHandle", + "type": "LPDWORD" + }, + { + "name": "pszGroupName", + "type": "LPCWSTR" + } + ], + "GetServiceKeyNameA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpDisplayName", + "type": "LPCSTR" + }, + { + "name": "lpServiceName", + "type": "LPSTR" + }, + { + "name": "lpcchBuffer", + "type": "LPDWORD" + } + ], + "GetServiceKeyNameW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpDisplayName", + "type": "LPCWSTR" + }, + { + "name": "lpServiceName", + "type": "LPWSTR" + }, + { + "name": "lpcchBuffer", + "type": "LPDWORD" + } + ], + "GetServiceDisplayNameA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceName", + "type": "LPCSTR" + }, + { + "name": "lpDisplayName", + "type": "LPSTR" + }, + { + "name": "lpcchBuffer", + "type": "LPDWORD" + } + ], + "GetServiceDisplayNameW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceName", + "type": "LPCWSTR" + }, + { + "name": "lpDisplayName", + "type": "LPWSTR" + }, + { + "name": "lpcchBuffer", + "type": "LPDWORD" + } + ], + "LockServiceDatabase": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + } + ], + "NotifyBootConfigStatus": [ + { + "name": "BootAcceptable", + "type": "BOOL" + } + ], + "OpenSCManagerA": [ + { + "name": "lpMachineName", + "type": "LPCSTR" + }, + { + "name": "lpDatabaseName", + "type": "LPCSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "OpenSCManagerW": [ + { + "name": "lpMachineName", + "type": "LPCWSTR" + }, + { + "name": "lpDatabaseName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "OpenServiceA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceName", + "type": "LPCSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "OpenServiceW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "QueryServiceConfigA": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceConfig", + "type": "LPQUERY_SERVICE_CONFIGA" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceConfigW": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceConfig", + "type": "LPQUERY_SERVICE_CONFIGW" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceConfig2A": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceConfig2W": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceLockStatusA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpLockStatus", + "type": "LPQUERY_SERVICE_LOCK_STATUSA" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceLockStatusW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpLockStatus", + "type": "LPQUERY_SERVICE_LOCK_STATUSW" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceObjectSecurity": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwSecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "lpSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceStatus": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceStatus", + "type": "LPSERVICE_STATUS" + } + ], + "QueryServiceStatusEx": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "InfoLevel", + "type": "SC_STATUS_TYPE" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "RegisterServiceCtrlHandlerA": [ + { + "name": "lpServiceName", + "type": "LPCSTR" + }, + { + "name": "lpHandlerProc", + "type": "LPHANDLER_FUNCTION" + } + ], + "RegisterServiceCtrlHandlerW": [ + { + "name": "lpServiceName", + "type": "LPCWSTR" + }, + { + "name": "lpHandlerProc", + "type": "LPHANDLER_FUNCTION" + } + ], + "RegisterServiceCtrlHandlerExA": [ + { + "name": "lpServiceName", + "type": "LPCSTR" + }, + { + "name": "lpHandlerProc", + "type": "LPHANDLER_FUNCTION_EX" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "RegisterServiceCtrlHandlerExW": [ + { + "name": "lpServiceName", + "type": "LPCWSTR" + }, + { + "name": "lpHandlerProc", + "type": "LPHANDLER_FUNCTION_EX" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "SetServiceObjectSecurity": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwSecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "lpSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "SetServiceStatus": [ + { + "name": "hServiceStatus", + "type": "SERVICE_STATUS_HANDLE" + }, + { + "name": "lpServiceStatus", + "type": "LPSERVICE_STATUS" + } + ], + "StartServiceCtrlDispatcherA": [ + { + "name": "lpServiceStartTable", + "type": "SERVICE_TABLE_ENTRYA" + } + ], + "StartServiceCtrlDispatcherW": [ + { + "name": "lpServiceStartTable", + "type": "SERVICE_TABLE_ENTRYW" + } + ], + "StartServiceA": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwNumServiceArgs", + "type": "DWORD" + }, + { + "name": "lpServiceArgVectors", + "type": "LPCSTR" + } + ], + "StartServiceW": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwNumServiceArgs", + "type": "DWORD" + }, + { + "name": "lpServiceArgVectors", + "type": "LPCWSTR" + } + ], + "UnlockServiceDatabase": [ + { + "name": "ScLock", + "type": "SC_LOCK" + } + ], + "NotifyServiceStatusChangeA": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwNotifyMask", + "type": "DWORD" + }, + { + "name": "pNotifyBuffer", + "type": "PSERVICE_NOTIFYA" + } + ], + "NotifyServiceStatusChangeW": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwNotifyMask", + "type": "DWORD" + }, + { + "name": "pNotifyBuffer", + "type": "PSERVICE_NOTIFYW" + } + ], + "ControlServiceExA": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwControl", + "type": "DWORD" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "pControlParams", + "type": "PVOID" + } + ], + "ControlServiceExW": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwControl", + "type": "DWORD" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "pControlParams", + "type": "PVOID" + } + ], + "QueryServiceDynamicInformation": [ + { + "name": "hServiceStatus", + "type": "SERVICE_STATUS_HANDLE" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "ppDynamicInfo", + "type": "PVOID" + } + ], + "QueryTraceW": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "QueryTraceA": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "UpdateTraceW": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "UpdateTraceA": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "FlushTraceW": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "FlushTraceA": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "EnableTrace": [ + { + "name": "Enable", + "type": "ULONG" + }, + { + "name": "EnableFlag", + "type": "ULONG" + }, + { + "name": "EnableLevel", + "type": "ULONG" + }, + { + "name": "ControlGuid", + "type": "LPCGUID" + }, + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + } + ], + "EnableTraceEx": [ + { + "name": "ProviderId", + "type": "LPCGUID" + }, + { + "name": "SourceId", + "type": "LPCGUID" + }, + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "IsEnabled", + "type": "ULONG" + }, + { + "name": "Level", + "type": "UCHAR" + }, + { + "name": "MatchAnyKeyword", + "type": "ULONGLONG" + }, + { + "name": "MatchAllKeyword", + "type": "ULONGLONG" + }, + { + "name": "EnableProperty", + "type": "ULONG" + }, + { + "name": "EnableFilterDesc", + "type": "PEVENT_FILTER_DESCRIPTOR" + } + ], + "EnumerateTraceGuidsEx": [ + { + "name": "TraceQueryInfoClass", + "type": "TRACE_QUERY_INFO_CLASS" + }, + { + "name": "InBuffer", + "type": "PVOID" + }, + { + "name": "InBufferSize", + "type": "ULONG" + }, + { + "name": "OutBuffer", + "type": "PVOID" + }, + { + "name": "OutBufferSize", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "CreateTraceInstanceId": [ + { + "name": "RegHandle", + "type": "HANDLE" + }, + { + "name": "InstInfo", + "type": "PEVENT_INSTANCE_INFO" + } + ], + "TraceEvent": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "EventTrace", + "type": "PEVENT_TRACE_HEADER" + } + ], + "TraceEventInstance": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "EventTrace", + "type": "PEVENT_INSTANCE_HEADER" + }, + { + "name": "InstInfo", + "type": "PEVENT_INSTANCE_INFO" + }, + { + "name": "ParentInstInfo", + "type": "PEVENT_INSTANCE_INFO" + } + ], + "EnumerateTraceGuids": [ + { + "name": "GuidPropertiesArray", + "type": "PTRACE_GUID_PROPERTIES" + }, + { + "name": "PropertyArrayCount", + "type": "ULONG" + }, + { + "name": "GuidCount", + "type": "PULONG" + } + ], + "UnregisterTraceGuids": [ + { + "name": "RegistrationHandle", + "type": "TRACEHANDLE" + } + ], + "GetTraceLoggerHandle": [ + { + "name": "Buffer", + "type": "PVOID" + } + ], + "GetTraceEnableLevel": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + } + ], + "GetTraceEnableFlags": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + } + ], + "QueryTraceProcessingHandle": [ + { + "name": "ProcessingHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InformationClass", + "type": "ETW_PROCESS_HANDLE_INFO_TYPE" + }, + { + "name": "InBuffer", + "type": "PVOID" + }, + { + "name": "InBufferSize", + "type": "ULONG" + }, + { + "name": "OutBuffer", + "type": "PVOID" + }, + { + "name": "OutBufferSize", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "TraceMessage": [ + { + "name": "LoggerHandle", + "type": "TRACEHANDLE" + }, + { + "name": "MessageFlags", + "type": "ULONG" + }, + { + "name": "MessageGuid", + "type": "LPCGUID" + }, + { + "name": "MessageNumber", + "type": "USHORT" + } + ], + "TraceMessageVa": [ + { + "name": "LoggerHandle", + "type": "TRACEHANDLE" + }, + { + "name": "MessageFlags", + "type": "ULONG" + }, + { + "name": "MessageGuid", + "type": "LPCGUID" + }, + { + "name": "MessageNumber", + "type": "USHORT" + }, + { + "name": "MessageArgList", + "type": "va_list" + } + ], + "AccessCheck": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "PrivilegeSet", + "type": "PPRIVILEGE_SET" + }, + { + "name": "PrivilegeSetLength", + "type": "LPDWORD" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatus", + "type": "LPBOOL" + } + ], + "AccessCheckByType": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "PrivilegeSet", + "type": "PPRIVILEGE_SET" + }, + { + "name": "PrivilegeSetLength", + "type": "LPDWORD" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatus", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeResultList": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "PrivilegeSet", + "type": "PPRIVILEGE_SET" + }, + { + "name": "PrivilegeSetLength", + "type": "LPDWORD" + }, + { + "name": "GrantedAccessList", + "type": "LPDWORD" + }, + { + "name": "AccessStatusList", + "type": "LPDWORD" + } + ], + "AddAccessAllowedAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AddAccessAllowedAceEx": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AddAccessAllowedObjectAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "ObjectTypeGuid", + "type": "GUID" + }, + { + "name": "InheritedObjectTypeGuid", + "type": "GUID" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AddAccessDeniedAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AddAccessDeniedAceEx": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AddAccessDeniedObjectAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "ObjectTypeGuid", + "type": "GUID" + }, + { + "name": "InheritedObjectTypeGuid", + "type": "GUID" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AddAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "dwStartingAceIndex", + "type": "DWORD" + }, + { + "name": "pAceList", + "type": "LPVOID" + }, + { + "name": "nAceListLength", + "type": "DWORD" + } + ], + "AddAuditAccessAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "dwAccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "bAuditSuccess", + "type": "BOOL" + }, + { + "name": "bAuditFailure", + "type": "BOOL" + } + ], + "AddAuditAccessAceEx": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "dwAccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "bAuditSuccess", + "type": "BOOL" + }, + { + "name": "bAuditFailure", + "type": "BOOL" + } + ], + "AddAuditAccessObjectAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "ObjectTypeGuid", + "type": "GUID" + }, + { + "name": "InheritedObjectTypeGuid", + "type": "GUID" + }, + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "bAuditSuccess", + "type": "BOOL" + }, + { + "name": "bAuditFailure", + "type": "BOOL" + } + ], + "AddMandatoryAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "MandatoryPolicy", + "type": "DWORD" + }, + { + "name": "pLabelSid", + "type": "PSID" + } + ], + "AdjustTokenGroups": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "ResetToDefault", + "type": "BOOL" + }, + { + "name": "NewState", + "type": "PTOKEN_GROUPS" + }, + { + "name": "BufferLength", + "type": "DWORD" + }, + { + "name": "PreviousState", + "type": "PTOKEN_GROUPS" + }, + { + "name": "ReturnLength", + "type": "PDWORD" + } + ], + "AdjustTokenPrivileges": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "DisableAllPrivileges", + "type": "BOOL" + }, + { + "name": "NewState", + "type": "PTOKEN_PRIVILEGES" + }, + { + "name": "BufferLength", + "type": "DWORD" + }, + { + "name": "PreviousState", + "type": "PTOKEN_PRIVILEGES" + }, + { + "name": "ReturnLength", + "type": "PDWORD" + } + ], + "AllocateAndInitializeSid": [ + { + "name": "pIdentifierAuthority", + "type": "PSID_IDENTIFIER_AUTHORITY" + }, + { + "name": "nSubAuthorityCount", + "type": "BYTE" + }, + { + "name": "nSubAuthority0", + "type": "DWORD" + }, + { + "name": "nSubAuthority1", + "type": "DWORD" + }, + { + "name": "nSubAuthority2", + "type": "DWORD" + }, + { + "name": "nSubAuthority3", + "type": "DWORD" + }, + { + "name": "nSubAuthority4", + "type": "DWORD" + }, + { + "name": "nSubAuthority5", + "type": "DWORD" + }, + { + "name": "nSubAuthority6", + "type": "DWORD" + }, + { + "name": "nSubAuthority7", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AllocateLocallyUniqueId": [ + { + "name": "Luid", + "type": "PLUID" + } + ], + "AreAllAccessesGranted": [ + { + "name": "GrantedAccess", + "type": "DWORD" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + } + ], + "AreAnyAccessesGranted": [ + { + "name": "GrantedAccess", + "type": "DWORD" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + } + ], + "CheckTokenMembership": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "SidToCheck", + "type": "PSID" + }, + { + "name": "IsMember", + "type": "PBOOL" + } + ], + "ConvertToAutoInheritPrivateObjectSecurity": [ + { + "name": "ParentDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "CurrentSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "NewSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ObjectType", + "type": "GUID" + }, + { + "name": "IsDirectoryObject", + "type": "BOOLEAN" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + } + ], + "CopySid": [ + { + "name": "nDestinationSidLength", + "type": "DWORD" + }, + { + "name": "pDestinationSid", + "type": "PSID" + }, + { + "name": "pSourceSid", + "type": "PSID" + } + ], + "CreatePrivateObjectSecurity": [ + { + "name": "ParentDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "CreatorDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "NewDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "IsDirectoryObject", + "type": "BOOL" + }, + { + "name": "Token", + "type": "HANDLE" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + } + ], + "CreatePrivateObjectSecurityEx": [ + { + "name": "ParentDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "CreatorDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "NewDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ObjectType", + "type": "GUID" + }, + { + "name": "IsContainerObject", + "type": "BOOL" + }, + { + "name": "AutoInheritFlags", + "type": "ULONG" + }, + { + "name": "Token", + "type": "HANDLE" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + } + ], + "CreatePrivateObjectSecurityWithMultipleInheritance": [ + { + "name": "ParentDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "CreatorDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "NewDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ObjectTypes", + "type": "GUID" + }, + { + "name": "GuidCount", + "type": "ULONG" + }, + { + "name": "IsContainerObject", + "type": "BOOL" + }, + { + "name": "AutoInheritFlags", + "type": "ULONG" + }, + { + "name": "Token", + "type": "HANDLE" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + } + ], + "CreateRestrictedToken": [ + { + "name": "ExistingTokenHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "DisableSidCount", + "type": "DWORD" + }, + { + "name": "SidsToDisable", + "type": "PSID_AND_ATTRIBUTES" + }, + { + "name": "DeletePrivilegeCount", + "type": "DWORD" + }, + { + "name": "PrivilegesToDelete", + "type": "PLUID_AND_ATTRIBUTES" + }, + { + "name": "RestrictedSidCount", + "type": "DWORD" + }, + { + "name": "SidsToRestrict", + "type": "PSID_AND_ATTRIBUTES" + }, + { + "name": "NewTokenHandle", + "type": "PHANDLE" + } + ], + "CreateWellKnownSid": [ + { + "name": "WellKnownSidType", + "type": "WELL_KNOWN_SID_TYPE" + }, + { + "name": "DomainSid", + "type": "PSID" + }, + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "cbSid", + "type": "DWORD" + } + ], + "EqualDomainSid": [ + { + "name": "pSid1", + "type": "PSID" + }, + { + "name": "pSid2", + "type": "PSID" + }, + { + "name": "pfEqual", + "type": "BOOL" + } + ], + "DeleteAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceIndex", + "type": "DWORD" + } + ], + "DestroyPrivateObjectSecurity": [ + { + "name": "ObjectDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "DuplicateToken": [ + { + "name": "ExistingTokenHandle", + "type": "HANDLE" + }, + { + "name": "ImpersonationLevel", + "type": "SECURITY_IMPERSONATION_LEVEL" + }, + { + "name": "DuplicateTokenHandle", + "type": "PHANDLE" + } + ], + "DuplicateTokenEx": [ + { + "name": "hExistingToken", + "type": "HANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "lpTokenAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "ImpersonationLevel", + "type": "SECURITY_IMPERSONATION_LEVEL" + }, + { + "name": "TokenType", + "type": "TOKEN_TYPE" + }, + { + "name": "phNewToken", + "type": "PHANDLE" + } + ], + "EqualPrefixSid": [ + { + "name": "pSid1", + "type": "PSID" + }, + { + "name": "pSid2", + "type": "PSID" + } + ], + "EqualSid": [ + { + "name": "pSid1", + "type": "PSID" + }, + { + "name": "pSid2", + "type": "PSID" + } + ], + "FindFirstFreeAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "pAce", + "type": "LPVOID" + } + ], + "FreeSid": [ + { + "name": "pSid", + "type": "PSID" + } + ], + "GetAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceIndex", + "type": "DWORD" + }, + { + "name": "pAce", + "type": "LPVOID" + } + ], + "GetAclInformation": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "pAclInformation", + "type": "LPVOID" + }, + { + "name": "nAclInformationLength", + "type": "DWORD" + }, + { + "name": "dwAclInformationClass", + "type": "ACL_INFORMATION_CLASS" + } + ], + "GetKernelObjectSecurity": [ + { + "name": "Handle", + "type": "HANDLE" + }, + { + "name": "RequestedInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "GetLengthSid": [ + { + "name": "pSid", + "type": "PSID" + } + ], + "GetPrivateObjectSecurity": [ + { + "name": "ObjectDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ResultantDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "DescriptorLength", + "type": "DWORD" + }, + { + "name": "ReturnLength", + "type": "PDWORD" + } + ], + "GetSecurityDescriptorControl": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pControl", + "type": "PSECURITY_DESCRIPTOR_CONTROL" + }, + { + "name": "lpdwRevision", + "type": "LPDWORD" + } + ], + "GetSecurityDescriptorDacl": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "lpbDaclPresent", + "type": "LPBOOL" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "lpbDaclDefaulted", + "type": "LPBOOL" + } + ], + "GetSecurityDescriptorGroup": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pGroup", + "type": "PSID" + }, + { + "name": "lpbGroupDefaulted", + "type": "LPBOOL" + } + ], + "GetSecurityDescriptorLength": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "GetSecurityDescriptorOwner": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "lpbOwnerDefaulted", + "type": "LPBOOL" + } + ], + "GetSecurityDescriptorRMControl": [ + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "RMControl", + "type": "PUCHAR" + } + ], + "GetSecurityDescriptorSacl": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "lpbSaclPresent", + "type": "LPBOOL" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "lpbSaclDefaulted", + "type": "LPBOOL" + } + ], + "GetSidIdentifierAuthority": [ + { + "name": "pSid", + "type": "PSID" + } + ], + "GetSidLengthRequired": [ + { + "name": "nSubAuthorityCount", + "type": "UCHAR" + } + ], + "GetSidSubAuthority": [ + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "nSubAuthority", + "type": "DWORD" + } + ], + "GetSidSubAuthorityCount": [ + { + "name": "pSid", + "type": "PSID" + } + ], + "GetTokenInformation": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "TokenInformationClass", + "type": "TOKEN_INFORMATION_CLASS" + }, + { + "name": "TokenInformation", + "type": "LPVOID" + }, + { + "name": "TokenInformationLength", + "type": "DWORD" + }, + { + "name": "ReturnLength", + "type": "PDWORD" + } + ], + "GetWindowsAccountDomainSid": [ + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "pDomainSid", + "type": "PSID" + }, + { + "name": "cbDomainSid", + "type": "DWORD" + } + ], + "ImpersonateAnonymousToken": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + } + ], + "ImpersonateLoggedOnUser": [ + { + "name": "hToken", + "type": "HANDLE" + } + ], + "ImpersonateSelf": [ + { + "name": "ImpersonationLevel", + "type": "SECURITY_IMPERSONATION_LEVEL" + } + ], + "InitializeAcl": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "nAclLength", + "type": "DWORD" + }, + { + "name": "dwAclRevision", + "type": "DWORD" + } + ], + "InitializeSecurityDescriptor": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "dwRevision", + "type": "DWORD" + } + ], + "InitializeSid": [ + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "pIdentifierAuthority", + "type": "PSID_IDENTIFIER_AUTHORITY" + }, + { + "name": "nSubAuthorityCount", + "type": "BYTE" + } + ], + "IsTokenRestricted": [ + { + "name": "TokenHandle", + "type": "HANDLE" + } + ], + "IsValidAcl": [ + { + "name": "pAcl", + "type": "PACL" + } + ], + "IsValidSecurityDescriptor": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "IsValidSid": [ + { + "name": "pSid", + "type": "PSID" + } + ], + "IsWellKnownSid": [ + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "WellKnownSidType", + "type": "WELL_KNOWN_SID_TYPE" + } + ], + "MakeAbsoluteSD": [ + { + "name": "pSelfRelativeSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pAbsoluteSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "lpdwAbsoluteSecurityDescriptorSize", + "type": "LPDWORD" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "lpdwDaclSize", + "type": "LPDWORD" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "lpdwSaclSize", + "type": "LPDWORD" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "lpdwOwnerSize", + "type": "LPDWORD" + }, + { + "name": "pPrimaryGroup", + "type": "PSID" + }, + { + "name": "lpdwPrimaryGroupSize", + "type": "LPDWORD" + } + ], + "MakeSelfRelativeSD": [ + { + "name": "pAbsoluteSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pSelfRelativeSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "MapGenericMask": [ + { + "name": "AccessMask", + "type": "PDWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + } + ], + "PrivilegeCheck": [ + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "RequiredPrivileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "pfResult", + "type": "LPBOOL" + } + ], + "QuerySecurityAccessMask": [ + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "DesiredAccess", + "type": "LPDWORD" + } + ], + "RevertToSelf": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetAclInformation": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "pAclInformation", + "type": "LPVOID" + }, + { + "name": "nAclInformationLength", + "type": "DWORD" + }, + { + "name": "dwAclInformationClass", + "type": "ACL_INFORMATION_CLASS" + } + ], + "SetKernelObjectSecurity": [ + { + "name": "Handle", + "type": "HANDLE" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "SetPrivateObjectSecurity": [ + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ModificationDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ObjectsSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "Token", + "type": "HANDLE" + } + ], + "SetPrivateObjectSecurityEx": [ + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ModificationDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ObjectsSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "AutoInheritFlags", + "type": "ULONG" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "Token", + "type": "HANDLE" + } + ], + "SetSecurityAccessMask": [ + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "DesiredAccess", + "type": "LPDWORD" + } + ], + "SetSecurityDescriptorControl": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ControlBitsOfInterest", + "type": "SECURITY_DESCRIPTOR_CONTROL" + }, + { + "name": "ControlBitsToSet", + "type": "SECURITY_DESCRIPTOR_CONTROL" + } + ], + "SetSecurityDescriptorDacl": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "bDaclPresent", + "type": "BOOL" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "bDaclDefaulted", + "type": "BOOL" + } + ], + "SetSecurityDescriptorGroup": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pGroup", + "type": "PSID" + }, + { + "name": "bGroupDefaulted", + "type": "BOOL" + } + ], + "SetSecurityDescriptorOwner": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "bOwnerDefaulted", + "type": "BOOL" + } + ], + "SetSecurityDescriptorRMControl": [ + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "RMControl", + "type": "PUCHAR" + } + ], + "SetSecurityDescriptorSacl": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "bSaclPresent", + "type": "BOOL" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "bSaclDefaulted", + "type": "BOOL" + } + ], + "SetTokenInformation": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "TokenInformationClass", + "type": "TOKEN_INFORMATION_CLASS" + }, + { + "name": "TokenInformation", + "type": "LPVOID" + }, + { + "name": "TokenInformationLength", + "type": "DWORD" + } + ], + "CveEventWrite": [ + { + "name": "CveId", + "type": "PCWSTR" + }, + { + "name": "AdditionalDetails", + "type": "PCWSTR" + } + ], + "SaferGetPolicyInformation": [ + { + "name": "dwScopeId", + "type": "DWORD" + }, + { + "name": "SaferPolicyInfoClass", + "type": "SAFER_POLICY_INFO_CLASS" + }, + { + "name": "InfoBufferSize", + "type": "DWORD" + }, + { + "name": "InfoBuffer", + "type": "PVOID" + }, + { + "name": "InfoBufferRetSize", + "type": "PDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SaferSetPolicyInformation": [ + { + "name": "dwScopeId", + "type": "DWORD" + }, + { + "name": "SaferPolicyInfoClass", + "type": "SAFER_POLICY_INFO_CLASS" + }, + { + "name": "InfoBufferSize", + "type": "DWORD" + }, + { + "name": "InfoBuffer", + "type": "PVOID" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SaferCreateLevel": [ + { + "name": "dwScopeId", + "type": "DWORD" + }, + { + "name": "dwLevelId", + "type": "DWORD" + }, + { + "name": "OpenFlags", + "type": "DWORD" + }, + { + "name": "pLevelHandle", + "type": "SAFER_LEVEL_HANDLE" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SaferCloseLevel": [ + { + "name": "hLevelHandle", + "type": "SAFER_LEVEL_HANDLE" + } + ], + "SaferIdentifyLevel": [ + { + "name": "dwNumProperties", + "type": "DWORD" + }, + { + "name": "pCodeProperties", + "type": "PSAFER_CODE_PROPERTIES" + }, + { + "name": "pLevelHandle", + "type": "SAFER_LEVEL_HANDLE" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SaferComputeTokenFromLevel": [ + { + "name": "LevelHandle", + "type": "SAFER_LEVEL_HANDLE" + }, + { + "name": "InAccessToken", + "type": "HANDLE" + }, + { + "name": "OutAccessToken", + "type": "PHANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SaferGetLevelInformation": [ + { + "name": "LevelHandle", + "type": "SAFER_LEVEL_HANDLE" + }, + { + "name": "dwInfoType", + "type": "SAFER_OBJECT_INFO_CLASS" + }, + { + "name": "lpQueryBuffer", + "type": "LPVOID" + }, + { + "name": "dwInBufferSize", + "type": "DWORD" + }, + { + "name": "lpdwOutBufferSize", + "type": "LPDWORD" + } + ], + "SaferSetLevelInformation": [ + { + "name": "LevelHandle", + "type": "SAFER_LEVEL_HANDLE" + }, + { + "name": "dwInfoType", + "type": "SAFER_OBJECT_INFO_CLASS" + }, + { + "name": "lpQueryBuffer", + "type": "LPVOID" + }, + { + "name": "dwInBufferSize", + "type": "DWORD" + } + ], + "SaferRecordEventLogEntry": [ + { + "name": "hLevel", + "type": "SAFER_LEVEL_HANDLE" + }, + { + "name": "szTargetPath", + "type": "LPCWSTR" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SaferiIsExecutableFileType": [ + { + "name": "szFullPathname", + "type": "LPCWSTR" + }, + { + "name": "bFromShellExecute", + "type": "BOOLEAN" + } + ], + "RegCloseKey": [ + { + "name": "hKey", + "type": "HKEY" + } + ], + "RegOverridePredefKey": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "hNewHKey", + "type": "HKEY" + } + ], + "RegOpenUserClassesRoot": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegOpenCurrentUser": [ + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegDisablePredefinedCache": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegDisablePredefinedCacheEx": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegConnectRegistryA": [ + { + "name": "lpMachineName", + "type": "LPCSTR" + }, + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegConnectRegistryW": [ + { + "name": "lpMachineName", + "type": "LPCWSTR" + }, + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegCreateKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegCreateKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegCreateKeyExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "lpClass", + "type": "LPSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "lpdwDisposition", + "type": "LPDWORD" + } + ], + "RegCreateKeyExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "lpClass", + "type": "LPWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "lpdwDisposition", + "type": "LPDWORD" + } + ], + "RegCreateKeyTransactedA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "lpClass", + "type": "LPSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "lpdwDisposition", + "type": "LPDWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pExtendedParemeter", + "type": "PVOID" + } + ], + "RegCreateKeyTransactedW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "lpClass", + "type": "LPWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "lpdwDisposition", + "type": "LPDWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pExtendedParemeter", + "type": "PVOID" + } + ], + "RegDeleteKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + } + ], + "RegDeleteKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + } + ], + "RegDeleteKeyExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "RegDeleteKeyExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "RegDeleteKeyTransactedA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pExtendedParameter", + "type": "PVOID" + } + ], + "RegDeleteKeyTransactedW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pExtendedParameter", + "type": "PVOID" + } + ], + "RegDisableReflectionKey": [ + { + "name": "hBase", + "type": "HKEY" + } + ], + "RegEnableReflectionKey": [ + { + "name": "hBase", + "type": "HKEY" + } + ], + "RegQueryReflectionKey": [ + { + "name": "hBase", + "type": "HKEY" + }, + { + "name": "bIsReflectionDisabled", + "type": "BOOL" + } + ], + "RegDeleteValueA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpValueName", + "type": "LPCSTR" + } + ], + "RegDeleteValueW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpValueName", + "type": "LPCWSTR" + } + ], + "RegEnumKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPSTR" + }, + { + "name": "cchName", + "type": "DWORD" + } + ], + "RegEnumKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPWSTR" + }, + { + "name": "cchName", + "type": "DWORD" + } + ], + "RegEnumKeyExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpClass", + "type": "LPSTR" + }, + { + "name": "lpcchClass", + "type": "LPDWORD" + }, + { + "name": "lpftLastWriteTime", + "type": "PFILETIME" + } + ], + "RegEnumKeyExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpClass", + "type": "LPWSTR" + }, + { + "name": "lpcchClass", + "type": "LPDWORD" + }, + { + "name": "lpftLastWriteTime", + "type": "PFILETIME" + } + ], + "RegEnumValueA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpValueName", + "type": "LPSTR" + }, + { + "name": "lpcchValueName", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpType", + "type": "LPDWORD" + }, + { + "name": "lpData", + "type": "LPBYTE" + }, + { + "name": "lpcbData", + "type": "LPDWORD" + } + ], + "RegEnumValueW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpValueName", + "type": "LPWSTR" + }, + { + "name": "lpcchValueName", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpType", + "type": "LPDWORD" + }, + { + "name": "lpData", + "type": "LPBYTE" + }, + { + "name": "lpcbData", + "type": "LPDWORD" + } + ], + "RegFlushKey": [ + { + "name": "hKey", + "type": "HKEY" + } + ], + "RegGetKeySecurity": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "lpcbSecurityDescriptor", + "type": "LPDWORD" + } + ], + "RegLoadKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "lpFile", + "type": "LPCSTR" + } + ], + "RegLoadKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "lpFile", + "type": "LPCWSTR" + } + ], + "RegNotifyChangeKeyValue": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "bWatchSubtree", + "type": "BOOL" + }, + { + "name": "dwNotifyFilter", + "type": "DWORD" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "fAsynchronous", + "type": "BOOL" + } + ], + "RegOpenKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegOpenKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegOpenKeyExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "ulOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegOpenKeyExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "ulOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegOpenKeyTransactedA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "ulOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pExtendedParemeter", + "type": "PVOID" + } + ], + "RegOpenKeyTransactedW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "ulOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pExtendedParemeter", + "type": "PVOID" + } + ], + "RegQueryInfoKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpClass", + "type": "LPSTR" + }, + { + "name": "lpcchClass", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpcSubKeys", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxClassLen", + "type": "LPDWORD" + }, + { + "name": "lpcValues", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxValueNameLen", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxValueLen", + "type": "LPDWORD" + }, + { + "name": "lpcbSecurityDescriptor", + "type": "LPDWORD" + }, + { + "name": "lpftLastWriteTime", + "type": "PFILETIME" + } + ], + "RegQueryInfoKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpClass", + "type": "LPWSTR" + }, + { + "name": "lpcchClass", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpcSubKeys", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxClassLen", + "type": "LPDWORD" + }, + { + "name": "lpcValues", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxValueNameLen", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxValueLen", + "type": "LPDWORD" + }, + { + "name": "lpcbSecurityDescriptor", + "type": "LPDWORD" + }, + { + "name": "lpftLastWriteTime", + "type": "PFILETIME" + } + ], + "RegQueryValueA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "lpData", + "type": "LPSTR" + }, + { + "name": "lpcbData", + "type": "PLONG" + } + ], + "RegQueryValueW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "lpData", + "type": "LPWSTR" + }, + { + "name": "lpcbData", + "type": "PLONG" + } + ], + "RegQueryMultipleValuesA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "val_list", + "type": "PVALENTA" + }, + { + "name": "num_vals", + "type": "DWORD" + }, + { + "name": "lpValueBuf", + "type": "LPSTR" + }, + { + "name": "ldwTotsize", + "type": "LPDWORD" + } + ], + "RegQueryMultipleValuesW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "val_list", + "type": "PVALENTW" + }, + { + "name": "num_vals", + "type": "DWORD" + }, + { + "name": "lpValueBuf", + "type": "LPWSTR" + }, + { + "name": "ldwTotsize", + "type": "LPDWORD" + } + ], + "RegQueryValueExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpValueName", + "type": "LPCSTR" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpType", + "type": "LPDWORD" + }, + { + "name": "lpData", + "type": "LPBYTE" + }, + { + "name": "lpcbData", + "type": "LPDWORD" + } + ], + "RegQueryValueExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpValueName", + "type": "LPCWSTR" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpType", + "type": "LPDWORD" + }, + { + "name": "lpData", + "type": "LPBYTE" + }, + { + "name": "lpcbData", + "type": "LPDWORD" + } + ], + "RegReplaceKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "lpNewFile", + "type": "LPCSTR" + }, + { + "name": "lpOldFile", + "type": "LPCSTR" + } + ], + "RegReplaceKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "lpNewFile", + "type": "LPCWSTR" + }, + { + "name": "lpOldFile", + "type": "LPCWSTR" + } + ], + "RegRestoreKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpFile", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "RegRestoreKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpFile", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "RegSaveKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpFile", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "RegSaveKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpFile", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "RegSetKeySecurity": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "RegSetValueA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPCSTR" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "RegSetValueW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPCWSTR" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "RegSetValueExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpValueName", + "type": "LPCSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "RegSetValueExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpValueName", + "type": "LPCWSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "RegUnLoadKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + } + ], + "RegUnLoadKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + } + ], + "RegDeleteKeyValueA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "lpValueName", + "type": "LPCSTR" + } + ], + "RegDeleteKeyValueW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "lpValueName", + "type": "LPCWSTR" + } + ], + "RegSetKeyValueA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "lpValueName", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPCVOID" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "RegSetKeyValueW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "lpValueName", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPCVOID" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "RegDeleteTreeA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + } + ], + "RegDeleteTreeW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + } + ], + "RegCopyTreeA": [ + { + "name": "hKeySrc", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "hKeyDest", + "type": "HKEY" + } + ], + "RegGetValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "lpValue", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "PVOID" + }, + { + "name": "pcbData", + "type": "LPDWORD" + } + ], + "RegGetValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "lpValue", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "PVOID" + }, + { + "name": "pcbData", + "type": "LPDWORD" + } + ], + "RegCopyTreeW": [ + { + "name": "hKeySrc", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "hKeyDest", + "type": "HKEY" + } + ], + "RegLoadMUIStringA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "pszOutBuf", + "type": "LPSTR" + }, + { + "name": "cbOutBuf", + "type": "DWORD" + }, + { + "name": "pcbData", + "type": "LPDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pszDirectory", + "type": "LPCSTR" + } + ], + "RegLoadMUIStringW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "pszOutBuf", + "type": "LPWSTR" + }, + { + "name": "cbOutBuf", + "type": "DWORD" + }, + { + "name": "pcbData", + "type": "LPDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pszDirectory", + "type": "LPCWSTR" + } + ], + "RegLoadAppKeyA": [ + { + "name": "lpFile", + "type": "LPCSTR" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "RegLoadAppKeyW": [ + { + "name": "lpFile", + "type": "LPCWSTR" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "InitiateSystemShutdownA": [ + { + "name": "lpMachineName", + "type": "LPSTR" + }, + { + "name": "lpMessage", + "type": "LPSTR" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "bForceAppsClosed", + "type": "BOOL" + }, + { + "name": "bRebootAfterShutdown", + "type": "BOOL" + } + ], + "InitiateSystemShutdownW": [ + { + "name": "lpMachineName", + "type": "LPWSTR" + }, + { + "name": "lpMessage", + "type": "LPWSTR" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "bForceAppsClosed", + "type": "BOOL" + }, + { + "name": "bRebootAfterShutdown", + "type": "BOOL" + } + ], + "AbortSystemShutdownA": [ + { + "name": "lpMachineName", + "type": "LPSTR" + } + ], + "AbortSystemShutdownW": [ + { + "name": "lpMachineName", + "type": "LPWSTR" + } + ], + "InitiateSystemShutdownExA": [ + { + "name": "lpMachineName", + "type": "LPSTR" + }, + { + "name": "lpMessage", + "type": "LPSTR" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "bForceAppsClosed", + "type": "BOOL" + }, + { + "name": "bRebootAfterShutdown", + "type": "BOOL" + }, + { + "name": "dwReason", + "type": "DWORD" + } + ], + "InitiateSystemShutdownExW": [ + { + "name": "lpMachineName", + "type": "LPWSTR" + }, + { + "name": "lpMessage", + "type": "LPWSTR" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "bForceAppsClosed", + "type": "BOOL" + }, + { + "name": "bRebootAfterShutdown", + "type": "BOOL" + }, + { + "name": "dwReason", + "type": "DWORD" + } + ], + "InitiateShutdownA": [ + { + "name": "lpMachineName", + "type": "LPSTR" + }, + { + "name": "lpMessage", + "type": "LPSTR" + }, + { + "name": "dwGracePeriod", + "type": "DWORD" + }, + { + "name": "dwShutdownFlags", + "type": "DWORD" + }, + { + "name": "dwReason", + "type": "DWORD" + } + ], + "InitiateShutdownW": [ + { + "name": "lpMachineName", + "type": "LPWSTR" + }, + { + "name": "lpMessage", + "type": "LPWSTR" + }, + { + "name": "dwGracePeriod", + "type": "DWORD" + }, + { + "name": "dwShutdownFlags", + "type": "DWORD" + }, + { + "name": "dwReason", + "type": "DWORD" + } + ], + "RegSaveKeyExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpFile", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "RegSaveKeyExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpFile", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "InstallApplication": [ + { + "name": "pInstallInfo", + "type": "PINSTALLDATA" + } + ], + "UninstallApplication": [ + { + "name": "ProductCode", + "type": "LPWSTR" + }, + { + "name": "dwStatus", + "type": "DWORD" + } + ], + "GetManagedApplications": [ + { + "name": "pCategory", + "type": "GUID" + }, + { + "name": "dwQueryFlags", + "type": "DWORD" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "pdwApps", + "type": "LPDWORD" + }, + { + "name": "prgManagedApps", + "type": "PMANAGEDAPPLICATION" + } + ], + "GetLocalManagedApplications": [ + { + "name": "bUserApps", + "type": "BOOL" + }, + { + "name": "pdwApps", + "type": "LPDWORD" + }, + { + "name": "prgLocalApps", + "type": "PLOCALMANAGEDAPPLICATION" + } + ], + "GetManagedApplicationCategories": [ + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "pAppCategory", + "type": "APPCATEGORYINFOLIST" + } + ], + "CryptAcquireContextA": [ + { + "name": "phProv", + "type": "HCRYPTPROV" + }, + { + "name": "szContainer", + "type": "LPCSTR" + }, + { + "name": "szProvider", + "type": "LPCSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptAcquireContextW": [ + { + "name": "phProv", + "type": "HCRYPTPROV" + }, + { + "name": "szContainer", + "type": "LPCWSTR" + }, + { + "name": "szProvider", + "type": "LPCWSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptReleaseContext": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGenKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptDeriveKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "hBaseData", + "type": "HCRYPTHASH" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptDestroyKey": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + } + ], + "CryptSetKeyParam": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetKeyParam": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetHashParam": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetHashParam": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetProvParam": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetProvParam": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGenRandom": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwLen", + "type": "DWORD" + }, + { + "name": "pbBuffer", + "type": "BYTE" + } + ], + "CryptGetUserKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "phUserKey", + "type": "HCRYPTKEY" + } + ], + "CryptExportKey": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "hExpKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwBlobType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + } + ], + "CryptImportKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwDataLen", + "type": "DWORD" + }, + { + "name": "hPubKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptEncrypt": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "Final", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "CryptDecrypt": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "Final", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + } + ], + "CryptCreateHash": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phHash", + "type": "HCRYPTHASH" + } + ], + "CryptHashData": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptHashSessionKey": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptDestroyHash": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + } + ], + "CryptSignHashA": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "szDescription", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "pdwSigLen", + "type": "DWORD" + } + ], + "CryptSignHashW": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "szDescription", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "pdwSigLen", + "type": "DWORD" + } + ], + "CryptVerifySignatureA": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "dwSigLen", + "type": "DWORD" + }, + { + "name": "hPubKey", + "type": "HCRYPTKEY" + }, + { + "name": "szDescription", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptVerifySignatureW": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "dwSigLen", + "type": "DWORD" + }, + { + "name": "hPubKey", + "type": "HCRYPTKEY" + }, + { + "name": "szDescription", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetProviderA": [ + { + "name": "pszProvName", + "type": "LPCSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + } + ], + "CryptSetProviderW": [ + { + "name": "pszProvName", + "type": "LPCWSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + } + ], + "CryptSetProviderExA": [ + { + "name": "pszProvName", + "type": "LPCSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetProviderExW": [ + { + "name": "pszProvName", + "type": "LPCWSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetDefaultProviderA": [ + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszProvName", + "type": "LPSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptGetDefaultProviderW": [ + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszProvName", + "type": "LPWSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptEnumProviderTypesA": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szTypeName", + "type": "LPSTR" + }, + { + "name": "pcbTypeName", + "type": "DWORD" + } + ], + "CryptEnumProviderTypesW": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szTypeName", + "type": "LPWSTR" + }, + { + "name": "pcbTypeName", + "type": "DWORD" + } + ], + "CryptEnumProvidersA": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szProvName", + "type": "LPSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptEnumProvidersW": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szProvName", + "type": "LPWSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptContextAddRef": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptDuplicateKey": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptDuplicateHash": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phHash", + "type": "HCRYPTHASH" + } + ], + "CredWriteW": [ + { + "name": "Credential", + "type": "PCREDENTIALW" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredWriteA": [ + { + "name": "Credential", + "type": "PCREDENTIALA" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredReadW": [ + { + "name": "TargetName", + "type": "LPCWSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALW" + } + ], + "CredReadA": [ + { + "name": "TargetName", + "type": "LPCSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALA" + } + ], + "CredEnumerateW": [ + { + "name": "Filter", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Count", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALW" + } + ], + "CredEnumerateA": [ + { + "name": "Filter", + "type": "LPCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Count", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALA" + } + ], + "CredWriteDomainCredentialsW": [ + { + "name": "TargetInfo", + "type": "PCREDENTIAL_TARGET_INFORMATIONW" + }, + { + "name": "Credential", + "type": "PCREDENTIALW" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredWriteDomainCredentialsA": [ + { + "name": "TargetInfo", + "type": "PCREDENTIAL_TARGET_INFORMATIONA" + }, + { + "name": "Credential", + "type": "PCREDENTIALA" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredReadDomainCredentialsW": [ + { + "name": "TargetInfo", + "type": "PCREDENTIAL_TARGET_INFORMATIONW" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Count", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALW" + } + ], + "CredReadDomainCredentialsA": [ + { + "name": "TargetInfo", + "type": "PCREDENTIAL_TARGET_INFORMATIONA" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Count", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALA" + } + ], + "CredDeleteW": [ + { + "name": "TargetName", + "type": "LPCWSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredDeleteA": [ + { + "name": "TargetName", + "type": "LPCSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredRenameW": [ + { + "name": "OldTargetName", + "type": "LPCWSTR" + }, + { + "name": "NewTargetName", + "type": "LPCWSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredRenameA": [ + { + "name": "OldTargetName", + "type": "LPCSTR" + }, + { + "name": "NewTargetName", + "type": "LPCSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredGetTargetInfoW": [ + { + "name": "TargetName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "TargetInfo", + "type": "PCREDENTIAL_TARGET_INFORMATIONW" + } + ], + "CredGetTargetInfoA": [ + { + "name": "TargetName", + "type": "LPCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "TargetInfo", + "type": "PCREDENTIAL_TARGET_INFORMATIONA" + } + ], + "CredMarshalCredentialW": [ + { + "name": "CredType", + "type": "CRED_MARSHAL_TYPE" + }, + { + "name": "Credential", + "type": "PVOID" + }, + { + "name": "MarshaledCredential", + "type": "LPWSTR" + } + ], + "CredMarshalCredentialA": [ + { + "name": "CredType", + "type": "CRED_MARSHAL_TYPE" + }, + { + "name": "Credential", + "type": "PVOID" + }, + { + "name": "MarshaledCredential", + "type": "LPSTR" + } + ], + "CredUnmarshalCredentialW": [ + { + "name": "MarshaledCredential", + "type": "LPCWSTR" + }, + { + "name": "CredType", + "type": "PCRED_MARSHAL_TYPE" + }, + { + "name": "Credential", + "type": "PVOID" + } + ], + "CredUnmarshalCredentialA": [ + { + "name": "MarshaledCredential", + "type": "LPCSTR" + }, + { + "name": "CredType", + "type": "PCRED_MARSHAL_TYPE" + }, + { + "name": "Credential", + "type": "PVOID" + } + ], + "CredIsMarshaledCredentialW": [ + { + "name": "MarshaledCredential", + "type": "LPCWSTR" + } + ], + "CredIsMarshaledCredentialA": [ + { + "name": "MarshaledCredential", + "type": "LPCSTR" + } + ], + "CredProtectW": [ + { + "name": "fAsSelf", + "type": "BOOL" + }, + { + "name": "pszCredentials", + "type": "LPWSTR" + }, + { + "name": "cchCredentials", + "type": "DWORD" + }, + { + "name": "pszProtectedCredentials", + "type": "LPWSTR" + }, + { + "name": "pcchMaxChars", + "type": "DWORD" + }, + { + "name": "ProtectionType", + "type": "CRED_PROTECTION_TYPE" + } + ], + "CredProtectA": [ + { + "name": "fAsSelf", + "type": "BOOL" + }, + { + "name": "pszCredentials", + "type": "LPSTR" + }, + { + "name": "cchCredentials", + "type": "DWORD" + }, + { + "name": "pszProtectedCredentials", + "type": "LPSTR" + }, + { + "name": "pcchMaxChars", + "type": "DWORD" + }, + { + "name": "ProtectionType", + "type": "CRED_PROTECTION_TYPE" + } + ], + "CredUnprotectW": [ + { + "name": "fAsSelf", + "type": "BOOL" + }, + { + "name": "pszProtectedCredentials", + "type": "LPWSTR" + }, + { + "name": "cchProtectedCredentials", + "type": "DWORD" + }, + { + "name": "pszCredentials", + "type": "LPWSTR" + }, + { + "name": "pcchMaxChars", + "type": "DWORD" + } + ], + "CredUnprotectA": [ + { + "name": "fAsSelf", + "type": "BOOL" + }, + { + "name": "pszProtectedCredentials", + "type": "LPSTR" + }, + { + "name": "cchProtectedCredentials", + "type": "DWORD" + }, + { + "name": "pszCredentials", + "type": "LPSTR" + }, + { + "name": "pcchMaxChars", + "type": "DWORD" + } + ], + "CredIsProtectedW": [ + { + "name": "pszProtectedCredentials", + "type": "LPWSTR" + }, + { + "name": "pProtectionType", + "type": "CRED_PROTECTION_TYPE" + } + ], + "CredIsProtectedA": [ + { + "name": "pszProtectedCredentials", + "type": "LPSTR" + }, + { + "name": "pProtectionType", + "type": "CRED_PROTECTION_TYPE" + } + ], + "CredFindBestCredentialW": [ + { + "name": "TargetName", + "type": "LPCWSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALW" + } + ], + "CredFindBestCredentialA": [ + { + "name": "TargetName", + "type": "LPCSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALA" + } + ], + "CredGetSessionTypes": [ + { + "name": "MaximumPersistCount", + "type": "DWORD" + }, + { + "name": "MaximumPersist", + "type": "LPDWORD" + } + ], + "CredFree": [ + { + "name": "Buffer", + "type": "PVOID" + } + ], + "ConvertSidToStringSidA": [ + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "StringSid", + "type": "LPSTR" + } + ], + "ConvertSidToStringSidW": [ + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "StringSid", + "type": "LPWSTR" + } + ], + "ConvertStringSidToSidA": [ + { + "name": "StringSid", + "type": "LPCSTR" + }, + { + "name": "Sid", + "type": "PSID" + } + ], + "ConvertStringSidToSidW": [ + { + "name": "StringSid", + "type": "LPCWSTR" + }, + { + "name": "Sid", + "type": "PSID" + } + ], + "ConvertStringSecurityDescriptorToSecurityDescriptorA": [ + { + "name": "StringSecurityDescriptor", + "type": "LPCSTR" + }, + { + "name": "StringSDRevision", + "type": "DWORD" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "SecurityDescriptorSize", + "type": "PULONG" + } + ], + "ConvertStringSecurityDescriptorToSecurityDescriptorW": [ + { + "name": "StringSecurityDescriptor", + "type": "LPCWSTR" + }, + { + "name": "StringSDRevision", + "type": "DWORD" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "SecurityDescriptorSize", + "type": "PULONG" + } + ], + "ConvertSecurityDescriptorToStringSecurityDescriptorA": [ + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "RequestedStringSDRevision", + "type": "DWORD" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "StringSecurityDescriptor", + "type": "LPSTR" + }, + { + "name": "StringSecurityDescriptorLen", + "type": "PULONG" + } + ], + "ConvertSecurityDescriptorToStringSecurityDescriptorW": [ + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "RequestedStringSDRevision", + "type": "DWORD" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "StringSecurityDescriptor", + "type": "LPWSTR" + }, + { + "name": "StringSecurityDescriptorLen", + "type": "PULONG" + } + ], + "ImpersonateNamedPipeClient": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + } + ], + "MSChapSrvChangePassword": [ + { + "name": "ServerName", + "type": "PWSTR" + }, + { + "name": "UserName", + "type": "PWSTR" + }, + { + "name": "LmOldPresent", + "type": "BOOLEAN" + }, + { + "name": "LmOldOwfPassword", + "type": "PLM_OWF_PASSWORD" + }, + { + "name": "LmNewOwfPassword", + "type": "PLM_OWF_PASSWORD" + }, + { + "name": "NtOldOwfPassword", + "type": "PNT_OWF_PASSWORD" + }, + { + "name": "NtNewOwfPassword", + "type": "PNT_OWF_PASSWORD" + } + ], + "MSChapSrvChangePassword2": [ + { + "name": "ServerName", + "type": "PWSTR" + }, + { + "name": "UserName", + "type": "PWSTR" + }, + { + "name": "NewPasswordEncryptedWithOldNt", + "type": "PSAMPR_ENCRYPTED_USER_PASSWORD" + }, + { + "name": "OldNtOwfPasswordEncryptedWithNewNt", + "type": "PENCRYPTED_NT_OWF_PASSWORD" + }, + { + "name": "LmPresent", + "type": "BOOLEAN" + }, + { + "name": "NewPasswordEncryptedWithOldLm", + "type": "PSAMPR_ENCRYPTED_USER_PASSWORD" + }, + { + "name": "OldLmOwfPasswordEncryptedWithNewLmOrNt", + "type": "PENCRYPTED_LM_OWF_PASSWORD" + } + ], + "AccessCheckAndAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPWSTR" + }, + { + "name": "ObjectName", + "type": "LPWSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatus", + "type": "LPBOOL" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeAndAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPCWSTR" + }, + { + "name": "ObjectName", + "type": "LPCWSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "AuditType", + "type": "AUDIT_EVENT_TYPE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatus", + "type": "LPBOOL" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeResultListAndAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPCWSTR" + }, + { + "name": "ObjectName", + "type": "LPCWSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "AuditType", + "type": "AUDIT_EVENT_TYPE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccessList", + "type": "LPDWORD" + }, + { + "name": "AccessStatusList", + "type": "LPDWORD" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeResultListAndAuditAlarmByHandleW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "ObjectTypeName", + "type": "LPCWSTR" + }, + { + "name": "ObjectName", + "type": "LPCWSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "AuditType", + "type": "AUDIT_EVENT_TYPE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccessList", + "type": "LPDWORD" + }, + { + "name": "AccessStatusList", + "type": "LPDWORD" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "GetFileSecurityW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "RequestedInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "ObjectCloseAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "GenerateOnClose", + "type": "BOOL" + } + ], + "ObjectDeleteAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "GenerateOnClose", + "type": "BOOL" + } + ], + "ObjectOpenAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPWSTR" + }, + { + "name": "ObjectName", + "type": "LPWSTR" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "GrantedAccess", + "type": "DWORD" + }, + { + "name": "Privileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "AccessGranted", + "type": "BOOL" + }, + { + "name": "GenerateOnClose", + "type": "LPBOOL" + } + ], + "ObjectPrivilegeAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "Privileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "AccessGranted", + "type": "BOOL" + } + ], + "PrivilegedServiceAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "ServiceName", + "type": "LPCWSTR" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "Privileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "AccessGranted", + "type": "BOOL" + } + ], + "SetFileSecurityW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "EncryptFileA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "EncryptFileW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "DecryptFileA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "DecryptFileW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "FileEncryptionStatusA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpStatus", + "type": "LPDWORD" + } + ], + "FileEncryptionStatusW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpStatus", + "type": "LPDWORD" + } + ], + "OpenEncryptedFileRawA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "pvContext", + "type": "PVOID" + } + ], + "OpenEncryptedFileRawW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "pvContext", + "type": "PVOID" + } + ], + "ReadEncryptedFileRaw": [ + { + "name": "pfExportCallback", + "type": "PFE_EXPORT_FUNC" + }, + { + "name": "pvCallbackContext", + "type": "PVOID" + }, + { + "name": "pvContext", + "type": "PVOID" + } + ], + "WriteEncryptedFileRaw": [ + { + "name": "pfImportCallback", + "type": "PFE_IMPORT_FUNC" + }, + { + "name": "pvCallbackContext", + "type": "PVOID" + }, + { + "name": "pvContext", + "type": "PVOID" + } + ], + "CloseEncryptedFileRaw": [ + { + "name": "pvContext", + "type": "PVOID" + } + ], + "IsTextUnicode": [ + { + "name": "lpv", + "type": "void" + }, + { + "name": "iSize", + "type": "int" + }, + { + "name": "lpiResult", + "type": "LPINT" + } + ], + "ClearEventLogA": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "lpBackupFileName", + "type": "LPCSTR" + } + ], + "ClearEventLogW": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "lpBackupFileName", + "type": "LPCWSTR" + } + ], + "BackupEventLogA": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "lpBackupFileName", + "type": "LPCSTR" + } + ], + "BackupEventLogW": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "lpBackupFileName", + "type": "LPCWSTR" + } + ], + "CloseEventLog": [ + { + "name": "hEventLog", + "type": "HANDLE" + } + ], + "DeregisterEventSource": [ + { + "name": "hEventLog", + "type": "HANDLE" + } + ], + "NotifyChangeEventLog": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "GetNumberOfEventLogRecords": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "NumberOfRecords", + "type": "PDWORD" + } + ], + "GetOldestEventLogRecord": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "OldestRecord", + "type": "PDWORD" + } + ], + "OpenEventLogA": [ + { + "name": "lpUNCServerName", + "type": "LPCSTR" + }, + { + "name": "lpSourceName", + "type": "LPCSTR" + } + ], + "OpenEventLogW": [ + { + "name": "lpUNCServerName", + "type": "LPCWSTR" + }, + { + "name": "lpSourceName", + "type": "LPCWSTR" + } + ], + "RegisterEventSourceA": [ + { + "name": "lpUNCServerName", + "type": "LPCSTR" + }, + { + "name": "lpSourceName", + "type": "LPCSTR" + } + ], + "RegisterEventSourceW": [ + { + "name": "lpUNCServerName", + "type": "LPCWSTR" + }, + { + "name": "lpSourceName", + "type": "LPCWSTR" + } + ], + "OpenBackupEventLogA": [ + { + "name": "lpUNCServerName", + "type": "LPCSTR" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "OpenBackupEventLogW": [ + { + "name": "lpUNCServerName", + "type": "LPCWSTR" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "ReadEventLogA": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "dwReadFlags", + "type": "DWORD" + }, + { + "name": "dwRecordOffset", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "pnBytesRead", + "type": "DWORD" + }, + { + "name": "pnMinNumberOfBytesNeeded", + "type": "DWORD" + } + ], + "ReadEventLogW": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "dwReadFlags", + "type": "DWORD" + }, + { + "name": "dwRecordOffset", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "pnBytesRead", + "type": "DWORD" + }, + { + "name": "pnMinNumberOfBytesNeeded", + "type": "DWORD" + } + ], + "ReportEventA": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "wType", + "type": "WORD" + }, + { + "name": "wCategory", + "type": "WORD" + }, + { + "name": "dwEventID", + "type": "DWORD" + }, + { + "name": "lpUserSid", + "type": "PSID" + }, + { + "name": "wNumStrings", + "type": "WORD" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "lpStrings", + "type": "LPCSTR" + }, + { + "name": "lpRawData", + "type": "LPVOID" + } + ], + "ReportEventW": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "wType", + "type": "WORD" + }, + { + "name": "wCategory", + "type": "WORD" + }, + { + "name": "dwEventID", + "type": "DWORD" + }, + { + "name": "lpUserSid", + "type": "PSID" + }, + { + "name": "wNumStrings", + "type": "WORD" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "lpStrings", + "type": "LPCWSTR" + }, + { + "name": "lpRawData", + "type": "LPVOID" + } + ], + "GetEventLogInformation": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "OperationStart": [ + { + "name": "OperationStartParams", + "type": "OPERATION_START_PARAMETERS" + } + ], + "OperationEnd": [ + { + "name": "OperationEndParams", + "type": "OPERATION_END_PARAMETERS" + } + ], + "AccessCheckAndAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPSTR" + }, + { + "name": "ObjectName", + "type": "LPSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatus", + "type": "LPBOOL" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeAndAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPCSTR" + }, + { + "name": "ObjectName", + "type": "LPCSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "AuditType", + "type": "AUDIT_EVENT_TYPE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatus", + "type": "LPBOOL" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeResultListAndAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPCSTR" + }, + { + "name": "ObjectName", + "type": "LPCSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "AuditType", + "type": "AUDIT_EVENT_TYPE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatusList", + "type": "LPDWORD" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeResultListAndAuditAlarmByHandleA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "ObjectTypeName", + "type": "LPCSTR" + }, + { + "name": "ObjectName", + "type": "LPCSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "AuditType", + "type": "AUDIT_EVENT_TYPE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatusList", + "type": "LPDWORD" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "ObjectOpenAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPSTR" + }, + { + "name": "ObjectName", + "type": "LPSTR" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "GrantedAccess", + "type": "DWORD" + }, + { + "name": "Privileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "AccessGranted", + "type": "BOOL" + }, + { + "name": "GenerateOnClose", + "type": "LPBOOL" + } + ], + "ObjectPrivilegeAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "Privileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "AccessGranted", + "type": "BOOL" + } + ], + "ObjectCloseAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "GenerateOnClose", + "type": "BOOL" + } + ], + "ObjectDeleteAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "GenerateOnClose", + "type": "BOOL" + } + ], + "PrivilegedServiceAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "ServiceName", + "type": "LPCSTR" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "Privileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "AccessGranted", + "type": "BOOL" + } + ], + "AddConditionalAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AceType", + "type": "UCHAR" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "ConditionStr", + "type": "PWCHAR" + }, + { + "name": "ReturnLength", + "type": "DWORD" + } + ], + "SetFileSecurityA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "GetFileSecurityA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "RequestedInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "LookupAccountSidA": [ + { + "name": "lpSystemName", + "type": "LPCSTR" + }, + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "Name", + "type": "LPSTR" + }, + { + "name": "cchName", + "type": "LPDWORD" + }, + { + "name": "ReferencedDomainName", + "type": "LPSTR" + }, + { + "name": "cchReferencedDomainName", + "type": "LPDWORD" + }, + { + "name": "peUse", + "type": "PSID_NAME_USE" + } + ], + "LookupAccountSidW": [ + { + "name": "lpSystemName", + "type": "LPCWSTR" + }, + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "Name", + "type": "LPWSTR" + }, + { + "name": "cchName", + "type": "LPDWORD" + }, + { + "name": "ReferencedDomainName", + "type": "LPWSTR" + }, + { + "name": "cchReferencedDomainName", + "type": "LPDWORD" + }, + { + "name": "peUse", + "type": "PSID_NAME_USE" + } + ], + "LookupAccountNameA": [ + { + "name": "lpSystemName", + "type": "LPCSTR" + }, + { + "name": "lpAccountName", + "type": "LPCSTR" + }, + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "cbSid", + "type": "LPDWORD" + }, + { + "name": "ReferencedDomainName", + "type": "LPSTR" + }, + { + "name": "cchReferencedDomainName", + "type": "LPDWORD" + }, + { + "name": "peUse", + "type": "PSID_NAME_USE" + } + ], + "LookupAccountNameW": [ + { + "name": "lpSystemName", + "type": "LPCWSTR" + }, + { + "name": "lpAccountName", + "type": "LPCWSTR" + }, + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "cbSid", + "type": "LPDWORD" + }, + { + "name": "ReferencedDomainName", + "type": "LPWSTR" + }, + { + "name": "cchReferencedDomainName", + "type": "LPDWORD" + }, + { + "name": "peUse", + "type": "PSID_NAME_USE" + } + ], + "LookupAccountSidLocalA": [ + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "Name", + "type": "LPSTR" + }, + { + "name": "cchName", + "type": "LPDWORD" + }, + { + "name": "ReferencedDomainName", + "type": "LPSTR" + }, + { + "name": "cchReferencedDomainName", + "type": "LPDWORD" + }, + { + "name": "peUse", + "type": "PSID_NAME_USE" + } + ], + "LookupAccountSidLocalW": [ + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "Name", + "type": "LPWSTR" + }, + { + "name": "cchName", + "type": "LPDWORD" + }, + { + "name": "ReferencedDomainName", + "type": "LPWSTR" + }, + { + "name": "cchReferencedDomainName", + "type": "LPDWORD" + }, + { + "name": "peUse", + "type": "PSID_NAME_USE" + } + ], + "LookupPrivilegeValueA": [ + { + "name": "lpSystemName", + "type": "LPCSTR" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpLuid", + "type": "PLUID" + } + ], + "LookupPrivilegeValueW": [ + { + "name": "lpSystemName", + "type": "LPCWSTR" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpLuid", + "type": "PLUID" + } + ], + "LookupPrivilegeNameA": [ + { + "name": "lpSystemName", + "type": "LPCSTR" + }, + { + "name": "lpLuid", + "type": "PLUID" + }, + { + "name": "lpName", + "type": "LPSTR" + }, + { + "name": "cchName", + "type": "LPDWORD" + } + ], + "LookupPrivilegeNameW": [ + { + "name": "lpSystemName", + "type": "LPCWSTR" + }, + { + "name": "lpLuid", + "type": "PLUID" + }, + { + "name": "lpName", + "type": "LPWSTR" + }, + { + "name": "cchName", + "type": "LPDWORD" + } + ], + "LookupPrivilegeDisplayNameA": [ + { + "name": "lpSystemName", + "type": "LPCSTR" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpDisplayName", + "type": "LPSTR" + }, + { + "name": "cchDisplayName", + "type": "LPDWORD" + }, + { + "name": "lpLanguageId", + "type": "LPDWORD" + } + ], + "LookupPrivilegeDisplayNameW": [ + { + "name": "lpSystemName", + "type": "LPCWSTR" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpDisplayName", + "type": "LPWSTR" + }, + { + "name": "cchDisplayName", + "type": "LPDWORD" + }, + { + "name": "lpLanguageId", + "type": "LPDWORD" + } + ], + "GetUserNameA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "pcbBuffer", + "type": "LPDWORD" + } + ], + "GetUserNameW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "pcbBuffer", + "type": "LPDWORD" + } + ], + "LogonUserA": [ + { + "name": "lpszUsername", + "type": "LPCSTR" + }, + { + "name": "lpszDomain", + "type": "LPCSTR" + }, + { + "name": "lpszPassword", + "type": "LPCSTR" + }, + { + "name": "dwLogonType", + "type": "DWORD" + }, + { + "name": "dwLogonProvider", + "type": "DWORD" + }, + { + "name": "phToken", + "type": "PHANDLE" + } + ], + "LogonUserW": [ + { + "name": "lpszUsername", + "type": "LPCWSTR" + }, + { + "name": "lpszDomain", + "type": "LPCWSTR" + }, + { + "name": "lpszPassword", + "type": "LPCWSTR" + }, + { + "name": "dwLogonType", + "type": "DWORD" + }, + { + "name": "dwLogonProvider", + "type": "DWORD" + }, + { + "name": "phToken", + "type": "PHANDLE" + } + ], + "LogonUserExA": [ + { + "name": "lpszUsername", + "type": "LPCSTR" + }, + { + "name": "lpszDomain", + "type": "LPCSTR" + }, + { + "name": "lpszPassword", + "type": "LPCSTR" + }, + { + "name": "dwLogonType", + "type": "DWORD" + }, + { + "name": "dwLogonProvider", + "type": "DWORD" + }, + { + "name": "phToken", + "type": "PHANDLE" + }, + { + "name": "ppLogonSid", + "type": "PSID" + }, + { + "name": "ppProfileBuffer", + "type": "PVOID" + }, + { + "name": "pdwProfileLength", + "type": "LPDWORD" + }, + { + "name": "pQuotaLimits", + "type": "PQUOTA_LIMITS" + } + ], + "LogonUserExW": [ + { + "name": "lpszUsername", + "type": "LPCWSTR" + }, + { + "name": "lpszDomain", + "type": "LPCWSTR" + }, + { + "name": "lpszPassword", + "type": "LPCWSTR" + }, + { + "name": "dwLogonType", + "type": "DWORD" + }, + { + "name": "dwLogonProvider", + "type": "DWORD" + }, + { + "name": "phToken", + "type": "PHANDLE" + }, + { + "name": "ppLogonSid", + "type": "PSID" + }, + { + "name": "ppProfileBuffer", + "type": "PVOID" + }, + { + "name": "pdwProfileLength", + "type": "LPDWORD" + }, + { + "name": "pQuotaLimits", + "type": "PQUOTA_LIMITS" + } + ], + "CreateProcessWithLogonW": [ + { + "name": "lpUsername", + "type": "LPCWSTR" + }, + { + "name": "lpDomain", + "type": "LPCWSTR" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + }, + { + "name": "dwLogonFlags", + "type": "DWORD" + }, + { + "name": "lpApplicationName", + "type": "LPCWSTR" + }, + { + "name": "lpCommandLine", + "type": "LPWSTR" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "lpCurrentDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOW" + }, + { + "name": "lpProcessInformation", + "type": "LPPROCESS_INFORMATION" + } + ], + "CreateProcessWithTokenW": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwLogonFlags", + "type": "DWORD" + }, + { + "name": "lpApplicationName", + "type": "LPCWSTR" + }, + { + "name": "lpCommandLine", + "type": "LPWSTR" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "lpCurrentDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOW" + }, + { + "name": "lpProcessInformation", + "type": "LPPROCESS_INFORMATION" + } + ], + "GetCurrentHwProfileA": [ + { + "name": "lpHwProfileInfo", + "type": "LPHW_PROFILE_INFOA" + } + ], + "GetCurrentHwProfileW": [ + { + "name": "lpHwProfileInfo", + "type": "LPHW_PROFILE_INFOW" + } + ], + "SetEntriesInAclA": [ + { + "name": "cCountOfExplicitEntries", + "type": "ULONG" + }, + { + "name": "pListOfExplicitEntries", + "type": "PEXPLICIT_ACCESS_A" + }, + { + "name": "OldAcl", + "type": "PACL" + }, + { + "name": "NewAcl", + "type": "PACL" + } + ], + "SetEntriesInAclW": [ + { + "name": "cCountOfExplicitEntries", + "type": "ULONG" + }, + { + "name": "pListOfExplicitEntries", + "type": "PEXPLICIT_ACCESS_W" + }, + { + "name": "OldAcl", + "type": "PACL" + }, + { + "name": "NewAcl", + "type": "PACL" + } + ], + "GetExplicitEntriesFromAclA": [ + { + "name": "pacl", + "type": "PACL" + }, + { + "name": "pcCountOfExplicitEntries", + "type": "PULONG" + }, + { + "name": "pListOfExplicitEntries", + "type": "PEXPLICIT_ACCESS_A" + } + ], + "GetExplicitEntriesFromAclW": [ + { + "name": "pacl", + "type": "PACL" + }, + { + "name": "pcCountOfExplicitEntries", + "type": "PULONG" + }, + { + "name": "pListOfExplicitEntries", + "type": "PEXPLICIT_ACCESS_W" + } + ], + "GetEffectiveRightsFromAclA": [ + { + "name": "pacl", + "type": "PACL" + }, + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + }, + { + "name": "pAccessRights", + "type": "PACCESS_MASK" + } + ], + "GetEffectiveRightsFromAclW": [ + { + "name": "pacl", + "type": "PACL" + }, + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + }, + { + "name": "pAccessRights", + "type": "PACCESS_MASK" + } + ], + "GetAuditedPermissionsFromAclA": [ + { + "name": "pacl", + "type": "PACL" + }, + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + }, + { + "name": "pSuccessfulAuditedRights", + "type": "PACCESS_MASK" + }, + { + "name": "pFailedAuditRights", + "type": "PACCESS_MASK" + } + ], + "GetAuditedPermissionsFromAclW": [ + { + "name": "pacl", + "type": "PACL" + }, + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + }, + { + "name": "pSuccessfulAuditedRights", + "type": "PACCESS_MASK" + }, + { + "name": "pFailedAuditRights", + "type": "PACCESS_MASK" + } + ], + "GetNamedSecurityInfoA": [ + { + "name": "pObjectName", + "type": "LPCSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ppsidOwner", + "type": "PSID" + }, + { + "name": "ppsidGroup", + "type": "PSID" + }, + { + "name": "ppDacl", + "type": "PACL" + }, + { + "name": "ppSacl", + "type": "PACL" + }, + { + "name": "ppSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "GetNamedSecurityInfoW": [ + { + "name": "pObjectName", + "type": "LPCWSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ppsidOwner", + "type": "PSID" + }, + { + "name": "ppsidGroup", + "type": "PSID" + }, + { + "name": "ppDacl", + "type": "PACL" + }, + { + "name": "ppSacl", + "type": "PACL" + }, + { + "name": "ppSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "GetSecurityInfo": [ + { + "name": "handle", + "type": "HANDLE" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ppsidOwner", + "type": "PSID" + }, + { + "name": "ppsidGroup", + "type": "PSID" + }, + { + "name": "ppDacl", + "type": "PACL" + }, + { + "name": "ppSacl", + "type": "PACL" + }, + { + "name": "ppSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "SetNamedSecurityInfoA": [ + { + "name": "pObjectName", + "type": "LPSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "psidOwner", + "type": "PSID" + }, + { + "name": "psidGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + } + ], + "SetNamedSecurityInfoW": [ + { + "name": "pObjectName", + "type": "LPWSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "psidOwner", + "type": "PSID" + }, + { + "name": "psidGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + } + ], + "SetSecurityInfo": [ + { + "name": "handle", + "type": "HANDLE" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "psidOwner", + "type": "PSID" + }, + { + "name": "psidGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + } + ], + "GetInheritanceSourceA": [ + { + "name": "pObjectName", + "type": "LPSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "Container", + "type": "BOOL" + }, + { + "name": "pObjectClassGuids", + "type": "GUID" + }, + { + "name": "GuidCount", + "type": "DWORD" + }, + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "pfnArray", + "type": "PFN_OBJECT_MGR_FUNCTS" + }, + { + "name": "pGenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "pInheritArray", + "type": "PINHERITED_FROMA" + } + ], + "GetInheritanceSourceW": [ + { + "name": "pObjectName", + "type": "LPWSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "Container", + "type": "BOOL" + }, + { + "name": "pObjectClassGuids", + "type": "GUID" + }, + { + "name": "GuidCount", + "type": "DWORD" + }, + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "pfnArray", + "type": "PFN_OBJECT_MGR_FUNCTS" + }, + { + "name": "pGenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "pInheritArray", + "type": "PINHERITED_FROMW" + } + ], + "FreeInheritedFromArray": [ + { + "name": "pInheritArray", + "type": "PINHERITED_FROMW" + }, + { + "name": "AceCnt", + "type": "USHORT" + }, + { + "name": "pfnArray", + "type": "PFN_OBJECT_MGR_FUNCTS" + } + ], + "TreeResetNamedSecurityInfoA": [ + { + "name": "pObjectName", + "type": "LPSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "pGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "KeepExplicit", + "type": "BOOL" + }, + { + "name": "fnProgress", + "type": "FN_PROGRESS" + }, + { + "name": "ProgressInvokeSetting", + "type": "PROG_INVOKE_SETTING" + }, + { + "name": "Args", + "type": "PVOID" + } + ], + "TreeResetNamedSecurityInfoW": [ + { + "name": "pObjectName", + "type": "LPWSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "pGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "KeepExplicit", + "type": "BOOL" + }, + { + "name": "fnProgress", + "type": "FN_PROGRESS" + }, + { + "name": "ProgressInvokeSetting", + "type": "PROG_INVOKE_SETTING" + }, + { + "name": "Args", + "type": "PVOID" + } + ], + "TreeSetNamedSecurityInfoA": [ + { + "name": "pObjectName", + "type": "LPSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "pGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "dwAction", + "type": "DWORD" + }, + { + "name": "fnProgress", + "type": "FN_PROGRESS" + }, + { + "name": "ProgressInvokeSetting", + "type": "PROG_INVOKE_SETTING" + }, + { + "name": "Args", + "type": "PVOID" + } + ], + "TreeSetNamedSecurityInfoW": [ + { + "name": "pObjectName", + "type": "LPWSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "pGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "dwAction", + "type": "DWORD" + }, + { + "name": "fnProgress", + "type": "FN_PROGRESS" + }, + { + "name": "ProgressInvokeSetting", + "type": "PROG_INVOKE_SETTING" + }, + { + "name": "Args", + "type": "PVOID" + } + ], + "BuildSecurityDescriptorA": [ + { + "name": "pOwner", + "type": "PTRUSTEE_A" + }, + { + "name": "pGroup", + "type": "PTRUSTEE_A" + }, + { + "name": "cCountOfAccessEntries", + "type": "ULONG" + }, + { + "name": "pListOfAccessEntries", + "type": "PEXPLICIT_ACCESS_A" + }, + { + "name": "cCountOfAuditEntries", + "type": "ULONG" + }, + { + "name": "pListOfAuditEntries", + "type": "PEXPLICIT_ACCESS_A" + }, + { + "name": "pOldSD", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pSizeNewSD", + "type": "PULONG" + }, + { + "name": "pNewSD", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "BuildSecurityDescriptorW": [ + { + "name": "pOwner", + "type": "PTRUSTEE_W" + }, + { + "name": "pGroup", + "type": "PTRUSTEE_W" + }, + { + "name": "cCountOfAccessEntries", + "type": "ULONG" + }, + { + "name": "pListOfAccessEntries", + "type": "PEXPLICIT_ACCESS_W" + }, + { + "name": "cCountOfAuditEntries", + "type": "ULONG" + }, + { + "name": "pListOfAuditEntries", + "type": "PEXPLICIT_ACCESS_W" + }, + { + "name": "pOldSD", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pSizeNewSD", + "type": "PULONG" + }, + { + "name": "pNewSD", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "LookupSecurityDescriptorPartsA": [ + { + "name": "ppOwner", + "type": "PTRUSTEE_A" + }, + { + "name": "ppGroup", + "type": "PTRUSTEE_A" + }, + { + "name": "pcCountOfAccessEntries", + "type": "PULONG" + }, + { + "name": "ppListOfAccessEntries", + "type": "PEXPLICIT_ACCESS_A" + }, + { + "name": "pcCountOfAuditEntries", + "type": "PULONG" + }, + { + "name": "ppListOfAuditEntries", + "type": "PEXPLICIT_ACCESS_A" + }, + { + "name": "pSD", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "LookupSecurityDescriptorPartsW": [ + { + "name": "ppOwner", + "type": "PTRUSTEE_W" + }, + { + "name": "ppGroup", + "type": "PTRUSTEE_W" + }, + { + "name": "pcCountOfAccessEntries", + "type": "PULONG" + }, + { + "name": "ppListOfAccessEntries", + "type": "PEXPLICIT_ACCESS_W" + }, + { + "name": "pcCountOfAuditEntries", + "type": "PULONG" + }, + { + "name": "ppListOfAuditEntries", + "type": "PEXPLICIT_ACCESS_W" + }, + { + "name": "pSD", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "BuildExplicitAccessWithNameA": [ + { + "name": "pExplicitAccess", + "type": "PEXPLICIT_ACCESS_A" + }, + { + "name": "pTrusteeName", + "type": "LPSTR" + }, + { + "name": "AccessPermissions", + "type": "DWORD" + }, + { + "name": "AccessMode", + "type": "ACCESS_MODE" + }, + { + "name": "Inheritance", + "type": "DWORD" + } + ], + "BuildExplicitAccessWithNameW": [ + { + "name": "pExplicitAccess", + "type": "PEXPLICIT_ACCESS_W" + }, + { + "name": "pTrusteeName", + "type": "LPWSTR" + }, + { + "name": "AccessPermissions", + "type": "DWORD" + }, + { + "name": "AccessMode", + "type": "ACCESS_MODE" + }, + { + "name": "Inheritance", + "type": "DWORD" + } + ], + "BuildTrusteeWithNameA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + }, + { + "name": "pName", + "type": "LPSTR" + } + ], + "BuildTrusteeWithNameW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + }, + { + "name": "pName", + "type": "LPWSTR" + } + ], + "BuildTrusteeWithSidA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "BuildTrusteeWithSidW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "BuildTrusteeWithObjectsAndSidA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + }, + { + "name": "pObjSid", + "type": "POBJECTS_AND_SID" + }, + { + "name": "pObjectGuid", + "type": "GUID" + }, + { + "name": "pInheritedObjectGuid", + "type": "GUID" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "BuildTrusteeWithObjectsAndSidW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + }, + { + "name": "pObjSid", + "type": "POBJECTS_AND_SID" + }, + { + "name": "pObjectGuid", + "type": "GUID" + }, + { + "name": "pInheritedObjectGuid", + "type": "GUID" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "BuildTrusteeWithObjectsAndNameA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + }, + { + "name": "pObjName", + "type": "POBJECTS_AND_NAME_A" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "ObjectTypeName", + "type": "LPSTR" + }, + { + "name": "InheritedObjectTypeName", + "type": "LPSTR" + }, + { + "name": "Name", + "type": "LPSTR" + } + ], + "BuildTrusteeWithObjectsAndNameW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + }, + { + "name": "pObjName", + "type": "POBJECTS_AND_NAME_W" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "ObjectTypeName", + "type": "LPWSTR" + }, + { + "name": "InheritedObjectTypeName", + "type": "LPWSTR" + }, + { + "name": "Name", + "type": "LPWSTR" + } + ], + "GetTrusteeNameA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + } + ], + "GetTrusteeNameW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + } + ], + "GetTrusteeTypeA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + } + ], + "GetTrusteeTypeW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + } + ], + "GetTrusteeFormA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + } + ], + "GetTrusteeFormW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + } + ], + "LsaFreeMemory": [ + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaClose": [ + { + "name": "ObjectHandle", + "type": "LSA_HANDLE" + } + ], + "LsaOpenPolicy": [ + { + "name": "SystemName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "ObjectAttributes", + "type": "PLSA_OBJECT_ATTRIBUTES" + }, + { + "name": "DesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "PolicyHandle", + "type": "PLSA_HANDLE" + } + ], + "LsaQueryInformationPolicy": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "InformationClass", + "type": "POLICY_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaSetInformationPolicy": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "InformationClass", + "type": "POLICY_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaQueryDomainInformationPolicy": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "InformationClass", + "type": "POLICY_DOMAIN_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaSetDomainInformationPolicy": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "InformationClass", + "type": "POLICY_DOMAIN_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaEnumerateTrustedDomains": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "EnumerationContext", + "type": "PLSA_ENUMERATION_HANDLE" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "PreferedMaximumLength", + "type": "ULONG" + }, + { + "name": "CountReturned", + "type": "PULONG" + } + ], + "LsaLookupNames": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "Count", + "type": "ULONG" + }, + { + "name": "Names", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "ReferencedDomains", + "type": "PLSA_REFERENCED_DOMAIN_LIST" + }, + { + "name": "Sids", + "type": "PLSA_TRANSLATED_SID" + } + ], + "LsaLookupNames2": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "Count", + "type": "ULONG" + }, + { + "name": "Names", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "ReferencedDomains", + "type": "PLSA_REFERENCED_DOMAIN_LIST" + }, + { + "name": "Sids", + "type": "PLSA_TRANSLATED_SID2" + } + ], + "LsaLookupSids": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "Count", + "type": "ULONG" + }, + { + "name": "Sids", + "type": "PSID" + }, + { + "name": "ReferencedDomains", + "type": "PLSA_REFERENCED_DOMAIN_LIST" + }, + { + "name": "Names", + "type": "PLSA_TRANSLATED_NAME" + } + ], + "LsaLookupSids2": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "LookupOptions", + "type": "ULONG" + }, + { + "name": "Count", + "type": "ULONG" + }, + { + "name": "Sids", + "type": "PSID" + }, + { + "name": "ReferencedDomains", + "type": "PLSA_REFERENCED_DOMAIN_LIST" + }, + { + "name": "Names", + "type": "PLSA_TRANSLATED_NAME" + } + ], + "LsaEnumerateAccountsWithUserRight": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "UserRight", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "CountReturned", + "type": "PULONG" + } + ], + "LsaEnumerateAccountRights": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "AccountSid", + "type": "PSID" + }, + { + "name": "UserRights", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "CountOfRights", + "type": "PULONG" + } + ], + "LsaAddAccountRights": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "AccountSid", + "type": "PSID" + }, + { + "name": "UserRights", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "CountOfRights", + "type": "ULONG" + } + ], + "LsaRemoveAccountRights": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "AccountSid", + "type": "PSID" + }, + { + "name": "AllRights", + "type": "BOOLEAN" + }, + { + "name": "UserRights", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "CountOfRights", + "type": "ULONG" + } + ], + "LsaOpenTrustedDomainByName": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "DesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "TrustedDomainHandle", + "type": "PLSA_HANDLE" + } + ], + "LsaQueryTrustedDomainInfo": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainSid", + "type": "PSID" + }, + { + "name": "InformationClass", + "type": "TRUSTED_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaSetTrustedDomainInformation": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainSid", + "type": "PSID" + }, + { + "name": "InformationClass", + "type": "TRUSTED_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaDeleteTrustedDomain": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainSid", + "type": "PSID" + } + ], + "LsaQueryTrustedDomainInfoByName": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "InformationClass", + "type": "TRUSTED_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaSetTrustedDomainInfoByName": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "InformationClass", + "type": "TRUSTED_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaEnumerateTrustedDomainsEx": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "EnumerationContext", + "type": "PLSA_ENUMERATION_HANDLE" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "PreferedMaximumLength", + "type": "ULONG" + }, + { + "name": "CountReturned", + "type": "PULONG" + } + ], + "LsaCreateTrustedDomainEx": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainInformation", + "type": "PTRUSTED_DOMAIN_INFORMATION_EX" + }, + { + "name": "AuthenticationInformation", + "type": "PTRUSTED_DOMAIN_AUTH_INFORMATION" + }, + { + "name": "DesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "TrustedDomainHandle", + "type": "PLSA_HANDLE" + } + ], + "LsaQueryForestTrustInformation": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "ForestTrustInfo", + "type": "PLSA_FOREST_TRUST_INFORMATION" + } + ], + "LsaSetForestTrustInformation": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "ForestTrustInfo", + "type": "PLSA_FOREST_TRUST_INFORMATION" + }, + { + "name": "CheckOnly", + "type": "BOOLEAN" + }, + { + "name": "CollisionInfo", + "type": "PLSA_FOREST_TRUST_COLLISION_INFORMATION" + } + ], + "LsaStorePrivateData": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "KeyName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "PrivateData", + "type": "PLSA_UNICODE_STRING" + } + ], + "LsaRetrievePrivateData": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "KeyName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "PrivateData", + "type": "PLSA_UNICODE_STRING" + } + ], + "LsaNtStatusToWinError": [ + { + "name": "Status", + "type": "NTSTATUS" + } + ], + "AuditSetSystemPolicy": [ + { + "name": "pAuditPolicy", + "type": "PCAUDIT_POLICY_INFORMATION" + }, + { + "name": "dwPolicyCount", + "type": "ULONG" + } + ], + "AuditSetPerUserPolicy": [ + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "pAuditPolicy", + "type": "PCAUDIT_POLICY_INFORMATION" + }, + { + "name": "dwPolicyCount", + "type": "ULONG" + } + ], + "AuditQuerySystemPolicy": [ + { + "name": "pSubCategoryGuids", + "type": "GUID" + }, + { + "name": "dwPolicyCount", + "type": "ULONG" + }, + { + "name": "ppAuditPolicy", + "type": "PAUDIT_POLICY_INFORMATION" + } + ], + "AuditQueryPerUserPolicy": [ + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "pSubCategoryGuids", + "type": "GUID" + }, + { + "name": "dwPolicyCount", + "type": "ULONG" + }, + { + "name": "ppAuditPolicy", + "type": "PAUDIT_POLICY_INFORMATION" + } + ], + "AuditEnumeratePerUserPolicy": [ + { + "name": "ppAuditSidArray", + "type": "PPOLICY_AUDIT_SID_ARRAY" + } + ], + "AuditComputeEffectivePolicyBySid": [ + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "pSubCategoryGuids", + "type": "GUID" + }, + { + "name": "dwPolicyCount", + "type": "ULONG" + }, + { + "name": "ppAuditPolicy", + "type": "PAUDIT_POLICY_INFORMATION" + } + ], + "AuditComputeEffectivePolicyByToken": [ + { + "name": "hTokenHandle", + "type": "HANDLE" + }, + { + "name": "pSubCategoryGuids", + "type": "GUID" + }, + { + "name": "dwPolicyCount", + "type": "ULONG" + }, + { + "name": "ppAuditPolicy", + "type": "PAUDIT_POLICY_INFORMATION" + } + ], + "AuditEnumerateCategories": [ + { + "name": "ppAuditCategoriesArray", + "type": "GUID" + }, + { + "name": "pdwCountReturned", + "type": "PULONG" + } + ], + "AuditEnumerateSubCategories": [ + { + "name": "pAuditCategoryGuid", + "type": "GUID" + }, + { + "name": "bRetrieveAllSubCategories", + "type": "BOOLEAN" + }, + { + "name": "ppAuditSubCategoriesArray", + "type": "GUID" + }, + { + "name": "pdwCountReturned", + "type": "PULONG" + } + ], + "AuditLookupCategoryNameW": [ + { + "name": "pAuditCategoryGuid", + "type": "GUID" + }, + { + "name": "ppszCategoryName", + "type": "PWSTR" + } + ], + "AuditLookupCategoryNameA": [ + { + "name": "pAuditCategoryGuid", + "type": "GUID" + }, + { + "name": "ppszCategoryName", + "type": "PSTR" + } + ], + "AuditLookupSubCategoryNameW": [ + { + "name": "pAuditSubCategoryGuid", + "type": "GUID" + }, + { + "name": "ppszSubCategoryName", + "type": "PWSTR" + } + ], + "AuditLookupSubCategoryNameA": [ + { + "name": "pAuditSubCategoryGuid", + "type": "GUID" + }, + { + "name": "ppszSubCategoryName", + "type": "PSTR" + } + ], + "AuditLookupCategoryIdFromCategoryGuid": [ + { + "name": "pAuditCategoryGuid", + "type": "GUID" + }, + { + "name": "pAuditCategoryId", + "type": "PPOLICY_AUDIT_EVENT_TYPE" + } + ], + "AuditLookupCategoryGuidFromCategoryId": [ + { + "name": "AuditCategoryId", + "type": "POLICY_AUDIT_EVENT_TYPE" + }, + { + "name": "pAuditCategoryGuid", + "type": "GUID" + } + ], + "AuditSetSecurity": [ + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "AuditQuerySecurity": [ + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ppSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "AuditSetGlobalSaclW": [ + { + "name": "ObjectTypeName", + "type": "PCWSTR" + }, + { + "name": "Acl", + "type": "PACL" + } + ], + "AuditSetGlobalSaclA": [ + { + "name": "ObjectTypeName", + "type": "PCSTR" + }, + { + "name": "Acl", + "type": "PACL" + } + ], + "AuditQueryGlobalSaclW": [ + { + "name": "ObjectTypeName", + "type": "PCWSTR" + }, + { + "name": "Acl", + "type": "PACL" + } + ], + "AuditQueryGlobalSaclA": [ + { + "name": "ObjectTypeName", + "type": "PCSTR" + }, + { + "name": "Acl", + "type": "PACL" + } + ], + "AuditFree": [ + { + "name": "Buffer", + "type": "PVOID" + } + ], + "EventAccessQuery": [ + { + "name": "Guid", + "type": "LPGUID" + }, + { + "name": "Buffer", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "BufferSize", + "type": "PULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/advpack_dll.json b/qiling/extensions/windows_sdk/defs/advpack_dll.json new file mode 100644 index 000000000..f72fd5f28 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/advpack_dll.json @@ -0,0 +1,30 @@ +{ + "RegInstallA": [ + { + "name": "hmod", + "type": "HMODULE" + }, + { + "name": "pszSection", + "type": "LPCSTR" + }, + { + "name": "pstTable", + "type": "STRTABLEA" + } + ], + "RegInstallW": [ + { + "name": "hmod", + "type": "HMODULE" + }, + { + "name": "pszSection", + "type": "LPCWSTR" + }, + { + "name": "pstTable", + "type": "STRTABLEW" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/amsi_dll.json b/qiling/extensions/windows_sdk/defs/amsi_dll.json new file mode 100644 index 000000000..62aadd101 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/amsi_dll.json @@ -0,0 +1,86 @@ +{ + "AmsiInitialize": [ + { + "name": "appName", + "type": "LPCWSTR" + }, + { + "name": "amsiContext", + "type": "HAMSICONTEXT" + } + ], + "AmsiUninitialize": [ + { + "name": "amsiContext", + "type": "HAMSICONTEXT" + } + ], + "AmsiOpenSession": [ + { + "name": "amsiContext", + "type": "HAMSICONTEXT" + }, + { + "name": "amsiSession", + "type": "HAMSISESSION" + } + ], + "AmsiCloseSession": [ + { + "name": "amsiContext", + "type": "HAMSICONTEXT" + }, + { + "name": "amsiSession", + "type": "HAMSISESSION" + } + ], + "AmsiScanBuffer": [ + { + "name": "amsiContext", + "type": "HAMSICONTEXT" + }, + { + "name": "buffer", + "type": "PVOID" + }, + { + "name": "length", + "type": "ULONG" + }, + { + "name": "contentName", + "type": "LPCWSTR" + }, + { + "name": "amsiSession", + "type": "HAMSISESSION" + }, + { + "name": "result", + "type": "AMSI_RESULT" + } + ], + "AmsiScanString": [ + { + "name": "amsiContext", + "type": "HAMSICONTEXT" + }, + { + "name": "string", + "type": "LPCWSTR" + }, + { + "name": "contentName", + "type": "LPCWSTR" + }, + { + "name": "amsiSession", + "type": "HAMSISESSION" + }, + { + "name": "result", + "type": "AMSI_RESULT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/api-ms-win-appmodel-runtime-l1-1-2_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-appmodel-runtime-l1-1-2_dll.json new file mode 100644 index 000000000..3799c0b33 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/api-ms-win-appmodel-runtime-l1-1-2_dll.json @@ -0,0 +1,82 @@ +{ + "AppPolicyGetLifecycleManagement": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyLifecycleManagement" + } + ], + "AppPolicyGetWindowingModel": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyWindowingModel" + } + ], + "AppPolicyGetMediaFoundationCodecLoading": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyMediaFoundationCodecLoading" + } + ], + "AppPolicyGetClrCompat": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyClrCompat" + } + ], + "AppPolicyGetThreadInitializationType": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyThreadInitializationType" + } + ], + "AppPolicyGetShowDeveloperDiagnostic": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyShowDeveloperDiagnostic" + } + ], + "AppPolicyGetProcessTerminationMethod": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyProcessTerminationMethod" + } + ], + "AppPolicyGetCreateFileAccess": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyCreateFileAccess" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/api-ms-win-core-enclave-l1-1-0_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-enclave-l1-1-0_dll.json new file mode 100644 index 000000000..018691d15 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/api-ms-win-core-enclave-l1-1-0_dll.json @@ -0,0 +1,102 @@ +{ + "IsEnclaveTypeSupported": [ + { + "name": "flEnclaveType", + "type": "DWORD" + } + ], + "CreateEnclave": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "dwInitialCommitment", + "type": "SIZE_T" + }, + { + "name": "flEnclaveType", + "type": "DWORD" + }, + { + "name": "lpEnclaveInformation", + "type": "LPCVOID" + }, + { + "name": "dwInfoLength", + "type": "DWORD" + }, + { + "name": "lpEnclaveError", + "type": "LPDWORD" + } + ], + "LoadEnclaveData": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "lpBuffer", + "type": "LPCVOID" + }, + { + "name": "nSize", + "type": "SIZE_T" + }, + { + "name": "flProtect", + "type": "DWORD" + }, + { + "name": "lpPageInformation", + "type": "LPCVOID" + }, + { + "name": "dwInfoLength", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesWritten", + "type": "PSIZE_T" + }, + { + "name": "lpEnclaveError", + "type": "LPDWORD" + } + ], + "InitializeEnclave": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "lpEnclaveInformation", + "type": "LPCVOID" + }, + { + "name": "dwInfoLength", + "type": "DWORD" + }, + { + "name": "lpEnclaveError", + "type": "LPDWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/api-ms-win-core-featurestaging-l1-1-0_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-featurestaging-l1-1-0_dll.json new file mode 100644 index 000000000..1fa365a36 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/api-ms-win-core-featurestaging-l1-1-0_dll.json @@ -0,0 +1,78 @@ +{ + "GetFeatureEnabledState": [ + { + "name": "featureId", + "type": "UINT32" + }, + { + "name": "changeTime", + "type": "FEATURE_CHANGE_TIME" + } + ], + "RecordFeatureUsage": [ + { + "name": "featureId", + "type": "UINT32" + }, + { + "name": "kind", + "type": "UINT32" + }, + { + "name": "addend", + "type": "UINT32" + }, + { + "name": "originName", + "type": "PCSTR" + } + ], + "RecordFeatureError": [ + { + "name": "featureId", + "type": "UINT32" + }, + { + "name": "error", + "type": "FEATURE_ERROR" + } + ], + "SubscribeFeatureStateChangeNotification": [ + { + "name": "subscription", + "type": "FEATURE_STATE_CHANGE_SUBSCRIPTION" + }, + { + "name": "callback", + "type": "PFEATURE_STATE_CHANGE_CALLBACK" + }, + { + "name": "context", + "type": "void" + } + ], + "UnsubscribeFeatureStateChangeNotification": [ + { + "name": "subscription", + "type": "FEATURE_STATE_CHANGE_SUBSCRIPTION" + } + ], + "GetFeatureVariant": [ + { + "name": "featureId", + "type": "UINT32" + }, + { + "name": "changeTime", + "type": "FEATURE_CHANGE_TIME" + }, + { + "name": "payloadId", + "type": "UINT32" + }, + { + "name": "hasNotification", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/api-ms-win-core-heap-l1-1-0_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-heap-l1-1-0_dll.json new file mode 100644 index 000000000..d544677af --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/api-ms-win-core-heap-l1-1-0_dll.json @@ -0,0 +1,16 @@ +{ + "HeapSummary": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpSummary", + "type": "LPHEAP_SUMMARY" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/api-ms-win-core-libraryloader-l1-1-1_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-libraryloader-l1-1-1_dll.json new file mode 100644 index 000000000..61b3b86a0 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/api-ms-win-core-libraryloader-l1-1-1_dll.json @@ -0,0 +1,20 @@ +{ + "QueryOptionalDelayLoadedAPI": [ + { + "name": "hParentModule", + "type": "HMODULE" + }, + { + "name": "lpDllName", + "type": "LPCSTR" + }, + { + "name": "lpProcName", + "type": "LPCSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/api-ms-win-core-localization-l1-2-1_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-localization-l1-2-1_dll.json new file mode 100644 index 000000000..1af65dad7 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/api-ms-win-core-localization-l1-2-1_dll.json @@ -0,0 +1,30 @@ +{ + "VerLanguageNameA": [ + { + "name": "wLang", + "type": "DWORD" + }, + { + "name": "szLang", + "type": "LPSTR" + }, + { + "name": "cchLang", + "type": "DWORD" + } + ], + "VerLanguageNameW": [ + { + "name": "wLang", + "type": "DWORD" + }, + { + "name": "szLang", + "type": "LPWSTR" + }, + { + "name": "cchLang", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/api-ms-win-core-memory-l1-1-4_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-memory-l1-1-4_dll.json new file mode 100644 index 000000000..0ac562cc8 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/api-ms-win-core-memory-l1-1-4_dll.json @@ -0,0 +1,28 @@ +{ + "QueryVirtualMemoryInformation": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "VirtualAddress", + "type": "void" + }, + { + "name": "MemoryInformationClass", + "type": "WIN32_MEMORY_INFORMATION_CLASS" + }, + { + "name": "MemoryInformation", + "type": "PVOID" + }, + { + "name": "MemoryInformationSize", + "type": "SIZE_T" + }, + { + "name": "ReturnSize", + "type": "PSIZE_T" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/api-ms-win-core-memory-l1-1-5_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-memory-l1-1-5_dll.json new file mode 100644 index 000000000..779939785 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/api-ms-win-core-memory-l1-1-5_dll.json @@ -0,0 +1,36 @@ +{ + "MapViewOfFileNuma2": [ + { + "name": "FileMappingHandle", + "type": "HANDLE" + }, + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "Offset", + "type": "ULONG64" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "ViewSize", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "PreferredNode", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/api-ms-win-core-processenvironment-l1-1-0_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-processenvironment-l1-1-0_dll.json new file mode 100644 index 000000000..a614ec01e --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/api-ms-win-core-processenvironment-l1-1-0_dll.json @@ -0,0 +1,22 @@ +{ + "SetEnvironmentStringsW": [ + { + "name": "NewEnvironment", + "type": "LPWCH" + } + ], + "SetStdHandleEx": [ + { + "name": "nStdHandle", + "type": "DWORD" + }, + { + "name": "hHandle", + "type": "HANDLE" + }, + { + "name": "phPrevValue", + "type": "PHANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/api-ms-win-core-slapi-l1-1-0_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-slapi-l1-1-0_dll.json new file mode 100644 index 000000000..b507f2fc5 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/api-ms-win-core-slapi-l1-1-0_dll.json @@ -0,0 +1,24 @@ +{ + "SLQueryLicenseValueFromApp": [ + { + "name": "valueName", + "type": "PCWSTR" + }, + { + "name": "valueType", + "type": "ULONG" + }, + { + "name": "dataBuffer", + "type": "PVOID" + }, + { + "name": "dataSize", + "type": "ULONG" + }, + { + "name": "resultDataSize", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/api-ms-win-core-sysinfo-l1-2-3_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-sysinfo-l1-2-3_dll.json new file mode 100644 index 000000000..e4dc41716 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/api-ms-win-core-sysinfo-l1-2-3_dll.json @@ -0,0 +1,8 @@ +{ + "GetIntegratedDisplaySize": [ + { + "name": "sizeInInches", + "type": "double" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/api-ms-win-core-version-l1-1-0_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-version-l1-1-0_dll.json new file mode 100644 index 000000000..d9afbfc5c --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/api-ms-win-core-version-l1-1-0_dll.json @@ -0,0 +1,302 @@ +{ + "VerFindFileA": [ + { + "name": "uFlags", + "type": "DWORD" + }, + { + "name": "szFileName", + "type": "LPCSTR" + }, + { + "name": "szWinDir", + "type": "LPCSTR" + }, + { + "name": "szAppDir", + "type": "LPCSTR" + }, + { + "name": "szCurDir", + "type": "LPSTR" + }, + { + "name": "puCurDirLen", + "type": "PUINT" + }, + { + "name": "szDestDir", + "type": "LPSTR" + }, + { + "name": "puDestDirLen", + "type": "PUINT" + } + ], + "VerFindFileW": [ + { + "name": "uFlags", + "type": "DWORD" + }, + { + "name": "szFileName", + "type": "LPCWSTR" + }, + { + "name": "szWinDir", + "type": "LPCWSTR" + }, + { + "name": "szAppDir", + "type": "LPCWSTR" + }, + { + "name": "szCurDir", + "type": "LPWSTR" + }, + { + "name": "puCurDirLen", + "type": "PUINT" + }, + { + "name": "szDestDir", + "type": "LPWSTR" + }, + { + "name": "puDestDirLen", + "type": "PUINT" + } + ], + "VerInstallFileA": [ + { + "name": "uFlags", + "type": "DWORD" + }, + { + "name": "szSrcFileName", + "type": "LPCSTR" + }, + { + "name": "szDestFileName", + "type": "LPCSTR" + }, + { + "name": "szSrcDir", + "type": "LPCSTR" + }, + { + "name": "szDestDir", + "type": "LPCSTR" + }, + { + "name": "szCurDir", + "type": "LPCSTR" + }, + { + "name": "szTmpFile", + "type": "LPSTR" + }, + { + "name": "puTmpFileLen", + "type": "PUINT" + } + ], + "VerInstallFileW": [ + { + "name": "uFlags", + "type": "DWORD" + }, + { + "name": "szSrcFileName", + "type": "LPCWSTR" + }, + { + "name": "szDestFileName", + "type": "LPCWSTR" + }, + { + "name": "szSrcDir", + "type": "LPCWSTR" + }, + { + "name": "szDestDir", + "type": "LPCWSTR" + }, + { + "name": "szCurDir", + "type": "LPCWSTR" + }, + { + "name": "szTmpFile", + "type": "LPWSTR" + }, + { + "name": "puTmpFileLen", + "type": "PUINT" + } + ], + "GetFileVersionInfoSizeA": [ + { + "name": "lptstrFilename", + "type": "LPCSTR" + }, + { + "name": "lpdwHandle", + "type": "LPDWORD" + } + ], + "GetFileVersionInfoSizeW": [ + { + "name": "lptstrFilename", + "type": "LPCWSTR" + }, + { + "name": "lpdwHandle", + "type": "LPDWORD" + } + ], + "GetFileVersionInfoA": [ + { + "name": "lptstrFilename", + "type": "LPCSTR" + }, + { + "name": "dwHandle", + "type": "DWORD" + }, + { + "name": "dwLen", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + } + ], + "GetFileVersionInfoW": [ + { + "name": "lptstrFilename", + "type": "LPCWSTR" + }, + { + "name": "dwHandle", + "type": "DWORD" + }, + { + "name": "dwLen", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + } + ], + "GetFileVersionInfoSizeExA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpwstrFilename", + "type": "LPCSTR" + }, + { + "name": "lpdwHandle", + "type": "LPDWORD" + } + ], + "GetFileVersionInfoSizeExW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpwstrFilename", + "type": "LPCWSTR" + }, + { + "name": "lpdwHandle", + "type": "LPDWORD" + } + ], + "GetFileVersionInfoExA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpwstrFilename", + "type": "LPCSTR" + }, + { + "name": "dwHandle", + "type": "DWORD" + }, + { + "name": "dwLen", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + } + ], + "GetFileVersionInfoExW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpwstrFilename", + "type": "LPCWSTR" + }, + { + "name": "dwHandle", + "type": "DWORD" + }, + { + "name": "dwLen", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + } + ], + "VerQueryValueA": [ + { + "name": "pBlock", + "type": "LPCVOID" + }, + { + "name": "lpSubBlock", + "type": "LPCSTR" + }, + { + "name": "lplpBuffer", + "type": "LPVOID" + }, + { + "name": "puLen", + "type": "PUINT" + } + ], + "VerQueryValueW": [ + { + "name": "pBlock", + "type": "LPCVOID" + }, + { + "name": "lpSubBlock", + "type": "LPCWSTR" + }, + { + "name": "lplpBuffer", + "type": "LPVOID" + }, + { + "name": "puLen", + "type": "PUINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/api-ms-win-core-version-l1-2-3_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-version-l1-2-3_dll.json new file mode 100644 index 000000000..36f13d472 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/api-ms-win-core-version-l1-2-3_dll.json @@ -0,0 +1,26 @@ +{ + "GetSystemTimeAdjustmentPrecise": [ + { + "name": "lpTimeAdjustment", + "type": "PDWORD64" + }, + { + "name": "lpTimeIncrement", + "type": "PDWORD64" + }, + { + "name": "lpTimeAdjustmentDisabled", + "type": "PBOOL" + } + ], + "SetSystemTimeAdjustmentPrecise": [ + { + "name": "dwTimeAdjustment", + "type": "DWORD64" + }, + { + "name": "bTimeAdjustmentDisabled", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/api-ms-win-core-winrt-error-l1-1-1_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-winrt-error-l1-1-1_dll.json new file mode 100644 index 000000000..b4bc9eb45 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/api-ms-win-core-winrt-error-l1-1-1_dll.json @@ -0,0 +1,8 @@ +{ + "RoReportUnhandledError": [ + { + "name": "pRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/api-ms-win-shcore-thread-l1-1-0_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-shcore-thread-l1-1-0_dll.json new file mode 100644 index 000000000..8cc9bd088 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/api-ms-win-shcore-thread-l1-1-0_dll.json @@ -0,0 +1,14 @@ +{ + "SetProcessReference": [ + { + "name": "punk", + "type": "IUnknown" + } + ], + "GetProcessReference": [ + { + "name": "punk", + "type": "IUnknown" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/api-ms-win-wsl-api-l1-1-0_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-wsl-api-l1-1-0_dll.json new file mode 100644 index 000000000..240ece5e8 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/api-ms-win-wsl-api-l1-1-0_dll.json @@ -0,0 +1,112 @@ +{ + "WslIsDistributionRegistered": [ + { + "name": "distributionName", + "type": "PCWSTR" + } + ], + "WslRegisterDistribution": [ + { + "name": "distributionName", + "type": "PCWSTR" + }, + { + "name": "tarGzFilename", + "type": "PCWSTR" + } + ], + "WslUnregisterDistribution": [ + { + "name": "distributionName", + "type": "PCWSTR" + } + ], + "WslConfigureDistribution": [ + { + "name": "distributionName", + "type": "PCWSTR" + }, + { + "name": "defaultUID", + "type": "ULONG" + }, + { + "name": "wslDistributionFlags", + "type": "WSL_DISTRIBUTION_FLAGS" + } + ], + "WslGetDistributionConfiguration": [ + { + "name": "distributionName", + "type": "PCWSTR" + }, + { + "name": "distributionVersion", + "type": "ULONG" + }, + { + "name": "defaultUID", + "type": "ULONG" + }, + { + "name": "wslDistributionFlags", + "type": "WSL_DISTRIBUTION_FLAGS" + }, + { + "name": "defaultEnvironmentVariables", + "type": "PSTR" + }, + { + "name": "defaultEnvironmentVariableCount", + "type": "ULONG" + } + ], + "WslLaunchInteractive": [ + { + "name": "distributionName", + "type": "PCWSTR" + }, + { + "name": "command", + "type": "PCWSTR" + }, + { + "name": "useCurrentWorkingDirectory", + "type": "BOOL" + }, + { + "name": "exitCode", + "type": "DWORD" + } + ], + "WslLaunch": [ + { + "name": "distributionName", + "type": "PCWSTR" + }, + { + "name": "command", + "type": "PCWSTR" + }, + { + "name": "useCurrentWorkingDirectory", + "type": "BOOL" + }, + { + "name": "stdIn", + "type": "HANDLE" + }, + { + "name": "stdOut", + "type": "HANDLE" + }, + { + "name": "stdErr", + "type": "HANDLE" + }, + { + "name": "process", + "type": "HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/apphelp_dll.json b/qiling/extensions/windows_sdk/defs/apphelp_dll.json new file mode 100644 index 000000000..b74c3d3ef --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/apphelp_dll.json @@ -0,0 +1,16 @@ +{ + "ApphelpCheckShellObject": [ + { + "name": "ObjectCLSID", + "type": "IID" + }, + { + "name": "bShimIfNecessary", + "type": "BOOL" + }, + { + "name": "pullFlags", + "type": "ULONGLONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/atlthunk_dll.json b/qiling/extensions/windows_sdk/defs/atlthunk_dll.json new file mode 100644 index 000000000..0b0581559 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/atlthunk_dll.json @@ -0,0 +1,28 @@ +{ + "AtlThunk_InitData": [ + { + "name": "Thunk", + "type": "AtlThunkData_t" + }, + { + "name": "Proc", + "type": "void" + }, + { + "name": "FirstParameter", + "type": "size_t" + } + ], + "AtlThunk_DataToCode": [ + { + "name": "VOID", + "type": "AtlThunkData_t" + } + ], + "AtlThunk_FreeData": [ + { + "name": "Thunk", + "type": "AtlThunkData_t" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/authz_dll.json b/qiling/extensions/windows_sdk/defs/authz_dll.json new file mode 100644 index 000000000..c144c54b4 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/authz_dll.json @@ -0,0 +1,590 @@ +{ + "AuthzAccessCheck": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "pRequest", + "type": "PAUTHZ_ACCESS_REQUEST" + }, + { + "name": "hAuditEvent", + "type": "AUTHZ_AUDIT_EVENT_HANDLE" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "OptionalSecurityDescriptorArray", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "OptionalSecurityDescriptorCount", + "type": "DWORD" + }, + { + "name": "pReply", + "type": "PAUTHZ_ACCESS_REPLY" + }, + { + "name": "phAccessCheckResults", + "type": "PAUTHZ_ACCESS_CHECK_RESULTS_HANDLE" + } + ], + "AuthzCachedAccessCheck": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "hAccessCheckResults", + "type": "AUTHZ_ACCESS_CHECK_RESULTS_HANDLE" + }, + { + "name": "pRequest", + "type": "PAUTHZ_ACCESS_REQUEST" + }, + { + "name": "hAuditEvent", + "type": "AUTHZ_AUDIT_EVENT_HANDLE" + }, + { + "name": "pReply", + "type": "PAUTHZ_ACCESS_REPLY" + } + ], + "AuthzOpenObjectAudit": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "pRequest", + "type": "PAUTHZ_ACCESS_REQUEST" + }, + { + "name": "hAuditEvent", + "type": "AUTHZ_AUDIT_EVENT_HANDLE" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "OptionalSecurityDescriptorArray", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "OptionalSecurityDescriptorCount", + "type": "DWORD" + }, + { + "name": "pReply", + "type": "PAUTHZ_ACCESS_REPLY" + } + ], + "AuthzFreeHandle": [ + { + "name": "hAccessCheckResults", + "type": "AUTHZ_ACCESS_CHECK_RESULTS_HANDLE" + } + ], + "AuthzInitializeResourceManager": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pfnDynamicAccessCheck", + "type": "PFN_AUTHZ_DYNAMIC_ACCESS_CHECK" + }, + { + "name": "pfnComputeDynamicGroups", + "type": "PFN_AUTHZ_COMPUTE_DYNAMIC_GROUPS" + }, + { + "name": "pfnFreeDynamicGroups", + "type": "PFN_AUTHZ_FREE_DYNAMIC_GROUPS" + }, + { + "name": "szResourceManagerName", + "type": "PCWSTR" + }, + { + "name": "phAuthzResourceManager", + "type": "PAUTHZ_RESOURCE_MANAGER_HANDLE" + } + ], + "AuthzInitializeResourceManagerEx": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pAuthzInitInfo", + "type": "PAUTHZ_INIT_INFO" + }, + { + "name": "phAuthzResourceManager", + "type": "PAUTHZ_RESOURCE_MANAGER_HANDLE" + } + ], + "AuthzInitializeRemoteResourceManager": [ + { + "name": "pRpcInitInfo", + "type": "PAUTHZ_RPC_INIT_INFO_CLIENT" + }, + { + "name": "phAuthzResourceManager", + "type": "PAUTHZ_RESOURCE_MANAGER_HANDLE" + } + ], + "AuthzFreeResourceManager": [ + { + "name": "hAuthzResourceManager", + "type": "AUTHZ_RESOURCE_MANAGER_HANDLE" + } + ], + "AuthzInitializeContextFromToken": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "hAuthzResourceManager", + "type": "AUTHZ_RESOURCE_MANAGER_HANDLE" + }, + { + "name": "pExpirationTime", + "type": "PLARGE_INTEGER" + }, + { + "name": "Identifier", + "type": "LUID" + }, + { + "name": "DynamicGroupArgs", + "type": "PVOID" + }, + { + "name": "phAuthzClientContext", + "type": "PAUTHZ_CLIENT_CONTEXT_HANDLE" + } + ], + "AuthzInitializeContextFromSid": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "UserSid", + "type": "PSID" + }, + { + "name": "hAuthzResourceManager", + "type": "AUTHZ_RESOURCE_MANAGER_HANDLE" + }, + { + "name": "pExpirationTime", + "type": "PLARGE_INTEGER" + }, + { + "name": "Identifier", + "type": "LUID" + }, + { + "name": "DynamicGroupArgs", + "type": "PVOID" + }, + { + "name": "phAuthzClientContext", + "type": "PAUTHZ_CLIENT_CONTEXT_HANDLE" + } + ], + "AuthzInitializeContextFromAuthzContext": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "pExpirationTime", + "type": "PLARGE_INTEGER" + }, + { + "name": "Identifier", + "type": "LUID" + }, + { + "name": "DynamicGroupArgs", + "type": "PVOID" + }, + { + "name": "phNewAuthzClientContext", + "type": "PAUTHZ_CLIENT_CONTEXT_HANDLE" + } + ], + "AuthzInitializeCompoundContext": [ + { + "name": "UserContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "DeviceContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "phCompoundContext", + "type": "PAUTHZ_CLIENT_CONTEXT_HANDLE" + } + ], + "AuthzAddSidsToContext": [ + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "Sids", + "type": "PSID_AND_ATTRIBUTES" + }, + { + "name": "SidCount", + "type": "DWORD" + }, + { + "name": "RestrictedSids", + "type": "PSID_AND_ATTRIBUTES" + }, + { + "name": "RestrictedSidCount", + "type": "DWORD" + }, + { + "name": "phNewAuthzClientContext", + "type": "PAUTHZ_CLIENT_CONTEXT_HANDLE" + } + ], + "AuthzModifySecurityAttributes": [ + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "pOperations", + "type": "PAUTHZ_SECURITY_ATTRIBUTE_OPERATION" + }, + { + "name": "pAttributes", + "type": "PAUTHZ_SECURITY_ATTRIBUTES_INFORMATION" + } + ], + "AuthzModifyClaims": [ + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "ClaimClass", + "type": "AUTHZ_CONTEXT_INFORMATION_CLASS" + }, + { + "name": "pClaimOperations", + "type": "PAUTHZ_SECURITY_ATTRIBUTE_OPERATION" + }, + { + "name": "pClaims", + "type": "PAUTHZ_SECURITY_ATTRIBUTES_INFORMATION" + } + ], + "AuthzModifySids": [ + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "SidClass", + "type": "AUTHZ_CONTEXT_INFORMATION_CLASS" + }, + { + "name": "pSidOperations", + "type": "PAUTHZ_SID_OPERATION" + }, + { + "name": "pSids", + "type": "PTOKEN_GROUPS" + } + ], + "AuthzSetAppContainerInformation": [ + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "pAppContainerSid", + "type": "PSID" + }, + { + "name": "CapabilityCount", + "type": "DWORD" + }, + { + "name": "pCapabilitySids", + "type": "PSID_AND_ATTRIBUTES" + } + ], + "AuthzGetInformationFromContext": [ + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "InfoClass", + "type": "AUTHZ_CONTEXT_INFORMATION_CLASS" + }, + { + "name": "BufferSize", + "type": "DWORD" + }, + { + "name": "pSizeRequired", + "type": "PDWORD" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "AuthzFreeContext": [ + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + } + ], + "AuthzInitializeObjectAccessAuditEvent": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "hAuditEventType", + "type": "AUTHZ_AUDIT_EVENT_TYPE_HANDLE" + }, + { + "name": "szOperationType", + "type": "PWSTR" + }, + { + "name": "szObjectType", + "type": "PWSTR" + }, + { + "name": "szObjectName", + "type": "PWSTR" + }, + { + "name": "szAdditionalInfo", + "type": "PWSTR" + }, + { + "name": "phAuditEvent", + "type": "PAUTHZ_AUDIT_EVENT_HANDLE" + }, + { + "name": "dwAdditionalParameterCount", + "type": "DWORD" + } + ], + "AuthzInitializeObjectAccessAuditEvent2": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "hAuditEventType", + "type": "AUTHZ_AUDIT_EVENT_TYPE_HANDLE" + }, + { + "name": "szOperationType", + "type": "PWSTR" + }, + { + "name": "szObjectType", + "type": "PWSTR" + }, + { + "name": "szObjectName", + "type": "PWSTR" + }, + { + "name": "szAdditionalInfo", + "type": "PWSTR" + }, + { + "name": "szAdditionalInfo2", + "type": "PWSTR" + }, + { + "name": "phAuditEvent", + "type": "PAUTHZ_AUDIT_EVENT_HANDLE" + }, + { + "name": "dwAdditionalParameterCount", + "type": "DWORD" + } + ], + "AuthzFreeAuditEvent": [ + { + "name": "hAuditEvent", + "type": "AUTHZ_AUDIT_EVENT_HANDLE" + } + ], + "AuthzInstallSecurityEventSource": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pRegistration", + "type": "PAUTHZ_SOURCE_SCHEMA_REGISTRATION" + } + ], + "AuthzUninstallSecurityEventSource": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "szEventSourceName", + "type": "PCWSTR" + } + ], + "AuthzEnumerateSecurityEventSources": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "Buffer", + "type": "PAUTHZ_SOURCE_SCHEMA_REGISTRATION" + }, + { + "name": "pdwCount", + "type": "PDWORD" + }, + { + "name": "pdwLength", + "type": "PDWORD" + } + ], + "AuthzRegisterSecurityEventSource": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "szEventSourceName", + "type": "PCWSTR" + }, + { + "name": "phEventProvider", + "type": "PAUTHZ_SECURITY_EVENT_PROVIDER_HANDLE" + } + ], + "AuthzUnregisterSecurityEventSource": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phEventProvider", + "type": "PAUTHZ_SECURITY_EVENT_PROVIDER_HANDLE" + } + ], + "AuthzReportSecurityEvent": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hEventProvider", + "type": "AUTHZ_SECURITY_EVENT_PROVIDER_HANDLE" + }, + { + "name": "dwAuditId", + "type": "DWORD" + }, + { + "name": "pUserSid", + "type": "PSID" + }, + { + "name": "dwCount", + "type": "DWORD" + } + ], + "AuthzReportSecurityEventFromParams": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hEventProvider", + "type": "AUTHZ_SECURITY_EVENT_PROVIDER_HANDLE" + }, + { + "name": "dwAuditId", + "type": "DWORD" + }, + { + "name": "pUserSid", + "type": "PSID" + }, + { + "name": "pParams", + "type": "PAUDIT_PARAMS" + } + ], + "AuthzRegisterCapChangeNotification": [ + { + "name": "phCapChangeSubscription", + "type": "PAUTHZ_CAP_CHANGE_SUBSCRIPTION_HANDLE" + }, + { + "name": "pfnCapChangeCallback", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "pCallbackContext", + "type": "PVOID" + } + ], + "AuthzUnregisterCapChangeNotification": [ + { + "name": "hCapChangeSubscription", + "type": "AUTHZ_CAP_CHANGE_SUBSCRIPTION_HANDLE" + } + ], + "AuthzFreeCentralAccessPolicyCache": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/avicap32_dll.json b/qiling/extensions/windows_sdk/defs/avicap32_dll.json new file mode 100644 index 000000000..c1d87400a --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/avicap32_dll.json @@ -0,0 +1,114 @@ +{ + "capCreateCaptureWindowA": [ + { + "name": "lpszWindowName", + "type": "LPCSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "nID", + "type": "int" + } + ], + "capGetDriverDescriptionA": [ + { + "name": "wDriverIndex", + "type": "UINT" + }, + { + "name": "lpszName", + "type": "LPSTR" + }, + { + "name": "cbName", + "type": "int" + }, + { + "name": "lpszVer", + "type": "LPSTR" + }, + { + "name": "cbVer", + "type": "int" + } + ], + "capCreateCaptureWindowW": [ + { + "name": "lpszWindowName", + "type": "LPCWSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "nID", + "type": "int" + } + ], + "capGetDriverDescriptionW": [ + { + "name": "wDriverIndex", + "type": "UINT" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "cbName", + "type": "int" + }, + { + "name": "lpszVer", + "type": "LPWSTR" + }, + { + "name": "cbVer", + "type": "int" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/avifil32_dll.json b/qiling/extensions/windows_sdk/defs/avifil32_dll.json new file mode 100644 index 000000000..699dceb17 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/avifil32_dll.json @@ -0,0 +1,878 @@ +{ + "AVIFileInit": [ + { + "name": "VOID", + "type": "void" + } + ], + "AVIFileExit": [ + { + "name": "VOID", + "type": "void" + } + ], + "AVIFileAddRef": [ + { + "name": "pfile", + "type": "PAVIFILE" + } + ], + "AVIFileRelease": [ + { + "name": "pfile", + "type": "PAVIFILE" + } + ], + "AVIFileOpenA": [ + { + "name": "ppfile", + "type": "PAVIFILE" + }, + { + "name": "szFile", + "type": "LPCSTR" + }, + { + "name": "uMode", + "type": "UINT" + }, + { + "name": "lpHandler", + "type": "LPCLSID" + } + ], + "AVIFileOpenW": [ + { + "name": "ppfile", + "type": "PAVIFILE" + }, + { + "name": "szFile", + "type": "LPCWSTR" + }, + { + "name": "uMode", + "type": "UINT" + }, + { + "name": "lpHandler", + "type": "LPCLSID" + } + ], + "AVIFileInfoW": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "pfi", + "type": "LPAVIFILEINFOW" + }, + { + "name": "lSize", + "type": "LONG" + } + ], + "AVIFileInfoA": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "pfi", + "type": "LPAVIFILEINFOA" + }, + { + "name": "lSize", + "type": "LONG" + } + ], + "AVIFileGetStream": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG" + } + ], + "AVIFileCreateStreamW": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "psi", + "type": "AVISTREAMINFOW" + } + ], + "AVIFileCreateStreamA": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "psi", + "type": "AVISTREAMINFOA" + } + ], + "AVIFileWriteData": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ckid", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "cbData", + "type": "LONG" + } + ], + "AVIFileReadData": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ckid", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "lpcbData", + "type": "LONG" + } + ], + "AVIFileEndRecord": [ + { + "name": "pfile", + "type": "PAVIFILE" + } + ], + "AVIStreamAddRef": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamRelease": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamInfoW": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "psi", + "type": "LPAVISTREAMINFOW" + }, + { + "name": "lSize", + "type": "LONG" + } + ], + "AVIStreamInfoA": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "psi", + "type": "LPAVISTREAMINFOA" + }, + { + "name": "lSize", + "type": "LONG" + } + ], + "AVIStreamFindSample": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lPos", + "type": "LONG" + }, + { + "name": "lFlags", + "type": "LONG" + } + ], + "AVIStreamReadFormat": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lPos", + "type": "LONG" + }, + { + "name": "lpFormat", + "type": "LPVOID" + }, + { + "name": "lpcbFormat", + "type": "LONG" + } + ], + "AVIStreamSetFormat": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lPos", + "type": "LONG" + }, + { + "name": "lpFormat", + "type": "LPVOID" + }, + { + "name": "cbFormat", + "type": "LONG" + } + ], + "AVIStreamReadData": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "fcc", + "type": "DWORD" + }, + { + "name": "lp", + "type": "LPVOID" + }, + { + "name": "lpcb", + "type": "LONG" + } + ], + "AVIStreamWriteData": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "fcc", + "type": "DWORD" + }, + { + "name": "lp", + "type": "LPVOID" + }, + { + "name": "cb", + "type": "LONG" + } + ], + "AVIStreamRead": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lStart", + "type": "LONG" + }, + { + "name": "lSamples", + "type": "LONG" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "cbBuffer", + "type": "LONG" + }, + { + "name": "plBytes", + "type": "LONG" + }, + { + "name": "plSamples", + "type": "LONG" + } + ], + "AVIStreamWrite": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lStart", + "type": "LONG" + }, + { + "name": "lSamples", + "type": "LONG" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "cbBuffer", + "type": "LONG" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "plSampWritten", + "type": "LONG" + }, + { + "name": "plBytesWritten", + "type": "LONG" + } + ], + "AVIStreamStart": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamLength": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamTimeToSample": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lTime", + "type": "LONG" + } + ], + "AVIStreamSampleToTime": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lSample", + "type": "LONG" + } + ], + "AVIStreamBeginStreaming": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lStart", + "type": "LONG" + }, + { + "name": "lEnd", + "type": "LONG" + }, + { + "name": "lRate", + "type": "LONG" + } + ], + "AVIStreamEndStreaming": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamGetFrameOpen": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpbiWanted", + "type": "LPBITMAPINFOHEADER" + } + ], + "AVIStreamGetFrame": [ + { + "name": "pg", + "type": "PGETFRAME" + }, + { + "name": "lPos", + "type": "LONG" + } + ], + "AVIStreamGetFrameClose": [ + { + "name": "pg", + "type": "PGETFRAME" + } + ], + "AVIStreamOpenFromFileA": [ + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "szFile", + "type": "LPCSTR" + }, + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG" + }, + { + "name": "mode", + "type": "UINT" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + } + ], + "AVIStreamOpenFromFileW": [ + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "szFile", + "type": "LPCWSTR" + }, + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG" + }, + { + "name": "mode", + "type": "UINT" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + } + ], + "AVIStreamCreate": [ + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "lParam1", + "type": "LONG" + }, + { + "name": "lParam2", + "type": "LONG" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + } + ], + "AVIMakeCompressedStream": [ + { + "name": "ppsCompressed", + "type": "PAVISTREAM" + }, + { + "name": "ppsSource", + "type": "PAVISTREAM" + }, + { + "name": "lpOptions", + "type": "AVICOMPRESSOPTIONS" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + } + ], + "AVISaveA": [ + { + "name": "szFile", + "type": "LPCSTR" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + }, + { + "name": "lpfnCallback", + "type": "AVISAVECALLBACK" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "pfile", + "type": "PAVISTREAM" + }, + { + "name": "lpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveVA": [ + { + "name": "szFile", + "type": "LPCSTR" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + }, + { + "name": "lpfnCallback", + "type": "AVISAVECALLBACK" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "plpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveW": [ + { + "name": "szFile", + "type": "LPCWSTR" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + }, + { + "name": "lpfnCallback", + "type": "AVISAVECALLBACK" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "pfile", + "type": "PAVISTREAM" + }, + { + "name": "lpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveVW": [ + { + "name": "szFile", + "type": "LPCWSTR" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + }, + { + "name": "lpfnCallback", + "type": "AVISAVECALLBACK" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "plpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveOptions": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "plpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveOptionsFree": [ + { + "name": "nStreams", + "type": "int" + }, + { + "name": "plpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVIBuildFilterW": [ + { + "name": "lpszFilter", + "type": "LPWSTR" + }, + { + "name": "cbFilter", + "type": "LONG" + }, + { + "name": "fSaving", + "type": "BOOL" + } + ], + "AVIBuildFilterA": [ + { + "name": "lpszFilter", + "type": "LPSTR" + }, + { + "name": "cbFilter", + "type": "LONG" + }, + { + "name": "fSaving", + "type": "BOOL" + } + ], + "AVIMakeFileFromStreams": [ + { + "name": "ppfile", + "type": "PAVIFILE" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "papStreams", + "type": "PAVISTREAM" + } + ], + "AVIMakeStreamFromClipboard": [ + { + "name": "cfFormat", + "type": "UINT" + }, + { + "name": "hGlobal", + "type": "HANDLE" + }, + { + "name": "ppstream", + "type": "PAVISTREAM" + } + ], + "AVIPutFileOnClipboard": [ + { + "name": "pf", + "type": "PAVIFILE" + } + ], + "AVIGetFromClipboard": [ + { + "name": "lppf", + "type": "PAVIFILE" + } + ], + "AVIClearClipboard": [ + { + "name": "VOID", + "type": "void" + } + ], + "CreateEditableStream": [ + { + "name": "ppsEditable", + "type": "PAVISTREAM" + }, + { + "name": "psSource", + "type": "PAVISTREAM" + } + ], + "EditStreamCut": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "plStart", + "type": "LONG" + }, + { + "name": "plLength", + "type": "LONG" + }, + { + "name": "ppResult", + "type": "PAVISTREAM" + } + ], + "EditStreamCopy": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "plStart", + "type": "LONG" + }, + { + "name": "plLength", + "type": "LONG" + }, + { + "name": "ppResult", + "type": "PAVISTREAM" + } + ], + "EditStreamPaste": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "plPos", + "type": "LONG" + }, + { + "name": "plLength", + "type": "LONG" + }, + { + "name": "pstream", + "type": "PAVISTREAM" + }, + { + "name": "lStart", + "type": "LONG" + }, + { + "name": "lEnd", + "type": "LONG" + } + ], + "EditStreamClone": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "ppResult", + "type": "PAVISTREAM" + } + ], + "EditStreamSetNameA": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpszName", + "type": "LPCSTR" + } + ], + "EditStreamSetNameW": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpszName", + "type": "LPCWSTR" + } + ], + "EditStreamSetInfoW": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpInfo", + "type": "LPAVISTREAMINFOW" + }, + { + "name": "cbInfo", + "type": "LONG" + } + ], + "EditStreamSetInfoA": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpInfo", + "type": "LPAVISTREAMINFOA" + }, + { + "name": "cbInfo", + "type": "LONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/avrt_dll.json b/qiling/extensions/windows_sdk/defs/avrt_dll.json new file mode 100644 index 000000000..e0081e513 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/avrt_dll.json @@ -0,0 +1,170 @@ +{ + "AvSetMmThreadCharacteristicsA": [ + { + "name": "TaskName", + "type": "LPCSTR" + }, + { + "name": "TaskIndex", + "type": "LPDWORD" + } + ], + "AvSetMmThreadCharacteristicsW": [ + { + "name": "TaskName", + "type": "LPCWSTR" + }, + { + "name": "TaskIndex", + "type": "LPDWORD" + } + ], + "AvSetMmMaxThreadCharacteristicsA": [ + { + "name": "FirstTask", + "type": "LPCSTR" + }, + { + "name": "SecondTask", + "type": "LPCSTR" + }, + { + "name": "TaskIndex", + "type": "LPDWORD" + } + ], + "AvSetMmMaxThreadCharacteristicsW": [ + { + "name": "FirstTask", + "type": "LPCWSTR" + }, + { + "name": "SecondTask", + "type": "LPCWSTR" + }, + { + "name": "TaskIndex", + "type": "LPDWORD" + } + ], + "AvRevertMmThreadCharacteristics": [ + { + "name": "AvrtHandle", + "type": "HANDLE" + } + ], + "AvSetMmThreadPriority": [ + { + "name": "AvrtHandle", + "type": "HANDLE" + }, + { + "name": "Priority", + "type": "AVRT_PRIORITY" + } + ], + "AvRtCreateThreadOrderingGroup": [ + { + "name": "Context", + "type": "PHANDLE" + }, + { + "name": "Period", + "type": "PLARGE_INTEGER" + }, + { + "name": "ThreadOrderingGuid", + "type": "GUID" + }, + { + "name": "Timeout", + "type": "PLARGE_INTEGER" + } + ], + "AvRtCreateThreadOrderingGroupExA": [ + { + "name": "Context", + "type": "PHANDLE" + }, + { + "name": "Period", + "type": "PLARGE_INTEGER" + }, + { + "name": "ThreadOrderingGuid", + "type": "GUID" + }, + { + "name": "Timeout", + "type": "PLARGE_INTEGER" + }, + { + "name": "TaskName", + "type": "LPCSTR" + } + ], + "AvRtCreateThreadOrderingGroupExW": [ + { + "name": "Context", + "type": "PHANDLE" + }, + { + "name": "Period", + "type": "PLARGE_INTEGER" + }, + { + "name": "ThreadOrderingGuid", + "type": "GUID" + }, + { + "name": "Timeout", + "type": "PLARGE_INTEGER" + }, + { + "name": "TaskName", + "type": "LPCWSTR" + } + ], + "AvRtJoinThreadOrderingGroup": [ + { + "name": "Context", + "type": "PHANDLE" + }, + { + "name": "ThreadOrderingGuid", + "type": "GUID" + }, + { + "name": "Before", + "type": "BOOL" + } + ], + "AvRtWaitOnThreadOrderingGroup": [ + { + "name": "Context", + "type": "HANDLE" + } + ], + "AvRtLeaveThreadOrderingGroup": [ + { + "name": "Context", + "type": "HANDLE" + } + ], + "AvRtDeleteThreadOrderingGroup": [ + { + "name": "Context", + "type": "HANDLE" + } + ], + "AvQuerySystemResponsiveness": [ + { + "name": "AvrtHandle", + "type": "HANDLE" + }, + { + "name": "SystemResponsivenessValue", + "type": "PULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/bcrypt_dll.json b/qiling/extensions/windows_sdk/defs/bcrypt_dll.json new file mode 100644 index 000000000..0e24ed2b2 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/bcrypt_dll.json @@ -0,0 +1,1134 @@ +{ + "BCryptOpenAlgorithmProvider": [ + { + "name": "phAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "pszAlgId", + "type": "LPCWSTR" + }, + { + "name": "pszImplementation", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptEnumAlgorithms": [ + { + "name": "dwAlgOperations", + "type": "ULONG" + }, + { + "name": "pAlgCount", + "type": "ULONG" + }, + { + "name": "ppAlgList", + "type": "BCRYPT_ALGORITHM_IDENTIFIER" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptEnumProviders": [ + { + "name": "pszAlgId", + "type": "LPCWSTR" + }, + { + "name": "pImplCount", + "type": "ULONG" + }, + { + "name": "ppImplList", + "type": "BCRYPT_PROVIDER_NAME" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptGetProperty": [ + { + "name": "hObject", + "type": "BCRYPT_HANDLE" + }, + { + "name": "pszProperty", + "type": "LPCWSTR" + }, + { + "name": "pbOutput", + "type": "PUCHAR" + }, + { + "name": "cbOutput", + "type": "ULONG" + }, + { + "name": "pcbResult", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptSetProperty": [ + { + "name": "hObject", + "type": "BCRYPT_HANDLE" + }, + { + "name": "pszProperty", + "type": "LPCWSTR" + }, + { + "name": "pbInput", + "type": "PUCHAR" + }, + { + "name": "cbInput", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptCloseAlgorithmProvider": [ + { + "name": "hAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptFreeBuffer": [ + { + "name": "pvBuffer", + "type": "PVOID" + } + ], + "BCryptGenerateSymmetricKey": [ + { + "name": "hAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "phKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pbKeyObject", + "type": "PUCHAR" + }, + { + "name": "cbKeyObject", + "type": "ULONG" + }, + { + "name": "pbSecret", + "type": "PUCHAR" + }, + { + "name": "cbSecret", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptGenerateKeyPair": [ + { + "name": "hAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "phKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "dwLength", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptEncrypt": [ + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pbInput", + "type": "PUCHAR" + }, + { + "name": "cbInput", + "type": "ULONG" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbIV", + "type": "PUCHAR" + }, + { + "name": "cbIV", + "type": "ULONG" + }, + { + "name": "pbOutput", + "type": "PUCHAR" + }, + { + "name": "cbOutput", + "type": "ULONG" + }, + { + "name": "pcbResult", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptDecrypt": [ + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pbInput", + "type": "PUCHAR" + }, + { + "name": "cbInput", + "type": "ULONG" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbIV", + "type": "PUCHAR" + }, + { + "name": "cbIV", + "type": "ULONG" + }, + { + "name": "pbOutput", + "type": "PUCHAR" + }, + { + "name": "cbOutput", + "type": "ULONG" + }, + { + "name": "pcbResult", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptExportKey": [ + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "hExportKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pszBlobType", + "type": "LPCWSTR" + }, + { + "name": "pbOutput", + "type": "PUCHAR" + }, + { + "name": "cbOutput", + "type": "ULONG" + }, + { + "name": "pcbResult", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptImportKey": [ + { + "name": "hAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "hImportKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pszBlobType", + "type": "LPCWSTR" + }, + { + "name": "phKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pbKeyObject", + "type": "PUCHAR" + }, + { + "name": "cbKeyObject", + "type": "ULONG" + }, + { + "name": "pbInput", + "type": "PUCHAR" + }, + { + "name": "cbInput", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptImportKeyPair": [ + { + "name": "hAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "hImportKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pszBlobType", + "type": "LPCWSTR" + }, + { + "name": "phKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pbInput", + "type": "PUCHAR" + }, + { + "name": "cbInput", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptDuplicateKey": [ + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "phNewKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pbKeyObject", + "type": "PUCHAR" + }, + { + "name": "cbKeyObject", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptFinalizeKeyPair": [ + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptDestroyKey": [ + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + } + ], + "BCryptDestroySecret": [ + { + "name": "hSecret", + "type": "BCRYPT_SECRET_HANDLE" + } + ], + "BCryptSignHash": [ + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbInput", + "type": "PUCHAR" + }, + { + "name": "cbInput", + "type": "ULONG" + }, + { + "name": "pbOutput", + "type": "PUCHAR" + }, + { + "name": "cbOutput", + "type": "ULONG" + }, + { + "name": "pcbResult", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptVerifySignature": [ + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbHash", + "type": "PUCHAR" + }, + { + "name": "cbHash", + "type": "ULONG" + }, + { + "name": "pbSignature", + "type": "PUCHAR" + }, + { + "name": "cbSignature", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptSecretAgreement": [ + { + "name": "hPrivKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "hPubKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "phAgreedSecret", + "type": "BCRYPT_SECRET_HANDLE" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptDeriveKey": [ + { + "name": "hSharedSecret", + "type": "BCRYPT_SECRET_HANDLE" + }, + { + "name": "pwszKDF", + "type": "LPCWSTR" + }, + { + "name": "pParameterList", + "type": "BCryptBufferDesc" + }, + { + "name": "pbDerivedKey", + "type": "PUCHAR" + }, + { + "name": "cbDerivedKey", + "type": "ULONG" + }, + { + "name": "pcbResult", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptKeyDerivation": [ + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pParameterList", + "type": "BCryptBufferDesc" + }, + { + "name": "pbDerivedKey", + "type": "PUCHAR" + }, + { + "name": "cbDerivedKey", + "type": "ULONG" + }, + { + "name": "pcbResult", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptCreateHash": [ + { + "name": "hAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "phHash", + "type": "BCRYPT_HASH_HANDLE" + }, + { + "name": "pbHashObject", + "type": "PUCHAR" + }, + { + "name": "cbHashObject", + "type": "ULONG" + }, + { + "name": "pbSecret", + "type": "PUCHAR" + }, + { + "name": "cbSecret", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptHashData": [ + { + "name": "hHash", + "type": "BCRYPT_HASH_HANDLE" + }, + { + "name": "pbInput", + "type": "PUCHAR" + }, + { + "name": "cbInput", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptFinishHash": [ + { + "name": "hHash", + "type": "BCRYPT_HASH_HANDLE" + }, + { + "name": "pbOutput", + "type": "PUCHAR" + }, + { + "name": "cbOutput", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptCreateMultiHash": [ + { + "name": "hAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "phHash", + "type": "BCRYPT_HASH_HANDLE" + }, + { + "name": "nHashes", + "type": "ULONG" + }, + { + "name": "pbHashObject", + "type": "PUCHAR" + }, + { + "name": "cbHashObject", + "type": "ULONG" + }, + { + "name": "pbSecret", + "type": "PUCHAR" + }, + { + "name": "cbSecret", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptProcessMultiOperations": [ + { + "name": "hObject", + "type": "BCRYPT_HANDLE" + }, + { + "name": "operationType", + "type": "BCRYPT_MULTI_OPERATION_TYPE" + }, + { + "name": "pOperations", + "type": "PVOID" + }, + { + "name": "cbOperations", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptDuplicateHash": [ + { + "name": "hHash", + "type": "BCRYPT_HASH_HANDLE" + }, + { + "name": "phNewHash", + "type": "BCRYPT_HASH_HANDLE" + }, + { + "name": "pbHashObject", + "type": "PUCHAR" + }, + { + "name": "cbHashObject", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptDestroyHash": [ + { + "name": "hHash", + "type": "BCRYPT_HASH_HANDLE" + } + ], + "BCryptHash": [ + { + "name": "hAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "pbSecret", + "type": "PUCHAR" + }, + { + "name": "cbSecret", + "type": "ULONG" + }, + { + "name": "pbInput", + "type": "PUCHAR" + }, + { + "name": "cbInput", + "type": "ULONG" + }, + { + "name": "pbOutput", + "type": "PUCHAR" + }, + { + "name": "cbOutput", + "type": "ULONG" + } + ], + "BCryptGenRandom": [ + { + "name": "hAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "pbBuffer", + "type": "PUCHAR" + }, + { + "name": "cbBuffer", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptDeriveKeyCapi": [ + { + "name": "hHash", + "type": "BCRYPT_HASH_HANDLE" + }, + { + "name": "hTargetAlg", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "pbDerivedKey", + "type": "PUCHAR" + }, + { + "name": "cbDerivedKey", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptDeriveKeyPBKDF2": [ + { + "name": "hPrf", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "pbPassword", + "type": "PUCHAR" + }, + { + "name": "cbPassword", + "type": "ULONG" + }, + { + "name": "pbSalt", + "type": "PUCHAR" + }, + { + "name": "cbSalt", + "type": "ULONG" + }, + { + "name": "cIterations", + "type": "ULONGLONG" + }, + { + "name": "pbDerivedKey", + "type": "PUCHAR" + }, + { + "name": "cbDerivedKey", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptQueryProviderRegistration": [ + { + "name": "pszProvider", + "type": "LPCWSTR" + }, + { + "name": "dwMode", + "type": "ULONG" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pcbBuffer", + "type": "ULONG" + }, + { + "name": "ppBuffer", + "type": "PCRYPT_PROVIDER_REG" + } + ], + "BCryptEnumRegisteredProviders": [ + { + "name": "pcbBuffer", + "type": "ULONG" + }, + { + "name": "ppBuffer", + "type": "PCRYPT_PROVIDERS" + } + ], + "BCryptCreateContext": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "pConfig", + "type": "PCRYPT_CONTEXT_CONFIG" + } + ], + "BCryptDeleteContext": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + } + ], + "BCryptEnumContexts": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pcbBuffer", + "type": "ULONG" + }, + { + "name": "ppBuffer", + "type": "PCRYPT_CONTEXTS" + } + ], + "BCryptConfigureContext": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "pConfig", + "type": "PCRYPT_CONTEXT_CONFIG" + } + ], + "BCryptQueryContextConfiguration": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "pcbBuffer", + "type": "ULONG" + }, + { + "name": "ppBuffer", + "type": "PCRYPT_CONTEXT_CONFIG" + } + ], + "BCryptAddContextFunction": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pszFunction", + "type": "LPCWSTR" + }, + { + "name": "dwPosition", + "type": "ULONG" + } + ], + "BCryptRemoveContextFunction": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pszFunction", + "type": "LPCWSTR" + } + ], + "BCryptEnumContextFunctions": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pcbBuffer", + "type": "ULONG" + }, + { + "name": "ppBuffer", + "type": "PCRYPT_CONTEXT_FUNCTIONS" + } + ], + "BCryptConfigureContextFunction": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pszFunction", + "type": "LPCWSTR" + }, + { + "name": "pConfig", + "type": "PCRYPT_CONTEXT_FUNCTION_CONFIG" + } + ], + "BCryptQueryContextFunctionConfiguration": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pszFunction", + "type": "LPCWSTR" + }, + { + "name": "pcbBuffer", + "type": "ULONG" + }, + { + "name": "ppBuffer", + "type": "PCRYPT_CONTEXT_FUNCTION_CONFIG" + } + ], + "BCryptEnumContextFunctionProviders": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pszFunction", + "type": "LPCWSTR" + }, + { + "name": "pcbBuffer", + "type": "ULONG" + }, + { + "name": "ppBuffer", + "type": "PCRYPT_CONTEXT_FUNCTION_PROVIDERS" + } + ], + "BCryptSetContextFunctionProperty": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pszFunction", + "type": "LPCWSTR" + }, + { + "name": "pszProperty", + "type": "LPCWSTR" + }, + { + "name": "cbValue", + "type": "ULONG" + }, + { + "name": "pbValue", + "type": "PUCHAR" + } + ], + "BCryptQueryContextFunctionProperty": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pszFunction", + "type": "LPCWSTR" + }, + { + "name": "pszProperty", + "type": "LPCWSTR" + }, + { + "name": "pcbValue", + "type": "ULONG" + }, + { + "name": "ppbValue", + "type": "PUCHAR" + } + ], + "BCryptRegisterConfigChangeNotify": [ + { + "name": "phEvent", + "type": "HANDLE" + } + ], + "BCryptResolveProviders": [ + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pszFunction", + "type": "LPCWSTR" + }, + { + "name": "pszProvider", + "type": "LPCWSTR" + }, + { + "name": "dwMode", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pcbBuffer", + "type": "ULONG" + }, + { + "name": "ppBuffer", + "type": "PCRYPT_PROVIDER_REFS" + } + ], + "BCryptGetFipsAlgorithmMode": [ + { + "name": "pfEnabled", + "type": "BOOLEAN" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/bcrypt_h.json b/qiling/extensions/windows_sdk/defs/bcrypt_h.json new file mode 100644 index 000000000..539491d3b --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/bcrypt_h.json @@ -0,0 +1,8 @@ +{ + "BCryptUnregisterConfigChangeNotify": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/bluetoothapis_dll.json b/qiling/extensions/windows_sdk/defs/bluetoothapis_dll.json new file mode 100644 index 000000000..fe01e43b1 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/bluetoothapis_dll.json @@ -0,0 +1,276 @@ +{ + "BluetoothGATTGetServices": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "ServicesBufferCount", + "type": "USHORT" + }, + { + "name": "ServicesBuffer", + "type": "PBTH_LE_GATT_SERVICE" + }, + { + "name": "ServicesBufferActual", + "type": "USHORT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTGetIncludedServices": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "ParentService", + "type": "PBTH_LE_GATT_SERVICE" + }, + { + "name": "IncludedServicesBufferCount", + "type": "USHORT" + }, + { + "name": "IncludedServicesBuffer", + "type": "PBTH_LE_GATT_SERVICE" + }, + { + "name": "IncludedServicesBufferActual", + "type": "USHORT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTGetCharacteristics": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "Service", + "type": "PBTH_LE_GATT_SERVICE" + }, + { + "name": "CharacteristicsBufferCount", + "type": "USHORT" + }, + { + "name": "CharacteristicsBuffer", + "type": "PBTH_LE_GATT_CHARACTERISTIC" + }, + { + "name": "CharacteristicsBufferActual", + "type": "USHORT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTGetDescriptors": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "Characteristic", + "type": "PBTH_LE_GATT_CHARACTERISTIC" + }, + { + "name": "DescriptorsBufferCount", + "type": "USHORT" + }, + { + "name": "DescriptorsBuffer", + "type": "PBTH_LE_GATT_DESCRIPTOR" + }, + { + "name": "DescriptorsBufferActual", + "type": "USHORT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTGetCharacteristicValue": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "Characteristic", + "type": "PBTH_LE_GATT_CHARACTERISTIC" + }, + { + "name": "CharacteristicValueDataSize", + "type": "ULONG" + }, + { + "name": "CharacteristicValue", + "type": "PBTH_LE_GATT_CHARACTERISTIC_VALUE" + }, + { + "name": "CharacteristicValueSizeRequired", + "type": "USHORT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTGetDescriptorValue": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "Descriptor", + "type": "PBTH_LE_GATT_DESCRIPTOR" + }, + { + "name": "DescriptorValueDataSize", + "type": "ULONG" + }, + { + "name": "DescriptorValue", + "type": "PBTH_LE_GATT_DESCRIPTOR_VALUE" + }, + { + "name": "DescriptorValueSizeRequired", + "type": "USHORT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTBeginReliableWrite": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "ReliableWriteContext", + "type": "PBTH_LE_GATT_RELIABLE_WRITE_CONTEXT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTSetCharacteristicValue": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "Characteristic", + "type": "PBTH_LE_GATT_CHARACTERISTIC" + }, + { + "name": "CharacteristicValue", + "type": "PBTH_LE_GATT_CHARACTERISTIC_VALUE" + }, + { + "name": "ReliableWriteContext", + "type": "BTH_LE_GATT_RELIABLE_WRITE_CONTEXT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTEndReliableWrite": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "ReliableWriteContext", + "type": "BTH_LE_GATT_RELIABLE_WRITE_CONTEXT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTAbortReliableWrite": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "ReliableWriteContext", + "type": "BTH_LE_GATT_RELIABLE_WRITE_CONTEXT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTSetDescriptorValue": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "Descriptor", + "type": "PBTH_LE_GATT_DESCRIPTOR" + }, + { + "name": "DescriptorValue", + "type": "PBTH_LE_GATT_DESCRIPTOR_VALUE" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTRegisterEvent": [ + { + "name": "hService", + "type": "HANDLE" + }, + { + "name": "EventType", + "type": "BTH_LE_GATT_EVENT_TYPE" + }, + { + "name": "EventParameterIn", + "type": "PVOID" + }, + { + "name": "Callback", + "type": "PFNBLUETOOTH_GATT_EVENT_CALLBACK" + }, + { + "name": "CallbackContext", + "type": "PVOID" + }, + { + "name": "pEventHandle", + "type": "BLUETOOTH_GATT_EVENT_HANDLE" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTUnregisterEvent": [ + { + "name": "EventHandle", + "type": "BLUETOOTH_GATT_EVENT_HANDLE" + }, + { + "name": "Flags", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/bthprops_cpl.json b/qiling/extensions/windows_sdk/defs/bthprops_cpl.json new file mode 100644 index 000000000..808606bed --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/bthprops_cpl.json @@ -0,0 +1,12 @@ +{ + "BluetoothIsVersionAvailable": [ + { + "name": "MajorVersion", + "type": "UCHAR" + }, + { + "name": "MinorVersion", + "type": "UCHAR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/bthprops_dll.json b/qiling/extensions/windows_sdk/defs/bthprops_dll.json new file mode 100644 index 000000000..560389c08 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/bthprops_dll.json @@ -0,0 +1,416 @@ +{ + "BluetoothFindFirstRadio": [ + { + "name": "pbtfrp", + "type": "BLUETOOTH_FIND_RADIO_PARAMS" + }, + { + "name": "phRadio", + "type": "HANDLE" + } + ], + "BluetoothFindNextRadio": [ + { + "name": "hFind", + "type": "HBLUETOOTH_RADIO_FIND" + }, + { + "name": "phRadio", + "type": "HANDLE" + } + ], + "BluetoothFindRadioClose": [ + { + "name": "hFind", + "type": "HBLUETOOTH_RADIO_FIND" + } + ], + "BluetoothGetRadioInfo": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "pRadioInfo", + "type": "PBLUETOOTH_RADIO_INFO" + } + ], + "BluetoothFindFirstDevice": [ + { + "name": "pbtsp", + "type": "BLUETOOTH_DEVICE_SEARCH_PARAMS" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + } + ], + "BluetoothFindNextDevice": [ + { + "name": "hFind", + "type": "HBLUETOOTH_DEVICE_FIND" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + } + ], + "BluetoothFindDeviceClose": [ + { + "name": "hFind", + "type": "HBLUETOOTH_DEVICE_FIND" + } + ], + "BluetoothGetDeviceInfo": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + } + ], + "BluetoothUpdateDeviceRecord": [ + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + } + ], + "BluetoothRemoveDevice": [ + { + "name": "pAddress", + "type": "BLUETOOTH_ADDRESS_STRUCT" + } + ], + "BluetoothSelectDevices": [ + { + "name": "pbtsdp", + "type": "BLUETOOTH_SELECT_DEVICE_PARAMS" + } + ], + "BluetoothSelectDevicesFree": [ + { + "name": "pbtsdp", + "type": "BLUETOOTH_SELECT_DEVICE_PARAMS" + } + ], + "BluetoothDisplayDeviceProperties": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + } + ], + "BluetoothAuthenticateDevice": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "pbtbi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "pszPasskey", + "type": "PWSTR" + }, + { + "name": "ulPasskeyLength", + "type": "ULONG" + } + ], + "BluetoothAuthenticateDeviceEx": [ + { + "name": "hwndParentIn", + "type": "HWND" + }, + { + "name": "hRadioIn", + "type": "HANDLE" + }, + { + "name": "pbtdiInout", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "pbtOobData", + "type": "PBLUETOOTH_OOB_DATA_INFO" + }, + { + "name": "authenticationRequirement", + "type": "AUTHENTICATION_REQUIREMENTS" + } + ], + "BluetoothAuthenticateMultipleDevices": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "cDevices", + "type": "DWORD" + }, + { + "name": "rgbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + } + ], + "BluetoothSetServiceState": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "pGuidService", + "type": "GUID" + }, + { + "name": "dwServiceFlags", + "type": "DWORD" + } + ], + "BluetoothEnumerateInstalledServices": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "pcServiceInout", + "type": "DWORD" + }, + { + "name": "pGuidServices", + "type": "GUID" + } + ], + "BluetoothEnableDiscovery": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "fEnabled", + "type": "BOOL" + } + ], + "BluetoothIsDiscoverable": [ + { + "name": "hRadio", + "type": "HANDLE" + } + ], + "BluetoothEnableIncomingConnections": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "fEnabled", + "type": "BOOL" + } + ], + "BluetoothIsConnectable": [ + { + "name": "hRadio", + "type": "HANDLE" + } + ], + "BluetoothRegisterForAuthentication": [ + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "phRegHandle", + "type": "HBLUETOOTH_AUTHENTICATION_REGISTRATION" + }, + { + "name": "pfnCallback", + "type": "PFN_AUTHENTICATION_CALLBACK" + }, + { + "name": "pvParam", + "type": "PVOID" + } + ], + "BluetoothRegisterForAuthenticationEx": [ + { + "name": "pbtdiIn", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "phRegHandleOut", + "type": "HBLUETOOTH_AUTHENTICATION_REGISTRATION" + }, + { + "name": "pfnCallbackIn", + "type": "PFN_AUTHENTICATION_CALLBACK_EX" + }, + { + "name": "pvParam", + "type": "PVOID" + } + ], + "BluetoothUnregisterAuthentication": [ + { + "name": "hRegHandle", + "type": "HBLUETOOTH_AUTHENTICATION_REGISTRATION" + } + ], + "BluetoothSendAuthenticationResponse": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "pszPasskey", + "type": "LPCWSTR" + } + ], + "BluetoothSendAuthenticationResponseEx": [ + { + "name": "hRadioIn", + "type": "HANDLE" + }, + { + "name": "pauthResponse", + "type": "PBLUETOOTH_AUTHENTICATE_RESPONSE" + } + ], + "BluetoothSdpGetElementData": [ + { + "name": "pSdpStream", + "type": "LPBYTE" + }, + { + "name": "cbSdpStreamLength", + "type": "ULONG" + }, + { + "name": "pData", + "type": "PSDP_ELEMENT_DATA" + } + ], + "BluetoothSdpGetContainerElementData": [ + { + "name": "pContainerStream", + "type": "LPBYTE" + }, + { + "name": "cbContainerLength", + "type": "ULONG" + }, + { + "name": "pElement", + "type": "HBLUETOOTH_CONTAINER_ELEMENT" + }, + { + "name": "pData", + "type": "PSDP_ELEMENT_DATA" + } + ], + "BluetoothSdpGetAttributeValue": [ + { + "name": "pRecordStream", + "type": "LPBYTE" + }, + { + "name": "cbRecordLength", + "type": "ULONG" + }, + { + "name": "usAttributeId", + "type": "USHORT" + }, + { + "name": "pAttributeData", + "type": "PSDP_ELEMENT_DATA" + } + ], + "BluetoothSdpGetString": [ + { + "name": "pRecordStream", + "type": "LPBYTE" + }, + { + "name": "cbRecordLength", + "type": "ULONG" + }, + { + "name": "pStringData", + "type": "PSDP_STRING_TYPE_DATA" + }, + { + "name": "usStringOffset", + "type": "USHORT" + }, + { + "name": "pszString", + "type": "PWSTR" + }, + { + "name": "pcchStringLength", + "type": "PULONG" + } + ], + "BluetoothSdpEnumAttributes": [ + { + "name": "pSDPStream", + "type": "LPBYTE" + }, + { + "name": "cbStreamSize", + "type": "ULONG" + }, + { + "name": "pfnCallback", + "type": "PFN_BLUETOOTH_ENUM_ATTRIBUTES_CALLBACK" + }, + { + "name": "pvParam", + "type": "LPVOID" + } + ], + "BluetoothSetLocalServiceInfo": [ + { + "name": "hRadioIn", + "type": "HANDLE" + }, + { + "name": "pClassGuid", + "type": "GUID" + }, + { + "name": "ulInstance", + "type": "ULONG" + }, + { + "name": "pServiceInfoIn", + "type": "BLUETOOTH_LOCAL_SERVICE_INFO_STRUCT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/c_g18030_dll.json b/qiling/extensions/windows_sdk/defs/c_g18030_dll.json new file mode 100644 index 000000000..1d99f246d --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/c_g18030_dll.json @@ -0,0 +1,32 @@ +{ + "NlsDllCodePageTranslation": [ + { + "name": "CodePage", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpMultiByteStr", + "type": "LPSTR" + }, + { + "name": "cchMultiByte", + "type": "int" + }, + { + "name": "lpWideCharStr", + "type": "LPWSTR" + }, + { + "name": "cchWideChar", + "type": "int" + }, + { + "name": "lpCPInfo", + "type": "LPCPINFO" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/cabinet_dll.json b/qiling/extensions/windows_sdk/defs/cabinet_dll.json new file mode 100644 index 000000000..12c92ac59 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/cabinet_dll.json @@ -0,0 +1,406 @@ +{ + "FCICreate": [ + { + "name": "perf", + "type": "PERF" + }, + { + "name": "pfnfcifp", + "type": "PFNFCIFILEPLACED" + }, + { + "name": "pfna", + "type": "PFNFCIALLOC" + }, + { + "name": "pfnf", + "type": "PFNFCIFREE" + }, + { + "name": "pfnopen", + "type": "PFNFCIOPEN" + }, + { + "name": "pfnread", + "type": "PFNFCIREAD" + }, + { + "name": "pfnwrite", + "type": "PFNFCIWRITE" + }, + { + "name": "pfnclose", + "type": "PFNFCICLOSE" + }, + { + "name": "pfnseek", + "type": "PFNFCISEEK" + }, + { + "name": "pfndelete", + "type": "PFNFCIDELETE" + }, + { + "name": "pfnfcigtf", + "type": "PFNFCIGETTEMPFILE" + }, + { + "name": "pccab", + "type": "PCCAB" + }, + { + "name": "pv", + "type": "void" + } + ], + "FCIAddFile": [ + { + "name": "hfci", + "type": "HFCI" + }, + { + "name": "pszSourceFile", + "type": "LPSTR" + }, + { + "name": "pszFileName", + "type": "LPSTR" + }, + { + "name": "fExecute", + "type": "BOOL" + }, + { + "name": "pfnfcignc", + "type": "PFNFCIGETNEXTCABINET" + }, + { + "name": "pfnfcis", + "type": "PFNFCISTATUS" + }, + { + "name": "pfnfcigoi", + "type": "PFNFCIGETOPENINFO" + }, + { + "name": "typeCompress", + "type": "TCOMP" + } + ], + "FCIFlushCabinet": [ + { + "name": "hfci", + "type": "HFCI" + }, + { + "name": "fGetNextCab", + "type": "BOOL" + }, + { + "name": "pfnfcignc", + "type": "PFNFCIGETNEXTCABINET" + }, + { + "name": "pfnfcis", + "type": "PFNFCISTATUS" + } + ], + "FCIFlushFolder": [ + { + "name": "hfci", + "type": "HFCI" + }, + { + "name": "pfnfcignc", + "type": "PFNFCIGETNEXTCABINET" + }, + { + "name": "pfnfcis", + "type": "PFNFCISTATUS" + } + ], + "FCIDestroy": [ + { + "name": "hfci", + "type": "HFCI" + } + ], + "FDICreate": [ + { + "name": "pfnalloc", + "type": "PFNALLOC" + }, + { + "name": "pfnfree", + "type": "PFNFREE" + }, + { + "name": "pfnopen", + "type": "PFNOPEN" + }, + { + "name": "pfnread", + "type": "PFNREAD" + }, + { + "name": "pfnwrite", + "type": "PFNWRITE" + }, + { + "name": "pfnclose", + "type": "PFNCLOSE" + }, + { + "name": "pfnseek", + "type": "PFNSEEK" + }, + { + "name": "cpuType", + "type": "int" + }, + { + "name": "perf", + "type": "PERF" + } + ], + "FDIIsCabinet": [ + { + "name": "hfdi", + "type": "HFDI" + }, + { + "name": "hf", + "type": "INT_PTR" + }, + { + "name": "pfdici", + "type": "PFDICABINETINFO" + } + ], + "FDICopy": [ + { + "name": "hfdi", + "type": "HFDI" + }, + { + "name": "pszCabinet", + "type": "LPSTR" + }, + { + "name": "pszCabPath", + "type": "LPSTR" + }, + { + "name": "flags", + "type": "int" + }, + { + "name": "pfnfdin", + "type": "PFNFDINOTIFY" + }, + { + "name": "pfnfdid", + "type": "PFNFDIDECRYPT" + }, + { + "name": "pvUser", + "type": "void" + } + ], + "FDIDestroy": [ + { + "name": "hfdi", + "type": "HFDI" + } + ], + "FDITruncateCabinet": [ + { + "name": "hfdi", + "type": "HFDI" + }, + { + "name": "pszCabinetName", + "type": "LPSTR" + }, + { + "name": "iFolderToDelete", + "type": "USHORT" + } + ], + "CreateCompressor": [ + { + "name": "Algorithm", + "type": "DWORD" + }, + { + "name": "AllocationRoutines", + "type": "PCOMPRESS_ALLOCATION_ROUTINES" + }, + { + "name": "CompressorHandle", + "type": "PCOMPRESSOR_HANDLE" + } + ], + "SetCompressorInformation": [ + { + "name": "CompressorHandle", + "type": "COMPRESSOR_HANDLE" + }, + { + "name": "CompressInformationClass", + "type": "COMPRESS_INFORMATION_CLASS" + }, + { + "name": "CompressInformation", + "type": "LPCVOID" + }, + { + "name": "CompressInformationSize", + "type": "SIZE_T" + } + ], + "QueryCompressorInformation": [ + { + "name": "CompressorHandle", + "type": "COMPRESSOR_HANDLE" + }, + { + "name": "CompressInformationClass", + "type": "COMPRESS_INFORMATION_CLASS" + }, + { + "name": "CompressInformation", + "type": "PVOID" + }, + { + "name": "CompressInformationSize", + "type": "SIZE_T" + } + ], + "Compress": [ + { + "name": "CompressorHandle", + "type": "COMPRESSOR_HANDLE" + }, + { + "name": "UncompressedData", + "type": "LPCVOID" + }, + { + "name": "UncompressedDataSize", + "type": "SIZE_T" + }, + { + "name": "CompressedBuffer", + "type": "PVOID" + }, + { + "name": "CompressedBufferSize", + "type": "SIZE_T" + }, + { + "name": "CompressedDataSize", + "type": "PSIZE_T" + } + ], + "ResetCompressor": [ + { + "name": "CompressorHandle", + "type": "COMPRESSOR_HANDLE" + } + ], + "CloseCompressor": [ + { + "name": "CompressorHandle", + "type": "COMPRESSOR_HANDLE" + } + ], + "CreateDecompressor": [ + { + "name": "Algorithm", + "type": "DWORD" + }, + { + "name": "AllocationRoutines", + "type": "PCOMPRESS_ALLOCATION_ROUTINES" + }, + { + "name": "DecompressorHandle", + "type": "PDECOMPRESSOR_HANDLE" + } + ], + "SetDecompressorInformation": [ + { + "name": "DecompressorHandle", + "type": "DECOMPRESSOR_HANDLE" + }, + { + "name": "CompressInformationClass", + "type": "COMPRESS_INFORMATION_CLASS" + }, + { + "name": "CompressInformation", + "type": "LPCVOID" + }, + { + "name": "CompressInformationSize", + "type": "SIZE_T" + } + ], + "QueryDecompressorInformation": [ + { + "name": "DecompressorHandle", + "type": "DECOMPRESSOR_HANDLE" + }, + { + "name": "CompressInformationClass", + "type": "COMPRESS_INFORMATION_CLASS" + }, + { + "name": "CompressInformation", + "type": "PVOID" + }, + { + "name": "CompressInformationSize", + "type": "SIZE_T" + } + ], + "Decompress": [ + { + "name": "DecompressorHandle", + "type": "DECOMPRESSOR_HANDLE" + }, + { + "name": "CompressedData", + "type": "LPCVOID" + }, + { + "name": "CompressedDataSize", + "type": "SIZE_T" + }, + { + "name": "UncompressedBuffer", + "type": "PVOID" + }, + { + "name": "UncompressedBufferSize", + "type": "SIZE_T" + }, + { + "name": "UncompressedDataSize", + "type": "PSIZE_T" + } + ], + "ResetDecompressor": [ + { + "name": "DecompressorHandle", + "type": "DECOMPRESSOR_HANDLE" + } + ], + "CloseDecompressor": [ + { + "name": "DecompressorHandle", + "type": "DECOMPRESSOR_HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/certadm_dll.json b/qiling/extensions/windows_sdk/defs/certadm_dll.json new file mode 100644 index 000000000..126e75cb9 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/certadm_dll.json @@ -0,0 +1,262 @@ +{ + "CertSrvIsServerOnlineW": [ + { + "name": "pwszServerName", + "type": "WCHAR" + }, + { + "name": "pfServerOnline", + "type": "BOOL" + } + ], + "CertSrvBackupGetDynamicFileListW": [ + { + "name": "hbc", + "type": "HCSBC" + }, + { + "name": "ppwszzFileList", + "type": "PWSTR" + }, + { + "name": "pcbSize", + "type": "DWORD" + } + ], + "CertSrvBackupPrepareW": [ + { + "name": "pwszServerName", + "type": "WCHAR" + }, + { + "name": "grbitJet", + "type": "ULONG" + }, + { + "name": "dwBackupFlags", + "type": "ULONG" + }, + { + "name": "phbc", + "type": "HCSBC" + } + ], + "CertSrvBackupGetDatabaseNamesW": [ + { + "name": "hbc", + "type": "HCSBC" + }, + { + "name": "ppwszzAttachmentInformation", + "type": "PWSTR" + }, + { + "name": "pcbSize", + "type": "DWORD" + } + ], + "CertSrvBackupOpenFileW": [ + { + "name": "hbc", + "type": "HCSBC" + }, + { + "name": "pwszAttachmentName", + "type": "WCHAR" + }, + { + "name": "cbReadHintSize", + "type": "DWORD" + }, + { + "name": "pliFileSize", + "type": "LARGE_INTEGER" + } + ], + "CertSrvBackupRead": [ + { + "name": "hbc", + "type": "HCSBC" + }, + { + "name": "pvBuffer", + "type": "void" + }, + { + "name": "cbBuffer", + "type": "DWORD" + }, + { + "name": "pcbRead", + "type": "DWORD" + } + ], + "CertSrvBackupClose": [ + { + "name": "hbc", + "type": "HCSBC" + } + ], + "CertSrvBackupGetBackupLogsW": [ + { + "name": "hbc", + "type": "HCSBC" + }, + { + "name": "ppwszzBackupLogFiles", + "type": "PWSTR" + }, + { + "name": "pcbSize", + "type": "DWORD" + } + ], + "CertSrvBackupTruncateLogs": [ + { + "name": "hbc", + "type": "HCSBC" + } + ], + "CertSrvBackupEnd": [ + { + "name": "hbc", + "type": "HCSBC" + } + ], + "CertSrvBackupFree": [ + { + "name": "pv", + "type": "void" + } + ], + "CertSrvRestoreGetDatabaseLocationsW": [ + { + "name": "hbc", + "type": "HCSBC" + }, + { + "name": "ppwszzDatabaseLocationList", + "type": "PWSTR" + }, + { + "name": "pcbSize", + "type": "DWORD" + } + ], + "CertSrvRestorePrepareW": [ + { + "name": "pwszServerName", + "type": "WCHAR" + }, + { + "name": "dwRestoreFlags", + "type": "ULONG" + }, + { + "name": "phbc", + "type": "HCSBC" + } + ], + "CertSrvRestoreRegisterW": [ + { + "name": "hbc", + "type": "HCSBC" + }, + { + "name": "pwszCheckPointFilePath", + "type": "WCHAR" + }, + { + "name": "pwszLogPath", + "type": "WCHAR" + }, + { + "name": "rgrstmap", + "type": "CSEDB_RSTMAPW" + }, + { + "name": "crstmap", + "type": "LONG" + }, + { + "name": "pwszBackupLogPath", + "type": "WCHAR" + }, + { + "name": "genLow", + "type": "ULONG" + }, + { + "name": "genHigh", + "type": "ULONG" + } + ], + "CertSrvRestoreRegisterThroughFile": [ + { + "name": "hbc", + "type": "HCSBC" + }, + { + "name": "pwszCheckPointFilePath", + "type": "WCHAR" + }, + { + "name": "pwszLogPath", + "type": "WCHAR" + }, + { + "name": "rgrstmap", + "type": "CSEDB_RSTMAPW" + }, + { + "name": "crstmap", + "type": "LONG" + }, + { + "name": "pwszBackupLogPath", + "type": "WCHAR" + }, + { + "name": "genLow", + "type": "ULONG" + }, + { + "name": "genHigh", + "type": "ULONG" + } + ], + "CertSrvRestoreRegisterComplete": [ + { + "name": "hbc", + "type": "HCSBC" + }, + { + "name": "hrRestoreState", + "type": "HRESULT" + } + ], + "CertSrvRestoreEnd": [ + { + "name": "hbc", + "type": "HCSBC" + } + ], + "CertSrvServerControlW": [ + { + "name": "pwszServerName", + "type": "WCHAR" + }, + { + "name": "dwControlFlags", + "type": "DWORD" + }, + { + "name": "pcbOut", + "type": "DWORD" + }, + { + "name": "ppbOut", + "type": "BYTE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/cfgmgr32_dll.json b/qiling/extensions/windows_sdk/defs/cfgmgr32_dll.json new file mode 100644 index 000000000..a54ebeaca --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/cfgmgr32_dll.json @@ -0,0 +1,1408 @@ +{ + "CM_Add_Empty_Log_Conf": [ + { + "name": "plcLogConf", + "type": "PLOG_CONF" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "Priority", + "type": "PRIORITY" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Add_Empty_Log_Conf_Ex": [ + { + "name": "plcLogConf", + "type": "PLOG_CONF" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "Priority", + "type": "PRIORITY" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Add_Res_Des": [ + { + "name": "prdResDes", + "type": "PRES_DES" + }, + { + "name": "lcLogConf", + "type": "LOG_CONF" + }, + { + "name": "ResourceID", + "type": "RESOURCEID" + }, + { + "name": "ResourceData", + "type": "PCVOID" + }, + { + "name": "ResourceLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Add_Res_Des_Ex": [ + { + "name": "prdResDes", + "type": "PRES_DES" + }, + { + "name": "lcLogConf", + "type": "LOG_CONF" + }, + { + "name": "ResourceID", + "type": "RESOURCEID" + }, + { + "name": "ResourceData", + "type": "PCVOID" + }, + { + "name": "ResourceLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Delete_Class_Key": [ + { + "name": "ClassGuid", + "type": "LPGUID" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Delete_DevNode_Key": [ + { + "name": "dnDevNode", + "type": "DEVNODE" + }, + { + "name": "ulHardwareProfile", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Disable_DevNode": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Disconnect_Machine": [ + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Enable_DevNode": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Enumerate_Classes": [ + { + "name": "ulClassIndex", + "type": "ULONG" + }, + { + "name": "ClassGuid", + "type": "LPGUID" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Enumerate_Classes_Ex": [ + { + "name": "ulClassIndex", + "type": "ULONG" + }, + { + "name": "ClassGuid", + "type": "LPGUID" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Free_Log_Conf": [ + { + "name": "lcLogConfToBeFreed", + "type": "LOG_CONF" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Free_Log_Conf_Ex": [ + { + "name": "lcLogConfToBeFreed", + "type": "LOG_CONF" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Free_Log_Conf_Handle": [ + { + "name": "lcLogConf", + "type": "LOG_CONF" + } + ], + "CM_Free_Res_Des": [ + { + "name": "prdResDes", + "type": "PRES_DES" + }, + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Free_Res_Des_Ex": [ + { + "name": "prdResDes", + "type": "PRES_DES" + }, + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Free_Res_Des_Handle": [ + { + "name": "rdResDes", + "type": "RES_DES" + } + ], + "CM_Get_Child": [ + { + "name": "pdnDevInst", + "type": "PDEVINST" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Child_Ex": [ + { + "name": "pdnDevInst", + "type": "PDEVINST" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Depth": [ + { + "name": "pulDepth", + "type": "PULONG" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Depth_Ex": [ + { + "name": "pulDepth", + "type": "PULONG" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Device_ID_ListA": [ + { + "name": "pszFilter", + "type": "PCSTR" + }, + { + "name": "Buffer", + "type": "PZZSTR" + }, + { + "name": "BufferLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_ID_ListW": [ + { + "name": "pszFilter", + "type": "PCWSTR" + }, + { + "name": "Buffer", + "type": "PZZWSTR" + }, + { + "name": "BufferLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_ID_List_SizeA": [ + { + "name": "pulLen", + "type": "PULONG" + }, + { + "name": "pszFilter", + "type": "PCSTR" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_ID_List_SizeW": [ + { + "name": "pulLen", + "type": "PULONG" + }, + { + "name": "pszFilter", + "type": "PCWSTR" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_ID_Size": [ + { + "name": "pulLen", + "type": "PULONG" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_ID_Size_Ex": [ + { + "name": "pulLen", + "type": "PULONG" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_DevNode_PropertyW": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_DevNode_Property_Keys": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "PropertyKeyArray", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyKeyCount", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_DevNode_Property_Keys_Ex": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "PropertyKeyArray", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyKeyCount", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_DevNode_Status": [ + { + "name": "pulStatus", + "type": "PULONG" + }, + { + "name": "pulProblemNumber", + "type": "PULONG" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_DevNode_Status_Ex": [ + { + "name": "pulStatus", + "type": "PULONG" + }, + { + "name": "pulProblemNumber", + "type": "PULONG" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_First_Log_Conf": [ + { + "name": "plcLogConf", + "type": "PLOG_CONF" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_First_Log_Conf_Ex": [ + { + "name": "plcLogConf", + "type": "PLOG_CONF" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Device_Interface_ListA": [ + { + "name": "InterfaceClassGuid", + "type": "LPGUID" + }, + { + "name": "pDeviceID", + "type": "DEVINSTID_A" + }, + { + "name": "Buffer", + "type": "PZZSTR" + }, + { + "name": "BufferLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_Interface_ListW": [ + { + "name": "InterfaceClassGuid", + "type": "LPGUID" + }, + { + "name": "pDeviceID", + "type": "DEVINSTID_W" + }, + { + "name": "Buffer", + "type": "PZZWSTR" + }, + { + "name": "BufferLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_Interface_List_SizeA": [ + { + "name": "pulLen", + "type": "PULONG" + }, + { + "name": "InterfaceClassGuid", + "type": "LPGUID" + }, + { + "name": "pDeviceID", + "type": "DEVINSTID_A" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_Interface_List_SizeW": [ + { + "name": "pulLen", + "type": "PULONG" + }, + { + "name": "InterfaceClassGuid", + "type": "LPGUID" + }, + { + "name": "pDeviceID", + "type": "DEVINSTID_W" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_Interface_Property_ExW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Log_Conf_Priority": [ + { + "name": "lcLogConf", + "type": "LOG_CONF" + }, + { + "name": "pPriority", + "type": "PPRIORITY" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Log_Conf_Priority_Ex": [ + { + "name": "lcLogConf", + "type": "LOG_CONF" + }, + { + "name": "pPriority", + "type": "PPRIORITY" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Next_Log_Conf": [ + { + "name": "plcLogConf", + "type": "PLOG_CONF" + }, + { + "name": "lcLogConf", + "type": "LOG_CONF" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Next_Log_Conf_Ex": [ + { + "name": "plcLogConf", + "type": "PLOG_CONF" + }, + { + "name": "lcLogConf", + "type": "LOG_CONF" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Parent": [ + { + "name": "pdnDevInst", + "type": "PDEVINST" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Parent_Ex": [ + { + "name": "pdnDevInst", + "type": "PDEVINST" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Res_Des_Data": [ + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "BufferLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Res_Des_Data_Ex": [ + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "BufferLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Res_Des_Data_Size": [ + { + "name": "pulSize", + "type": "PULONG" + }, + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Res_Des_Data_Size_Ex": [ + { + "name": "pulSize", + "type": "PULONG" + }, + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Sibling": [ + { + "name": "pdnDevInst", + "type": "PDEVINST" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Sibling_Ex": [ + { + "name": "pdnDevInst", + "type": "PDEVINST" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Version": [ + { + "name": "VOID", + "type": "void" + } + ], + "CM_Get_Version_Ex": [ + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Is_Version_Available": [ + { + "name": "wVersion", + "type": "WORD" + } + ], + "CM_Is_Version_Available_Ex": [ + { + "name": "wVersion", + "type": "WORD" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Locate_DevNodeA": [ + { + "name": "pdnDevInst", + "type": "PDEVINST" + }, + { + "name": "pDeviceID", + "type": "DEVINSTID_A" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Locate_DevNodeW": [ + { + "name": "pdnDevInst", + "type": "PDEVINST" + }, + { + "name": "pDeviceID", + "type": "DEVINSTID_W" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Modify_Res_Des": [ + { + "name": "prdResDes", + "type": "PRES_DES" + }, + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "ResourceID", + "type": "RESOURCEID" + }, + { + "name": "ResourceData", + "type": "PCVOID" + }, + { + "name": "ResourceLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Modify_Res_Des_Ex": [ + { + "name": "prdResDes", + "type": "PRES_DES" + }, + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "ResourceID", + "type": "RESOURCEID" + }, + { + "name": "ResourceData", + "type": "PCVOID" + }, + { + "name": "ResourceLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Next_Res_Des": [ + { + "name": "prdResDes", + "type": "PRES_DES" + }, + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "ForResource", + "type": "RESOURCEID" + }, + { + "name": "pResourceID", + "type": "PRESOURCEID" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Next_Res_Des_Ex": [ + { + "name": "prdResDes", + "type": "PRES_DES" + }, + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "ForResource", + "type": "RESOURCEID" + }, + { + "name": "pResourceID", + "type": "PRESOURCEID" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Open_DevNode_Key": [ + { + "name": "dnDevNode", + "type": "DEVINST" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "ulHardwareProfile", + "type": "ULONG" + }, + { + "name": "Disposition", + "type": "REGDISPOSITION" + }, + { + "name": "phkDevice", + "type": "PHKEY" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Reenumerate_DevNode": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Reenumerate_DevNode_Ex": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Set_DevNode_Problem_Ex": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulProblem", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Set_DevNode_Problem": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulProblem", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Is_Dock_Station_Present": [ + { + "name": "pbPresent", + "type": "PBOOL" + } + ], + "CM_Is_Dock_Station_Present_Ex": [ + { + "name": "pbPresent", + "type": "PBOOL" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Request_Eject_PC": [ + { + "name": "VOID", + "type": "void" + } + ], + "CM_Request_Eject_PC_Ex": [ + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Setup_DevNode": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Uninstall_DevNode": [ + { + "name": "dnDevInst", + "type": "DEVNODE" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Query_Resource_Conflict_List": [ + { + "name": "pclConflictList", + "type": "PCONFLICT_LIST" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ResourceID", + "type": "RESOURCEID" + }, + { + "name": "ResourceData", + "type": "PCVOID" + }, + { + "name": "ResourceLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Free_Resource_Conflict_Handle": [ + { + "name": "clConflictList", + "type": "CONFLICT_LIST" + } + ], + "CM_Get_Resource_Conflict_Count": [ + { + "name": "clConflictList", + "type": "CONFLICT_LIST" + }, + { + "name": "pulCount", + "type": "PULONG" + } + ], + "CM_Get_Class_Property_Keys": [ + { + "name": "ClassGUID", + "type": "LPCGUID" + }, + { + "name": "PropertyKeyArray", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyKeyCount", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Class_Property_Keys_Ex": [ + { + "name": "ClassGUID", + "type": "LPCGUID" + }, + { + "name": "PropertyKeyArray", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyKeyCount", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Register_Notification": [ + { + "name": "pFilter", + "type": "PCM_NOTIFY_FILTER" + }, + { + "name": "pContext", + "type": "PVOID" + }, + { + "name": "pCallback", + "type": "PCM_NOTIFY_CALLBACK" + }, + { + "name": "pNotifyContext", + "type": "PHCMNOTIFICATION" + } + ], + "CM_Unregister_Notification": [ + { + "name": "NotifyContext", + "type": "HCMNOTIFICATION" + } + ], + "CM_MapCrToWin32Err": [ + { + "name": "CmReturnCode", + "type": "CONFIGRET" + }, + { + "name": "DefaultErr", + "type": "DWORD" + } + ], + "SwDeviceCreate": [ + { + "name": "pszEnumeratorName", + "type": "PCWSTR" + }, + { + "name": "pszParentDeviceInstance", + "type": "PCWSTR" + }, + { + "name": "pCreateInfo", + "type": "SW_DEVICE_CREATE_INFO" + }, + { + "name": "cPropertyCount", + "type": "ULONG" + }, + { + "name": "pProperties", + "type": "DEVPROPERTY" + }, + { + "name": "pCallback", + "type": "SW_DEVICE_CREATE_CALLBACK" + }, + { + "name": "pContext", + "type": "PVOID" + }, + { + "name": "phSwDevice", + "type": "PHSWDEVICE" + } + ], + "SwDeviceClose": [ + { + "name": "hSwDevice", + "type": "HSWDEVICE" + } + ], + "SwDeviceSetLifetime": [ + { + "name": "hSwDevice", + "type": "HSWDEVICE" + }, + { + "name": "Lifetime", + "type": "SW_DEVICE_LIFETIME" + } + ], + "SwDeviceGetLifetime": [ + { + "name": "hSwDevice", + "type": "HSWDEVICE" + }, + { + "name": "pLifetime", + "type": "PSW_DEVICE_LIFETIME" + } + ], + "SwDevicePropertySet": [ + { + "name": "hSwDevice", + "type": "HSWDEVICE" + }, + { + "name": "cPropertyCount", + "type": "ULONG" + }, + { + "name": "pProperties", + "type": "DEVPROPERTY" + } + ], + "SwDeviceInterfaceRegister": [ + { + "name": "hSwDevice", + "type": "HSWDEVICE" + }, + { + "name": "pInterfaceClassGuid", + "type": "GUID" + }, + { + "name": "pszReferenceString", + "type": "PCWSTR" + }, + { + "name": "cPropertyCount", + "type": "ULONG" + }, + { + "name": "pProperties", + "type": "DEVPROPERTY" + }, + { + "name": "fEnabled", + "type": "BOOL" + }, + { + "name": "ppszDeviceInterfaceId", + "type": "PWSTR" + } + ], + "SwMemFree": [ + { + "name": "pMem", + "type": "PVOID" + } + ], + "SwDeviceInterfaceSetState": [ + { + "name": "hSwDevice", + "type": "HSWDEVICE" + }, + { + "name": "pszDeviceInterfaceId", + "type": "PCWSTR" + }, + { + "name": "fEnabled", + "type": "BOOL" + } + ], + "SwDeviceInterfacePropertySet": [ + { + "name": "hSwDevice", + "type": "HSWDEVICE" + }, + { + "name": "pszDeviceInterfaceId", + "type": "PCWSTR" + }, + { + "name": "cPropertyCount", + "type": "ULONG" + }, + { + "name": "pProperties", + "type": "DEVPROPERTY" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/cfgmgr32_lib.json b/qiling/extensions/windows_sdk/defs/cfgmgr32_lib.json new file mode 100644 index 000000000..9aa2cb193 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/cfgmgr32_lib.json @@ -0,0 +1,426 @@ +{ + "CM_Get_Device_IDW": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "Buffer", + "type": "PWSTR" + }, + { + "name": "BufferLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_DevNode_Registry_PropertyW": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulProperty", + "type": "ULONG" + }, + { + "name": "pulRegDataType", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "pulLength", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_Interface_PropertyW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_Interface_Property_KeysW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "PropertyKeyArray", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyKeyCount", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Open_Class_KeyW": [ + { + "name": "ClassGuid", + "type": "LPGUID" + }, + { + "name": "pszClassName", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Disposition", + "type": "REGDISPOSITION" + }, + { + "name": "phkClass", + "type": "PHKEY" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Open_Device_Interface_KeyA": [ + { + "name": "pszDeviceInterface", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Disposition", + "type": "REGDISPOSITION" + }, + { + "name": "phkDeviceInterface", + "type": "PHKEY" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Open_Device_Interface_KeyW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Disposition", + "type": "REGDISPOSITION" + }, + { + "name": "phkDeviceInterface", + "type": "PHKEY" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Open_Device_Interface_Key_ExA": [ + { + "name": "pszDeviceInterface", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Disposition", + "type": "REGDISPOSITION" + }, + { + "name": "phkDeviceInterface", + "type": "PHKEY" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Open_Device_Interface_Key_ExW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Disposition", + "type": "REGDISPOSITION" + }, + { + "name": "phkDeviceInterface", + "type": "PHKEY" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Delete_Device_Interface_KeyW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Query_And_Remove_SubTreeW": [ + { + "name": "dnAncestor", + "type": "DEVINST" + }, + { + "name": "pVetoType", + "type": "PPNP_VETO_TYPE" + }, + { + "name": "pszVetoName", + "type": "LPWSTR" + }, + { + "name": "ulNameLength", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Set_DevNode_PropertyW": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Set_DevNode_Registry_PropertyW": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulProperty", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PCVOID" + }, + { + "name": "ulLength", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Set_Device_Interface_PropertyW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Class_PropertyW": [ + { + "name": "ClassGUID", + "type": "LPCGUID" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Set_Class_PropertyW": [ + { + "name": "ClassGUID", + "type": "LPCGUID" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Class_Registry_PropertyW": [ + { + "name": "ClassGuid", + "type": "LPGUID" + }, + { + "name": "ulProperty", + "type": "ULONG" + }, + { + "name": "pulRegDataType", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "pulLength", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Set_Class_Registry_PropertyW": [ + { + "name": "ClassGuid", + "type": "LPGUID" + }, + { + "name": "ulProperty", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PCVOID" + }, + { + "name": "ulLength", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/cldapi_dll.json b/qiling/extensions/windows_sdk/defs/cldapi_dll.json new file mode 100644 index 000000000..ed61d9646 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/cldapi_dll.json @@ -0,0 +1,476 @@ +{ + "CfGetPlatformInfo": [ + { + "name": "PlatformVersion", + "type": "CF_PLATFORM_INFO" + } + ], + "CfRegisterSyncRoot": [ + { + "name": "SyncRootPath", + "type": "LPCWSTR" + }, + { + "name": "Registration", + "type": "CF_SYNC_REGISTRATION" + }, + { + "name": "Policies", + "type": "CF_SYNC_POLICIES" + }, + { + "name": "RegisterFlags", + "type": "CF_REGISTER_FLAGS" + } + ], + "CfUnregisterSyncRoot": [ + { + "name": "SyncRootPath", + "type": "LPCWSTR" + } + ], + "CfConnectSyncRoot": [ + { + "name": "SyncRootPath", + "type": "LPCWSTR" + }, + { + "name": "CallbackTable", + "type": "CF_CALLBACK_REGISTRATION" + }, + { + "name": "CallbackContext", + "type": "LPCVOID" + }, + { + "name": "ConnectFlags", + "type": "CF_CONNECT_FLAGS" + }, + { + "name": "ConnectionKey", + "type": "CF_CONNECTION_KEY" + } + ], + "CfDisconnectSyncRoot": [ + { + "name": "ConnectionKey", + "type": "CF_CONNECTION_KEY" + } + ], + "CfGetTransferKey": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "TransferKey", + "type": "CF_TRANSFER_KEY" + } + ], + "CfReleaseTransferKey": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "TransferKey", + "type": "CF_TRANSFER_KEY" + } + ], + "CfExecute": [ + { + "name": "OpInfo", + "type": "CF_OPERATION_INFO" + }, + { + "name": "OpParams", + "type": "CF_OPERATION_PARAMETERS" + } + ], + "CfUpdateSyncProviderStatus": [ + { + "name": "ConnectionKey", + "type": "CF_CONNECTION_KEY" + }, + { + "name": "ProviderStatus", + "type": "CF_SYNC_PROVIDER_STATUS" + } + ], + "CfQuerySyncProviderStatus": [ + { + "name": "ConnectionKey", + "type": "CF_CONNECTION_KEY" + }, + { + "name": "ProviderStatus", + "type": "CF_SYNC_PROVIDER_STATUS" + } + ], + "CfReportSyncStatus": [ + { + "name": "SyncRootPath", + "type": "LPCWSTR" + }, + { + "name": "SyncStatus", + "type": "CF_SYNC_STATUS" + } + ], + "CfCreatePlaceholders": [ + { + "name": "BaseDirectoryPath", + "type": "LPCWSTR" + }, + { + "name": "PlaceholderArray", + "type": "CF_PLACEHOLDER_CREATE_INFO" + }, + { + "name": "PlaceholderCount", + "type": "DWORD" + }, + { + "name": "CreateFlags", + "type": "CF_CREATE_FLAGS" + }, + { + "name": "EntriesProcessed", + "type": "PDWORD" + } + ], + "CfOpenFileWithOplock": [ + { + "name": "FilePath", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "CF_OPEN_FILE_FLAGS" + }, + { + "name": "ProtectedHandle", + "type": "PHANDLE" + } + ], + "CfReferenceProtectedHandle": [ + { + "name": "ProtectedHandle", + "type": "HANDLE" + } + ], + "CfGetWin32HandleFromProtectedHandle": [ + { + "name": "ProtectedHandle", + "type": "HANDLE" + } + ], + "CfReleaseProtectedHandle": [ + { + "name": "ProtectedHandle", + "type": "HANDLE" + } + ], + "CfCloseHandle": [ + { + "name": "FileHandle", + "type": "HANDLE" + } + ], + "CfConvertToPlaceholder": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "FileIdentity", + "type": "LPCVOID" + }, + { + "name": "FileIdentityLength", + "type": "DWORD" + }, + { + "name": "ConvertFlags", + "type": "CF_CONVERT_FLAGS" + }, + { + "name": "ConvertUsn", + "type": "USN" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "CfUpdatePlaceholder": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "FsMetadata", + "type": "CF_FS_METADATA" + }, + { + "name": "FileIdentity", + "type": "LPCVOID" + }, + { + "name": "FileIdentityLength", + "type": "DWORD" + }, + { + "name": "DehydrateRangeArray", + "type": "CF_FILE_RANGE" + }, + { + "name": "DehydrateRangeCount", + "type": "DWORD" + }, + { + "name": "UpdateFlags", + "type": "CF_UPDATE_FLAGS" + }, + { + "name": "UpdateUsn", + "type": "USN" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "CfRevertPlaceholder": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "RevertFlags", + "type": "CF_REVERT_FLAGS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "CfHydratePlaceholder": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "StartingOffset", + "type": "LARGE_INTEGER" + }, + { + "name": "Length", + "type": "LARGE_INTEGER" + }, + { + "name": "HydrateFlags", + "type": "CF_HYDRATE_FLAGS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "CfSetPinState": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "PinState", + "type": "CF_PIN_STATE" + }, + { + "name": "PinFlags", + "type": "CF_SET_PIN_FLAGS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "CfSetInSyncState": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "InSyncState", + "type": "CF_IN_SYNC_STATE" + }, + { + "name": "InSyncFlags", + "type": "CF_SET_IN_SYNC_FLAGS" + }, + { + "name": "InSyncUsn", + "type": "USN" + } + ], + "CfSetCorrelationVector": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "CorrelationVector", + "type": "PCORRELATION_VECTOR" + } + ], + "CfGetCorrelationVector": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "CorrelationVector", + "type": "PCORRELATION_VECTOR" + } + ], + "CfGetPlaceholderStateFromAttributeTag": [ + { + "name": "FileAttributes", + "type": "DWORD" + }, + { + "name": "ReparseTag", + "type": "DWORD" + } + ], + "CfGetPlaceholderStateFromFileInfo": [ + { + "name": "InfoBuffer", + "type": "LPCVOID" + }, + { + "name": "InfoClass", + "type": "FILE_INFO_BY_HANDLE_CLASS" + } + ], + "CfGetPlaceholderStateFromFindData": [ + { + "name": "FindData", + "type": "WIN32_FIND_DATA" + } + ], + "CfGetPlaceholderInfo": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "InfoClass", + "type": "CF_PLACEHOLDER_INFO_CLASS" + }, + { + "name": "InfoBuffer", + "type": "PVOID" + }, + { + "name": "InfoBufferLength", + "type": "DWORD" + }, + { + "name": "ReturnedLength", + "type": "PDWORD" + } + ], + "CfGetSyncRootInfoByPath": [ + { + "name": "FilePath", + "type": "LPCWSTR" + }, + { + "name": "InfoClass", + "type": "CF_SYNC_ROOT_INFO_CLASS" + }, + { + "name": "InfoBuffer", + "type": "PVOID" + }, + { + "name": "InfoBufferLength", + "type": "DWORD" + }, + { + "name": "ReturnedLength", + "type": "DWORD" + } + ], + "CfGetSyncRootInfoByHandle": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "InfoClass", + "type": "CF_SYNC_ROOT_INFO_CLASS" + }, + { + "name": "InfoBuffer", + "type": "PVOID" + }, + { + "name": "InfoBufferLength", + "type": "DWORD" + }, + { + "name": "ReturnedLength", + "type": "DWORD" + } + ], + "CfGetPlaceholderRangeInfo": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "InfoClass", + "type": "CF_PLACEHOLDER_RANGE_INFO_CLASS" + }, + { + "name": "StartingOffset", + "type": "LARGE_INTEGER" + }, + { + "name": "Length", + "type": "LARGE_INTEGER" + }, + { + "name": "InfoBuffer", + "type": "PVOID" + }, + { + "name": "InfoBufferLength", + "type": "DWORD" + }, + { + "name": "ReturnedLength", + "type": "PDWORD" + } + ], + "CfReportProviderProgress": [ + { + "name": "ConnectionKey", + "type": "CF_CONNECTION_KEY" + }, + { + "name": "TransferKey", + "type": "CF_TRANSFER_KEY" + }, + { + "name": "ProviderProgressTotal", + "type": "LARGE_INTEGER" + }, + { + "name": "ProviderProgressCompleted", + "type": "LARGE_INTEGER" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/clfsw32_dll.json b/qiling/extensions/windows_sdk/defs/clfsw32_dll.json new file mode 100644 index 000000000..ddf01643e --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/clfsw32_dll.json @@ -0,0 +1,896 @@ +{ + "LsnContainer": [ + { + "name": "plsn", + "type": "CLFS_LSN" + } + ], + "LsnCreate": [ + { + "name": "cidContainer", + "type": "CLFS_CONTAINER_ID" + }, + { + "name": "offBlock", + "type": "ULONG" + }, + { + "name": "cRecord", + "type": "ULONG" + } + ], + "LsnBlockOffset": [ + { + "name": "plsn", + "type": "CLFS_LSN" + } + ], + "LsnRecordSequence": [ + { + "name": "plsn", + "type": "CLFS_LSN" + } + ], + "CreateLogFile": [ + { + "name": "pszLogFileName", + "type": "LPCWSTR" + }, + { + "name": "fDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "psaLogFile", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "fCreateDisposition", + "type": "ULONG" + }, + { + "name": "fFlagsAndAttributes", + "type": "ULONG" + } + ], + "DeleteLogByHandle": [ + { + "name": "hLog", + "type": "HANDLE" + } + ], + "DeleteLogFile": [ + { + "name": "pszLogFileName", + "type": "LPCWSTR" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "AddLogContainer": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "pcbContainer", + "type": "PULONGLONG" + }, + { + "name": "pwszContainerPath", + "type": "LPWSTR" + }, + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "AddLogContainerSet": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "cContainer", + "type": "USHORT" + }, + { + "name": "pcbContainer", + "type": "PULONGLONG" + }, + { + "name": "rgwszContainerPath", + "type": "LPWSTR" + }, + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "RemoveLogContainer": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "pwszContainerPath", + "type": "LPWSTR" + }, + { + "name": "fForce", + "type": "BOOL" + }, + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "RemoveLogContainerSet": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "cContainer", + "type": "USHORT" + }, + { + "name": "rgwszContainerPath", + "type": "LPWSTR" + }, + { + "name": "fForce", + "type": "BOOL" + }, + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "SetLogArchiveTail": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "plsnArchiveTail", + "type": "PCLFS_LSN" + }, + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "SetEndOfLog": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "plsnEnd", + "type": "PCLFS_LSN" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "TruncateLog": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "plsnEnd", + "type": "PCLFS_LSN" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "CreateLogContainerScanContext": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "cFromContainer", + "type": "ULONG" + }, + { + "name": "cContainers", + "type": "ULONG" + }, + { + "name": "eScanMode", + "type": "CLFS_SCAN_MODE" + }, + { + "name": "pcxScan", + "type": "PCLFS_SCAN_CONTEXT" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "ScanLogContainers": [ + { + "name": "pcxScan", + "type": "PCLFS_SCAN_CONTEXT" + }, + { + "name": "eScanMode", + "type": "CLFS_SCAN_MODE" + }, + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "AlignReservedLog": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "cReservedRecords", + "type": "ULONG" + }, + { + "name": "rgcbReservation", + "type": "LONGLONG" + }, + { + "name": "pcbAlignReservation", + "type": "PLONGLONG" + } + ], + "AllocReservedLog": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "cReservedRecords", + "type": "ULONG" + }, + { + "name": "pcbAdjustment", + "type": "PLONGLONG" + } + ], + "FreeReservedLog": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "cReservedRecords", + "type": "ULONG" + }, + { + "name": "pcbAdjustment", + "type": "PLONGLONG" + } + ], + "GetLogFileInformation": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "pinfoBuffer", + "type": "PCLFS_INFORMATION" + }, + { + "name": "cbBuffer", + "type": "PULONG" + } + ], + "SetLogArchiveMode": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "eMode", + "type": "CLFS_LOG_ARCHIVE_MODE" + } + ], + "ReadLogRestartArea": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "ppvRestartBuffer", + "type": "PVOID" + }, + { + "name": "pcbRestartBuffer", + "type": "PULONG" + }, + { + "name": "plsn", + "type": "PCLFS_LSN" + }, + { + "name": "ppvContext", + "type": "PVOID" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "ReadPreviousLogRestartArea": [ + { + "name": "pvReadContext", + "type": "PVOID" + }, + { + "name": "ppvRestartBuffer", + "type": "PVOID" + }, + { + "name": "pcbRestartBuffer", + "type": "PULONG" + }, + { + "name": "plsnRestart", + "type": "PCLFS_LSN" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "WriteLogRestartArea": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "pvRestartBuffer", + "type": "PVOID" + }, + { + "name": "cbRestartBuffer", + "type": "ULONG" + }, + { + "name": "plsnBase", + "type": "PCLFS_LSN" + }, + { + "name": "fFlags", + "type": "ULONG" + }, + { + "name": "pcbWritten", + "type": "PULONG" + }, + { + "name": "plsnNext", + "type": "PCLFS_LSN" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "AdvanceLogBase": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "plsnBase", + "type": "PCLFS_LSN" + }, + { + "name": "fFlags", + "type": "ULONG" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "CloseAndResetLogFile": [ + { + "name": "hLog", + "type": "HANDLE" + } + ], + "CreateLogMarshallingArea": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "pfnAllocBuffer", + "type": "CLFS_BLOCK_ALLOCATION" + }, + { + "name": "pfnFreeBuffer", + "type": "CLFS_BLOCK_DEALLOCATION" + }, + { + "name": "pvBlockAllocContext", + "type": "PVOID" + }, + { + "name": "cbMarshallingBuffer", + "type": "ULONG" + }, + { + "name": "cMaxWriteBuffers", + "type": "ULONG" + }, + { + "name": "cMaxReadBuffers", + "type": "ULONG" + }, + { + "name": "ppvMarshal", + "type": "PVOID" + } + ], + "DeleteLogMarshallingArea": [ + { + "name": "pvMarshal", + "type": "PVOID" + } + ], + "ReserveAndAppendLog": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "rgWriteEntries", + "type": "PCLFS_WRITE_ENTRY" + }, + { + "name": "cWriteEntries", + "type": "ULONG" + }, + { + "name": "plsnUndoNext", + "type": "PCLFS_LSN" + }, + { + "name": "plsnPrevious", + "type": "PCLFS_LSN" + }, + { + "name": "cReserveRecords", + "type": "ULONG" + }, + { + "name": "rgcbReservation", + "type": "LONGLONG" + }, + { + "name": "fFlags", + "type": "ULONG" + }, + { + "name": "plsn", + "type": "PCLFS_LSN" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "ReserveAndAppendLogAligned": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "rgWriteEntries", + "type": "PCLFS_WRITE_ENTRY" + }, + { + "name": "cWriteEntries", + "type": "ULONG" + }, + { + "name": "cbEntryAlignment", + "type": "ULONG" + }, + { + "name": "plsnUndoNext", + "type": "PCLFS_LSN" + }, + { + "name": "plsnPrevious", + "type": "PCLFS_LSN" + }, + { + "name": "cReserveRecords", + "type": "ULONG" + }, + { + "name": "rgcbReservation", + "type": "LONGLONG" + }, + { + "name": "fFlags", + "type": "ULONG" + }, + { + "name": "plsn", + "type": "PCLFS_LSN" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "FlushLogBuffers": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "FlushLogToLsn": [ + { + "name": "pvMarshalContext", + "type": "PVOID" + }, + { + "name": "plsnFlush", + "type": "PCLFS_LSN" + }, + { + "name": "plsnLastFlushed", + "type": "PCLFS_LSN" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "ReadLogRecord": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "plsnFirst", + "type": "PCLFS_LSN" + }, + { + "name": "eContextMode", + "type": "CLFS_CONTEXT_MODE" + }, + { + "name": "ppvReadBuffer", + "type": "PVOID" + }, + { + "name": "pcbReadBuffer", + "type": "PULONG" + }, + { + "name": "peRecordType", + "type": "PCLFS_RECORD_TYPE" + }, + { + "name": "plsnUndoNext", + "type": "PCLFS_LSN" + }, + { + "name": "plsnPrevious", + "type": "PCLFS_LSN" + }, + { + "name": "ppvReadContext", + "type": "PVOID" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "ReadNextLogRecord": [ + { + "name": "pvReadContext", + "type": "PVOID" + }, + { + "name": "ppvBuffer", + "type": "PVOID" + }, + { + "name": "pcbBuffer", + "type": "PULONG" + }, + { + "name": "peRecordType", + "type": "PCLFS_RECORD_TYPE" + }, + { + "name": "plsnUser", + "type": "PCLFS_LSN" + }, + { + "name": "plsnUndoNext", + "type": "PCLFS_LSN" + }, + { + "name": "plsnPrevious", + "type": "PCLFS_LSN" + }, + { + "name": "plsnRecord", + "type": "PCLFS_LSN" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "TerminateReadLog": [ + { + "name": "pvCursorContext", + "type": "PVOID" + } + ], + "DumpLogRecords": [ + { + "name": "pwszLogFileName", + "type": "PWSTR" + }, + { + "name": "fRecordType", + "type": "CLFS_RECORD_TYPE" + }, + { + "name": "plsnStart", + "type": "PCLFS_LSN" + }, + { + "name": "plsnEnd", + "type": "PCLFS_LSN" + }, + { + "name": "pstrmOut", + "type": "PFILE" + }, + { + "name": "pfnPrintRecord", + "type": "CLFS_PRINT_RECORD_ROUTINE" + }, + { + "name": "pfnAllocBlock", + "type": "CLFS_BLOCK_ALLOCATION" + }, + { + "name": "pfnFreeBlock", + "type": "CLFS_BLOCK_DEALLOCATION" + }, + { + "name": "pvBlockAllocContext", + "type": "PVOID" + }, + { + "name": "cbBlock", + "type": "ULONG" + }, + { + "name": "cMaxBlocks", + "type": "ULONG" + } + ], + "PrepareLogArchive": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "pszBaseLogFileName", + "type": "PWSTR" + }, + { + "name": "cLen", + "type": "ULONG" + }, + { + "name": "plsnLow", + "type": "PCLFS_LSN" + }, + { + "name": "plsnHigh", + "type": "PCLFS_LSN" + }, + { + "name": "pcActualLength", + "type": "PULONG" + }, + { + "name": "poffBaseLogFileData", + "type": "PULONGLONG" + }, + { + "name": "pcbBaseLogFileLength", + "type": "PULONGLONG" + }, + { + "name": "plsnBase", + "type": "PCLFS_LSN" + }, + { + "name": "plsnLast", + "type": "PCLFS_LSN" + }, + { + "name": "plsnCurrentArchiveTail", + "type": "PCLFS_LSN" + }, + { + "name": "ppvArchiveContext", + "type": "PCLFS_LOG_ARCHIVE_CONTEXT" + } + ], + "ReadLogArchiveMetadata": [ + { + "name": "pvArchiveContext", + "type": "CLFS_LOG_ARCHIVE_CONTEXT" + }, + { + "name": "cbOffset", + "type": "ULONG" + }, + { + "name": "cbBytesToRead", + "type": "ULONG" + }, + { + "name": "pbReadBuffer", + "type": "PBYTE" + }, + { + "name": "pcbBytesRead", + "type": "PULONG" + } + ], + "GetNextLogArchiveExtent": [ + { + "name": "pvArchiveContext", + "type": "CLFS_LOG_ARCHIVE_CONTEXT" + }, + { + "name": "rgadExtent", + "type": "CLFS_ARCHIVE_DESCRIPTOR" + }, + { + "name": "cDescriptors", + "type": "ULONG" + }, + { + "name": "pcDescriptorsReturned", + "type": "PULONG" + } + ], + "TerminateLogArchive": [ + { + "name": "pvArchiveContext", + "type": "CLFS_LOG_ARCHIVE_CONTEXT" + } + ], + "ValidateLog": [ + { + "name": "pszLogFileName", + "type": "LPCWSTR" + }, + { + "name": "psaLogFile", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "pinfoBuffer", + "type": "PCLFS_INFORMATION" + }, + { + "name": "pcbBuffer", + "type": "PULONG" + } + ], + "GetLogContainerName": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "cidLogicalContainer", + "type": "CLFS_CONTAINER_ID" + }, + { + "name": "pwstrContainerName", + "type": "LPCWSTR" + }, + { + "name": "cLenContainerName", + "type": "ULONG" + }, + { + "name": "pcActualLenContainerName", + "type": "PULONG" + } + ], + "GetLogIoStatistics": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "pvStatsBuffer", + "type": "PVOID" + }, + { + "name": "cbStatsBuffer", + "type": "ULONG" + }, + { + "name": "eStatsClass", + "type": "CLFS_IOSTATS_CLASS" + }, + { + "name": "pcbStatsWritten", + "type": "PULONG" + } + ], + "LsnEqual": [ + { + "name": "plsn1", + "type": "CLFS_LSN" + }, + { + "name": "plsn2", + "type": "CLFS_LSN" + } + ], + "LsnLess": [ + { + "name": "plsn1", + "type": "CLFS_LSN" + }, + { + "name": "plsn2", + "type": "CLFS_LSN" + } + ], + "LsnGreater": [ + { + "name": "plsn1", + "type": "CLFS_LSN" + }, + { + "name": "plsn2", + "type": "CLFS_LSN" + } + ], + "LsnNull": [ + { + "name": "plsn", + "type": "CLFS_LSN" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/clusapi_dll.json b/qiling/extensions/windows_sdk/defs/clusapi_dll.json new file mode 100644 index 000000000..a9bdef31b --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/clusapi_dll.json @@ -0,0 +1,2720 @@ +{ + "GetNodeClusterState": [ + { + "name": "lpszNodeName", + "type": "LPCWSTR" + }, + { + "name": "pdwClusterState", + "type": "LPDWORD" + } + ], + "OpenCluster": [ + { + "name": "lpszClusterName", + "type": "LPCWSTR" + } + ], + "OpenClusterEx": [ + { + "name": "lpszClusterName", + "type": "LPCWSTR" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "GrantedAccess", + "type": "DWORD" + } + ], + "CloseCluster": [ + { + "name": "hCluster", + "type": "HCLUSTER" + } + ], + "SetClusterName": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszNewClusterName", + "type": "LPCWSTR" + } + ], + "GetClusterInformation": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszClusterName", + "type": "LPWSTR" + }, + { + "name": "lpcchClusterName", + "type": "LPDWORD" + }, + { + "name": "lpClusterInfo", + "type": "LPCLUSTERVERSIONINFO" + } + ], + "GetClusterQuorumResource": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszResourceName", + "type": "LPWSTR" + }, + { + "name": "lpcchResourceName", + "type": "LPDWORD" + }, + { + "name": "lpszDeviceName", + "type": "LPWSTR" + }, + { + "name": "lpcchDeviceName", + "type": "LPDWORD" + }, + { + "name": "lpdwMaxQuorumLogSize", + "type": "LPDWORD" + } + ], + "SetClusterQuorumResource": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "lpszDeviceName", + "type": "LPCWSTR" + }, + { + "name": "dwMaxQuoLogSize", + "type": "DWORD" + } + ], + "BackupClusterDatabase": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszPathName", + "type": "LPCWSTR" + } + ], + "RestoreClusterDatabase": [ + { + "name": "lpszPathName", + "type": "LPCWSTR" + }, + { + "name": "bForce", + "type": "BOOL" + }, + { + "name": "lpszQuorumDriveLetter", + "type": "LPCWSTR" + } + ], + "SetClusterNetworkPriorityOrder": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "NetworkCount", + "type": "DWORD" + }, + { + "name": "NetworkList", + "type": "HNETWORK" + } + ], + "SetClusterServiceAccountPassword": [ + { + "name": "lpszClusterName", + "type": "LPCWSTR" + }, + { + "name": "lpszNewPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpReturnStatusBuffer", + "type": "PCLUSTER_SET_PASSWORD_STATUS" + }, + { + "name": "lpcbReturnStatusBufferSize", + "type": "LPDWORD" + } + ], + "ClusterControl": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "ClusterUpgradeFunctionalLevel": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "perform", + "type": "BOOL" + }, + { + "name": "pfnProgressCallback", + "type": "PCLUSTER_UPGRADE_PROGRESS_CALLBACK" + }, + { + "name": "pvCallbackArg", + "type": "PVOID" + } + ], + "CreateClusterNotifyPortV2": [ + { + "name": "hChange", + "type": "HCHANGE" + }, + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "Filters", + "type": "NOTIFY_FILTER_AND_TYPE" + }, + { + "name": "dwFilterCount", + "type": "DWORD" + }, + { + "name": "dwNotifyKey", + "type": "DWORD_PTR" + } + ], + "RegisterClusterNotifyV2": [ + { + "name": "hChange", + "type": "HCHANGE" + }, + { + "name": "Filter", + "type": "NOTIFY_FILTER_AND_TYPE" + }, + { + "name": "hObject", + "type": "HANDLE" + }, + { + "name": "dwNotifyKey", + "type": "DWORD_PTR" + } + ], + "GetNotifyEventHandle": [ + { + "name": "hChange", + "type": "HCHANGE" + }, + { + "name": "lphTargetEvent", + "type": "LPHANDLE" + } + ], + "GetClusterNotifyV2": [ + { + "name": "hChange", + "type": "HCHANGE" + }, + { + "name": "lpdwNotifyKey", + "type": "DWORD_PTR" + }, + { + "name": "pFilterAndType", + "type": "PNOTIFY_FILTER_AND_TYPE" + }, + { + "name": "buffer", + "type": "BYTE" + }, + { + "name": "lpbBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpszObjectId", + "type": "LPWSTR" + }, + { + "name": "lpcchObjectId", + "type": "LPDWORD" + }, + { + "name": "lpszParentId", + "type": "LPWSTR" + }, + { + "name": "lpcchParentId", + "type": "LPDWORD" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + }, + { + "name": "lpszType", + "type": "LPWSTR" + }, + { + "name": "lpcchType", + "type": "LPDWORD" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "CreateClusterNotifyPort": [ + { + "name": "hChange", + "type": "HCHANGE" + }, + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "dwFilter", + "type": "DWORD" + }, + { + "name": "dwNotifyKey", + "type": "DWORD_PTR" + } + ], + "RegisterClusterNotify": [ + { + "name": "hChange", + "type": "HCHANGE" + }, + { + "name": "dwFilterType", + "type": "DWORD" + }, + { + "name": "hObject", + "type": "HANDLE" + }, + { + "name": "dwNotifyKey", + "type": "DWORD_PTR" + } + ], + "GetClusterNotify": [ + { + "name": "hChange", + "type": "HCHANGE" + }, + { + "name": "lpdwNotifyKey", + "type": "DWORD_PTR" + }, + { + "name": "lpdwFilterType", + "type": "LPDWORD" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "CloseClusterNotifyPort": [ + { + "name": "hChange", + "type": "HCHANGE" + } + ], + "ClusterOpenEnum": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "ClusterGetEnumCount": [ + { + "name": "hEnum", + "type": "HCLUSENUM" + } + ], + "ClusterEnum": [ + { + "name": "hEnum", + "type": "HCLUSENUM" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpdwType", + "type": "LPDWORD" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + } + ], + "ClusterCloseEnum": [ + { + "name": "hEnum", + "type": "HCLUSENUM" + } + ], + "ClusterGetEnumCountEx": [ + { + "name": "hClusterEnum", + "type": "HCLUSENUMEX" + } + ], + "ClusterEnumEx": [ + { + "name": "hClusterEnum", + "type": "HCLUSENUMEX" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pItem", + "type": "PCLUSTER_ENUM_ITEM" + }, + { + "name": "cbItem", + "type": "LPDWORD" + } + ], + "ClusterCloseEnumEx": [ + { + "name": "hClusterEnum", + "type": "HCLUSENUMEX" + } + ], + "CreateClusterGroupSet": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "groupSetName", + "type": "LPCWSTR" + } + ], + "OpenClusterGroupSet": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszGroupSetName", + "type": "LPCWSTR" + } + ], + "CloseClusterGroupSet": [ + { + "name": "hGroupSet", + "type": "HGROUPSET" + } + ], + "DeleteClusterGroupSet": [ + { + "name": "hGroupSet", + "type": "HGROUPSET" + } + ], + "ClusterAddGroupToGroupSet": [ + { + "name": "hGroupSet", + "type": "HGROUPSET" + }, + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "ClusterRemoveGroupFromGroupSet": [ + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "ClusterGroupSetControl": [ + { + "name": "hGroupSet", + "type": "HGROUPSET" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "cbInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "cbOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "AddClusterGroupDependency": [ + { + "name": "hDependentGroup", + "type": "HGROUP" + }, + { + "name": "hProviderGroup", + "type": "HGROUP" + } + ], + "SetGroupDependencyExpression": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "lpszDependencyExpression", + "type": "LPCWSTR" + } + ], + "RemoveClusterGroupDependency": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "hDependsOn", + "type": "HGROUP" + } + ], + "AddClusterGroupSetDependency": [ + { + "name": "hDependentGroupSet", + "type": "HGROUPSET" + }, + { + "name": "hProviderGroupSet", + "type": "HGROUPSET" + } + ], + "SetClusterGroupSetDependencyExpression": [ + { + "name": "hGroupSet", + "type": "HGROUPSET" + }, + { + "name": "lpszDependencyExprssion", + "type": "LPCWSTR" + } + ], + "RemoveClusterGroupSetDependency": [ + { + "name": "hGroupSet", + "type": "HGROUPSET" + }, + { + "name": "hDependsOn", + "type": "HGROUPSET" + } + ], + "AddClusterGroupToGroupSetDependency": [ + { + "name": "hDependentGroup", + "type": "HGROUP" + }, + { + "name": "hProviderGroupSet", + "type": "HGROUPSET" + } + ], + "RemoveClusterGroupToGroupSetDependency": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "hDependsOn", + "type": "HGROUPSET" + } + ], + "ClusterGroupSetOpenEnum": [ + { + "name": "hCluster", + "type": "HCLUSTER" + } + ], + "ClusterGroupSetGetEnumCount": [ + { + "name": "hGroupSetEnum", + "type": "HGROUPSETENUM" + } + ], + "ClusterGroupSetCloseEnum": [ + { + "name": "hGroupSetEnum", + "type": "HGROUPSETENUM" + } + ], + "OpenClusterNode": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszNodeName", + "type": "LPCWSTR" + } + ], + "OpenClusterNodeEx": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszNodeName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "lpdwGrantedAccess", + "type": "DWORD" + } + ], + "CloseClusterNode": [ + { + "name": "hNode", + "type": "HNODE" + } + ], + "GetClusterNodeState": [ + { + "name": "hNode", + "type": "HNODE" + } + ], + "GetClusterNodeId": [ + { + "name": "hNode", + "type": "HNODE" + }, + { + "name": "lpszNodeId", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + } + ], + "GetClusterFromNode": [ + { + "name": "hNode", + "type": "HNODE" + } + ], + "PauseClusterNode": [ + { + "name": "hNode", + "type": "HNODE" + } + ], + "ResumeClusterNode": [ + { + "name": "hNode", + "type": "HNODE" + } + ], + "EvictClusterNode": [ + { + "name": "hNode", + "type": "HNODE" + } + ], + "ClusterNetInterfaceOpenEnum": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszNodeName", + "type": "LPCWSTR" + }, + { + "name": "lpszNetworkName", + "type": "LPCWSTR" + } + ], + "ClusterNetInterfaceEnum": [ + { + "name": "hNetInterfaceEnum", + "type": "HNETINTERFACEENUM" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + } + ], + "ClusterNetInterfaceCloseEnum": [ + { + "name": "hNetInterfaceEnum", + "type": "HNETINTERFACEENUM" + } + ], + "ClusterNodeOpenEnum": [ + { + "name": "hNode", + "type": "HNODE" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "ClusterNodeGetEnumCountEx": [ + { + "name": "hNodeEnum", + "type": "HNODEENUMEX" + } + ], + "ClusterNodeEnumEx": [ + { + "name": "hNodeEnum", + "type": "HNODEENUMEX" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pItem", + "type": "PCLUSTER_ENUM_ITEM" + }, + { + "name": "cbItem", + "type": "LPDWORD" + } + ], + "ClusterNodeCloseEnumEx": [ + { + "name": "hNodeEnum", + "type": "HNODEENUMEX" + } + ], + "ClusterNodeGetEnumCount": [ + { + "name": "hNodeEnum", + "type": "HNODEENUM" + } + ], + "ClusterNodeCloseEnum": [ + { + "name": "hNodeEnum", + "type": "HNODEENUM" + } + ], + "ClusterNodeEnum": [ + { + "name": "hNodeEnum", + "type": "HNODEENUM" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpdwType", + "type": "LPDWORD" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + } + ], + "EvictClusterNodeEx": [ + { + "name": "hNode", + "type": "HNODE" + }, + { + "name": "dwTimeOut", + "type": "DWORD" + }, + { + "name": "phrCleanupStatus", + "type": "HRESULT" + } + ], + "GetClusterResourceTypeKey": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszTypeName", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "CreateClusterGroup": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszGroupName", + "type": "LPCWSTR" + } + ], + "OpenClusterGroup": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszGroupName", + "type": "LPCWSTR" + } + ], + "OpenClusterGroupEx": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszGroupName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "lpdwGrantedAccess", + "type": "DWORD" + } + ], + "ResumeClusterNodeEx": [ + { + "name": "hNode", + "type": "HNODE" + }, + { + "name": "eResumeFailbackType", + "type": "CLUSTER_NODE_RESUME_FAILBACK_TYPE" + }, + { + "name": "dwResumeFlagsReserved", + "type": "DWORD" + } + ], + "CreateClusterGroupEx": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszGroupName", + "type": "LPCWSTR" + }, + { + "name": "pGroupInfo", + "type": "PCLUSTER_CREATE_GROUP_INFO" + } + ], + "ClusterGroupOpenEnumEx": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszProperties", + "type": "LPCWSTR" + }, + { + "name": "cbProperties", + "type": "DWORD" + }, + { + "name": "lpszRoProperties", + "type": "LPCWSTR" + }, + { + "name": "cbRoProperties", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "ClusterGroupGetEnumCountEx": [ + { + "name": "hGroupEnumEx", + "type": "HGROUPENUMEX" + } + ], + "ClusterGroupEnumEx": [ + { + "name": "hGroupEnumEx", + "type": "HGROUPENUMEX" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pItem", + "type": "PCLUSTER_GROUP_ENUM_ITEM" + }, + { + "name": "cbItem", + "type": "LPDWORD" + } + ], + "ClusterGroupCloseEnumEx": [ + { + "name": "hGroupEnumEx", + "type": "HGROUPENUMEX" + } + ], + "ClusterResourceOpenEnumEx": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszProperties", + "type": "LPCWSTR" + }, + { + "name": "cbProperties", + "type": "DWORD" + }, + { + "name": "lpszRoProperties", + "type": "LPCWSTR" + }, + { + "name": "cbRoProperties", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "ClusterResourceGetEnumCountEx": [ + { + "name": "hResourceEnumEx", + "type": "HRESENUMEX" + } + ], + "ClusterResourceEnumEx": [ + { + "name": "hResourceEnumEx", + "type": "HRESENUMEX" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pItem", + "type": "PCLUSTER_RESOURCE_ENUM_ITEM" + }, + { + "name": "cbItem", + "type": "LPDWORD" + } + ], + "ClusterResourceCloseEnumEx": [ + { + "name": "hResourceEnumEx", + "type": "HRESENUMEX" + } + ], + "OnlineClusterGroupEx": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "hDestinationNode", + "type": "HNODE" + }, + { + "name": "dwOnlineFlags", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "PBYTE" + }, + { + "name": "cbInBufferSize", + "type": "DWORD" + } + ], + "OfflineClusterGroupEx": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "dwOfflineFlags", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "PBYTE" + }, + { + "name": "cbInBufferSize", + "type": "DWORD" + } + ], + "OnlineClusterResourceEx": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "dwOnlineFlags", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "PBYTE" + }, + { + "name": "cbInBufferSize", + "type": "DWORD" + } + ], + "OfflineClusterResourceEx": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "dwOfflineFlags", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "PBYTE" + }, + { + "name": "cbInBufferSize", + "type": "DWORD" + } + ], + "MoveClusterGroupEx": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "hDestinationNode", + "type": "HNODE" + }, + { + "name": "dwMoveFlags", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "PBYTE" + }, + { + "name": "cbInBufferSize", + "type": "DWORD" + } + ], + "CancelClusterGroupOperation": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "dwCancelFlags_RESERVED", + "type": "DWORD" + } + ], + "CloseClusterGroup": [ + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "GetClusterFromGroup": [ + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "GetClusterGroupState": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "lpszNodeName", + "type": "LPWSTR" + }, + { + "name": "lpcchNodeName", + "type": "LPDWORD" + } + ], + "SetClusterGroupName": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "lpszGroupName", + "type": "LPCWSTR" + } + ], + "SetClusterGroupNodeList": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "NodeCount", + "type": "DWORD" + }, + { + "name": "NodeList", + "type": "HNODE" + } + ], + "OnlineClusterGroup": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "hDestinationNode", + "type": "HNODE" + } + ], + "MoveClusterGroup": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "hDestinationNode", + "type": "HNODE" + } + ], + "OfflineClusterGroup": [ + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "DeleteClusterGroup": [ + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "DestroyClusterGroup": [ + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "ClusterGroupOpenEnum": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "ClusterGroupGetEnumCount": [ + { + "name": "hGroupEnum", + "type": "HGROUPENUM" + } + ], + "ClusterGroupEnum": [ + { + "name": "hGroupEnum", + "type": "HGROUPENUM" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpdwType", + "type": "LPDWORD" + }, + { + "name": "lpszResourceName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + } + ], + "ClusterGroupCloseEnum": [ + { + "name": "hGroupEnum", + "type": "HGROUPENUM" + } + ], + "CreateClusterResource": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "lpszResourceName", + "type": "LPCWSTR" + }, + { + "name": "lpszResourceType", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "OpenClusterResource": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszResourceName", + "type": "LPCWSTR" + } + ], + "OpenClusterResourceEx": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszResourceName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "lpdwGrantedAccess", + "type": "DWORD" + } + ], + "CloseClusterResource": [ + { + "name": "hResource", + "type": "HRESOURCE" + } + ], + "GetClusterFromResource": [ + { + "name": "hResource", + "type": "HRESOURCE" + } + ], + "DeleteClusterResource": [ + { + "name": "hResource", + "type": "HRESOURCE" + } + ], + "GetClusterResourceState": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "lpszNodeName", + "type": "LPWSTR" + }, + { + "name": "lpcchNodeName", + "type": "LPDWORD" + }, + { + "name": "lpszGroupName", + "type": "LPWSTR" + }, + { + "name": "lpcchGroupName", + "type": "LPDWORD" + } + ], + "SetClusterResourceName": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "lpszResourceName", + "type": "LPCWSTR" + } + ], + "FailClusterResource": [ + { + "name": "hResource", + "type": "HRESOURCE" + } + ], + "OnlineClusterResource": [ + { + "name": "hResource", + "type": "HRESOURCE" + } + ], + "OfflineClusterResource": [ + { + "name": "hResource", + "type": "HRESOURCE" + } + ], + "ChangeClusterResourceGroup": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "AddClusterResourceNode": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "hNode", + "type": "HNODE" + } + ], + "RemoveClusterResourceNode": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "hNode", + "type": "HNODE" + } + ], + "AddClusterResourceDependency": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "hDependsOn", + "type": "HRESOURCE" + } + ], + "RemoveClusterResourceDependency": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "hDependsOn", + "type": "HRESOURCE" + } + ], + "SetClusterResourceDependencyExpression": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "lpszDependencyExpression", + "type": "LPCWSTR" + } + ], + "GetClusterResourceDependencyExpression": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "lpszDependencyExpression", + "type": "LPWSTR" + }, + { + "name": "lpcchDependencyExpression", + "type": "LPDWORD" + } + ], + "AddResourceToClusterSharedVolumes": [ + { + "name": "hResource", + "type": "HRESOURCE" + } + ], + "RemoveResourceFromClusterSharedVolumes": [ + { + "name": "hResource", + "type": "HRESOURCE" + } + ], + "IsFileOnClusterSharedVolume": [ + { + "name": "lpszPathName", + "type": "LPCWSTR" + }, + { + "name": "pbFileIsOnSharedVolume", + "type": "PBOOL" + } + ], + "ClusterSharedVolumeSetSnapshotState": [ + { + "name": "guidSnapshotSet", + "type": "GUID" + }, + { + "name": "lpszVolumeName", + "type": "LPCWSTR" + }, + { + "name": "state", + "type": "CLUSTER_SHARED_VOLUME_SNAPSHOT_STATE" + } + ], + "CanResourceBeDependent": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "hResourceDependent", + "type": "HRESOURCE" + } + ], + "ClusterResourceControl": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "cbInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "cbOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "ClusterResourceControlAsUser": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "cbInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "cbOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "ClusterResourceTypeControl": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszResourceTypeName", + "type": "LPCWSTR" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "ClusterResourceTypeControlAsUser": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszResourceTypeName", + "type": "LPCWSTR" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "ClusterGroupControl": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "ClusterNodeControl": [ + { + "name": "hNode", + "type": "HNODE" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "GetClusterResourceNetworkName": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "ClusterResourceOpenEnum": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "ClusterResourceGetEnumCount": [ + { + "name": "hResEnum", + "type": "HRESENUM" + } + ], + "ClusterResourceEnum": [ + { + "name": "hResEnum", + "type": "HRESENUM" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpdwType", + "type": "LPDWORD" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + } + ], + "ClusterResourceCloseEnum": [ + { + "name": "hResEnum", + "type": "HRESENUM" + } + ], + "CreateClusterResourceType": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszResourceTypeName", + "type": "LPCWSTR" + }, + { + "name": "lpszDisplayName", + "type": "LPCWSTR" + }, + { + "name": "lpszResourceTypeDll", + "type": "LPCWSTR" + }, + { + "name": "dwLooksAlivePollInterval", + "type": "DWORD" + }, + { + "name": "dwIsAlivePollInterval", + "type": "DWORD" + } + ], + "DeleteClusterResourceType": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszResourceTypeName", + "type": "LPCWSTR" + } + ], + "ClusterResourceTypeOpenEnum": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszResourceTypeName", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "ClusterResourceTypeGetEnumCount": [ + { + "name": "hResTypeEnum", + "type": "HRESTYPEENUM" + } + ], + "ClusterResourceTypeEnum": [ + { + "name": "hResTypeEnum", + "type": "HRESTYPEENUM" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpdwType", + "type": "LPDWORD" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + } + ], + "ClusterResourceTypeCloseEnum": [ + { + "name": "hResTypeEnum", + "type": "HRESTYPEENUM" + } + ], + "OpenClusterNetwork": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszNetworkName", + "type": "LPCWSTR" + } + ], + "OpenClusterNetworkEx": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszNetworkName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "lpdwGrantedAccess", + "type": "DWORD" + } + ], + "CloseClusterNetwork": [ + { + "name": "hNetwork", + "type": "HNETWORK" + } + ], + "GetClusterFromNetwork": [ + { + "name": "hNetwork", + "type": "HNETWORK" + } + ], + "ClusterNetworkOpenEnum": [ + { + "name": "hNetwork", + "type": "HNETWORK" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "ClusterNetworkGetEnumCount": [ + { + "name": "hNetworkEnum", + "type": "HNETWORKENUM" + } + ], + "ClusterNetworkEnum": [ + { + "name": "hNetworkEnum", + "type": "HNETWORKENUM" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpdwType", + "type": "LPDWORD" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + } + ], + "ClusterNetworkCloseEnum": [ + { + "name": "hNetworkEnum", + "type": "HNETWORKENUM" + } + ], + "GetClusterNetworkState": [ + { + "name": "hNetwork", + "type": "HNETWORK" + } + ], + "SetClusterNetworkName": [ + { + "name": "hNetwork", + "type": "HNETWORK" + }, + { + "name": "lpszName", + "type": "LPCWSTR" + } + ], + "GetClusterNetworkId": [ + { + "name": "hNetwork", + "type": "HNETWORK" + }, + { + "name": "lpszNetworkId", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + } + ], + "ClusterNetworkControl": [ + { + "name": "hNetwork", + "type": "HNETWORK" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "OpenClusterNetInterface": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszInterfaceName", + "type": "LPCWSTR" + } + ], + "OpenClusterNetInterfaceEx": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszInterfaceName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "lpdwGrantedAccess", + "type": "DWORD" + } + ], + "GetClusterNetInterface": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszNodeName", + "type": "LPCWSTR" + }, + { + "name": "lpszNetworkName", + "type": "LPCWSTR" + }, + { + "name": "lpszInterfaceName", + "type": "LPWSTR" + }, + { + "name": "lpcchInterfaceName", + "type": "LPDWORD" + } + ], + "CloseClusterNetInterface": [ + { + "name": "hNetInterface", + "type": "HNETINTERFACE" + } + ], + "GetClusterFromNetInterface": [ + { + "name": "hNetInterface", + "type": "HNETINTERFACE" + } + ], + "GetClusterNetInterfaceState": [ + { + "name": "hNetInterface", + "type": "HNETINTERFACE" + } + ], + "ClusterNetInterfaceControl": [ + { + "name": "hNetInterface", + "type": "HNETINTERFACE" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "GetClusterKey": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "GetClusterGroupKey": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "GetClusterResourceKey": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "GetClusterNodeKey": [ + { + "name": "hNode", + "type": "HNODE" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "GetClusterNetworkKey": [ + { + "name": "hNetwork", + "type": "HNETWORK" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "GetClusterNetInterfaceKey": [ + { + "name": "hNetInterface", + "type": "HNETINTERFACE" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "ClusterRegCreateKey": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpszSubKey", + "type": "LPCWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "lpdwDisposition", + "type": "LPDWORD" + } + ], + "ClusterRegOpenKey": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpszSubKey", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "ClusterRegDeleteKey": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpszSubKey", + "type": "LPCWSTR" + } + ], + "ClusterRegCloseKey": [ + { + "name": "hKey", + "type": "HKEY" + } + ], + "ClusterRegEnumKey": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + }, + { + "name": "lpftLastWriteTime", + "type": "PFILETIME" + } + ], + "ClusterRegSetValue": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpszValueName", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "ClusterRegDeleteValue": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpszValueName", + "type": "LPCWSTR" + } + ], + "ClusterRegQueryValue": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpszValueName", + "type": "LPCWSTR" + }, + { + "name": "lpdwValueType", + "type": "LPDWORD" + }, + { + "name": "lpData", + "type": "LPBYTE" + }, + { + "name": "lpcbData", + "type": "LPDWORD" + } + ], + "ClusterRegEnumValue": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpszValueName", + "type": "LPWSTR" + }, + { + "name": "lpcchValueName", + "type": "LPDWORD" + }, + { + "name": "lpdwType", + "type": "LPDWORD" + }, + { + "name": "lpData", + "type": "LPBYTE" + }, + { + "name": "lpcbData", + "type": "LPDWORD" + } + ], + "ClusterRegQueryInfoKey": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpcSubKeys", + "type": "LPDWORD" + }, + { + "name": "lpcchMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "lpcValues", + "type": "LPDWORD" + }, + { + "name": "lpcchMaxValueNameLen", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxValueLen", + "type": "LPDWORD" + }, + { + "name": "lpcbSecurityDescriptor", + "type": "LPDWORD" + }, + { + "name": "lpftLastWriteTime", + "type": "PFILETIME" + } + ], + "ClusterRegGetKeySecurity": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "RequestedInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "lpcbSecurityDescriptor", + "type": "LPDWORD" + } + ], + "ClusterRegSetKeySecurity": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "ClusterRegSyncDatabase": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "flags", + "type": "DWORD" + } + ], + "ClusterRegCreateBatch": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pHREGBATCH", + "type": "HREGBATCH" + } + ], + "ClusterRegBatchAddCommand": [ + { + "name": "hRegBatch", + "type": "HREGBATCH" + }, + { + "name": "dwCommand", + "type": "CLUSTER_REG_COMMAND" + }, + { + "name": "wzName", + "type": "LPCWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "void" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "ClusterRegCloseBatch": [ + { + "name": "hRegBatch", + "type": "HREGBATCH" + }, + { + "name": "bCommit", + "type": "BOOL" + }, + { + "name": "failedCommandNumber", + "type": "INT" + } + ], + "ClusterRegCloseBatchEx": [ + { + "name": "hRegBatch", + "type": "HREGBATCH" + }, + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "failedCommandNumber", + "type": "INT" + } + ], + "ClusterRegBatchReadCommand": [ + { + "name": "hBatchNotification", + "type": "HREGBATCHNOTIFICATION" + }, + { + "name": "pBatchCommand", + "type": "CLUSTER_BATCH_COMMAND" + } + ], + "ClusterRegBatchCloseNotification": [ + { + "name": "hBatchNotification", + "type": "HREGBATCHNOTIFICATION" + } + ], + "ClusterRegCreateBatchNotifyPort": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "phBatchNotifyPort", + "type": "HREGBATCHPORT" + } + ], + "ClusterRegCloseBatchNotifyPort": [ + { + "name": "hBatchNotifyPort", + "type": "HREGBATCHPORT" + } + ], + "ClusterRegGetBatchNotification": [ + { + "name": "hBatchNotify", + "type": "HREGBATCHPORT" + }, + { + "name": "phBatchNotification", + "type": "HREGBATCHNOTIFICATION" + } + ], + "ClusterRegCreateReadBatch": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "phRegReadBatch", + "type": "HREGREADBATCH" + } + ], + "ClusterRegReadBatchAddCommand": [ + { + "name": "hRegReadBatch", + "type": "HREGREADBATCH" + }, + { + "name": "wzSubkeyName", + "type": "LPCWSTR" + }, + { + "name": "wzValueName", + "type": "LPCWSTR" + } + ], + "ClusterRegCloseReadBatch": [ + { + "name": "hRegReadBatch", + "type": "HREGREADBATCH" + }, + { + "name": "phRegReadBatchReply", + "type": "HREGREADBATCHREPLY" + } + ], + "ClusterRegCloseReadBatchEx": [ + { + "name": "hRegReadBatch", + "type": "HREGREADBATCH" + }, + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "phRegReadBatchReply", + "type": "HREGREADBATCHREPLY" + } + ], + "ClusterRegReadBatchReplyNextCommand": [ + { + "name": "hRegReadBatchReply", + "type": "HREGREADBATCHREPLY" + }, + { + "name": "pBatchCommand", + "type": "CLUSTER_READ_BATCH_COMMAND" + } + ], + "ClusterRegCloseReadBatchReply": [ + { + "name": "hRegReadBatchReply", + "type": "HREGREADBATCHREPLY" + } + ], + "ClusterSetAccountAccess": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "szAccountSID", + "type": "LPCWSTR" + }, + { + "name": "dwAccess", + "type": "DWORD" + }, + { + "name": "dwControlType", + "type": "DWORD" + } + ], + "CreateCluster": [ + { + "name": "pConfig", + "type": "PCREATE_CLUSTER_CONFIG" + }, + { + "name": "pfnProgressCallback", + "type": "PCLUSTER_SETUP_PROGRESS_CALLBACK" + }, + { + "name": "pvCallbackArg", + "type": "PVOID" + } + ], + "CreateClusterCNOless": [ + { + "name": "pConfig", + "type": "PCREATE_CLUSTER_CONFIG" + }, + { + "name": "pfnProgressCallback", + "type": "PCLUSTER_SETUP_PROGRESS_CALLBACK" + }, + { + "name": "pvCallbackArg", + "type": "PVOID" + } + ], + "CreateClusterNameAccount": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "pConfig", + "type": "PCREATE_CLUSTER_NAME_ACCOUNT" + }, + { + "name": "pfnProgressCallback", + "type": "PCLUSTER_SETUP_PROGRESS_CALLBACK" + }, + { + "name": "pvCallbackArg", + "type": "PVOID" + } + ], + "RegisterClusterResourceTypeNotifyV2": [ + { + "name": "hChange", + "type": "HCHANGE" + }, + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "Flags", + "type": "LONGLONG" + }, + { + "name": "resTypeName", + "type": "LPCWSTR" + }, + { + "name": "dwNotifyKey", + "type": "DWORD_PTR" + } + ], + "AddClusterNode": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszNodeName", + "type": "PCWSTR" + }, + { + "name": "pfnProgressCallback", + "type": "PCLUSTER_SETUP_PROGRESS_CALLBACK" + }, + { + "name": "pvCallbackArg", + "type": "PVOID" + } + ], + "DestroyCluster": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "pfnProgressCallback", + "type": "PCLUSTER_SETUP_PROGRESS_CALLBACK" + }, + { + "name": "pvCallbackArg", + "type": "PVOID" + }, + { + "name": "fdeleteVirtualComputerObjects", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/combase_dll.json b/qiling/extensions/windows_sdk/defs/combase_dll.json new file mode 100644 index 000000000..f3cb5c456 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/combase_dll.json @@ -0,0 +1,350 @@ +{ + "WindowsPreallocateStringBuffer": [ + { + "name": "length", + "type": "UINT32" + }, + { + "name": "charBuffer", + "type": "WCHAR" + }, + { + "name": "bufferHandle", + "type": "HSTRING_BUFFER" + } + ], + "WindowsPromoteStringBuffer": [ + { + "name": "bufferHandle", + "type": "HSTRING_BUFFER" + }, + { + "name": "string", + "type": "HSTRING" + } + ], + "WindowsDeleteStringBuffer": [ + { + "name": "bufferHandle", + "type": "HSTRING_BUFFER" + } + ], + "HSTRING_UserSize": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "HSTRING" + } + ], + "HSTRING_UserFree": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "HSTRING" + } + ], + "WindowsInspectString": [ + { + "name": "targetHString", + "type": "UINT_PTR" + }, + { + "name": "machine", + "type": "USHORT" + }, + { + "name": "callback", + "type": "PINSPECT_HSTRING_CALLBACK" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "length", + "type": "UINT32" + }, + { + "name": "targetStringAddress", + "type": "UINT_PTR" + } + ], + "WindowsInspectString2": [ + { + "name": "targetHString", + "type": "UINT64" + }, + { + "name": "machine", + "type": "USHORT" + }, + { + "name": "callback", + "type": "PINSPECT_HSTRING_CALLBACK2" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "length", + "type": "UINT32" + }, + { + "name": "targetStringAddress", + "type": "UINT64" + } + ], + "CoDecodeProxy": [ + { + "name": "dwClientPid", + "type": "DWORD" + }, + { + "name": "ui64ProxyAddress", + "type": "UINT64" + }, + { + "name": "pServerInformation", + "type": "PServerInformation" + } + ], + "CoFreeUnusedLibrariesEx": [ + { + "name": "dwUnloadDelay", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "CoCreateInstanceFromApp": [ + { + "name": "Clsid", + "type": "IID" + }, + { + "name": "punkOuter", + "type": "IUnknown" + }, + { + "name": "dwClsCtx", + "type": "DWORD" + }, + { + "name": "reserved", + "type": "PVOID" + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "pResults", + "type": "MULTI_QI" + } + ], + "CoWaitForMultipleObjects": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "cHandles", + "type": "ULONG" + }, + { + "name": "pHandles", + "type": "HANDLE" + }, + { + "name": "lpdwindex", + "type": "LPDWORD" + } + ], + "HSTRING_UserSize64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "HSTRING" + } + ], + "HSTRING_UserFree64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "HSTRING" + } + ], + "SetRestrictedErrorInfo": [ + { + "name": "pRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "GetRestrictedErrorInfo": [ + { + "name": "ppRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "RoCaptureErrorContext": [ + { + "name": "hr", + "type": "HRESULT" + } + ], + "RoFailFastWithErrorContext": [ + { + "name": "hrError", + "type": "HRESULT" + } + ], + "RoOriginateLanguageException": [ + { + "name": "error", + "type": "HRESULT" + }, + { + "name": "message", + "type": "HSTRING" + }, + { + "name": "languageException", + "type": "IUnknown" + } + ], + "RoClearError": [ + { + "name": "VOID", + "type": "void" + } + ], + "RoInspectThreadErrorInfo": [ + { + "name": "targetTebAddress", + "type": "UINT_PTR" + }, + { + "name": "machine", + "type": "USHORT" + }, + { + "name": "readMemoryCallback", + "type": "PINSPECT_MEMORY_CALLBACK" + }, + { + "name": "context", + "type": "PVOID" + }, + { + "name": "targetErrorInfoAddress", + "type": "UINT_PTR" + } + ], + "RoInspectCapturedStackBackTrace": [ + { + "name": "targetErrorInfoAddress", + "type": "UINT_PTR" + }, + { + "name": "machine", + "type": "USHORT" + }, + { + "name": "readMemoryCallback", + "type": "PINSPECT_MEMORY_CALLBACK" + }, + { + "name": "context", + "type": "PVOID" + }, + { + "name": "frameCount", + "type": "UINT32" + }, + { + "name": "targetBackTraceAddress", + "type": "UINT_PTR" + } + ], + "CoGetSystemSecurityPermissions": [ + { + "name": "comSDType", + "type": "COMSD" + }, + { + "name": "ppSD", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "CoGetInstanceFromFile": [ + { + "name": "pServerInfo", + "type": "COSERVERINFO" + }, + { + "name": "pClsid", + "type": "CLSID" + }, + { + "name": "punkOuter", + "type": "IUnknown" + }, + { + "name": "dwClsCtx", + "type": "DWORD" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "pwszName", + "type": "OLECHAR" + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "pResults", + "type": "MULTI_QI" + } + ], + "CoRegisterChannelHook": [ + { + "name": "ExtensionUuid", + "type": "GUID" + }, + { + "name": "pChannelHook", + "type": "IChannelHook" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/comctl32_dll.json b/qiling/extensions/windows_sdk/defs/comctl32_dll.json new file mode 100644 index 000000000..3877351ff --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/comctl32_dll.json @@ -0,0 +1,1688 @@ +{ + "CreatePropertySheetPageA": [ + { + "name": "constPropSheetPagePointer", + "type": "LPCPROPSHEETPAGEA" + } + ], + "CreatePropertySheetPageW": [ + { + "name": "constPropSheetPagePointer", + "type": "LPCPROPSHEETPAGEW" + } + ], + "DestroyPropertySheetPage": [ + { + "name": "VOID", + "type": "HPROPSHEETPAGE" + } + ], + "PropertySheetA": [ + { + "name": "VOID", + "type": "LPCPROPSHEETHEADERA" + } + ], + "PropertySheetW": [ + { + "name": "VOID", + "type": "LPCPROPSHEETHEADERW" + } + ], + "InitCommonControls": [ + { + "name": "VOID", + "type": "void" + } + ], + "InitCommonControlsEx": [ + { + "name": "picce", + "type": "INITCOMMONCONTROLSEX" + } + ], + "ImageList_Create": [ + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "flags", + "type": "UINT" + }, + { + "name": "cInitial", + "type": "int" + }, + { + "name": "cGrow", + "type": "int" + } + ], + "ImageList_Destroy": [ + { + "name": "himl", + "type": "HIMAGELIST" + } + ], + "ImageList_GetImageCount": [ + { + "name": "himl", + "type": "HIMAGELIST" + } + ], + "ImageList_SetImageCount": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "uNewCount", + "type": "UINT" + } + ], + "ImageList_Add": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "hbmImage", + "type": "HBITMAP" + }, + { + "name": "hbmMask", + "type": "HBITMAP" + } + ], + "ImageList_ReplaceIcon": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "hicon", + "type": "HICON" + } + ], + "ImageList_SetBkColor": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "clrBk", + "type": "COLORREF" + } + ], + "ImageList_GetBkColor": [ + { + "name": "himl", + "type": "HIMAGELIST" + } + ], + "ImageList_SetOverlayImage": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "iImage", + "type": "int" + }, + { + "name": "iOverlay", + "type": "int" + } + ], + "ImageList_Draw": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "hdcDst", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "fStyle", + "type": "UINT" + } + ], + "ImageList_Replace": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "hbmImage", + "type": "HBITMAP" + }, + { + "name": "hbmMask", + "type": "HBITMAP" + } + ], + "ImageList_AddMasked": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "hbmImage", + "type": "HBITMAP" + }, + { + "name": "crMask", + "type": "COLORREF" + } + ], + "ImageList_DrawEx": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "hdcDst", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + }, + { + "name": "rgbBk", + "type": "COLORREF" + }, + { + "name": "rgbFg", + "type": "COLORREF" + }, + { + "name": "fStyle", + "type": "UINT" + } + ], + "ImageList_DrawIndirect": [ + { + "name": "pimldp", + "type": "IMAGELISTDRAWPARAMS" + } + ], + "ImageList_Remove": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + } + ], + "ImageList_GetIcon": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "ImageList_LoadImageA": [ + { + "name": "hi", + "type": "HINSTANCE" + }, + { + "name": "lpbmp", + "type": "LPCSTR" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cGrow", + "type": "int" + }, + { + "name": "crMask", + "type": "COLORREF" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "ImageList_LoadImageW": [ + { + "name": "hi", + "type": "HINSTANCE" + }, + { + "name": "lpbmp", + "type": "LPCWSTR" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cGrow", + "type": "int" + }, + { + "name": "crMask", + "type": "COLORREF" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "ImageList_Copy": [ + { + "name": "himlDst", + "type": "HIMAGELIST" + }, + { + "name": "iDst", + "type": "int" + }, + { + "name": "himlSrc", + "type": "HIMAGELIST" + }, + { + "name": "iSrc", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "ImageList_BeginDrag": [ + { + "name": "himlTrack", + "type": "HIMAGELIST" + }, + { + "name": "iTrack", + "type": "int" + }, + { + "name": "dxHotspot", + "type": "int" + }, + { + "name": "dyHotspot", + "type": "int" + } + ], + "ImageList_EndDrag": [ + { + "name": "VOID", + "type": "void" + } + ], + "ImageList_DragEnter": [ + { + "name": "hwndLock", + "type": "HWND" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "ImageList_DragLeave": [ + { + "name": "hwndLock", + "type": "HWND" + } + ], + "ImageList_DragMove": [ + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "ImageList_SetDragCursorImage": [ + { + "name": "himlDrag", + "type": "HIMAGELIST" + }, + { + "name": "iDrag", + "type": "int" + }, + { + "name": "dxHotspot", + "type": "int" + }, + { + "name": "dyHotspot", + "type": "int" + } + ], + "ImageList_DragShowNolock": [ + { + "name": "fShow", + "type": "BOOL" + } + ], + "ImageList_GetDragImage": [ + { + "name": "ppt", + "type": "POINT" + }, + { + "name": "pptHotspot", + "type": "POINT" + } + ], + "ImageList_Read": [ + { + "name": "pstm", + "type": { + "name": "IStream", + "data_type": "Struct", + "elements": [] + } + } + ], + "ImageList_Write": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "pstm", + "type": { + "name": "IStream", + "data_type": "Struct", + "elements": [] + } + } + ], + "ImageList_ReadEx": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pstm", + "type": { + "name": "IStream", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "PVOID" + } + ], + "ImageList_WriteEx": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pstm", + "type": { + "name": "IStream", + "data_type": "Struct", + "elements": [] + } + } + ], + "ImageList_GetIconSize": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + } + ], + "ImageList_SetIconSize": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + } + ], + "ImageList_GetImageInfo": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "pImageInfo", + "type": "IMAGEINFO" + } + ], + "ImageList_Merge": [ + { + "name": "himl1", + "type": "HIMAGELIST" + }, + { + "name": "i1", + "type": "int" + }, + { + "name": "himl2", + "type": "HIMAGELIST" + }, + { + "name": "i2", + "type": "int" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + } + ], + "ImageList_Duplicate": [ + { + "name": "himl", + "type": "HIMAGELIST" + } + ], + "HIMAGELIST_QueryInterface": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CreateToolbarEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "ws", + "type": "DWORD" + }, + { + "name": "wID", + "type": "UINT" + }, + { + "name": "nBitmaps", + "type": "int" + }, + { + "name": "hBMInst", + "type": "HINSTANCE" + }, + { + "name": "wBMID", + "type": "UINT_PTR" + }, + { + "name": "lpButtons", + "type": "LPCTBBUTTON" + }, + { + "name": "iNumButtons", + "type": "int" + }, + { + "name": "dxButton", + "type": "int" + }, + { + "name": "dyButton", + "type": "int" + }, + { + "name": "dxBitmap", + "type": "int" + }, + { + "name": "dyBitmap", + "type": "int" + }, + { + "name": "uStructSize", + "type": "UINT" + } + ], + "CreateMappedBitmap": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "idBitmap", + "type": "INT_PTR" + }, + { + "name": "wFlags", + "type": "UINT" + }, + { + "name": "lpColorMap", + "type": "LPCOLORMAP" + }, + { + "name": "iNumMaps", + "type": "int" + } + ], + "DrawStatusTextA": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "lprc", + "type": "LPCRECT" + }, + { + "name": "pszText", + "type": "LPCSTR" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "DrawStatusTextW": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "lprc", + "type": "LPCRECT" + }, + { + "name": "pszText", + "type": "LPCWSTR" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "CreateStatusWindowA": [ + { + "name": "style", + "type": "LONG" + }, + { + "name": "lpszText", + "type": "LPCSTR" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "wID", + "type": "UINT" + } + ], + "CreateStatusWindowW": [ + { + "name": "style", + "type": "LONG" + }, + { + "name": "lpszText", + "type": "LPCWSTR" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "wID", + "type": "UINT" + } + ], + "MenuHelp": [ + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "hMainMenu", + "type": "HMENU" + }, + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "hwndStatus", + "type": "HWND" + }, + { + "name": "lpwIDs", + "type": "UINT" + } + ], + "ShowHideMenuCtl": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "uFlags", + "type": "UINT_PTR" + }, + { + "name": "lpInfo", + "type": "LPINT" + } + ], + "GetEffectiveClientRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "lpInfo", + "type": "INT" + } + ], + "MakeDragList": [ + { + "name": "hLB", + "type": "HWND" + } + ], + "DrawInsert": [ + { + "name": "handParent", + "type": "HWND" + }, + { + "name": "hLB", + "type": "HWND" + }, + { + "name": "nItem", + "type": "int" + } + ], + "LBItemFromPt": [ + { + "name": "hLB", + "type": "HWND" + }, + { + "name": "pt", + "type": "POINT" + }, + { + "name": "bAutoScroll", + "type": "BOOL" + } + ], + "CreateUpDownControl": [ + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "hParent", + "type": "HWND" + }, + { + "name": "nID", + "type": "int" + }, + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "hBuddy", + "type": "HWND" + }, + { + "name": "nUpper", + "type": "int" + }, + { + "name": "nLower", + "type": "int" + }, + { + "name": "nPos", + "type": "int" + } + ], + "TaskDialogIndirect": [ + { + "name": "pTaskConfig", + "type": "TASKDIALOGCONFIG" + }, + { + "name": "pnButton", + "type": "int" + }, + { + "name": "pnRadioButton", + "type": "int" + }, + { + "name": "pfVerificationFlagChecked", + "type": "BOOL" + } + ], + "TaskDialog": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "pszWindowTitle", + "type": "PCWSTR" + }, + { + "name": "pszMainInstruction", + "type": "PCWSTR" + }, + { + "name": "pszContent", + "type": "PCWSTR" + }, + { + "name": "dwCommonButtons", + "type": "TASKDIALOG_COMMON_BUTTON_FLAGS" + }, + { + "name": "pszIcon", + "type": "PCWSTR" + }, + { + "name": "pnButton", + "type": "int" + } + ], + "InitMUILanguage": [ + { + "name": "uiLang", + "type": "LANGID" + } + ], + "GetMUILanguage": [ + { + "name": "VOID", + "type": "void" + } + ], + "_TrackMouseEvent": [ + { + "name": "lpEventTrack", + "type": "LPTRACKMOUSEEVENT" + } + ], + "FlatSB_EnableScrollBar": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "UINT" + } + ], + "FlatSB_ShowScrollBar": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "FlatSB_GetScrollRange": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + }, + { + "name": "VOID", + "type": "LPINT" + }, + { + "name": "VOID", + "type": "LPINT" + } + ], + "FlatSB_GetScrollInfo": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + }, + { + "name": "VOID", + "type": "LPSCROLLINFO" + } + ], + "FlatSB_GetScrollPos": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + } + ], + "FlatSB_GetScrollProp": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "propIndex", + "type": "int" + }, + { + "name": "VOID", + "type": "LPINT" + } + ], + "FlatSB_GetScrollPropPtr": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "propIndex", + "type": "int" + }, + { + "name": "VOID", + "type": "PINT_PTR" + } + ], + "FlatSB_SetScrollPos": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + }, + { + "name": "pos", + "type": "int" + }, + { + "name": "fRedraw", + "type": "BOOL" + } + ], + "FlatSB_SetScrollInfo": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + }, + { + "name": "psi", + "type": "LPSCROLLINFO" + }, + { + "name": "fRedraw", + "type": "BOOL" + } + ], + "FlatSB_SetScrollRange": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + }, + { + "name": "min", + "type": "int" + }, + { + "name": "max", + "type": "int" + }, + { + "name": "fRedraw", + "type": "BOOL" + } + ], + "FlatSB_SetScrollProp": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "index", + "type": "UINT" + }, + { + "name": "newValue", + "type": "INT_PTR" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "InitializeFlatSB": [ + { + "name": "VOID", + "type": "HWND" + } + ], + "UninitializeFlatSB": [ + { + "name": "VOID", + "type": "HWND" + } + ], + "SetWindowSubclass": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pfnSubclass", + "type": "SUBCLASSPROC" + }, + { + "name": "uIdSubclass", + "type": "UINT_PTR" + }, + { + "name": "dwRefData", + "type": "DWORD_PTR" + } + ], + "GetWindowSubclass": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pfnSubclass", + "type": "SUBCLASSPROC" + }, + { + "name": "uIdSubclass", + "type": "UINT_PTR" + }, + { + "name": "pdwRefData", + "type": "DWORD_PTR" + } + ], + "RemoveWindowSubclass": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pfnSubclass", + "type": "SUBCLASSPROC" + }, + { + "name": "uIdSubclass", + "type": "UINT_PTR" + } + ], + "DefSubclassProc": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "LoadIconMetric": [ + { + "name": "hinst", + "type": "HINSTANCE" + }, + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "lims", + "type": "int" + }, + { + "name": "phico", + "type": "HICON" + } + ], + "LoadIconWithScaleDown": [ + { + "name": "hinst", + "type": "HINSTANCE" + }, + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "phico", + "type": "HICON" + } + ], + "DrawShadowText": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pszText", + "type": "LPCWSTR" + }, + { + "name": "cch", + "type": "UINT" + }, + { + "name": "prc", + "type": "RECT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "crText", + "type": "COLORREF" + }, + { + "name": "crShadow", + "type": "COLORREF" + }, + { + "name": "ixOffset", + "type": "int" + }, + { + "name": "iyOffset", + "type": "int" + } + ], + "DSA_Create": [ + { + "name": "cbItem", + "type": "int" + }, + { + "name": "cItemGrow", + "type": "int" + } + ], + "DSA_Destroy": [ + { + "name": "hdsa", + "type": "HDSA" + } + ], + "DSA_DestroyCallback": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "pfnCB", + "type": "PFNDAENUMCALLBACK" + }, + { + "name": "pData", + "type": "void" + } + ], + "DSA_DeleteItem": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "i", + "type": "int" + } + ], + "DSA_DeleteAllItems": [ + { + "name": "hdsa", + "type": "HDSA" + } + ], + "DSA_EnumCallback": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "pfnCB", + "type": "PFNDAENUMCALLBACK" + }, + { + "name": "pData", + "type": "void" + } + ], + "DSA_InsertItem": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "pitem", + "type": "void" + } + ], + "DSA_GetItemPtr": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "i", + "type": "int" + } + ], + "DSA_GetItem": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "pitem", + "type": "void" + } + ], + "DSA_SetItem": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "pitem", + "type": "void" + } + ], + "DSA_Clone": [ + { + "name": "hdsa", + "type": "HDSA" + } + ], + "DSA_GetSize": [ + { + "name": "hdsa", + "type": "HDSA" + } + ], + "DSA_Sort": [ + { + "name": "pdsa", + "type": "HDSA" + }, + { + "name": "pfnCompare", + "type": "PFNDACOMPARE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DPA_Create": [ + { + "name": "cItemGrow", + "type": "int" + } + ], + "DPA_CreateEx": [ + { + "name": "cpGrow", + "type": "int" + }, + { + "name": "hheap", + "type": "HANDLE" + } + ], + "DPA_Clone": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "hdpaNew", + "type": "HDPA" + } + ], + "DPA_Destroy": [ + { + "name": "hdpa", + "type": "HDPA" + } + ], + "DPA_DestroyCallback": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "pfnCB", + "type": "PFNDAENUMCALLBACK" + }, + { + "name": "pData", + "type": "void" + } + ], + "DPA_DeletePtr": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "i", + "type": "int" + } + ], + "DPA_DeleteAllPtrs": [ + { + "name": "hdpa", + "type": "HDPA" + } + ], + "DPA_EnumCallback": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "pfnCB", + "type": "PFNDAENUMCALLBACK" + }, + { + "name": "pData", + "type": "void" + } + ], + "DPA_Grow": [ + { + "name": "pdpa", + "type": "HDPA" + }, + { + "name": "cp", + "type": "int" + } + ], + "DPA_InsertPtr": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "p", + "type": "void" + } + ], + "DPA_SetPtr": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "p", + "type": "void" + } + ], + "DPA_GetPtr": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "i", + "type": "INT_PTR" + } + ], + "DPA_GetPtrIndex": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "p", + "type": "void" + } + ], + "DPA_GetSize": [ + { + "name": "hdpa", + "type": "HDPA" + } + ], + "DPA_Sort": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "pfnCompare", + "type": "PFNDACOMPARE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DPA_LoadStream": [ + { + "name": "phdpa", + "type": "HDPA" + }, + { + "name": "pfn", + "type": "PFNDPASTREAM" + }, + { + "name": "pstream", + "type": { + "name": "IStream", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "pvInstData", + "type": "void" + } + ], + "DPA_SaveStream": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "pfn", + "type": "PFNDPASTREAM" + }, + { + "name": "pstream", + "type": { + "name": "IStream", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "pvInstData", + "type": "void" + } + ], + "DPA_Merge": [ + { + "name": "hdpaDest", + "type": "HDPA" + }, + { + "name": "hdpaSrc", + "type": "HDPA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pfnCompare", + "type": "PFNDACOMPARE" + }, + { + "name": "pfnMerge", + "type": "PFNDPAMERGE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DPA_Search": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "pFind", + "type": "void" + }, + { + "name": "iStart", + "type": "int" + }, + { + "name": "pfnCompare", + "type": "PFNDACOMPARE" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "options", + "type": "UINT" + } + ], + "Str_SetPtrW": [ + { + "name": "ppsz", + "type": "LPWSTR" + }, + { + "name": "psz", + "type": "LPCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/comdlg32_dll.json b/qiling/extensions/windows_sdk/defs/comdlg32_dll.json new file mode 100644 index 000000000..d9388fb34 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/comdlg32_dll.json @@ -0,0 +1,84 @@ +{ + "GetOpenFileNameA": [ + { + "name": "VOID", + "type": "LPOPENFILENAMEA" + } + ], + "GetOpenFileNameW": [ + { + "name": "VOID", + "type": "LPOPENFILENAMEW" + } + ], + "GetSaveFileNameA": [ + { + "name": "VOID", + "type": "LPOPENFILENAMEA" + } + ], + "GetSaveFileNameW": [ + { + "name": "VOID", + "type": "LPOPENFILENAMEW" + } + ], + "GetFileTitleA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "Buf", + "type": "LPSTR" + }, + { + "name": "cchSize", + "type": "WORD" + } + ], + "GetFileTitleW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "Buf", + "type": "LPWSTR" + }, + { + "name": "cchSize", + "type": "WORD" + } + ], + "FindTextA": [ + { + "name": "VOID", + "type": "LPFINDREPLACEA" + } + ], + "FindTextW": [ + { + "name": "VOID", + "type": "LPFINDREPLACEW" + } + ], + "ReplaceTextA": [ + { + "name": "VOID", + "type": "LPFINDREPLACEA" + } + ], + "ReplaceTextW": [ + { + "name": "VOID", + "type": "LPFINDREPLACEW" + } + ], + "CommDlgExtendedError": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/comsvcs_dll.json b/qiling/extensions/windows_sdk/defs/comsvcs_dll.json new file mode 100644 index 000000000..a63594e21 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/comsvcs_dll.json @@ -0,0 +1,50 @@ +{ + "CoCreateActivity": [ + { + "name": "pIUnknown", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppObj", + "type": "void" + } + ], + "CoEnterServiceDomain": [ + { + "name": "pConfigObject", + "type": "IUnknown" + } + ], + "CoLeaveServiceDomain": [ + { + "name": "pUnkStatus", + "type": "IUnknown" + } + ], + "GetManagedExtensions": [ + { + "name": "dwExts", + "type": "DWORD" + } + ], + "RecycleSurrogate": [ + { + "name": "lReasonCode", + "type": "long" + } + ], + "MTSCreateActivity": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppobj", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/credui_dll.json b/qiling/extensions/windows_sdk/defs/credui_dll.json new file mode 100644 index 000000000..e5da904f0 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/credui_dll.json @@ -0,0 +1,450 @@ +{ + "CredUnPackAuthenticationBufferW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pAuthBuffer", + "type": "PVOID" + }, + { + "name": "cbAuthBuffer", + "type": "DWORD" + }, + { + "name": "pszUserName", + "type": "LPWSTR" + }, + { + "name": "pcchMaxUserName", + "type": "DWORD" + }, + { + "name": "pszDomainName", + "type": "LPWSTR" + }, + { + "name": "pcchMaxDomainName", + "type": "DWORD" + }, + { + "name": "pszPassword", + "type": "LPWSTR" + }, + { + "name": "pcchMaxPassword", + "type": "DWORD" + } + ], + "CredUnPackAuthenticationBufferA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pAuthBuffer", + "type": "PVOID" + }, + { + "name": "cbAuthBuffer", + "type": "DWORD" + }, + { + "name": "pszUserName", + "type": "LPSTR" + }, + { + "name": "pcchlMaxUserName", + "type": "DWORD" + }, + { + "name": "pszDomainName", + "type": "LPSTR" + }, + { + "name": "pcchMaxDomainName", + "type": "DWORD" + }, + { + "name": "pszPassword", + "type": "LPSTR" + }, + { + "name": "pcchMaxPassword", + "type": "DWORD" + } + ], + "CredPackAuthenticationBufferW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszUserName", + "type": "LPWSTR" + }, + { + "name": "pszPassword", + "type": "LPWSTR" + }, + { + "name": "pPackedCredentials", + "type": "PBYTE" + }, + { + "name": "pcbPackedCredentials", + "type": "DWORD" + } + ], + "CredPackAuthenticationBufferA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszUserName", + "type": "LPSTR" + }, + { + "name": "pszPassword", + "type": "LPSTR" + }, + { + "name": "pPackedCredentials", + "type": "PBYTE" + }, + { + "name": "pcbPackedCredentials", + "type": "DWORD" + } + ], + "CredUIPromptForCredentialsW": [ + { + "name": "pUiInfo", + "type": "PCREDUI_INFOW" + }, + { + "name": "pszTargetName", + "type": "PCWSTR" + }, + { + "name": "pContext", + "type": "PCtxtHandle" + }, + { + "name": "dwAuthError", + "type": "DWORD" + }, + { + "name": "pszUserName", + "type": "PWSTR" + }, + { + "name": "ulUserNameBufferSize", + "type": "ULONG" + }, + { + "name": "pszPassword", + "type": "PWSTR" + }, + { + "name": "ulPasswordBufferSize", + "type": "ULONG" + }, + { + "name": "save", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CredUIPromptForCredentialsA": [ + { + "name": "pUiInfo", + "type": "PCREDUI_INFOA" + }, + { + "name": "pszTargetName", + "type": "PCSTR" + }, + { + "name": "pContext", + "type": "PCtxtHandle" + }, + { + "name": "dwAuthError", + "type": "DWORD" + }, + { + "name": "pszUserName", + "type": "PSTR" + }, + { + "name": "ulUserNameBufferSize", + "type": "ULONG" + }, + { + "name": "pszPassword", + "type": "PSTR" + }, + { + "name": "ulPasswordBufferSize", + "type": "ULONG" + }, + { + "name": "save", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CredUIPromptForWindowsCredentialsW": [ + { + "name": "pUiInfo", + "type": "PCREDUI_INFOW" + }, + { + "name": "dwAuthError", + "type": "DWORD" + }, + { + "name": "pulAuthPackage", + "type": "ULONG" + }, + { + "name": "pvInAuthBuffer", + "type": "LPCVOID" + }, + { + "name": "ulInAuthBufferSize", + "type": "ULONG" + }, + { + "name": "ppvOutAuthBuffer", + "type": "LPVOID" + }, + { + "name": "pulOutAuthBufferSize", + "type": "ULONG" + }, + { + "name": "pfSave", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CredUIPromptForWindowsCredentialsA": [ + { + "name": "pUiInfo", + "type": "PCREDUI_INFOA" + }, + { + "name": "dwAuthError", + "type": "DWORD" + }, + { + "name": "pulAuthPackage", + "type": "ULONG" + }, + { + "name": "pvInAuthBuffer", + "type": "LPCVOID" + }, + { + "name": "ulInAuthBufferSize", + "type": "ULONG" + }, + { + "name": "ppvOutAuthBuffer", + "type": "LPVOID" + }, + { + "name": "pulOutAuthBufferSize", + "type": "ULONG" + }, + { + "name": "pfSave", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CredUIParseUserNameW": [ + { + "name": "UserName", + "type": "PCWSTR" + }, + { + "name": "user", + "type": "WCHAR" + }, + { + "name": "userBufferSize", + "type": "ULONG" + }, + { + "name": "domain", + "type": "WCHAR" + }, + { + "name": "domainBufferSize", + "type": "ULONG" + } + ], + "CredUIParseUserNameA": [ + { + "name": "userName", + "type": "PCSTR" + }, + { + "name": "user", + "type": "CHAR" + }, + { + "name": "userBufferSize", + "type": "ULONG" + }, + { + "name": "domain", + "type": "CHAR" + }, + { + "name": "domainBufferSize", + "type": "ULONG" + } + ], + "CredUICmdLinePromptForCredentialsW": [ + { + "name": "pszTargetName", + "type": "PCWSTR" + }, + { + "name": "pContext", + "type": "PCtxtHandle" + }, + { + "name": "dwAuthError", + "type": "DWORD" + }, + { + "name": "UserName", + "type": "PWSTR" + }, + { + "name": "ulUserBufferSize", + "type": "ULONG" + }, + { + "name": "pszPassword", + "type": "PWSTR" + }, + { + "name": "ulPasswordBufferSize", + "type": "ULONG" + }, + { + "name": "pfSave", + "type": "PBOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CredUICmdLinePromptForCredentialsA": [ + { + "name": "pszTargetName", + "type": "PCSTR" + }, + { + "name": "pContext", + "type": "PCtxtHandle" + }, + { + "name": "dwAuthError", + "type": "DWORD" + }, + { + "name": "UserName", + "type": "PSTR" + }, + { + "name": "ulUserBufferSize", + "type": "ULONG" + }, + { + "name": "pszPassword", + "type": "PSTR" + }, + { + "name": "ulPasswordBufferSize", + "type": "ULONG" + }, + { + "name": "pfSave", + "type": "PBOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CredUIConfirmCredentialsW": [ + { + "name": "pszTargetName", + "type": "PCWSTR" + }, + { + "name": "bConfirm", + "type": "BOOL" + } + ], + "CredUIConfirmCredentialsA": [ + { + "name": "pszTargetName", + "type": "PCSTR" + }, + { + "name": "bConfirm", + "type": "BOOL" + } + ], + "CredUIStoreSSOCredW": [ + { + "name": "pszRealm", + "type": "PCWSTR" + }, + { + "name": "pszUsername", + "type": "PCWSTR" + }, + { + "name": "pszPassword", + "type": "PCWSTR" + }, + { + "name": "bPersist", + "type": "BOOL" + } + ], + "CredUIReadSSOCredW": [ + { + "name": "pszRealm", + "type": "PCWSTR" + }, + { + "name": "ppszUsername", + "type": "PWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/crypt32_dll.json b/qiling/extensions/windows_sdk/defs/crypt32_dll.json new file mode 100644 index 000000000..55b2a40e8 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/crypt32_dll.json @@ -0,0 +1,4486 @@ +{ + "CryptProtectData": [ + { + "name": "pDataIn", + "type": "DATA_BLOB" + }, + { + "name": "szDataDescr", + "type": "LPCWSTR" + }, + { + "name": "pOptionalEntropy", + "type": "DATA_BLOB" + }, + { + "name": "pvReserved", + "type": "PVOID" + }, + { + "name": "pPromptStruct", + "type": "CRYPTPROTECT_PROMPTSTRUCT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pDataOut", + "type": "DATA_BLOB" + } + ], + "CryptUnprotectData": [ + { + "name": "pDataIn", + "type": "DATA_BLOB" + }, + { + "name": "ppszDataDescr", + "type": "LPWSTR" + }, + { + "name": "pOptionalEntropy", + "type": "DATA_BLOB" + }, + { + "name": "pvReserved", + "type": "PVOID" + }, + { + "name": "pPromptStruct", + "type": "CRYPTPROTECT_PROMPTSTRUCT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pDataOut", + "type": "DATA_BLOB" + } + ], + "CryptUpdateProtectedState": [ + { + "name": "pOldSid", + "type": "PSID" + }, + { + "name": "pwszOldPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwSuccessCount", + "type": "DWORD" + }, + { + "name": "pdwFailureCount", + "type": "DWORD" + } + ], + "CryptProtectMemory": [ + { + "name": "pDataIn", + "type": "LPVOID" + }, + { + "name": "cbDataIn", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptUnprotectMemory": [ + { + "name": "pDataIn", + "type": "LPVOID" + }, + { + "name": "cbDataIn", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptFormatObject": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFormatType", + "type": "DWORD" + }, + { + "name": "dwFormatStrType", + "type": "DWORD" + }, + { + "name": "pFormatStruct", + "type": "void" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbFormat", + "type": "void" + }, + { + "name": "pcbFormat", + "type": "DWORD" + } + ], + "CryptEncodeObjectEx": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pEncodePara", + "type": "PCRYPT_ENCODE_PARA" + }, + { + "name": "pvEncoded", + "type": "void" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CryptEncodeObject": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CryptDecodeObjectEx": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pDecodePara", + "type": "PCRYPT_DECODE_PARA" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pcbStructInfo", + "type": "DWORD" + } + ], + "CryptDecodeObject": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pcbStructInfo", + "type": "DWORD" + } + ], + "CryptInstallOIDFunctionAddress": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "cFuncEntry", + "type": "DWORD" + }, + { + "name": "rgFuncEntry", + "type": "CRYPT_OID_FUNC_ENTRY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptInitOIDFunctionSet": [ + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetOIDFunctionAddress": [ + { + "name": "hFuncSet", + "type": "HCRYPTOIDFUNCSET" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppvFuncAddr", + "type": "void" + }, + { + "name": "phFuncAddr", + "type": "HCRYPTOIDFUNCADDR" + } + ], + "CryptGetDefaultOIDDllList": [ + { + "name": "hFuncSet", + "type": "HCRYPTOIDFUNCSET" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pwszDllList", + "type": "WCHAR" + }, + { + "name": "pcchDllList", + "type": "DWORD" + } + ], + "CryptGetDefaultOIDFunctionAddress": [ + { + "name": "hFuncSet", + "type": "HCRYPTOIDFUNCSET" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppvFuncAddr", + "type": "void" + }, + { + "name": "phFuncAddr", + "type": "HCRYPTOIDFUNCADDR" + } + ], + "CryptFreeOIDFunctionAddress": [ + { + "name": "hFuncAddr", + "type": "HCRYPTOIDFUNCADDR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptRegisterOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + }, + { + "name": "pszOverrideFuncName", + "type": "LPCSTR" + } + ], + "CryptUnregisterOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + } + ], + "CryptRegisterDefaultOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + } + ], + "CryptUnregisterDefaultOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + } + ], + "CryptSetOIDFunctionValue": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "pwszValueName", + "type": "LPCWSTR" + }, + { + "name": "dwValueType", + "type": "DWORD" + }, + { + "name": "pbValueData", + "type": "BYTE" + }, + { + "name": "cbValueData", + "type": "DWORD" + } + ], + "CryptGetOIDFunctionValue": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "pwszValueName", + "type": "LPCWSTR" + }, + { + "name": "pdwValueType", + "type": "DWORD" + }, + { + "name": "pbValueData", + "type": "BYTE" + }, + { + "name": "pcbValueData", + "type": "DWORD" + } + ], + "CryptEnumOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnumOIDFunc", + "type": "PFN_CRYPT_ENUM_OID_FUNC" + } + ], + "CryptFindOIDInfo": [ + { + "name": "dwKeyType", + "type": "DWORD" + }, + { + "name": "pvKey", + "type": "void" + }, + { + "name": "dwGroupId", + "type": "DWORD" + } + ], + "CryptRegisterOIDInfo": [ + { + "name": "pInfo", + "type": "PCCRYPT_OID_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptUnregisterOIDInfo": [ + { + "name": "pInfo", + "type": "PCCRYPT_OID_INFO" + } + ], + "CryptEnumOIDInfo": [ + { + "name": "dwGroupId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnumOIDInfo", + "type": "PFN_CRYPT_ENUM_OID_INFO" + } + ], + "CryptFindLocalizedName": [ + { + "name": "pwszCryptName", + "type": "LPCWSTR" + } + ], + "CryptMsgOpenToEncode": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwMsgType", + "type": "DWORD" + }, + { + "name": "pvMsgEncodeInfo", + "type": "void" + }, + { + "name": "pszInnerContentObjID", + "type": "LPSTR" + }, + { + "name": "pStreamInfo", + "type": "PCMSG_STREAM_INFO" + } + ], + "CryptMsgCalculateEncodedLength": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwMsgType", + "type": "DWORD" + }, + { + "name": "pvMsgEncodeInfo", + "type": "void" + }, + { + "name": "pszInnerContentObjID", + "type": "LPSTR" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "CryptMsgOpenToDecode": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwMsgType", + "type": "DWORD" + }, + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "pRecipientInfo", + "type": "PCERT_INFO" + }, + { + "name": "pStreamInfo", + "type": "PCMSG_STREAM_INFO" + } + ], + "CryptMsgDuplicate": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + } + ], + "CryptMsgClose": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + } + ], + "CryptMsgUpdate": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "fFinal", + "type": "BOOL" + } + ], + "CryptMsgGetParam": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "dwParamType", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CryptMsgControl": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwCtrlType", + "type": "DWORD" + }, + { + "name": "pvCtrlPara", + "type": "void" + } + ], + "CryptMsgVerifyCountersignatureEncoded": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignerInfo", + "type": "PBYTE" + }, + { + "name": "cbSignerInfo", + "type": "DWORD" + }, + { + "name": "pbSignerInfoCountersignature", + "type": "PBYTE" + }, + { + "name": "cbSignerInfoCountersignature", + "type": "DWORD" + }, + { + "name": "pciCountersigner", + "type": "PCERT_INFO" + } + ], + "CryptMsgVerifyCountersignatureEncodedEx": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignerInfo", + "type": "PBYTE" + }, + { + "name": "cbSignerInfo", + "type": "DWORD" + }, + { + "name": "pbSignerInfoCountersignature", + "type": "PBYTE" + }, + { + "name": "cbSignerInfoCountersignature", + "type": "DWORD" + }, + { + "name": "dwSignerType", + "type": "DWORD" + }, + { + "name": "pvSigner", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvExtra", + "type": "void" + } + ], + "CryptMsgCountersign": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "cCountersigners", + "type": "DWORD" + }, + { + "name": "rgCountersigners", + "type": "PCMSG_SIGNER_ENCODE_INFO" + } + ], + "CryptMsgCountersignEncoded": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignerInfo", + "type": "PBYTE" + }, + { + "name": "cbSignerInfo", + "type": "DWORD" + }, + { + "name": "cCountersigners", + "type": "DWORD" + }, + { + "name": "rgCountersigners", + "type": "PCMSG_SIGNER_ENCODE_INFO" + }, + { + "name": "pbCountersignature", + "type": "PBYTE" + }, + { + "name": "pcbCountersignature", + "type": "PDWORD" + } + ], + "CertOpenStore": [ + { + "name": "lpszStoreProvider", + "type": "LPCSTR" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvPara", + "type": "void" + } + ], + "CertDuplicateStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + } + ], + "CertSaveStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwSaveAs", + "type": "DWORD" + }, + { + "name": "dwSaveTo", + "type": "DWORD" + }, + { + "name": "pvSaveToPara", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertCloseStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertGetSubjectCertificateFromStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertId", + "type": "PCERT_INFO" + } + ], + "CertEnumCertificatesInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pPrevCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertFindCertificateInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertGetIssuerCertificateFromStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pSubjectContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pPrevIssuerContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CertVerifySubjectCertificateContext": [ + { + "name": "pSubject", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pIssuer", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CertDuplicateCertificateContext": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertCreateCertificateContext": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + } + ], + "CertFreeCertificateContext": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertSetCertificateContextProperty": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetCertificateContextProperty": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertEnumCertificateContextProperties": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + } + ], + "CertCreateCTLEntryFromCertificateContextProperties": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "cOptAttr", + "type": "DWORD" + }, + { + "name": "rgOptAttr", + "type": "PCRYPT_ATTRIBUTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pCtlEntry", + "type": "PCTL_ENTRY" + }, + { + "name": "pcbCtlEntry", + "type": "DWORD" + } + ], + "CertSetCertificateContextPropertiesFromCTLEntry": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pCtlEntry", + "type": "PCTL_ENTRY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertGetCRLFromStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pIssuerContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pPrevCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CertEnumCRLsInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pPrevCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertFindCRLInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertDuplicateCRLContext": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertCreateCRLContext": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCrlEncoded", + "type": "BYTE" + }, + { + "name": "cbCrlEncoded", + "type": "DWORD" + } + ], + "CertFreeCRLContext": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertSetCRLContextProperty": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetCRLContextProperty": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertEnumCRLContextProperties": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + } + ], + "CertFindCertificateInCRL": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "ppCrlEntry", + "type": "PCRL_ENTRY" + } + ], + "CertIsValidCRLForCertificate": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pCrl", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CertAddEncodedCertificateToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddCertificateContextToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddSerializedElementToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "cbElement", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContextTypeFlags", + "type": "DWORD" + }, + { + "name": "pdwContextType", + "type": "DWORD" + }, + { + "name": "ppvContext", + "type": "void" + } + ], + "CertDeleteCertificateFromStore": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddEncodedCRLToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCrlEncoded", + "type": "BYTE" + }, + { + "name": "cbCrlEncoded", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertAddCRLContextToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertDeleteCRLFromStore": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertSerializeCertificateStoreElement": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "pcbElement", + "type": "DWORD" + } + ], + "CertSerializeCRLStoreElement": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "pcbElement", + "type": "DWORD" + } + ], + "CertDuplicateCTLContext": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertCreateCTLContext": [ + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCtlEncoded", + "type": "BYTE" + }, + { + "name": "cbCtlEncoded", + "type": "DWORD" + } + ], + "CertFreeCTLContext": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertSetCTLContextProperty": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetCTLContextProperty": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertEnumCTLContextProperties": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + } + ], + "CertEnumCTLsInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pPrevCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertFindSubjectInCTL": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwSubjectType", + "type": "DWORD" + }, + { + "name": "pvSubject", + "type": "void" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertFindCTLInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddEncodedCTLToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCtlEncoded", + "type": "BYTE" + }, + { + "name": "cbCtlEncoded", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddCTLContextToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertSerializeCTLStoreElement": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "pcbElement", + "type": "DWORD" + } + ], + "CertDeleteCTLFromStore": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddCertificateLinkToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddCRLLinkToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertAddCTLLinkToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddStoreToCollection": [ + { + "name": "hCollectionStore", + "type": "HCERTSTORE" + }, + { + "name": "hSiblingStore", + "type": "HCERTSTORE" + }, + { + "name": "dwUpdateFlags", + "type": "DWORD" + }, + { + "name": "dwPriority", + "type": "DWORD" + } + ], + "CertRemoveStoreFromCollection": [ + { + "name": "hCollectionStore", + "type": "HCERTSTORE" + }, + { + "name": "hSiblingStore", + "type": "HCERTSTORE" + } + ], + "CertControlStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwCtrlType", + "type": "DWORD" + }, + { + "name": "pvCtrlPara", + "type": "void" + } + ], + "CertSetStoreProperty": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetStoreProperty": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertRegisterSystemStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pStoreInfo", + "type": "PCERT_SYSTEM_STORE_INFO" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CertRegisterPhysicalStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszStoreName", + "type": "LPCWSTR" + }, + { + "name": "pStoreInfo", + "type": "PCERT_PHYSICAL_STORE_INFO" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CertUnregisterSystemStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertUnregisterPhysicalStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszStoreName", + "type": "LPCWSTR" + } + ], + "CertEnumSystemStoreLocation": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CERT_ENUM_SYSTEM_STORE_LOCATION" + } + ], + "CertEnumSystemStore": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvSystemStoreLocationPara", + "type": "void" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CERT_ENUM_SYSTEM_STORE" + } + ], + "CertEnumPhysicalStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CERT_ENUM_PHYSICAL_STORE" + } + ], + "CertGetEnhancedKeyUsage": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pUsage", + "type": "PCERT_ENHKEY_USAGE" + }, + { + "name": "pcbUsage", + "type": "DWORD" + } + ], + "CertSetEnhancedKeyUsage": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pUsage", + "type": "PCERT_ENHKEY_USAGE" + } + ], + "CertAddEnhancedKeyUsageIdentifier": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pszUsageIdentifier", + "type": "LPCSTR" + } + ], + "CertRemoveEnhancedKeyUsageIdentifier": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pszUsageIdentifier", + "type": "LPCSTR" + } + ], + "CertGetValidUsages": [ + { + "name": "cCerts", + "type": "DWORD" + }, + { + "name": "rghCerts", + "type": "PCCERT_CONTEXT" + }, + { + "name": "cNumOIDs", + "type": "int" + }, + { + "name": "rghOIDs", + "type": "LPSTR" + }, + { + "name": "pcbOIDs", + "type": "DWORD" + } + ], + "CryptMsgGetAndVerifySigner": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "cSignerStore", + "type": "DWORD" + }, + { + "name": "rghSignerStore", + "type": "HCERTSTORE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppSigner", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pdwSignerIndex", + "type": "DWORD" + } + ], + "CryptMsgSignCTL": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "pbCtlContent", + "type": "BYTE" + }, + { + "name": "cbCtlContent", + "type": "DWORD" + }, + { + "name": "pSignInfo", + "type": "PCMSG_SIGNED_ENCODE_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CryptMsgEncodeAndSignCTL": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "pCtlInfo", + "type": "PCTL_INFO" + }, + { + "name": "pSignInfo", + "type": "PCMSG_SIGNED_ENCODE_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CertFindSubjectInSortedCTL": [ + { + "name": "pSubjectIdentifier", + "type": "PCRYPT_DATA_BLOB" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pEncodedAttributes", + "type": "PCRYPT_DER_BLOB" + } + ], + "CertEnumSubjectInSortedCTL": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "ppvNextSubject", + "type": "void" + }, + { + "name": "pSubjectIdentifier", + "type": "PCRYPT_DER_BLOB" + }, + { + "name": "pEncodedAttributes", + "type": "PCRYPT_DER_BLOB" + } + ], + "CertVerifyCTLUsage": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwSubjectType", + "type": "DWORD" + }, + { + "name": "pvSubject", + "type": "void" + }, + { + "name": "pSubjectUsage", + "type": "PCTL_USAGE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pVerifyUsagePara", + "type": "PCTL_VERIFY_USAGE_PARA" + }, + { + "name": "pVerifyUsageStatus", + "type": "PCTL_VERIFY_USAGE_STATUS" + } + ], + "CertVerifyRevocation": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwRevType", + "type": "DWORD" + }, + { + "name": "cContext", + "type": "DWORD" + }, + { + "name": "rgpvContext", + "type": "PVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pRevPara", + "type": "PCERT_REVOCATION_PARA" + }, + { + "name": "pRevStatus", + "type": "PCERT_REVOCATION_STATUS" + } + ], + "CertCompareIntegerBlob": [ + { + "name": "pInt1", + "type": "PCRYPT_INTEGER_BLOB" + }, + { + "name": "pInt2", + "type": "PCRYPT_INTEGER_BLOB" + } + ], + "CertCompareCertificate": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertId1", + "type": "PCERT_INFO" + }, + { + "name": "pCertId2", + "type": "PCERT_INFO" + } + ], + "CertCompareCertificateName": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertName1", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "pCertName2", + "type": "PCERT_NAME_BLOB" + } + ], + "CertIsRDNAttrsInCertificateName": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pCertName", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "pRDN", + "type": "PCERT_RDN" + } + ], + "CertComparePublicKeyInfo": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pPublicKey1", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pPublicKey2", + "type": "PCERT_PUBLIC_KEY_INFO" + } + ], + "CertGetPublicKeyLength": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pPublicKey", + "type": "PCERT_PUBLIC_KEY_INFO" + } + ], + "CryptVerifyCertificateSignature": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pPublicKey", + "type": "PCERT_PUBLIC_KEY_INFO" + } + ], + "CryptVerifyCertificateSignatureEx": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwSubjectType", + "type": "DWORD" + }, + { + "name": "pvSubject", + "type": "void" + }, + { + "name": "dwIssuerType", + "type": "DWORD" + }, + { + "name": "pvIssuer", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvExtra", + "type": "void" + } + ], + "CertIsStrongHashToSign": [ + { + "name": "pStrongSignPara", + "type": "PCCERT_STRONG_SIGN_PARA" + }, + { + "name": "pwszCNGHashAlgid", + "type": "LPCWSTR" + }, + { + "name": "pSigningCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptHashToBeSigned": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptHashCertificate": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptHashCertificate2": [ + { + "name": "pwszCNGHashAlgid", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptSignCertificate": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbEncodedToBeSigned", + "type": "BYTE" + }, + { + "name": "cbEncodedToBeSigned", + "type": "DWORD" + }, + { + "name": "pSignatureAlgorithm", + "type": "PCRYPT_ALGORITHM_IDENTIFIER" + }, + { + "name": "pvHashAuxInfo", + "type": "void" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "pcbSignature", + "type": "DWORD" + } + ], + "CryptSignAndEncodeCertificate": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pSignatureAlgorithm", + "type": "PCRYPT_ALGORITHM_IDENTIFIER" + }, + { + "name": "pvHashAuxInfo", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CertVerifyTimeValidity": [ + { + "name": "pTimeToVerify", + "type": "LPFILETIME" + }, + { + "name": "pCertInfo", + "type": "PCERT_INFO" + } + ], + "CertVerifyCRLTimeValidity": [ + { + "name": "pTimeToVerify", + "type": "LPFILETIME" + }, + { + "name": "pCrlInfo", + "type": "PCRL_INFO" + } + ], + "CertVerifyValidityNesting": [ + { + "name": "pSubjectInfo", + "type": "PCERT_INFO" + }, + { + "name": "pIssuerInfo", + "type": "PCERT_INFO" + } + ], + "CertVerifyCRLRevocation": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertId", + "type": "PCERT_INFO" + }, + { + "name": "cCrlInfo", + "type": "DWORD" + }, + { + "name": "rgpCrlInfo", + "type": "PCRL_INFO" + } + ], + "CertAlgIdToOID": [ + { + "name": "dwAlgId", + "type": "DWORD" + } + ], + "CertOIDToAlgId": [ + { + "name": "pszObjId", + "type": "LPCSTR" + } + ], + "CertFindExtension": [ + { + "name": "pszObjId", + "type": "LPCSTR" + }, + { + "name": "cExtensions", + "type": "DWORD" + }, + { + "name": "rgExtensions", + "type": "CERT_EXTENSION" + } + ], + "CertFindAttribute": [ + { + "name": "pszObjId", + "type": "LPCSTR" + }, + { + "name": "cAttr", + "type": "DWORD" + }, + { + "name": "rgAttr", + "type": "CRYPT_ATTRIBUTE" + } + ], + "CertFindRDNAttr": [ + { + "name": "pszObjId", + "type": "LPCSTR" + }, + { + "name": "pName", + "type": "PCERT_NAME_INFO" + } + ], + "CertGetIntendedKeyUsage": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertInfo", + "type": "PCERT_INFO" + }, + { + "name": "pbKeyUsage", + "type": "BYTE" + }, + { + "name": "cbKeyUsage", + "type": "DWORD" + } + ], + "CryptInstallDefaultContext": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwDefaultType", + "type": "DWORD" + }, + { + "name": "pvDefaultPara", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "phDefaultContext", + "type": "HCRYPTDEFAULTCONTEXT" + } + ], + "CryptUninstallDefaultContext": [ + { + "name": "hDefaultContext", + "type": "HCRYPTDEFAULTCONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CryptExportPublicKeyInfo": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pcbInfo", + "type": "DWORD" + } + ], + "CryptExportPublicKeyInfoEx": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszPublicKeyObjId", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pcbInfo", + "type": "DWORD" + } + ], + "CryptExportPublicKeyInfoFromBCryptKeyHandle": [ + { + "name": "hBCryptKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszPublicKeyObjId", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pcbInfo", + "type": "DWORD" + } + ], + "CryptImportPublicKeyInfo": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptImportPublicKeyInfoEx": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "aiKeyAlg", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptImportPublicKeyInfoEx2": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "phKey", + "type": "BCRYPT_KEY_HANDLE" + } + ], + "CryptAcquireCertificatePrivateKey": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvParameters", + "type": "void" + }, + { + "name": "phCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "pdwKeySpec", + "type": "DWORD" + }, + { + "name": "pfCallerFreeProvOrNCryptKey", + "type": "BOOL" + } + ], + "CryptFindCertificateKeyProvInfo": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CryptImportPKCS8": [ + { + "name": "sPrivateKeyAndParams", + "type": "CRYPT_PKCS8_IMPORT_PARAMS" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "pvAuxInfo", + "type": "void" + } + ], + "CryptExportPKCS8": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "pszPrivateKeyObjId", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pbPrivateKeyBlob", + "type": "BYTE" + }, + { + "name": "pcbPrivateKeyBlob", + "type": "DWORD" + } + ], + "CryptExportPKCS8Ex": [ + { + "name": "psExportParams", + "type": "CRYPT_PKCS8_EXPORT_PARAMS" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pbPrivateKeyBlob", + "type": "BYTE" + }, + { + "name": "pcbPrivateKeyBlob", + "type": "DWORD" + } + ], + "CryptHashPublicKeyInfo": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CertRDNValueToStrA": [ + { + "name": "dwValueType", + "type": "DWORD" + }, + { + "name": "pValue", + "type": "PCERT_RDN_VALUE_BLOB" + }, + { + "name": "psz", + "type": "LPSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertRDNValueToStrW": [ + { + "name": "dwValueType", + "type": "DWORD" + }, + { + "name": "pValue", + "type": "PCERT_RDN_VALUE_BLOB" + }, + { + "name": "psz", + "type": "LPWSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertNameToStrA": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pName", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "psz", + "type": "LPSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertNameToStrW": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pName", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "psz", + "type": "LPWSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertStrToNameA": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszX500", + "type": "LPCSTR" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + }, + { + "name": "ppszError", + "type": "LPCSTR" + } + ], + "CertStrToNameW": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszX500", + "type": "LPCWSTR" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + }, + { + "name": "ppszError", + "type": "LPCWSTR" + } + ], + "CertGetNameStringA": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvTypePara", + "type": "void" + }, + { + "name": "pszNameString", + "type": "LPSTR" + }, + { + "name": "cchNameString", + "type": "DWORD" + } + ], + "CertGetNameStringW": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvTypePara", + "type": "void" + }, + { + "name": "pszNameString", + "type": "LPWSTR" + }, + { + "name": "cchNameString", + "type": "DWORD" + } + ], + "CryptSignMessage": [ + { + "name": "pSignPara", + "type": "PCRYPT_SIGN_MESSAGE_PARA" + }, + { + "name": "fDetachedSignature", + "type": "BOOL" + }, + { + "name": "cToBeSigned", + "type": "DWORD" + }, + { + "name": "rgpbToBeSigned", + "type": "BYTE" + }, + { + "name": "rgcbToBeSigned", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "pcbSignedBlob", + "type": "DWORD" + } + ], + "CryptVerifyMessageSignature": [ + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + }, + { + "name": "pbDecoded", + "type": "BYTE" + }, + { + "name": "pcbDecoded", + "type": "DWORD" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptGetMessageSignerCount": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + } + ], + "CryptGetMessageCertificates": [ + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + } + ], + "CryptVerifyDetachedMessageSignature": [ + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbDetachedSignBlob", + "type": "BYTE" + }, + { + "name": "cbDetachedSignBlob", + "type": "DWORD" + }, + { + "name": "cToBeSigned", + "type": "DWORD" + }, + { + "name": "rgpbToBeSigned", + "type": "BYTE" + }, + { + "name": "rgcbToBeSigned", + "type": "DWORD" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptEncryptMessage": [ + { + "name": "pEncryptPara", + "type": "PCRYPT_ENCRYPT_MESSAGE_PARA" + }, + { + "name": "cRecipientCert", + "type": "DWORD" + }, + { + "name": "rgpRecipientCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pbToBeEncrypted", + "type": "BYTE" + }, + { + "name": "cbToBeEncrypted", + "type": "DWORD" + }, + { + "name": "pbEncryptedBlob", + "type": "BYTE" + }, + { + "name": "pcbEncryptedBlob", + "type": "DWORD" + } + ], + "CryptDecryptMessage": [ + { + "name": "pDecryptPara", + "type": "PCRYPT_DECRYPT_MESSAGE_PARA" + }, + { + "name": "pbEncryptedBlob", + "type": "BYTE" + }, + { + "name": "cbEncryptedBlob", + "type": "DWORD" + }, + { + "name": "pbDecrypted", + "type": "BYTE" + }, + { + "name": "pcbDecrypted", + "type": "DWORD" + }, + { + "name": "ppXchgCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptSignAndEncryptMessage": [ + { + "name": "pSignPara", + "type": "PCRYPT_SIGN_MESSAGE_PARA" + }, + { + "name": "pEncryptPara", + "type": "PCRYPT_ENCRYPT_MESSAGE_PARA" + }, + { + "name": "cRecipientCert", + "type": "DWORD" + }, + { + "name": "rgpRecipientCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pbToBeSignedAndEncrypted", + "type": "BYTE" + }, + { + "name": "cbToBeSignedAndEncrypted", + "type": "DWORD" + }, + { + "name": "pbSignedAndEncryptedBlob", + "type": "BYTE" + }, + { + "name": "pcbSignedAndEncryptedBlob", + "type": "DWORD" + } + ], + "CryptDecryptAndVerifyMessageSignature": [ + { + "name": "pDecryptPara", + "type": "PCRYPT_DECRYPT_MESSAGE_PARA" + }, + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbEncryptedBlob", + "type": "BYTE" + }, + { + "name": "cbEncryptedBlob", + "type": "DWORD" + }, + { + "name": "pbDecrypted", + "type": "BYTE" + }, + { + "name": "pcbDecrypted", + "type": "DWORD" + }, + { + "name": "ppXchgCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptDecodeMessage": [ + { + "name": "dwMsgTypeFlags", + "type": "DWORD" + }, + { + "name": "pDecryptPara", + "type": "PCRYPT_DECRYPT_MESSAGE_PARA" + }, + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbEncodedBlob", + "type": "BYTE" + }, + { + "name": "cbEncodedBlob", + "type": "DWORD" + }, + { + "name": "dwPrevInnerContentType", + "type": "DWORD" + }, + { + "name": "pdwMsgType", + "type": "DWORD" + }, + { + "name": "pdwInnerContentType", + "type": "DWORD" + }, + { + "name": "pbDecoded", + "type": "BYTE" + }, + { + "name": "pcbDecoded", + "type": "DWORD" + }, + { + "name": "ppXchgCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptHashMessage": [ + { + "name": "pHashPara", + "type": "PCRYPT_HASH_MESSAGE_PARA" + }, + { + "name": "fDetachedHash", + "type": "BOOL" + }, + { + "name": "cToBeHashed", + "type": "DWORD" + }, + { + "name": "rgpbToBeHashed", + "type": "BYTE" + }, + { + "name": "rgcbToBeHashed", + "type": "DWORD" + }, + { + "name": "pbHashedBlob", + "type": "BYTE" + }, + { + "name": "pcbHashedBlob", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptVerifyMessageHash": [ + { + "name": "pHashPara", + "type": "PCRYPT_HASH_MESSAGE_PARA" + }, + { + "name": "pbHashedBlob", + "type": "BYTE" + }, + { + "name": "cbHashedBlob", + "type": "DWORD" + }, + { + "name": "pbToBeHashed", + "type": "BYTE" + }, + { + "name": "pcbToBeHashed", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptVerifyDetachedMessageHash": [ + { + "name": "pHashPara", + "type": "PCRYPT_HASH_MESSAGE_PARA" + }, + { + "name": "pbDetachedHashBlob", + "type": "BYTE" + }, + { + "name": "cbDetachedHashBlob", + "type": "DWORD" + }, + { + "name": "cToBeHashed", + "type": "DWORD" + }, + { + "name": "rgpbToBeHashed", + "type": "BYTE" + }, + { + "name": "rgcbToBeHashed", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptSignMessageWithKey": [ + { + "name": "pSignPara", + "type": "PCRYPT_KEY_SIGN_MESSAGE_PARA" + }, + { + "name": "pbToBeSigned", + "type": "BYTE" + }, + { + "name": "cbToBeSigned", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "pcbSignedBlob", + "type": "DWORD" + } + ], + "CryptVerifyMessageSignatureWithKey": [ + { + "name": "pVerifyPara", + "type": "PCRYPT_KEY_VERIFY_MESSAGE_PARA" + }, + { + "name": "pPublicKeyInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + }, + { + "name": "pbDecoded", + "type": "BYTE" + }, + { + "name": "pcbDecoded", + "type": "DWORD" + } + ], + "CertOpenSystemStoreA": [ + { + "name": "hProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "szSubsystemProtocol", + "type": "LPCSTR" + } + ], + "CertOpenSystemStoreW": [ + { + "name": "hProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "szSubsystemProtocol", + "type": "LPCWSTR" + } + ], + "CertAddEncodedCertificateToSystemStoreA": [ + { + "name": "szCertStoreName", + "type": "LPCSTR" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + } + ], + "CertAddEncodedCertificateToSystemStoreW": [ + { + "name": "szCertStoreName", + "type": "LPCWSTR" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + } + ], + "CryptQueryObject": [ + { + "name": "dwObjectType", + "type": "DWORD" + }, + { + "name": "pvObject", + "type": "void" + }, + { + "name": "dwExpectedContentTypeFlags", + "type": "DWORD" + }, + { + "name": "dwExpectedFormatTypeFlags", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "pdwContentType", + "type": "DWORD" + }, + { + "name": "pdwFormatType", + "type": "DWORD" + }, + { + "name": "phCertStore", + "type": "HCERTSTORE" + }, + { + "name": "phMsg", + "type": "HCRYPTMSG" + }, + { + "name": "ppvContext", + "type": "void" + } + ], + "CryptMemAlloc": [ + { + "name": "cbSize", + "type": "ULONG" + } + ], + "CryptMemRealloc": [ + { + "name": "pv", + "type": "LPVOID" + }, + { + "name": "cbSize", + "type": "ULONG" + } + ], + "CryptMemFree": [ + { + "name": "pv", + "type": "LPVOID" + } + ], + "CertCreateSelfSignCertificate": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "pSubjectIssuerBlob", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pKeyProvInfo", + "type": "PCRYPT_KEY_PROV_INFO" + }, + { + "name": "pSignatureAlgorithm", + "type": "PCRYPT_ALGORITHM_IDENTIFIER" + }, + { + "name": "pStartTime", + "type": "PSYSTEMTIME" + }, + { + "name": "pEndTime", + "type": "PSYSTEMTIME" + }, + { + "name": "pExtensions", + "type": "PCERT_EXTENSIONS" + } + ], + "CryptGetKeyIdentifierProperty": [ + { + "name": "pKeyIdentifier", + "type": "CRYPT_HASH_BLOB" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszComputerName", + "type": "LPCWSTR" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CryptSetKeyIdentifierProperty": [ + { + "name": "pKeyIdentifier", + "type": "CRYPT_HASH_BLOB" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszComputerName", + "type": "LPCWSTR" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CryptEnumKeyIdentifierProperties": [ + { + "name": "pKeyIdentifier", + "type": "CRYPT_HASH_BLOB" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszComputerName", + "type": "LPCWSTR" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CRYPT_ENUM_KEYID_PROP" + } + ], + "CryptCreateKeyIdentifierFromCSP": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszPubKeyOID", + "type": "LPCSTR" + }, + { + "name": "pPubKeyStruc", + "type": "PUBLICKEYSTRUC" + }, + { + "name": "cbPubKeyStruc", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "pcbHash", + "type": "DWORD" + } + ], + "CertCreateCertificateChainEngine": [ + { + "name": "pConfig", + "type": "PCERT_CHAIN_ENGINE_CONFIG" + }, + { + "name": "phChainEngine", + "type": "HCERTCHAINENGINE" + } + ], + "CertFreeCertificateChainEngine": [ + { + "name": "hChainEngine", + "type": "HCERTCHAINENGINE" + } + ], + "CertResyncCertificateChainEngine": [ + { + "name": "hChainEngine", + "type": "HCERTCHAINENGINE" + } + ], + "CertGetCertificateChain": [ + { + "name": "hChainEngine", + "type": "HCERTCHAINENGINE" + }, + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pTime", + "type": "LPFILETIME" + }, + { + "name": "hAdditionalStore", + "type": "HCERTSTORE" + }, + { + "name": "pChainPara", + "type": "PCERT_CHAIN_PARA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + }, + { + "name": "ppChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertFreeCertificateChain": [ + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertDuplicateCertificateChain": [ + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertFindChainInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertVerifyCertificateChainPolicy": [ + { + "name": "pszPolicyOID", + "type": "LPCSTR" + }, + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + }, + { + "name": "pPolicyPara", + "type": "PCERT_CHAIN_POLICY_PARA" + }, + { + "name": "pPolicyStatus", + "type": "PCERT_CHAIN_POLICY_STATUS" + } + ], + "CryptStringToBinaryA": [ + { + "name": "pszString", + "type": "LPCSTR" + }, + { + "name": "cchString", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "pcbBinary", + "type": "DWORD" + }, + { + "name": "pdwSkip", + "type": "DWORD" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CryptStringToBinaryW": [ + { + "name": "pszString", + "type": "LPCWSTR" + }, + { + "name": "cchString", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "pcbBinary", + "type": "DWORD" + }, + { + "name": "pdwSkip", + "type": "DWORD" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CryptBinaryToStringA": [ + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "cbBinary", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszString", + "type": "LPSTR" + }, + { + "name": "pcchString", + "type": "DWORD" + } + ], + "CryptBinaryToStringW": [ + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "cbBinary", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszString", + "type": "LPWSTR" + }, + { + "name": "pcchString", + "type": "DWORD" + } + ], + "PFXImportCertStore": [ + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PFXIsPFXBlob": [ + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + } + ], + "PFXVerifyPassword": [ + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PFXExportCertStoreEx": [ + { + "name": "hStore", + "type": "HCERTSTORE" + }, + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "pvPara", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PFXExportCertStore": [ + { + "name": "hStore", + "type": "HCERTSTORE" + }, + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertOpenServerOcspResponse": [ + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pOpenPara", + "type": "PCERT_SERVER_OCSP_RESPONSE_OPEN_PARA" + } + ], + "CertAddRefServerOcspResponse": [ + { + "name": "hServerOcspResponse", + "type": "HCERT_SERVER_OCSP_RESPONSE" + } + ], + "CertCloseServerOcspResponse": [ + { + "name": "hServerOcspResponse", + "type": "HCERT_SERVER_OCSP_RESPONSE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertGetServerOcspResponseContext": [ + { + "name": "hServerOcspResponse", + "type": "HCERT_SERVER_OCSP_RESPONSE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "CertAddRefServerOcspResponseContext": [ + { + "name": "pServerOcspResponseContext", + "type": "PCCERT_SERVER_OCSP_RESPONSE_CONTEXT" + } + ], + "CertFreeServerOcspResponseContext": [ + { + "name": "pServerOcspResponseContext", + "type": "PCCERT_SERVER_OCSP_RESPONSE_CONTEXT" + } + ], + "CertRetrieveLogoOrBiometricInfo": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "lpszLogoOrBiometricType", + "type": "LPCSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "ppbData", + "type": "BYTE" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "ppwszMimeType", + "type": "LPWSTR" + } + ], + "CertSelectCertificateChains": [ + { + "name": "pSelectionContext", + "type": "LPCGUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pChainParameters", + "type": "PCCERT_SELECT_CHAIN_PARA" + }, + { + "name": "cCriteria", + "type": "DWORD" + }, + { + "name": "rgpCriteria", + "type": "PCCERT_SELECT_CRITERIA" + }, + { + "name": "hStore", + "type": "HCERTSTORE" + }, + { + "name": "pcSelection", + "type": "PDWORD" + }, + { + "name": "pprgpSelection", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertFreeCertificateChainList": [ + { + "name": "prgpSelection", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CryptRetrieveTimeStamp": [ + { + "name": "wszUrl", + "type": "LPCWSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "pszHashId", + "type": "LPCSTR" + }, + { + "name": "pPara", + "type": "CRYPT_TIMESTAMP_PARA" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "ppTsContext", + "type": "PCRYPT_TIMESTAMP_CONTEXT" + }, + { + "name": "ppTsSigner", + "type": "PCCERT_CONTEXT" + }, + { + "name": "phStore", + "type": "HCERTSTORE" + } + ], + "CryptVerifyTimeStampSignature": [ + { + "name": "pbTSContentInfo", + "type": "BYTE" + }, + { + "name": "cbTSContentInfo", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "hAdditionalStore", + "type": "HCERTSTORE" + }, + { + "name": "ppTsContext", + "type": "PCRYPT_TIMESTAMP_CONTEXT" + }, + { + "name": "ppTsSigner", + "type": "PCCERT_CONTEXT" + }, + { + "name": "phStore", + "type": "HCERTSTORE" + } + ], + "CryptSIPGetSignedDataMsg": [ + { + "name": "pSubjectInfo", + "type": "SIP_SUBJECTINFO" + }, + { + "name": "pdwEncodingType", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pcbSignedDataMsg", + "type": "DWORD" + }, + { + "name": "pbSignedDataMsg", + "type": "BYTE" + } + ], + "CryptSIPPutSignedDataMsg": [ + { + "name": "pSubjectInfo", + "type": "SIP_SUBJECTINFO" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pdwIndex", + "type": "DWORD" + }, + { + "name": "cbSignedDataMsg", + "type": "DWORD" + }, + { + "name": "pbSignedDataMsg", + "type": "BYTE" + } + ], + "CryptSIPCreateIndirectData": [ + { + "name": "pSubjectInfo", + "type": "SIP_SUBJECTINFO" + }, + { + "name": "pcbIndirectData", + "type": "DWORD" + }, + { + "name": "pIndirectData", + "type": "SIP_INDIRECT_DATA" + } + ], + "CryptSIPVerifyIndirectData": [ + { + "name": "pSubjectInfo", + "type": "SIP_SUBJECTINFO" + }, + { + "name": "pIndirectData", + "type": "SIP_INDIRECT_DATA" + } + ], + "CryptSIPRemoveSignedDataMsg": [ + { + "name": "pSubjectInfo", + "type": "SIP_SUBJECTINFO" + }, + { + "name": "dwIndex", + "type": "DWORD" + } + ], + "CryptSIPLoad": [ + { + "name": "pgSubject", + "type": "GUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pSipDispatch", + "type": "SIP_DISPATCH_INFO" + } + ], + "CryptSIPRetrieveSubjectGuid": [ + { + "name": "FileName", + "type": "LPCWSTR" + }, + { + "name": "hFileIn", + "type": "HANDLE" + }, + { + "name": "pgSubject", + "type": "GUID" + } + ], + "CryptSIPRetrieveSubjectGuidForCatalogFile": [ + { + "name": "FileName", + "type": "LPCWSTR" + }, + { + "name": "hFileIn", + "type": "HANDLE" + }, + { + "name": "pgSubject", + "type": "GUID" + } + ], + "CryptSIPAddProvider": [ + { + "name": "psNewProv", + "type": "SIP_ADD_NEWPROVIDER" + } + ], + "CryptSIPRemoveProvider": [ + { + "name": "pgProv", + "type": "GUID" + } + ], + "CryptSIPGetCaps": [ + { + "name": "pSubjInfo", + "type": "SIP_SUBJECTINFO" + }, + { + "name": "pCaps", + "type": "SIP_CAP_SET" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/cryptdlg_dll.json b/qiling/extensions/windows_sdk/defs/cryptdlg_dll.json new file mode 100644 index 000000000..9bc16cce9 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/cryptdlg_dll.json @@ -0,0 +1,80 @@ +{ + "CertSelectCertificateA": [ + { + "name": "pCertSelectInfo", + "type": "PCERT_SELECT_STRUCT_A" + } + ], + "CertSelectCertificateW": [ + { + "name": "pCertSelectInfo", + "type": "PCERT_SELECT_STRUCT_W" + } + ], + "CertViewPropertiesA": [ + { + "name": "pCertViewInfo", + "type": "PCERT_VIEWPROPERTIES_STRUCT_A" + } + ], + "CertViewPropertiesW": [ + { + "name": "pCertViewInfo", + "type": "PCERT_VIEWPROPERTIES_STRUCT_W" + } + ], + "GetFriendlyNameOfCertA": [ + { + "name": "pccert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pch", + "type": "LPSTR" + }, + { + "name": "cch", + "type": "DWORD" + } + ], + "GetFriendlyNameOfCertW": [ + { + "name": "pccert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pwch", + "type": "LPWSTR" + }, + { + "name": "cwch", + "type": "DWORD" + } + ], + "CertModifyCertificatesToTrust": [ + { + "name": "cCerts", + "type": "int" + }, + { + "name": "rgCerts", + "type": "PCTL_MODIFY_REQUEST" + }, + { + "name": "szPurpose", + "type": "LPCSTR" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hcertstoreTrust", + "type": "HCERTSTORE" + }, + { + "name": "pccertSigner", + "type": "PCCERT_CONTEXT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/cryptnet_dll.json b/qiling/extensions/windows_sdk/defs/cryptnet_dll.json new file mode 100644 index 000000000..4de2b7604 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/cryptnet_dll.json @@ -0,0 +1,150 @@ +{ + "CryptRetrieveObjectByUrlA": [ + { + "name": "pszUrl", + "type": "LPCSTR" + }, + { + "name": "pszObjectOid", + "type": "LPCSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "ppvObject", + "type": "LPVOID" + }, + { + "name": "hAsyncRetrieve", + "type": "HCRYPTASYNC" + }, + { + "name": "pCredentials", + "type": "PCRYPT_CREDENTIALS" + }, + { + "name": "pvVerify", + "type": "LPVOID" + }, + { + "name": "pAuxInfo", + "type": "PCRYPT_RETRIEVE_AUX_INFO" + } + ], + "CryptRetrieveObjectByUrlW": [ + { + "name": "pszUrl", + "type": "LPCWSTR" + }, + { + "name": "pszObjectOid", + "type": "LPCSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "ppvObject", + "type": "LPVOID" + }, + { + "name": "hAsyncRetrieve", + "type": "HCRYPTASYNC" + }, + { + "name": "pCredentials", + "type": "PCRYPT_CREDENTIALS" + }, + { + "name": "pvVerify", + "type": "LPVOID" + }, + { + "name": "pAuxInfo", + "type": "PCRYPT_RETRIEVE_AUX_INFO" + } + ], + "CryptGetObjectUrl": [ + { + "name": "pszUrlOid", + "type": "LPCSTR" + }, + { + "name": "pvPara", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pUrlArray", + "type": "PCRYPT_URL_ARRAY" + }, + { + "name": "pcbUrlArray", + "type": "DWORD" + }, + { + "name": "pUrlInfo", + "type": "PCRYPT_URL_INFO" + }, + { + "name": "pcbUrlInfo", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "CryptGetTimeValidObject": [ + { + "name": "pszTimeValidOid", + "type": "LPCSTR" + }, + { + "name": "pvPara", + "type": "LPVOID" + }, + { + "name": "pIssuer", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pftValidFor", + "type": "LPFILETIME" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "ppvObject", + "type": "LPVOID" + }, + { + "name": "pCredentials", + "type": "PCRYPT_CREDENTIALS" + }, + { + "name": "pExtraInfo", + "type": "PCRYPT_GET_TIME_VALID_OBJECT_EXTRA_INFO" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/cryptui_dll.json b/qiling/extensions/windows_sdk/defs/cryptui_dll.json new file mode 100644 index 000000000..42666b020 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/cryptui_dll.json @@ -0,0 +1,170 @@ +{ + "CryptUIDlgViewContext": [ + { + "name": "dwContextType", + "type": "DWORD" + }, + { + "name": "pvContext", + "type": "void" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pwszTitle", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CryptUIDlgSelectCertificateFromStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pwszTitle", + "type": "LPCWSTR" + }, + { + "name": "pwszDisplayString", + "type": "LPCWSTR" + }, + { + "name": "dwDontUseColumn", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CertSelectionGetSerializedBlob": [ + { + "name": "pcsi", + "type": "PCERT_SELECTUI_INPUT" + }, + { + "name": "ppOutBuffer", + "type": "void" + }, + { + "name": "pulOutBufferSize", + "type": "ULONG" + } + ], + "CryptUIDlgCertMgr": [ + { + "name": "pCryptUICertMgr", + "type": "PCCRYPTUI_CERT_MGR_STRUCT" + } + ], + "CryptUIWizDigitalSign": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "pwszWizardTitle", + "type": "LPCWSTR" + }, + { + "name": "pDigitalSignInfo", + "type": "PCCRYPTUI_WIZ_DIGITAL_SIGN_INFO" + }, + { + "name": "ppSignContext", + "type": "PCCRYPTUI_WIZ_DIGITAL_SIGN_CONTEXT" + } + ], + "CryptUIWizFreeDigitalSignContext": [ + { + "name": "pSignContext", + "type": "PCCRYPTUI_WIZ_DIGITAL_SIGN_CONTEXT" + } + ], + "CryptUIDlgViewCertificateW": [ + { + "name": "pCertViewInfo", + "type": "PCCRYPTUI_VIEWCERTIFICATE_STRUCTW" + }, + { + "name": "pfPropertiesChanged", + "type": "BOOL" + } + ], + "CryptUIDlgViewCertificateA": [ + { + "name": "pCertViewInfo", + "type": "PCCRYPTUI_VIEWCERTIFICATE_STRUCTA" + }, + { + "name": "pfPropertiesChanged", + "type": "BOOL" + } + ], + "CryptUIWizExport": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "pwszWizardTitle", + "type": "LPCWSTR" + }, + { + "name": "pExportInfo", + "type": "PCCRYPTUI_WIZ_EXPORT_INFO" + }, + { + "name": "pvoid", + "type": "void" + } + ], + "CryptUIWizImport": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "pwszWizardTitle", + "type": "LPCWSTR" + }, + { + "name": "pImportSrc", + "type": "PCCRYPTUI_WIZ_IMPORT_SRC_INFO" + }, + { + "name": "hDestCertStore", + "type": "HCERTSTORE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/cryptxml_dll.json b/qiling/extensions/windows_sdk/defs/cryptxml_dll.json new file mode 100644 index 000000000..aeef2e267 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/cryptxml_dll.json @@ -0,0 +1,304 @@ +{ + "CryptXmlClose": [ + { + "name": "hCryptXml", + "type": "HCRYPTXML" + } + ], + "CryptXmlGetTransforms": [ + { + "name": "ppConfig", + "type": "CRYPT_XML_TRANSFORM_CHAIN_CONFIG" + } + ], + "CryptXmlOpenToEncode": [ + { + "name": "pConfig", + "type": "CRYPT_XML_TRANSFORM_CHAIN_CONFIG" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "wszId", + "type": "LPCWSTR" + }, + { + "name": "rgProperty", + "type": "CRYPT_XML_PROPERTY" + }, + { + "name": "cProperty", + "type": "ULONG" + }, + { + "name": "pEncoded", + "type": "CRYPT_XML_BLOB" + }, + { + "name": "phSignature", + "type": "HCRYPTXML" + } + ], + "CryptXmlOpenToDecode": [ + { + "name": "pConfig", + "type": "CRYPT_XML_TRANSFORM_CHAIN_CONFIG" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "rgProperty", + "type": "CRYPT_XML_PROPERTY" + }, + { + "name": "cProperty", + "type": "ULONG" + }, + { + "name": "pEncoded", + "type": "CRYPT_XML_BLOB" + }, + { + "name": "phCryptXml", + "type": "HCRYPTXML" + } + ], + "CryptXmlAddObject": [ + { + "name": "hSignatureOrObject", + "type": "HCRYPTXML" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "rgProperty", + "type": "CRYPT_XML_PROPERTY" + }, + { + "name": "cProperty", + "type": "ULONG" + }, + { + "name": "pEncoded", + "type": "CRYPT_XML_BLOB" + }, + { + "name": "ppObject", + "type": "CRYPT_XML_OBJECT" + } + ], + "CryptXmlCreateReference": [ + { + "name": "hCryptXml", + "type": "HCRYPTXML" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "wszId", + "type": "LPCWSTR" + }, + { + "name": "wszURI", + "type": "LPCWSTR" + }, + { + "name": "wszType", + "type": "LPCWSTR" + }, + { + "name": "pDigestMethod", + "type": "CRYPT_XML_ALGORITHM" + }, + { + "name": "cTransform", + "type": "ULONG" + }, + { + "name": "rgTransform", + "type": "CRYPT_XML_ALGORITHM" + }, + { + "name": "phReference", + "type": "HCRYPTXML" + } + ], + "CryptXmlDigestReference": [ + { + "name": "hReference", + "type": "HCRYPTXML" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pDataProviderIn", + "type": "CRYPT_XML_DATA_PROVIDER" + } + ], + "CryptXmlSetHMACSecret": [ + { + "name": "hSignature", + "type": "HCRYPTXML" + }, + { + "name": "pbSecret", + "type": "BYTE" + }, + { + "name": "cbSecret", + "type": "ULONG" + } + ], + "CryptXmlSign": [ + { + "name": "hSignature", + "type": "HCRYPTXML" + }, + { + "name": "hKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwKeyInfoSpec", + "type": "CRYPT_XML_KEYINFO_SPEC" + }, + { + "name": "pvKeyInfoSpec", + "type": "void" + }, + { + "name": "pSignatureMethod", + "type": "CRYPT_XML_ALGORITHM" + }, + { + "name": "pCanonicalization", + "type": "CRYPT_XML_ALGORITHM" + } + ], + "CryptXmlImportPublicKey": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pKeyValue", + "type": "CRYPT_XML_KEY_VALUE" + }, + { + "name": "phKey", + "type": "BCRYPT_KEY_HANDLE" + } + ], + "CryptXmlVerifySignature": [ + { + "name": "hSignature", + "type": "HCRYPTXML" + }, + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptXmlGetDocContext": [ + { + "name": "hCryptXml", + "type": "HCRYPTXML" + }, + { + "name": "ppStruct", + "type": "CRYPT_XML_DOC_CTXT" + } + ], + "CryptXmlGetSignature": [ + { + "name": "hCryptXml", + "type": "HCRYPTXML" + }, + { + "name": "ppStruct", + "type": "CRYPT_XML_SIGNATURE" + } + ], + "CryptXmlGetReference": [ + { + "name": "hCryptXml", + "type": "HCRYPTXML" + }, + { + "name": "ppStruct", + "type": "CRYPT_XML_REFERENCE" + } + ], + "CryptXmlGetStatus": [ + { + "name": "hCryptXml", + "type": "HCRYPTXML" + }, + { + "name": "pStatus", + "type": "CRYPT_XML_STATUS" + } + ], + "CryptXmlEncode": [ + { + "name": "hCryptXml", + "type": "HCRYPTXML" + }, + { + "name": "dwCharset", + "type": "CRYPT_XML_CHARSET" + }, + { + "name": "rgProperty", + "type": "CRYPT_XML_PROPERTY" + }, + { + "name": "cProperty", + "type": "ULONG" + }, + { + "name": "pvCallbackState", + "type": "void" + }, + { + "name": "pfnWrite", + "type": "PFN_CRYPT_XML_WRITE_CALLBACK" + } + ], + "CryptXmlGetAlgorithmInfo": [ + { + "name": "pXmlAlgorithm", + "type": "CRYPT_XML_ALGORITHM" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppAlgInfo", + "type": "CRYPT_XML_ALGORITHM_INFO" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/cscapi_dll.json b/qiling/extensions/windows_sdk/defs/cscapi_dll.json new file mode 100644 index 000000000..d9859f426 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/cscapi_dll.json @@ -0,0 +1,36 @@ +{ + "OfflineFilesEnable": [ + { + "name": "bEnable", + "type": "BOOL" + }, + { + "name": "pbRebootRequired", + "type": "BOOL" + } + ], + "OfflineFilesQueryStatus": [ + { + "name": "pbActive", + "type": "BOOL" + }, + { + "name": "pbEnabled", + "type": "BOOL" + } + ], + "OfflineFilesQueryStatusEx": [ + { + "name": "pbActive", + "type": "BOOL" + }, + { + "name": "pbEnabled", + "type": "BOOL" + }, + { + "name": "pbAvailable", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/d2d1_dll.json b/qiling/extensions/windows_sdk/defs/d2d1_dll.json new file mode 100644 index 000000000..1ff8218f5 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/d2d1_dll.json @@ -0,0 +1,234 @@ +{ + "D2D1ComputeMaximumScaleFactor": [ + { + "name": "matrix", + "type": "D2D1_MATRIX_3X2_F" + } + ], + "D2D1GetGradientMeshInteriorPointsFromCoonsPatch": [ + { + "name": "pPoint0", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint1", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint2", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint3", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint4", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint5", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint6", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint7", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint8", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint9", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint10", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint11", + "type": "D2D1_POINT_2F" + }, + { + "name": "pTensorPoint11", + "type": "D2D1_POINT_2F" + }, + { + "name": "pTensorPoint12", + "type": "D2D1_POINT_2F" + }, + { + "name": "pTensorPoint21", + "type": "D2D1_POINT_2F" + }, + { + "name": "pTensorPoint22", + "type": "D2D1_POINT_2F" + } + ], + "D2D1CreateDevice": [ + { + "name": "dxgiDevice", + "type": "IDXGIDevice" + }, + { + "name": "creationProperties", + "type": "D2D1_CREATION_PROPERTIES" + }, + { + "name": "d2dDevice", + "type": "ID2D1Device" + } + ], + "D2D1CreateDeviceContext": [ + { + "name": "dxgiSurface", + "type": "IDXGISurface" + }, + { + "name": "creationProperties", + "type": "D2D1_CREATION_PROPERTIES" + }, + { + "name": "d2dDeviceContext", + "type": "ID2D1DeviceContext" + } + ], + "D2D1ConvertColorSpace": [ + { + "name": "sourceColorSpace", + "type": "D2D1_COLOR_SPACE" + }, + { + "name": "destinationColorSpace", + "type": "D2D1_COLOR_SPACE" + }, + { + "name": "color", + "type": "D2D1_COLOR_F" + } + ], + "D2D1SinCos": [ + { + "name": "angle", + "type": "FLOAT" + }, + { + "name": "s", + "type": "FLOAT" + }, + { + "name": "c", + "type": "FLOAT" + } + ], + "D2D1Tan": [ + { + "name": "angle", + "type": "FLOAT" + } + ], + "D2D1Vec3Length": [ + { + "name": "x", + "type": "FLOAT" + }, + { + "name": "y", + "type": "FLOAT" + }, + { + "name": "z", + "type": "FLOAT" + } + ], + "Ellipse": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "D2D1CreateFactory": [ + { + "name": "factoryType", + "type": "D2D1_FACTORY_TYPE" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "pFactoryOptions", + "type": "D2D1_FACTORY_OPTIONS" + }, + { + "name": "ppIFactory", + "type": "void" + } + ], + "D2D1MakeRotateMatrix": [ + { + "name": "angle", + "type": "FLOAT" + }, + { + "name": "center", + "type": "D2D1_POINT_2F" + }, + { + "name": "matrix", + "type": "D2D1_MATRIX_3X2_F" + } + ], + "D2D1MakeSkewMatrix": [ + { + "name": "angleX", + "type": "FLOAT" + }, + { + "name": "angleY", + "type": "FLOAT" + }, + { + "name": "center", + "type": "D2D1_POINT_2F" + }, + { + "name": "matrix", + "type": "D2D1_MATRIX_3X2_F" + } + ], + "D2D1IsMatrixInvertible": [ + { + "name": "matrix", + "type": "D2D1_MATRIX_3X2_F" + } + ], + "D2D1InvertMatrix": [ + { + "name": "matrix", + "type": "D2D1_MATRIX_3X2_F" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/d3d10_1_dll.json b/qiling/extensions/windows_sdk/defs/d3d10_1_dll.json new file mode 100644 index 000000000..30ad405cd --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/d3d10_1_dll.json @@ -0,0 +1,70 @@ +{ + "D3D10CreateDevice1": [ + { + "name": "pAdapter", + "type": "IDXGIAdapter" + }, + { + "name": "DriverType", + "type": "D3D10_DRIVER_TYPE" + }, + { + "name": "Software", + "type": "HMODULE" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "HardwareLevel", + "type": "D3D10_FEATURE_LEVEL1" + }, + { + "name": "SDKVersion", + "type": "UINT" + }, + { + "name": "ppDevice", + "type": "ID3D10Device1" + } + ], + "D3D10CreateDeviceAndSwapChain1": [ + { + "name": "pAdapter", + "type": "IDXGIAdapter" + }, + { + "name": "DriverType", + "type": "D3D10_DRIVER_TYPE" + }, + { + "name": "Software", + "type": "HMODULE" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "HardwareLevel", + "type": "D3D10_FEATURE_LEVEL1" + }, + { + "name": "SDKVersion", + "type": "UINT" + }, + { + "name": "pSwapChainDesc", + "type": "DXGI_SWAP_CHAIN_DESC" + }, + { + "name": "ppSwapChain", + "type": "IDXGISwapChain" + }, + { + "name": "ppDevice", + "type": "ID3D10Device1" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/d3d10_dll.json b/qiling/extensions/windows_sdk/defs/d3d10_dll.json new file mode 100644 index 000000000..55335c7c7 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/d3d10_dll.json @@ -0,0 +1,290 @@ +{ + "D3D10StateBlockMaskUnion": [ + { + "name": "pA", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "pB", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "pResult", + "type": "D3D10_STATE_BLOCK_MASK" + } + ], + "D3D10StateBlockMaskIntersect": [ + { + "name": "pA", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "pB", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "pResult", + "type": "D3D10_STATE_BLOCK_MASK" + } + ], + "D3D10StateBlockMaskDifference": [ + { + "name": "pA", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "pB", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "pResult", + "type": "D3D10_STATE_BLOCK_MASK" + } + ], + "D3D10StateBlockMaskEnableCapture": [ + { + "name": "pMask", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "StateType", + "type": "D3D10_DEVICE_STATE_TYPES" + }, + { + "name": "RangeStart", + "type": "UINT" + }, + { + "name": "RangeLength", + "type": "UINT" + } + ], + "D3D10StateBlockMaskDisableCapture": [ + { + "name": "pMask", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "StateType", + "type": "D3D10_DEVICE_STATE_TYPES" + }, + { + "name": "RangeStart", + "type": "UINT" + }, + { + "name": "RangeLength", + "type": "UINT" + } + ], + "D3D10StateBlockMaskEnableAll": [ + { + "name": "pMask", + "type": "D3D10_STATE_BLOCK_MASK" + } + ], + "D3D10StateBlockMaskDisableAll": [ + { + "name": "pMask", + "type": "D3D10_STATE_BLOCK_MASK" + } + ], + "D3D10StateBlockMaskGetSetting": [ + { + "name": "pMask", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "StateType", + "type": "D3D10_DEVICE_STATE_TYPES" + }, + { + "name": "Entry", + "type": "UINT" + } + ], + "D3D10CreateStateBlock": [ + { + "name": "pDevice", + "type": "ID3D10Device" + }, + { + "name": "pStateBlockMask", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "ppStateBlock", + "type": "ID3D10StateBlock" + } + ], + "D3D10CompileEffectFromMemory": [ + { + "name": "pData", + "type": "void" + }, + { + "name": "DataLength", + "type": "SIZE_T" + }, + { + "name": "pSrcFileName", + "type": "LPCSTR" + }, + { + "name": "pDefines", + "type": "D3D10_SHADER_MACRO" + }, + { + "name": "pInclude", + "type": "ID3D10Include" + }, + { + "name": "HLSLFlags", + "type": "UINT" + }, + { + "name": "FXFlags", + "type": "UINT" + }, + { + "name": "ppCompiledEffect", + "type": "ID3D10Blob" + }, + { + "name": "ppErrors", + "type": "ID3D10Blob" + } + ], + "D3D10CreateEffectFromMemory": [ + { + "name": "pData", + "type": "void" + }, + { + "name": "DataLength", + "type": "SIZE_T" + }, + { + "name": "FXFlags", + "type": "UINT" + }, + { + "name": "pDevice", + "type": "ID3D10Device" + }, + { + "name": "pEffectPool", + "type": "ID3D10EffectPool" + }, + { + "name": "ppEffect", + "type": "ID3D10Effect" + } + ], + "D3D10CreateEffectPoolFromMemory": [ + { + "name": "pData", + "type": "void" + }, + { + "name": "DataLength", + "type": "SIZE_T" + }, + { + "name": "FXFlags", + "type": "UINT" + }, + { + "name": "pDevice", + "type": "ID3D10Device" + }, + { + "name": "ppEffectPool", + "type": "ID3D10EffectPool" + } + ], + "D3D10DisassembleEffect": [ + { + "name": "pEffect", + "type": "ID3D10Effect" + }, + { + "name": "EnableColorCode", + "type": "BOOL" + }, + { + "name": "ppDisassembly", + "type": "ID3D10Blob" + } + ], + "D3D10CreateDevice": [ + { + "name": "pAdapter", + "type": "IDXGIAdapter" + }, + { + "name": "DriverType", + "type": "D3D10_DRIVER_TYPE" + }, + { + "name": "Software", + "type": "HMODULE" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "SDKVersion", + "type": "UINT" + }, + { + "name": "ppDevice", + "type": "ID3D10Device" + } + ], + "D3D10CreateDeviceAndSwapChain": [ + { + "name": "pAdapter", + "type": "IDXGIAdapter" + }, + { + "name": "DriverType", + "type": "D3D10_DRIVER_TYPE" + }, + { + "name": "Software", + "type": "HMODULE" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "SDKVersion", + "type": "UINT" + }, + { + "name": "pSwapChainDesc", + "type": "DXGI_SWAP_CHAIN_DESC" + }, + { + "name": "ppSwapChain", + "type": "IDXGISwapChain" + }, + { + "name": "ppDevice", + "type": "ID3D10Device" + } + ], + "D3D10CreateBlob": [ + { + "name": "NumBytes", + "type": "SIZE_T" + }, + { + "name": "ppBuffer", + "type": "LPD3D10BLOB" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/d3d11_dll.json b/qiling/extensions/windows_sdk/defs/d3d11_dll.json new file mode 100644 index 000000000..31b320ce0 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/d3d11_dll.json @@ -0,0 +1,136 @@ +{ + "D3D11On12CreateDevice": [ + { + "name": "pDevice", + "type": "IUnknown" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "pFeatureLevels", + "type": "D3D_FEATURE_LEVEL" + }, + { + "name": "FeatureLevels", + "type": "UINT" + }, + { + "name": "ppCommandQueues", + "type": "IUnknown" + }, + { + "name": "NumQueues", + "type": "UINT" + }, + { + "name": "NodeMask", + "type": "UINT" + }, + { + "name": "ppDevice", + "type": "ID3D11Device" + }, + { + "name": "ppImmediateContext", + "type": "ID3D11DeviceContext" + }, + { + "name": "pChosenFeatureLevel", + "type": "D3D_FEATURE_LEVEL" + } + ], + "D3D11CreateDevice": [ + { + "name": "pAdapter", + "type": "IDXGIAdapter" + }, + { + "name": "DriverType", + "type": "D3D_DRIVER_TYPE" + }, + { + "name": "Software", + "type": "HMODULE" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "pFeatureLevels", + "type": "D3D_FEATURE_LEVEL" + }, + { + "name": "FeatureLevels", + "type": "UINT" + }, + { + "name": "SDKVersion", + "type": "UINT" + }, + { + "name": "ppDevice", + "type": "ID3D11Device" + }, + { + "name": "pFeatureLevel", + "type": "D3D_FEATURE_LEVEL" + }, + { + "name": "ppImmediateContext", + "type": "ID3D11DeviceContext" + } + ], + "D3D11CreateDeviceAndSwapChain": [ + { + "name": "pAdapter", + "type": "IDXGIAdapter" + }, + { + "name": "DriverType", + "type": "D3D_DRIVER_TYPE" + }, + { + "name": "Software", + "type": "HMODULE" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "pFeatureLevels", + "type": "D3D_FEATURE_LEVEL" + }, + { + "name": "FeatureLevels", + "type": "UINT" + }, + { + "name": "SDKVersion", + "type": "UINT" + }, + { + "name": "pSwapChainDesc", + "type": "DXGI_SWAP_CHAIN_DESC" + }, + { + "name": "ppSwapChain", + "type": "IDXGISwapChain" + }, + { + "name": "ppDevice", + "type": "ID3D11Device" + }, + { + "name": "pFeatureLevel", + "type": "D3D_FEATURE_LEVEL" + }, + { + "name": "ppImmediateContext", + "type": "ID3D11DeviceContext" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/d3d11sdklayers_dll.json b/qiling/extensions/windows_sdk/defs/d3d11sdklayers_dll.json new file mode 100644 index 000000000..c680b59e4 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/d3d11sdklayers_dll.json @@ -0,0 +1,36 @@ +{ + "D3DDisassemble11Trace": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "pTrace", + "type": "ID3D11ShaderTrace" + }, + { + "name": "StartStep", + "type": "UINT" + }, + { + "name": "NumSteps", + "type": "UINT" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "ppDisassembly", + "type": { + "name": "ID3D10Blob", + "data_type": "Struct", + "elements": [] + } + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/d3d12_dll.json b/qiling/extensions/windows_sdk/defs/d3d12_dll.json new file mode 100644 index 000000000..ba1655546 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/d3d12_dll.json @@ -0,0 +1,116 @@ +{ + "D3D12SerializeRootSignature": [ + { + "name": "pRootSignature", + "type": "D3D12_ROOT_SIGNATURE_DESC" + }, + { + "name": "Version", + "type": "D3D_ROOT_SIGNATURE_VERSION" + }, + { + "name": "ppBlob", + "type": "ID3DBlob" + }, + { + "name": "ppErrorBlob", + "type": "ID3DBlob" + } + ], + "D3D12CreateRootSignatureDeserializer": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSizeInBytes", + "type": "SIZE_T" + }, + { + "name": "pRootSignatureDeserializerInterface", + "type": "IID" + }, + { + "name": "ppRootSignatureDeserializer", + "type": "void" + } + ], + "D3D12SerializeVersionedRootSignature": [ + { + "name": "pRootSignature", + "type": "D3D12_VERSIONED_ROOT_SIGNATURE_DESC" + }, + { + "name": "ppBlob", + "type": "ID3DBlob" + }, + { + "name": "ppErrorBlob", + "type": "ID3DBlob" + } + ], + "D3D12CreateVersionedRootSignatureDeserializer": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSizeInBytes", + "type": "SIZE_T" + }, + { + "name": "pRootSignatureDeserializerInterface", + "type": "IID" + }, + { + "name": "ppRootSignatureDeserializer", + "type": "void" + } + ], + "D3D12CreateDevice": [ + { + "name": "pAdapter", + "type": "IUnknown" + }, + { + "name": "MinimumFeatureLevel", + "type": "D3D_FEATURE_LEVEL" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppDevice", + "type": "void" + } + ], + "D3D12GetDebugInterface": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvDebug", + "type": "void" + } + ], + "D3D12EnableExperimentalFeatures": [ + { + "name": "NumFeatures", + "type": "UINT" + }, + { + "name": "pIIDs", + "type": "IID" + }, + { + "name": "pConfigurationStructs", + "type": "void" + }, + { + "name": "pConfigurationStructSizes", + "type": "UINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/d3d9_dll.json b/qiling/extensions/windows_sdk/defs/d3d9_dll.json new file mode 100644 index 000000000..cf1d02146 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/d3d9_dll.json @@ -0,0 +1,12 @@ +{ + "Direct3DCreate9Ex": [ + { + "name": "SDKVersion", + "type": "UINT" + }, + { + "name": "VOID", + "type": "IDirect3D9Ex" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/d3dcompiler_47_dll.json b/qiling/extensions/windows_sdk/defs/d3dcompiler_47_dll.json new file mode 100644 index 000000000..626e4ba3a --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/d3dcompiler_47_dll.json @@ -0,0 +1,522 @@ +{ + "D3DReadFileToBlob": [ + { + "name": "pFileName", + "type": "LPCWSTR" + }, + { + "name": "ppContents", + "type": "ID3DBlob" + } + ], + "D3DWriteBlobToFile": [ + { + "name": "pBlob", + "type": "ID3DBlob" + }, + { + "name": "pFileName", + "type": "LPCWSTR" + }, + { + "name": "bOverwrite", + "type": "BOOL" + } + ], + "D3DCompile2": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "pSourceName", + "type": "LPCSTR" + }, + { + "name": "pDefines", + "type": "D3D_SHADER_MACRO" + }, + { + "name": "pInclude", + "type": "ID3DInclude" + }, + { + "name": "pEntrypoint", + "type": "LPCSTR" + }, + { + "name": "pTarget", + "type": "LPCSTR" + }, + { + "name": "Flags1", + "type": "UINT" + }, + { + "name": "Flags2", + "type": "UINT" + }, + { + "name": "SecondaryDataFlags", + "type": "UINT" + }, + { + "name": "pSecondaryData", + "type": "LPCVOID" + }, + { + "name": "SecondaryDataSize", + "type": "SIZE_T" + }, + { + "name": "ppCode", + "type": "ID3DBlob" + }, + { + "name": "ppErrorMsgs", + "type": "ID3DBlob" + } + ], + "D3DCompileFromFile": [ + { + "name": "pFileName", + "type": "LPCWSTR" + }, + { + "name": "pDefines", + "type": "D3D_SHADER_MACRO" + }, + { + "name": "pInclude", + "type": "ID3DInclude" + }, + { + "name": "pEntrypoint", + "type": "LPCSTR" + }, + { + "name": "pTarget", + "type": "LPCSTR" + }, + { + "name": "Flags1", + "type": "UINT" + }, + { + "name": "Flags2", + "type": "UINT" + }, + { + "name": "ppCode", + "type": "ID3DBlob" + }, + { + "name": "ppErrorMsgs", + "type": "ID3DBlob" + } + ], + "D3DPreprocess": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "pSourceName", + "type": "LPCSTR" + }, + { + "name": "pDefines", + "type": "D3D_SHADER_MACRO" + }, + { + "name": "pInclude", + "type": "ID3DInclude" + }, + { + "name": "ppCodeText", + "type": "ID3DBlob" + }, + { + "name": "ppErrorMsgs", + "type": "ID3DBlob" + } + ], + "D3DGetDebugInfo": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "ppDebugInfo", + "type": "ID3DBlob" + } + ], + "D3DReflect": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "pInterface", + "type": "IID" + }, + { + "name": "ppReflector", + "type": "void" + } + ], + "D3DReflectLibrary": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppReflector", + "type": "LPVOID" + } + ], + "D3DDisassemble": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "szComments", + "type": "LPCSTR" + }, + { + "name": "ppDisassembly", + "type": "ID3DBlob" + } + ], + "D3DDisassembleRegion": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "szComments", + "type": "LPCSTR" + }, + { + "name": "StartByteOffset", + "type": "SIZE_T" + }, + { + "name": "NumInsts", + "type": "SIZE_T" + }, + { + "name": "pFinishByteOffset", + "type": "SIZE_T" + }, + { + "name": "ppDisassembly", + "type": "ID3DBlob" + } + ], + "D3DCreateLinker": [ + { + "name": "ppLinker", + "type": { + "name": "ID3D11Linker", + "data_type": "Struct", + "elements": [] + } + } + ], + "D3DLoadModule": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "cbSrcDataSize", + "type": "SIZE_T" + }, + { + "name": "ppModule", + "type": { + "name": "ID3D11Module", + "data_type": "Struct", + "elements": [] + } + } + ], + "D3DCreateFunctionLinkingGraph": [ + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "ppFunctionLinkingGraph", + "type": { + "name": "ID3D11FunctionLinkingGraph", + "data_type": "Struct", + "elements": [] + } + } + ], + "D3DGetTraceInstructionOffsets": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "StartInstIndex", + "type": "SIZE_T" + }, + { + "name": "NumInsts", + "type": "SIZE_T" + }, + { + "name": "pOffsets", + "type": "SIZE_T" + }, + { + "name": "pTotalInsts", + "type": "SIZE_T" + } + ], + "D3DGetInputSignatureBlob": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "ppSignatureBlob", + "type": "ID3DBlob" + } + ], + "D3DGetOutputSignatureBlob": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "ppSignatureBlob", + "type": "ID3DBlob" + } + ], + "D3DGetInputAndOutputSignatureBlob": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "ppSignatureBlob", + "type": "ID3DBlob" + } + ], + "D3DStripShader": [ + { + "name": "pShaderBytecode", + "type": "LPCVOID" + }, + { + "name": "BytecodeLength", + "type": "SIZE_T" + }, + { + "name": "uStripFlags", + "type": "UINT" + }, + { + "name": "ppStrippedBlob", + "type": "ID3DBlob" + } + ], + "D3DGetBlobPart": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "Part", + "type": "D3D_BLOB_PART" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "ppPart", + "type": "ID3DBlob" + } + ], + "D3DSetBlobPart": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "Part", + "type": "D3D_BLOB_PART" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "pPart", + "type": "LPCVOID" + }, + { + "name": "PartSize", + "type": "SIZE_T" + }, + { + "name": "ppNewShader", + "type": "ID3DBlob" + } + ], + "D3DCreateBlob": [ + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "ppBlob", + "type": "ID3DBlob" + } + ], + "D3DCompressShaders": [ + { + "name": "uNumShaders", + "type": "UINT" + }, + { + "name": "pShaderData", + "type": "D3D_SHADER_DATA" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "ppCompressedData", + "type": "ID3DBlob" + } + ], + "D3DDecompressShaders": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "uNumShaders", + "type": "UINT" + }, + { + "name": "uStartIndex", + "type": "UINT" + }, + { + "name": "pIndices", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "ppShaders", + "type": "ID3DBlob" + }, + { + "name": "pTotalShaders", + "type": "UINT" + } + ], + "D3DDisassemble10Effect": [ + { + "name": "pEffect", + "type": { + "name": "ID3D10Effect", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "ppDisassembly", + "type": "ID3DBlob" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/d3dcompiler_dll.json b/qiling/extensions/windows_sdk/defs/d3dcompiler_dll.json new file mode 100644 index 000000000..75a9dcc36 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/d3dcompiler_dll.json @@ -0,0 +1,48 @@ +{ + "D3DCompile": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "pSourceName", + "type": "LPCSTR" + }, + { + "name": "pDefines", + "type": "D3D_SHADER_MACRO" + }, + { + "name": "pInclude", + "type": "ID3DInclude" + }, + { + "name": "pEntrypoint", + "type": "LPCSTR" + }, + { + "name": "pTarget", + "type": "LPCSTR" + }, + { + "name": "Flags1", + "type": "UINT" + }, + { + "name": "Flags2", + "type": "UINT" + }, + { + "name": "ppCode", + "type": "ID3DBlob" + }, + { + "name": "ppErrorMsgs", + "type": "ID3DBlob" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/davclnt_dll.json b/qiling/extensions/windows_sdk/defs/davclnt_dll.json new file mode 100644 index 000000000..e2c6a9ccd --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/davclnt_dll.json @@ -0,0 +1,48 @@ +{ + "DavGetTheLockOwnerOfTheFile": [ + { + "name": "FileName", + "type": "LPCWSTR" + }, + { + "name": "LockOwnerName", + "type": "PWSTR" + }, + { + "name": "LockOwnerNameLengthInBytes", + "type": "PULONG" + } + ], + "DavInvalidateCache": [ + { + "name": "URLName", + "type": "LPCWSTR" + } + ], + "DavCancelConnectionsToServer": [ + { + "name": "lpName", + "type": "LPWSTR" + }, + { + "name": "fForce", + "type": "BOOL" + } + ], + "DavRegisterAuthCallback": [ + { + "name": "CallBack", + "type": "PFNDAVAUTHCALLBACK" + }, + { + "name": "Version", + "type": "ULONG" + } + ], + "DavUnregisterAuthCallback": [ + { + "name": "hCallback", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/dbghelp_dll.json b/qiling/extensions/windows_sdk/defs/dbghelp_dll.json new file mode 100644 index 000000000..8b4548849 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/dbghelp_dll.json @@ -0,0 +1,3198 @@ +{ + "MiniDumpWriteDump": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ProcessId", + "type": "DWORD" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "DumpType", + "type": "MINIDUMP_TYPE" + }, + { + "name": "ExceptionParam", + "type": "PMINIDUMP_EXCEPTION_INFORMATION" + }, + { + "name": "UserStreamParam", + "type": "PMINIDUMP_USER_STREAM_INFORMATION" + }, + { + "name": "CallbackParam", + "type": "PMINIDUMP_CALLBACK_INFORMATION" + } + ], + "MiniDumpReadDumpStream": [ + { + "name": "BaseOfDump", + "type": "PVOID" + }, + { + "name": "StreamNumber", + "type": "ULONG" + }, + { + "name": "Dir", + "type": "PMINIDUMP_DIRECTORY" + }, + { + "name": "StreamPointer", + "type": "PVOID" + }, + { + "name": "StreamSize", + "type": "ULONG" + } + ], + "SymFindDebugInfoFile": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "DebugFilePath", + "type": "PSTR" + }, + { + "name": "Callback", + "type": "PFIND_DEBUG_FILE_CALLBACK" + }, + { + "name": "CallerData", + "type": "PVOID" + } + ], + "SymFindDebugInfoFileW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "DebugFilePath", + "type": "PWSTR" + }, + { + "name": "Callback", + "type": "PFIND_DEBUG_FILE_CALLBACKW" + }, + { + "name": "CallerData", + "type": "PVOID" + } + ], + "FindDebugInfoFile": [ + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + }, + { + "name": "DebugFilePath", + "type": "PSTR" + } + ], + "FindDebugInfoFileEx": [ + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + }, + { + "name": "DebugFilePath", + "type": "PSTR" + }, + { + "name": "Callback", + "type": "PFIND_DEBUG_FILE_CALLBACK" + }, + { + "name": "CallerData", + "type": "PVOID" + } + ], + "FindDebugInfoFileExW": [ + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "SymbolPath", + "type": "PCWSTR" + }, + { + "name": "DebugFilePath", + "type": "PWSTR" + }, + { + "name": "Callback", + "type": "PFIND_DEBUG_FILE_CALLBACKW" + }, + { + "name": "CallerData", + "type": "PVOID" + } + ], + "SymFindFileInPath": [ + { + "name": "hprocess", + "type": "HANDLE" + }, + { + "name": "SearchPathA", + "type": "PCSTR" + }, + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "id", + "type": "PVOID" + }, + { + "name": "two", + "type": "DWORD" + }, + { + "name": "three", + "type": "DWORD" + }, + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "FoundFile", + "type": "PSTR" + }, + { + "name": "callback", + "type": "PFINDFILEINPATHCALLBACK" + }, + { + "name": "context", + "type": "PVOID" + } + ], + "SymFindFileInPathW": [ + { + "name": "hprocess", + "type": "HANDLE" + }, + { + "name": "SearchPathA", + "type": "PCWSTR" + }, + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "id", + "type": "PVOID" + }, + { + "name": "two", + "type": "DWORD" + }, + { + "name": "three", + "type": "DWORD" + }, + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "FoundFile", + "type": "PWSTR" + }, + { + "name": "callback", + "type": "PFINDFILEINPATHCALLBACKW" + }, + { + "name": "context", + "type": "PVOID" + } + ], + "SymFindExecutableImage": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "ImageFilePath", + "type": "PSTR" + }, + { + "name": "Callback", + "type": "PFIND_EXE_FILE_CALLBACK" + }, + { + "name": "CallerData", + "type": "PVOID" + } + ], + "SymFindExecutableImageW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "ImageFilePath", + "type": "PWSTR" + }, + { + "name": "Callback", + "type": "PFIND_EXE_FILE_CALLBACKW" + }, + { + "name": "CallerData", + "type": "PVOID" + } + ], + "FindExecutableImage": [ + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + }, + { + "name": "ImageFilePath", + "type": "PSTR" + } + ], + "FindExecutableImageEx": [ + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + }, + { + "name": "ImageFilePath", + "type": "PSTR" + }, + { + "name": "Callback", + "type": "PFIND_EXE_FILE_CALLBACK" + }, + { + "name": "CallerData", + "type": "PVOID" + } + ], + "FindExecutableImageExW": [ + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "SymbolPath", + "type": "PCWSTR" + }, + { + "name": "ImageFilePath", + "type": "PWSTR" + }, + { + "name": "Callback", + "type": "PFIND_EXE_FILE_CALLBACKW" + }, + { + "name": "CallerData", + "type": "PVOID" + } + ], + "ImageNtHeader": [ + { + "name": "Base", + "type": "PVOID" + } + ], + "ImageDirectoryEntryToDataEx": [ + { + "name": "Base", + "type": "PVOID" + }, + { + "name": "MappedAsImage", + "type": "BOOLEAN" + }, + { + "name": "DirectoryEntry", + "type": "USHORT" + }, + { + "name": "Size", + "type": "PULONG" + }, + { + "name": "FoundHeader", + "type": "PIMAGE_SECTION_HEADER" + } + ], + "ImageDirectoryEntryToData": [ + { + "name": "Base", + "type": "PVOID" + }, + { + "name": "MappedAsImage", + "type": "BOOLEAN" + }, + { + "name": "DirectoryEntry", + "type": "USHORT" + }, + { + "name": "Size", + "type": "PULONG" + } + ], + "ImageRvaToSection": [ + { + "name": "NtHeaders", + "type": "PIMAGE_NT_HEADERS" + }, + { + "name": "Base", + "type": "PVOID" + }, + { + "name": "Rva", + "type": "ULONG" + } + ], + "ImageRvaToVa": [ + { + "name": "NtHeaders", + "type": "PIMAGE_NT_HEADERS" + }, + { + "name": "Base", + "type": "PVOID" + }, + { + "name": "Rva", + "type": "ULONG" + }, + { + "name": "LastRvaSection", + "type": "PIMAGE_SECTION_HEADER" + } + ], + "SearchTreeForFile": [ + { + "name": "RootPath", + "type": "PCSTR" + }, + { + "name": "InputPathName", + "type": "PCSTR" + }, + { + "name": "OutputPathBuffer", + "type": "PSTR" + } + ], + "SearchTreeForFileW": [ + { + "name": "RootPath", + "type": "PCWSTR" + }, + { + "name": "InputPathName", + "type": "PCWSTR" + }, + { + "name": "OutputPathBuffer", + "type": "PWSTR" + } + ], + "EnumDirTree": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "RootPath", + "type": "PCSTR" + }, + { + "name": "InputPathName", + "type": "PCSTR" + }, + { + "name": "OutputPathBuffer", + "type": "PSTR" + }, + { + "name": "cb", + "type": "PENUMDIRTREE_CALLBACK" + }, + { + "name": "data", + "type": "PVOID" + } + ], + "EnumDirTreeW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "RootPath", + "type": "PCWSTR" + }, + { + "name": "InputPathName", + "type": "PCWSTR" + }, + { + "name": "OutputPathBuffer", + "type": "PWSTR" + }, + { + "name": "cb", + "type": "PENUMDIRTREE_CALLBACKW" + }, + { + "name": "data", + "type": "PVOID" + } + ], + "MakeSureDirectoryPathExists": [ + { + "name": "DirPath", + "type": "PCSTR" + } + ], + "UnDecorateSymbolName": [ + { + "name": "name", + "type": "PCSTR" + }, + { + "name": "outputString", + "type": "PSTR" + }, + { + "name": "maxStringLength", + "type": "DWORD" + }, + { + "name": "flags", + "type": "DWORD" + } + ], + "UnDecorateSymbolNameW": [ + { + "name": "name", + "type": "PCWSTR" + }, + { + "name": "outputString", + "type": "PWSTR" + }, + { + "name": "maxStringLength", + "type": "DWORD" + }, + { + "name": "flags", + "type": "DWORD" + } + ], + "StackWalk64": [ + { + "name": "MachineType", + "type": "DWORD" + }, + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "StackFrame", + "type": "LPSTACKFRAME64" + }, + { + "name": "ContextRecord", + "type": "PVOID" + }, + { + "name": "ReadMemoryRoutine", + "type": "PREAD_PROCESS_MEMORY_ROUTINE64" + }, + { + "name": "FunctionTableAccessRoutine", + "type": "PFUNCTION_TABLE_ACCESS_ROUTINE64" + }, + { + "name": "GetModuleBaseRoutine", + "type": "PGET_MODULE_BASE_ROUTINE64" + }, + { + "name": "TranslateAddress", + "type": "PTRANSLATE_ADDRESS_ROUTINE64" + } + ], + "StackWalkEx": [ + { + "name": "MachineType", + "type": "DWORD" + }, + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "StackFrame", + "type": "LPSTACKFRAME_EX" + }, + { + "name": "ContextRecord", + "type": "PVOID" + }, + { + "name": "ReadMemoryRoutine", + "type": "PREAD_PROCESS_MEMORY_ROUTINE64" + }, + { + "name": "FunctionTableAccessRoutine", + "type": "PFUNCTION_TABLE_ACCESS_ROUTINE64" + }, + { + "name": "GetModuleBaseRoutine", + "type": "PGET_MODULE_BASE_ROUTINE64" + }, + { + "name": "TranslateAddress", + "type": "PTRANSLATE_ADDRESS_ROUTINE64" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "ImagehlpApiVersion": [ + { + "name": "VOID", + "type": "void" + } + ], + "ImagehlpApiVersionEx": [ + { + "name": "AppVersion", + "type": "LPAPI_VERSION" + } + ], + "GetTimestampForLoadedLibrary": [ + { + "name": "Module", + "type": "HMODULE" + } + ], + "SymSetParentWindow": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "SymSetHomeDirectory": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dir", + "type": "PCSTR" + } + ], + "SymSetHomeDirectoryW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dir", + "type": "PCWSTR" + } + ], + "SymGetHomeDirectory": [ + { + "name": "type", + "type": "DWORD" + }, + { + "name": "dir", + "type": "PSTR" + }, + { + "name": "size", + "type": "size_t" + } + ], + "SymGetHomeDirectoryW": [ + { + "name": "type", + "type": "DWORD" + }, + { + "name": "dir", + "type": "PWSTR" + }, + { + "name": "size", + "type": "size_t" + } + ], + "SymGetOmaps": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "DWORD64" + }, + { + "name": "OmapTo", + "type": "POMAP" + }, + { + "name": "cOmapTo", + "type": "PDWORD64" + }, + { + "name": "OmapFrom", + "type": "POMAP" + }, + { + "name": "cOmapFrom", + "type": "PDWORD64" + } + ], + "SymSetOptions": [ + { + "name": "SymOptions", + "type": "DWORD" + } + ], + "SymGetOptions": [ + { + "name": "VOID", + "type": "void" + } + ], + "SymCleanup": [ + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "SymGetExtendedOption": [ + { + "name": "option", + "type": "IMAGEHLP_EXTENDED_OPTIONS" + } + ], + "SymSetExtendedOption": [ + { + "name": "option", + "type": "IMAGEHLP_EXTENDED_OPTIONS" + }, + { + "name": "value", + "type": "BOOL" + } + ], + "SymMatchString": [ + { + "name": "string", + "type": "PCSTR" + }, + { + "name": "expression", + "type": "PCSTR" + }, + { + "name": "fCase", + "type": "BOOL" + } + ], + "SymMatchStringW": [ + { + "name": "string", + "type": "PCWSTR" + }, + { + "name": "expression", + "type": "PCWSTR" + }, + { + "name": "fCase", + "type": "BOOL" + } + ], + "SymEnumSourceFiles": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ModBase", + "type": "ULONG64" + }, + { + "name": "Mask", + "type": "PCSTR" + }, + { + "name": "cbSrcFiles", + "type": "PSYM_ENUMSOURCEFILES_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumSourceFilesW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ModBase", + "type": "ULONG64" + }, + { + "name": "Mask", + "type": "PCWSTR" + }, + { + "name": "cbSrcFiles", + "type": "PSYM_ENUMSOURCEFILES_CALLBACKW" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumerateModules64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "EnumModulesCallback", + "type": "PSYM_ENUMMODULES_CALLBACK64" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumerateModulesW64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "EnumModulesCallback", + "type": "PSYM_ENUMMODULES_CALLBACKW64" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "EnumerateLoadedModulesEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "EnumLoadedModulesCallback", + "type": "PENUMLOADED_MODULES_CALLBACK64" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "EnumerateLoadedModulesExW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "EnumLoadedModulesCallback", + "type": "PENUMLOADED_MODULES_CALLBACKW64" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "EnumerateLoadedModules64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "EnumLoadedModulesCallback", + "type": "PENUMLOADED_MODULES_CALLBACK64" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "EnumerateLoadedModulesW64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "EnumLoadedModulesCallback", + "type": "PENUMLOADED_MODULES_CALLBACKW64" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymFunctionTableAccess64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "AddrBase", + "type": "DWORD64" + } + ], + "SymFunctionTableAccess64AccessRoutines": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "AddrBase", + "type": "DWORD64" + }, + { + "name": "ReadMemoryRoutine", + "type": "PREAD_PROCESS_MEMORY_ROUTINE64" + }, + { + "name": "GetModuleBaseRoutine", + "type": "PGET_MODULE_BASE_ROUTINE64" + } + ], + "SymGetModuleInfo64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "qwAddr", + "type": "DWORD64" + }, + { + "name": "ModuleInfo", + "type": "PIMAGEHLP_MODULE64" + } + ], + "SymGetModuleInfoW64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "qwAddr", + "type": "DWORD64" + }, + { + "name": "ModuleInfo", + "type": "PIMAGEHLP_MODULEW64" + } + ], + "SymGetModuleBase64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "qwAddr", + "type": "DWORD64" + } + ], + "SymEnumLines": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "Obj", + "type": "PCSTR" + }, + { + "name": "File", + "type": "PCSTR" + }, + { + "name": "EnumLinesCallback", + "type": "PSYM_ENUMLINES_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumLinesW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "Obj", + "type": "PCWSTR" + }, + { + "name": "File", + "type": "PCWSTR" + }, + { + "name": "EnumLinesCallback", + "type": "PSYM_ENUMLINES_CALLBACKW" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymGetLineFromAddr64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "qwAddr", + "type": "DWORD64" + }, + { + "name": "pdwDisplacement", + "type": "PDWORD" + }, + { + "name": "Line64", + "type": "PIMAGEHLP_LINE64" + } + ], + "SymGetLineFromAddrW64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwAddr", + "type": "DWORD64" + }, + { + "name": "pdwDisplacement", + "type": "PDWORD" + }, + { + "name": "Line", + "type": "PIMAGEHLP_LINEW64" + } + ], + "SymGetLineFromInlineContext": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "qwAddr", + "type": "DWORD64" + }, + { + "name": "InlineContext", + "type": "ULONG" + }, + { + "name": "qwModuleBaseAddress", + "type": "DWORD64" + }, + { + "name": "pdwDisplacement", + "type": "PDWORD" + }, + { + "name": "Line64", + "type": "PIMAGEHLP_LINE64" + } + ], + "SymGetLineFromInlineContextW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwAddr", + "type": "DWORD64" + }, + { + "name": "InlineContext", + "type": "ULONG" + }, + { + "name": "qwModuleBaseAddress", + "type": "DWORD64" + }, + { + "name": "pdwDisplacement", + "type": "PDWORD" + }, + { + "name": "Line", + "type": "PIMAGEHLP_LINEW64" + } + ], + "SymEnumSourceLines": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "Obj", + "type": "PCSTR" + }, + { + "name": "File", + "type": "PCSTR" + }, + { + "name": "Line", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "EnumLinesCallback", + "type": "PSYM_ENUMLINES_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumSourceLinesW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "Obj", + "type": "PCWSTR" + }, + { + "name": "File", + "type": "PCWSTR" + }, + { + "name": "Line", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "EnumLinesCallback", + "type": "PSYM_ENUMLINES_CALLBACKW" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymAddrIncludeInlineTrace": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address", + "type": "DWORD64" + } + ], + "SymCompareInlineTrace": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address1", + "type": "DWORD64" + }, + { + "name": "InlineContext1", + "type": "DWORD" + }, + { + "name": "RetAddress1", + "type": "DWORD64" + }, + { + "name": "Address2", + "type": "DWORD64" + }, + { + "name": "RetAddress2", + "type": "DWORD64" + } + ], + "SymQueryInlineTrace": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "StartAddress", + "type": "DWORD64" + }, + { + "name": "StartContext", + "type": "DWORD" + }, + { + "name": "StartRetAddress", + "type": "DWORD64" + }, + { + "name": "CurAddress", + "type": "DWORD64" + }, + { + "name": "CurContext", + "type": "LPDWORD" + }, + { + "name": "CurFrameIndex", + "type": "LPDWORD" + } + ], + "SymGetLineFromName64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ModuleName", + "type": "PCSTR" + }, + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "dwLineNumber", + "type": "DWORD" + }, + { + "name": "plDisplacement", + "type": "PLONG" + }, + { + "name": "Line", + "type": "PIMAGEHLP_LINE64" + } + ], + "SymGetLineFromNameW64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ModuleName", + "type": "PCWSTR" + }, + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "dwLineNumber", + "type": "DWORD" + }, + { + "name": "plDisplacement", + "type": "PLONG" + }, + { + "name": "Line", + "type": "PIMAGEHLP_LINEW64" + } + ], + "SymGetLineNext64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Line", + "type": "PIMAGEHLP_LINE64" + } + ], + "SymGetLineNextW64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Line", + "type": "PIMAGEHLP_LINEW64" + } + ], + "SymGetLinePrev64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Line", + "type": "PIMAGEHLP_LINE64" + } + ], + "SymGetLinePrevW64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Line", + "type": "PIMAGEHLP_LINEW64" + } + ], + "SymGetFileLineOffsets64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ModuleName", + "type": "PCSTR" + }, + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "Buffer", + "type": "PDWORD64" + }, + { + "name": "BufferLines", + "type": "ULONG" + } + ], + "SymMatchFileName": [ + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "Match", + "type": "PCSTR" + }, + { + "name": "FileNameStop", + "type": "PSTR" + }, + { + "name": "MatchStop", + "type": "PSTR" + } + ], + "SymMatchFileNameW": [ + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "Match", + "type": "PCWSTR" + }, + { + "name": "FileNameStop", + "type": "PWSTR" + }, + { + "name": "MatchStop", + "type": "PWSTR" + } + ], + "SymGetSourceFile": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "Params", + "type": "PCSTR" + }, + { + "name": "FileSpec", + "type": "PCSTR" + }, + { + "name": "FilePath", + "type": "PSTR" + }, + { + "name": "Size", + "type": "DWORD" + } + ], + "SymGetSourceFileW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "Params", + "type": "PCWSTR" + }, + { + "name": "FileSpec", + "type": "PCWSTR" + }, + { + "name": "FilePath", + "type": "PWSTR" + }, + { + "name": "Size", + "type": "DWORD" + } + ], + "SymGetSourceFileToken": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "FileSpec", + "type": "PCSTR" + }, + { + "name": "Token", + "type": "PVOID" + }, + { + "name": "Size", + "type": "DWORD" + } + ], + "SymGetSourceFileChecksumW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "FileSpec", + "type": "PCWSTR" + }, + { + "name": "pCheckSumType", + "type": "DWORD" + }, + { + "name": "pChecksum", + "type": "BYTE" + }, + { + "name": "checksumSize", + "type": "DWORD" + }, + { + "name": "pActualBytesWritten", + "type": "DWORD" + } + ], + "SymGetSourceFileChecksum": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "FileSpec", + "type": "PCSTR" + }, + { + "name": "pCheckSumType", + "type": "DWORD" + }, + { + "name": "pChecksum", + "type": "BYTE" + }, + { + "name": "checksumSize", + "type": "DWORD" + }, + { + "name": "pActualBytesWritten", + "type": "DWORD" + } + ], + "SymGetSourceFileTokenW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "FileSpec", + "type": "PCWSTR" + }, + { + "name": "Token", + "type": "PVOID" + }, + { + "name": "Size", + "type": "DWORD" + } + ], + "SymGetSourceFileFromToken": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Token", + "type": "PVOID" + }, + { + "name": "Params", + "type": "PCSTR" + }, + { + "name": "FilePath", + "type": "PSTR" + }, + { + "name": "Size", + "type": "DWORD" + } + ], + "SymGetSourceFileFromTokenW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Token", + "type": "PVOID" + }, + { + "name": "Params", + "type": "PCWSTR" + }, + { + "name": "FilePath", + "type": "PWSTR" + }, + { + "name": "Size", + "type": "DWORD" + } + ], + "SymGetSourceVarFromToken": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Token", + "type": "PVOID" + }, + { + "name": "Params", + "type": "PCSTR" + }, + { + "name": "VarName", + "type": "PCSTR" + }, + { + "name": "Value", + "type": "PSTR" + }, + { + "name": "Size", + "type": "DWORD" + } + ], + "SymGetSourceVarFromTokenW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Token", + "type": "PVOID" + }, + { + "name": "Params", + "type": "PCWSTR" + }, + { + "name": "VarName", + "type": "PCWSTR" + }, + { + "name": "Value", + "type": "PWSTR" + }, + { + "name": "Size", + "type": "DWORD" + } + ], + "SymEnumSourceFileTokens": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "Callback", + "type": "PENUMSOURCEFILETOKENSCALLBACK" + } + ], + "SymInitialize": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "UserSearchPath", + "type": "PCSTR" + }, + { + "name": "fInvadeProcess", + "type": "BOOL" + } + ], + "SymInitializeW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "UserSearchPath", + "type": "PCWSTR" + }, + { + "name": "fInvadeProcess", + "type": "BOOL" + } + ], + "SymGetSearchPath": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SearchPathA", + "type": "PSTR" + }, + { + "name": "SearchPathLength", + "type": "DWORD" + } + ], + "SymGetSearchPathW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SearchPathA", + "type": "PWSTR" + }, + { + "name": "SearchPathLength", + "type": "DWORD" + } + ], + "SymSetSearchPath": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SearchPathA", + "type": "PCSTR" + } + ], + "SymSetSearchPathW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SearchPathA", + "type": "PCWSTR" + } + ], + "SymLoadModuleEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "ImageName", + "type": "PCSTR" + }, + { + "name": "ModuleName", + "type": "PCSTR" + }, + { + "name": "BaseOfDll", + "type": "DWORD64" + }, + { + "name": "DllSize", + "type": "DWORD" + }, + { + "name": "Data", + "type": "PMODLOAD_DATA" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymLoadModuleExW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "ImageName", + "type": "PCWSTR" + }, + { + "name": "ModuleName", + "type": "PCWSTR" + }, + { + "name": "BaseOfDll", + "type": "DWORD64" + }, + { + "name": "DllSize", + "type": "DWORD" + }, + { + "name": "Data", + "type": "PMODLOAD_DATA" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymUnloadModule64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "DWORD64" + } + ], + "SymUnDName64": [ + { + "name": "sym", + "type": "PIMAGEHLP_SYMBOL64" + }, + { + "name": "UnDecName", + "type": "PSTR" + }, + { + "name": "UnDecNameLength", + "type": "DWORD" + } + ], + "SymRegisterCallback64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "CallbackFunction", + "type": "PSYMBOL_REGISTERED_CALLBACK64" + }, + { + "name": "UserContext", + "type": "ULONG64" + } + ], + "SymRegisterCallbackW64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "CallbackFunction", + "type": "PSYMBOL_REGISTERED_CALLBACK64" + }, + { + "name": "UserContext", + "type": "ULONG64" + } + ], + "SymRegisterFunctionEntryCallback64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "CallbackFunction", + "type": "PSYMBOL_FUNCENTRY_CALLBACK64" + }, + { + "name": "UserContext", + "type": "ULONG64" + } + ], + "SymSetContext": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "StackFrame", + "type": "PIMAGEHLP_STACK_FRAME" + }, + { + "name": "Context", + "type": "PIMAGEHLP_CONTEXT" + } + ], + "SymSetScopeFromAddr": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address", + "type": "ULONG64" + } + ], + "SymSetScopeFromInlineContext": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address", + "type": "ULONG64" + }, + { + "name": "InlineContext", + "type": "ULONG" + } + ], + "SymSetScopeFromIndex": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Index", + "type": "DWORD" + } + ], + "SymEnumProcesses": [ + { + "name": "EnumProcessesCallback", + "type": "PSYM_ENUMPROCESSES_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymFromAddr": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "Displacement", + "type": "PDWORD64" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFO" + } + ], + "SymFromAddrW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "Displacement", + "type": "PDWORD64" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFOW" + } + ], + "SymFromInlineContext": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "InlineContext", + "type": "ULONG" + }, + { + "name": "Displacement", + "type": "PDWORD64" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFO" + } + ], + "SymFromInlineContextW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "InlineContext", + "type": "ULONG" + }, + { + "name": "Displacement", + "type": "PDWORD64" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFOW" + } + ], + "SymFromToken": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "DWORD64" + }, + { + "name": "Token", + "type": "DWORD" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFO" + } + ], + "SymFromTokenW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "DWORD64" + }, + { + "name": "Token", + "type": "DWORD" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFOW" + } + ], + "SymNext": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "si", + "type": "PSYMBOL_INFO" + } + ], + "SymNextW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "siw", + "type": "PSYMBOL_INFOW" + } + ], + "SymPrev": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "si", + "type": "PSYMBOL_INFO" + } + ], + "SymPrevW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "siw", + "type": "PSYMBOL_INFOW" + } + ], + "SymFromName": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Name", + "type": "PCSTR" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFO" + } + ], + "SymFromNameW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Name", + "type": "PCWSTR" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFOW" + } + ], + "SymEnumSymbols": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Mask", + "type": "PCSTR" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumSymbolsEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Mask", + "type": "PCSTR" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "SymEnumSymbolsW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Mask", + "type": "PCWSTR" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACKW" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumSymbolsExW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Mask", + "type": "PCWSTR" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACKW" + }, + { + "name": "UserContext", + "type": "PVOID" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "SymEnumSymbolsForAddr": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumSymbolsForAddrW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACKW" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymSearch": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "SymTag", + "type": "DWORD" + }, + { + "name": "Mask", + "type": "PCSTR" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "SymSearchW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "SymTag", + "type": "DWORD" + }, + { + "name": "Mask", + "type": "PCWSTR" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACKW" + }, + { + "name": "UserContext", + "type": "PVOID" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "SymGetScope": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFO" + } + ], + "SymGetScopeW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFOW" + } + ], + "SymFromIndex": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFO" + } + ], + "SymFromIndexW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFOW" + } + ], + "SymGetTypeInfo": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ModBase", + "type": "DWORD64" + }, + { + "name": "TypeId", + "type": "ULONG" + }, + { + "name": "GetType", + "type": "IMAGEHLP_SYMBOL_TYPE_INFO" + }, + { + "name": "pInfo", + "type": "PVOID" + } + ], + "SymGetTypeInfoEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ModBase", + "type": "DWORD64" + }, + { + "name": "Params", + "type": "PIMAGEHLP_GET_TYPE_INFO_PARAMS" + } + ], + "SymEnumTypes": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumTypesW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACKW" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumTypesByName": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "mask", + "type": "PCSTR" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumTypesByNameW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "mask", + "type": "PCWSTR" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACKW" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymGetTypeFromName": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Name", + "type": "PCSTR" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFO" + } + ], + "SymGetTypeFromNameW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Name", + "type": "PCWSTR" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFOW" + } + ], + "SymAddSymbol": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Name", + "type": "PCSTR" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "Size", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymAddSymbolW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Name", + "type": "PCWSTR" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "Size", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymDeleteSymbol": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Name", + "type": "PCSTR" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymDeleteSymbolW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Name", + "type": "PCWSTR" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymRefreshModuleList": [ + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "SymAddSourceStream": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "StreamFile", + "type": "PCSTR" + }, + { + "name": "Buffer", + "type": "PBYTE" + }, + { + "name": "Size", + "type": "size_t" + } + ], + "SymAddSourceStreamW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "FileSpec", + "type": "PCWSTR" + }, + { + "name": "Buffer", + "type": "PBYTE" + }, + { + "name": "Size", + "type": "size_t" + } + ], + "SymSrvIsStoreW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "path", + "type": "PCWSTR" + } + ], + "SymSrvIsStore": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "path", + "type": "PCSTR" + } + ], + "SymSrvDeltaName": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SymPath", + "type": "PCSTR" + }, + { + "name": "Type", + "type": "PCSTR" + }, + { + "name": "File1", + "type": "PCSTR" + }, + { + "name": "File2", + "type": "PCSTR" + } + ], + "SymSrvDeltaNameW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SymPath", + "type": "PCWSTR" + }, + { + "name": "Type", + "type": "PCWSTR" + }, + { + "name": "File1", + "type": "PCWSTR" + }, + { + "name": "File2", + "type": "PCWSTR" + } + ], + "SymSrvGetSupplement": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SymPath", + "type": "PCSTR" + }, + { + "name": "Node", + "type": "PCSTR" + }, + { + "name": "File", + "type": "PCSTR" + } + ], + "SymSrvGetSupplementW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SymPath", + "type": "PCWSTR" + }, + { + "name": "Node", + "type": "PCWSTR" + }, + { + "name": "File", + "type": "PCWSTR" + } + ], + "SymSrvGetFileIndexes": [ + { + "name": "File", + "type": "PCSTR" + }, + { + "name": "Id", + "type": "GUID" + }, + { + "name": "Val1", + "type": "PDWORD" + }, + { + "name": "Val2", + "type": "PDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymSrvGetFileIndexesW": [ + { + "name": "File", + "type": "PCWSTR" + }, + { + "name": "Id", + "type": "GUID" + }, + { + "name": "Val1", + "type": "PDWORD" + }, + { + "name": "Val2", + "type": "PDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymSrvGetFileIndexStringW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SrvPath", + "type": "PCWSTR" + }, + { + "name": "File", + "type": "PCWSTR" + }, + { + "name": "Index", + "type": "PWSTR" + }, + { + "name": "Size", + "type": "size_t" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymSrvGetFileIndexString": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SrvPath", + "type": "PCSTR" + }, + { + "name": "File", + "type": "PCSTR" + }, + { + "name": "Index", + "type": "PSTR" + }, + { + "name": "Size", + "type": "size_t" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymSrvGetFileIndexInfo": [ + { + "name": "File", + "type": "PCSTR" + }, + { + "name": "Info", + "type": "PSYMSRV_INDEX_INFO" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymSrvGetFileIndexInfoW": [ + { + "name": "File", + "type": "PCWSTR" + }, + { + "name": "Info", + "type": "PSYMSRV_INDEX_INFOW" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymSrvStoreSupplement": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SrvPath", + "type": "PCSTR" + }, + { + "name": "Node", + "type": "PCSTR" + }, + { + "name": "File", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymSrvStoreSupplementW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SymPath", + "type": "PCWSTR" + }, + { + "name": "Node", + "type": "PCWSTR" + }, + { + "name": "File", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymSrvStoreFile": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SrvPath", + "type": "PCSTR" + }, + { + "name": "File", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymSrvStoreFileW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SrvPath", + "type": "PCWSTR" + }, + { + "name": "File", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymGetSymbolFile": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SymPath", + "type": "PCSTR" + }, + { + "name": "ImageFile", + "type": "PCSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "SymbolFile", + "type": "PSTR" + }, + { + "name": "cSymbolFile", + "type": "size_t" + }, + { + "name": "DbgFile", + "type": "PSTR" + }, + { + "name": "cDbgFile", + "type": "size_t" + } + ], + "SymGetSymbolFileW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SymPath", + "type": "PCWSTR" + }, + { + "name": "ImageFile", + "type": "PCWSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "SymbolFile", + "type": "PWSTR" + }, + { + "name": "cSymbolFile", + "type": "size_t" + }, + { + "name": "DbgFile", + "type": "PWSTR" + }, + { + "name": "cDbgFile", + "type": "size_t" + } + ], + "SymGetSymFromAddr64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "qwAddr", + "type": "DWORD64" + }, + { + "name": "pdwDisplacement", + "type": "PDWORD64" + }, + { + "name": "Symbol", + "type": "PIMAGEHLP_SYMBOL64" + } + ], + "SymGetSymFromName64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Name", + "type": "PCSTR" + }, + { + "name": "Symbol", + "type": "PIMAGEHLP_SYMBOL64" + } + ], + "SymEnumerateSymbols64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMSYMBOLS_CALLBACK64" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumerateSymbolsW64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMSYMBOLS_CALLBACK64W" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymLoadModule64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "ImageName", + "type": "PCSTR" + }, + { + "name": "ModuleName", + "type": "PCSTR" + }, + { + "name": "BaseOfDll", + "type": "DWORD64" + }, + { + "name": "SizeOfDll", + "type": "DWORD" + } + ], + "SymGetSymNext64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Symbol", + "type": "PIMAGEHLP_SYMBOL64" + } + ], + "SymGetSymPrev64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Symbol", + "type": "PIMAGEHLP_SYMBOL64" + } + ], + "GetSymLoadError": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetSymLoadError": [ + { + "name": "error", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/dciman32_dll.json b/qiling/extensions/windows_sdk/defs/dciman32_dll.json new file mode 100644 index 000000000..1bf6a920e --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/dciman32_dll.json @@ -0,0 +1,58 @@ +{ + "DCIOpenProvider": [ + { + "name": "VOID", + "type": "void" + } + ], + "DCICloseProvider": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "DCICreatePrimary": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lplpSurface", + "type": "LPDCISURFACEINFO" + } + ], + "DCIEndAccess": [ + { + "name": "pdci", + "type": "LPDCISURFACEINFO" + } + ], + "DCIBeginAccess": [ + { + "name": "pdci", + "type": "LPDCISURFACEINFO" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + } + ], + "DCIDestroy": [ + { + "name": "pdci", + "type": "LPDCISURFACEINFO" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/ddraw_dll.json b/qiling/extensions/windows_sdk/defs/ddraw_dll.json new file mode 100644 index 000000000..b6f57967a --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/ddraw_dll.json @@ -0,0 +1,86 @@ +{ + "DirectDrawEnumerateW": [ + { + "name": "lpCallback", + "type": "LPDDENUMCALLBACKW" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "DirectDrawEnumerateExW": [ + { + "name": "lpCallback", + "type": "LPDDENUMCALLBACKEXW" + }, + { + "name": "lpContext", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "DirectDrawEnumerateExA": [ + { + "name": "lpCallback", + "type": "LPDDENUMCALLBACKEXA" + }, + { + "name": "lpContext", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "DirectDrawCreate": [ + { + "name": "lpGUID", + "type": "GUID" + }, + { + "name": "lplpDD", + "type": "LPDIRECTDRAW" + }, + { + "name": "pUnkOuter", + "type": "IUnknown" + } + ], + "DirectDrawCreateEx": [ + { + "name": "lpGuid", + "type": "GUID" + }, + { + "name": "lplpDD", + "type": "LPVOID" + }, + { + "name": "iid", + "type": "IID" + }, + { + "name": "pUnkOuter", + "type": "IUnknown" + } + ], + "DirectDrawCreateClipper": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lplpDDClipper", + "type": "LPDIRECTDRAWCLIPPER" + }, + { + "name": "pUnkOuter", + "type": "IUnknown" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/deviceaccess_dll.json b/qiling/extensions/windows_sdk/defs/deviceaccess_dll.json new file mode 100644 index 000000000..c457b3f9d --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/deviceaccess_dll.json @@ -0,0 +1,16 @@ +{ + "CreateDeviceAccessInstance": [ + { + "name": "deviceInterfacePath", + "type": "PCWSTR" + }, + { + "name": "desiredAccess", + "type": "DWORD" + }, + { + "name": "createAsync", + "type": "ICreateDeviceAccessAsync" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/dflayout_dll.json b/qiling/extensions/windows_sdk/defs/dflayout_dll.json new file mode 100644 index 000000000..e3449d84d --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/dflayout_dll.json @@ -0,0 +1,20 @@ +{ + "StgOpenLayoutDocfile": [ + { + "name": "pwcsDfName", + "type": "OLECHAR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/dhcpcsvc6_dll.json b/qiling/extensions/windows_sdk/defs/dhcpcsvc6_dll.json new file mode 100644 index 000000000..f7e1fdafc --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/dhcpcsvc6_dll.json @@ -0,0 +1,86 @@ +{ + "Dhcpv6RequestParams": [ + { + "name": "forceNewInform", + "type": "BOOL" + }, + { + "name": "reserved", + "type": "LPVOID" + }, + { + "name": "adapterName", + "type": "LPWSTR" + }, + { + "name": "classId", + "type": "LPDHCPV6CAPI_CLASSID" + }, + { + "name": "recdParams", + "type": "DHCPV6CAPI_PARAMS_ARRAY" + }, + { + "name": "buffer", + "type": "LPBYTE" + }, + { + "name": "pSize", + "type": "LPDWORD" + } + ], + "Dhcpv6RequestPrefix": [ + { + "name": "adapterName", + "type": "LPWSTR" + }, + { + "name": "pclassId", + "type": "LPDHCPV6CAPI_CLASSID" + }, + { + "name": "prefixleaseInfo", + "type": "LPDHCPV6PrefixLeaseInformation" + }, + { + "name": "pdwTimeToWait", + "type": "DWORD" + } + ], + "Dhcpv6RenewPrefix": [ + { + "name": "adapterName", + "type": "LPWSTR" + }, + { + "name": "pclassId", + "type": "LPDHCPV6CAPI_CLASSID" + }, + { + "name": "prefixleaseInfo", + "type": "LPDHCPV6PrefixLeaseInformation" + }, + { + "name": "pdwTimeToWait", + "type": "DWORD" + }, + { + "name": "bValidatePrefix", + "type": "DWORD" + } + ], + "Dhcpv6ReleasePrefix": [ + { + "name": "adapterName", + "type": "LPWSTR" + }, + { + "name": "classId", + "type": "LPDHCPV6CAPI_CLASSID" + }, + { + "name": "leaseInfo", + "type": "LPDHCPV6PrefixLeaseInformation" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/dhcpcsvc_dll.json b/qiling/extensions/windows_sdk/defs/dhcpcsvc_dll.json new file mode 100644 index 000000000..53e6c80be --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/dhcpcsvc_dll.json @@ -0,0 +1,116 @@ +{ + "DhcpCApiInitialize": [ + { + "name": "Version", + "type": "LPDWORD" + } + ], + "DhcpCApiCleanup": [ + { + "name": "VOID", + "type": "void" + } + ], + "DhcpRequestParams": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "LPVOID" + }, + { + "name": "AdapterName", + "type": "LPWSTR" + }, + { + "name": "ClassId", + "type": "LPDHCPCAPI_CLASSID" + }, + { + "name": "SendParams", + "type": "DHCPCAPI_PARAMS_ARRAY" + }, + { + "name": "RecdParams", + "type": "DHCPCAPI_PARAMS_ARRAY" + }, + { + "name": "Buffer", + "type": "LPBYTE" + }, + { + "name": "pSize", + "type": "LPDWORD" + }, + { + "name": "RequestIdStr", + "type": "LPWSTR" + } + ], + "DhcpUndoRequestParams": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "LPVOID" + }, + { + "name": "AdapterName", + "type": "LPWSTR" + }, + { + "name": "RequestIdStr", + "type": "LPWSTR" + } + ], + "DhcpRegisterParamChange": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "LPVOID" + }, + { + "name": "AdapterName", + "type": "LPWSTR" + }, + { + "name": "ClassId", + "type": "LPDHCPCAPI_CLASSID" + }, + { + "name": "Params", + "type": "DHCPCAPI_PARAMS_ARRAY" + }, + { + "name": "Handle", + "type": "LPVOID" + } + ], + "DhcpDeRegisterParamChange": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "LPVOID" + }, + { + "name": "Event", + "type": "LPVOID" + } + ], + "DhcpRemoveDNSRegistrations": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/dhcpsapi_dll.json b/qiling/extensions/windows_sdk/defs/dhcpsapi_dll.json new file mode 100644 index 000000000..fac641a83 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/dhcpsapi_dll.json @@ -0,0 +1,3226 @@ +{ + "DhcpAddFilterV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "AddFilterInfo", + "type": "DHCP_FILTER_ADD_INFO" + }, + { + "name": "ForceFlag", + "type": "BOOL" + } + ], + "DhcpDeleteFilterV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "DeleteFilterInfo", + "type": "DHCP_ADDR_PATTERN" + } + ], + "DhcpSetFilterV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "GlobalFilterInfo", + "type": "DHCP_FILTER_GLOBAL_INFO" + } + ], + "DhcpGetFilterV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "GlobalFilterInfo", + "type": "DHCP_FILTER_GLOBAL_INFO" + } + ], + "DhcpEnumFilterV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ResumeHandle", + "type": "LPDHCP_ADDR_PATTERN" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ListType", + "type": "DHCP_FILTER_LIST_TYPE" + }, + { + "name": "EnumFilterInfo", + "type": "LPDHCP_FILTER_ENUM_INFO" + }, + { + "name": "ElementsRead", + "type": "DWORD" + }, + { + "name": "ElementsTotal", + "type": "DWORD" + } + ], + "DhcpCreateSubnet": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "SubnetInfo", + "type": "DHCP_SUBNET_INFO" + } + ], + "DhcpSetSubnetInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "SubnetInfo", + "type": "DHCP_SUBNET_INFO" + } + ], + "DhcpGetSubnetInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "SubnetInfo", + "type": "LPDHCP_SUBNET_INFO" + } + ], + "DhcpEnumSubnets": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "EnumInfo", + "type": "LPDHCP_IP_ARRAY" + }, + { + "name": "ElementsRead", + "type": "DWORD" + }, + { + "name": "ElementsTotal", + "type": "DWORD" + } + ], + "DhcpAddSubnetElement": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "AddElementInfo", + "type": "DHCP_SUBNET_ELEMENT_DATA" + } + ], + "DhcpEnumSubnetElements": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "EnumElementType", + "type": "DHCP_SUBNET_ELEMENT_TYPE" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "EnumElementInfo", + "type": "LPDHCP_SUBNET_ELEMENT_INFO_ARRAY" + }, + { + "name": "ElementsRead", + "type": "DWORD" + }, + { + "name": "ElementsTotal", + "type": "DWORD" + } + ], + "DhcpRemoveSubnetElement": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "RemoveElementInfo", + "type": "DHCP_SUBNET_ELEMENT_DATA" + }, + { + "name": "ForceFlag", + "type": "DHCP_FORCE_FLAG" + } + ], + "DhcpDeleteSubnet": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ForceFlag", + "type": "DHCP_FORCE_FLAG" + } + ], + "DhcpCreateOption": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "OptionInfo", + "type": "DHCP_OPTION" + } + ], + "DhcpSetOptionInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "OptionInfo", + "type": "DHCP_OPTION" + } + ], + "DhcpGetOptionInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "OptionInfo", + "type": "LPDHCP_OPTION" + } + ], + "DhcpEnumOptions": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "Options", + "type": "LPDHCP_OPTION_ARRAY" + }, + { + "name": "OptionsRead", + "type": "DWORD" + }, + { + "name": "OptionsTotal", + "type": "DWORD" + } + ], + "DhcpRemoveOption": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + } + ], + "DhcpSetOptionValue": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ScopeInfo", + "type": "DHCP_OPTION_SCOPE_INFO" + }, + { + "name": "OptionValue", + "type": "DHCP_OPTION_DATA" + } + ], + "DhcpSetOptionValues": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ScopeInfo", + "type": "DHCP_OPTION_SCOPE_INFO" + }, + { + "name": "OptionValues", + "type": "DHCP_OPTION_VALUE_ARRAY" + } + ], + "DhcpGetOptionValue": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ScopeInfo", + "type": "DHCP_OPTION_SCOPE_INFO" + }, + { + "name": "OptionValue", + "type": "LPDHCP_OPTION_VALUE" + } + ], + "DhcpEnumOptionValues": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ScopeInfo", + "type": "DHCP_OPTION_SCOPE_INFO" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "OptionValues", + "type": "LPDHCP_OPTION_VALUE_ARRAY" + }, + { + "name": "OptionsRead", + "type": "DWORD" + }, + { + "name": "OptionsTotal", + "type": "DWORD" + } + ], + "DhcpRemoveOptionValue": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ScopeInfo", + "type": "DHCP_OPTION_SCOPE_INFO" + } + ], + "DhcpCreateClientInfoVQ": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "DHCP_CLIENT_INFO_VQ" + } + ], + "DhcpSetClientInfoVQ": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "DHCP_CLIENT_INFO_VQ" + } + ], + "DhcpGetClientInfoVQ": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SearchInfo", + "type": "DHCP_SEARCH_INFO" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_VQ" + } + ], + "DhcpEnumSubnetClientsVQ": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_ARRAY_VQ" + }, + { + "name": "ClientsRead", + "type": "DWORD" + }, + { + "name": "ClientsTotal", + "type": "DWORD" + } + ], + "DhcpEnumSubnetClientsFilterStatusInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_FILTER_STATUS_INFO_ARRAY" + }, + { + "name": "ClientsRead", + "type": "DWORD" + }, + { + "name": "ClientsTotal", + "type": "DWORD" + } + ], + "DhcpCreateClientInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "DHCP_CLIENT_INFO" + } + ], + "DhcpSetClientInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "DHCP_CLIENT_INFO" + } + ], + "DhcpGetClientInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SearchInfo", + "type": "DHCP_SEARCH_INFO" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO" + } + ], + "DhcpDeleteClientInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "DHCP_SEARCH_INFO" + } + ], + "DhcpEnumSubnetClients": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_ARRAY" + }, + { + "name": "ClientsRead", + "type": "DWORD" + }, + { + "name": "ClientsTotal", + "type": "DWORD" + } + ], + "DhcpGetClientOptions": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientIpAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ClientSubnetMask", + "type": "DHCP_IP_MASK" + }, + { + "name": "ClientOptions", + "type": "LPDHCP_OPTION_LIST" + } + ], + "DhcpServerSetConfig": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "FieldsToSet", + "type": "DWORD" + }, + { + "name": "ConfigInfo", + "type": "LPDHCP_SERVER_CONFIG_INFO" + } + ], + "DhcpServerGetConfig": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ConfigInfo", + "type": "LPDHCP_SERVER_CONFIG_INFO" + } + ], + "DhcpScanDatabase": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "FixFlag", + "type": "DWORD" + }, + { + "name": "ScanList", + "type": "LPDHCP_SCAN_LIST" + } + ], + "DhcpRpcFreeMemory": [ + { + "name": "BufferPointer", + "type": "PVOID" + } + ], + "DhcpGetVersion": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "MajorVersion", + "type": "LPDWORD" + }, + { + "name": "MinorVersion", + "type": "LPDWORD" + } + ], + "DhcpAddSubnetElementV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "AddElementInfo", + "type": "DHCP_SUBNET_ELEMENT_DATA_V4" + } + ], + "DhcpEnumSubnetElementsV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "EnumElementType", + "type": "DHCP_SUBNET_ELEMENT_TYPE" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "EnumElementInfo", + "type": "LPDHCP_SUBNET_ELEMENT_INFO_ARRAY_V4" + }, + { + "name": "ElementsRead", + "type": "DWORD" + }, + { + "name": "ElementsTotal", + "type": "DWORD" + } + ], + "DhcpRemoveSubnetElementV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "RemoveElementInfo", + "type": "DHCP_SUBNET_ELEMENT_DATA_V4" + }, + { + "name": "ForceFlag", + "type": "DHCP_FORCE_FLAG" + } + ], + "DhcpCreateClientInfoV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "DHCP_CLIENT_INFO_V4" + } + ], + "DhcpSetClientInfoV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "DHCP_CLIENT_INFO_V4" + } + ], + "DhcpGetClientInfoV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SearchInfo", + "type": "DHCP_SEARCH_INFO" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_V4" + } + ], + "DhcpEnumSubnetClientsV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_ARRAY_V4" + }, + { + "name": "ClientsRead", + "type": "DWORD" + }, + { + "name": "ClientsTotal", + "type": "DWORD" + } + ], + "DhcpServerSetConfigV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "FieldsToSet", + "type": "DWORD" + }, + { + "name": "ConfigInfo", + "type": "LPDHCP_SERVER_CONFIG_INFO_V4" + } + ], + "DhcpServerGetConfigV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ConfigInfo", + "type": "LPDHCP_SERVER_CONFIG_INFO_V4" + } + ], + "DhcpSetSuperScopeV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "SuperScopeName", + "type": "LPWSTR" + }, + { + "name": "ChangeExisting", + "type": "BOOL" + } + ], + "DhcpDeleteSuperScopeV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SuperScopeName", + "type": "LPWSTR" + } + ], + "DhcpGetSuperScopeInfoV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SuperScopeTable", + "type": "LPDHCP_SUPER_SCOPE_TABLE" + } + ], + "DhcpEnumSubnetClientsV5": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_ARRAY_V5" + }, + { + "name": "ClientsRead", + "type": "DWORD" + }, + { + "name": "ClientsTotal", + "type": "DWORD" + } + ], + "DhcpCreateOptionV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionId", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "OptionInfo", + "type": "LPDHCP_OPTION" + } + ], + "DhcpSetOptionInfoV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "OptionInfo", + "type": "LPDHCP_OPTION" + } + ], + "DhcpGetOptionInfoV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "OptionInfo", + "type": "LPDHCP_OPTION" + } + ], + "DhcpEnumOptionsV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "Options", + "type": "LPDHCP_OPTION_ARRAY" + }, + { + "name": "OptionsRead", + "type": "DWORD" + }, + { + "name": "OptionsTotal", + "type": "DWORD" + } + ], + "DhcpRemoveOptionV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + } + ], + "DhcpSetOptionValueV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionId", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + }, + { + "name": "OptionValue", + "type": "LPDHCP_OPTION_DATA" + } + ], + "DhcpSetOptionValuesV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + }, + { + "name": "OptionValues", + "type": "LPDHCP_OPTION_VALUE_ARRAY" + } + ], + "DhcpGetOptionValueV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + }, + { + "name": "OptionValue", + "type": "LPDHCP_OPTION_VALUE" + } + ], + "DhcpGetOptionValueV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO6" + }, + { + "name": "OptionValue", + "type": "LPDHCP_OPTION_VALUE" + } + ], + "DhcpEnumOptionValuesV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "OptionValues", + "type": "LPDHCP_OPTION_VALUE_ARRAY" + }, + { + "name": "OptionsRead", + "type": "DWORD" + }, + { + "name": "OptionsTotal", + "type": "DWORD" + } + ], + "DhcpRemoveOptionValueV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + } + ], + "DhcpCreateClass": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ReservedMustBeZero", + "type": "DWORD" + }, + { + "name": "ClassInfo", + "type": "LPDHCP_CLASS_INFO" + } + ], + "DhcpModifyClass": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ReservedMustBeZero", + "type": "DWORD" + }, + { + "name": "ClassInfo", + "type": "LPDHCP_CLASS_INFO" + } + ], + "DhcpDeleteClass": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ReservedMustBeZero", + "type": "DWORD" + }, + { + "name": "ClassName", + "type": "LPWSTR" + } + ], + "DhcpGetClassInfo": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ReservedMustBeZero", + "type": "DWORD" + }, + { + "name": "PartialClassInfo", + "type": "LPDHCP_CLASS_INFO" + }, + { + "name": "FilledClassInfo", + "type": "LPDHCP_CLASS_INFO" + } + ], + "DhcpEnumClasses": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ReservedMustBeZero", + "type": "DWORD" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ClassInfoArray", + "type": "LPDHCP_CLASS_INFO_ARRAY" + }, + { + "name": "nRead", + "type": "DWORD" + }, + { + "name": "nTotal", + "type": "DWORD" + } + ], + "DhcpGetAllOptions": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionStruct", + "type": "LPDHCP_ALL_OPTIONS" + } + ], + "DhcpGetAllOptionsV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionStruct", + "type": "LPDHCP_ALL_OPTIONS" + } + ], + "DhcpGetAllOptionValues": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + }, + { + "name": "Values", + "type": "LPDHCP_ALL_OPTION_VALUES" + } + ], + "DhcpGetAllOptionValuesV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO6" + }, + { + "name": "Values", + "type": "LPDHCP_ALL_OPTION_VALUES" + } + ], + "DhcpEnumServers": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "IdInfo", + "type": "LPVOID" + }, + { + "name": "Servers", + "type": "LPDHCP_SERVER_INFO_ARRAY" + }, + { + "name": "CallbackFn", + "type": "LPVOID" + }, + { + "name": "CallbackData", + "type": "LPVOID" + } + ], + "DhcpAddServer": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "IdInfo", + "type": "LPVOID" + }, + { + "name": "NewServer", + "type": "LPDHCP_SERVER_INFO" + }, + { + "name": "CallbackFn", + "type": "LPVOID" + }, + { + "name": "CallbackData", + "type": "LPVOID" + } + ], + "DhcpDeleteServer": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "IdInfo", + "type": "LPVOID" + }, + { + "name": "NewServer", + "type": "LPDHCP_SERVER_INFO" + }, + { + "name": "CallbackFn", + "type": "LPVOID" + }, + { + "name": "CallbackData", + "type": "LPVOID" + } + ], + "DhcpGetServerBindingInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "BindElementsInfo", + "type": "LPDHCP_BIND_ELEMENT_ARRAY" + } + ], + "DhcpSetServerBindingInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "BindElementInfo", + "type": "LPDHCP_BIND_ELEMENT_ARRAY" + } + ], + "DhcpAddSubnetElementV5": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "AddElementInfo", + "type": "DHCP_SUBNET_ELEMENT_DATA_V5" + } + ], + "DhcpEnumSubnetElementsV5": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "EnumElementType", + "type": "DHCP_SUBNET_ELEMENT_TYPE" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "EnumElementInfo", + "type": "LPDHCP_SUBNET_ELEMENT_INFO_ARRAY_V5" + }, + { + "name": "ElementsRead", + "type": "DWORD" + }, + { + "name": "ElementsTotal", + "type": "DWORD" + } + ], + "DhcpRemoveSubnetElementV5": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "RemoveElementInfo", + "type": "DHCP_SUBNET_ELEMENT_DATA_V5" + }, + { + "name": "ForceFlag", + "type": "DHCP_FORCE_FLAG" + } + ], + "DhcpV4EnumSubnetReservations": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "EnumElementInfo", + "type": "LPDHCP_RESERVATION_INFO_ARRAY" + }, + { + "name": "ElementsRead", + "type": "DWORD" + }, + { + "name": "ElementsTotal", + "type": "DWORD" + } + ], + "DhcpCreateOptionV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionId", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "OptionInfo", + "type": "LPDHCP_OPTION" + } + ], + "DhcpRemoveOptionV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + } + ], + "DhcpEnumOptionsV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "Options", + "type": "LPDHCP_OPTION_ARRAY" + }, + { + "name": "OptionsRead", + "type": "DWORD" + }, + { + "name": "OptionsTotal", + "type": "DWORD" + } + ], + "DhcpRemoveOptionValueV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO6" + } + ], + "DhcpGetOptionInfoV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "OptionInfo", + "type": "LPDHCP_OPTION" + } + ], + "DhcpSetOptionInfoV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "OptionInfo", + "type": "LPDHCP_OPTION" + } + ], + "DhcpSetOptionValueV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionId", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO6" + }, + { + "name": "OptionValue", + "type": "LPDHCP_OPTION_DATA" + } + ], + "DhcpGetSubnetInfoVQ": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "SubnetInfo", + "type": "LPDHCP_SUBNET_INFO_VQ" + } + ], + "DhcpCreateSubnetVQ": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "SubnetInfo", + "type": "DHCP_SUBNET_INFO_VQ" + } + ], + "DhcpSetSubnetInfoVQ": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "SubnetInfo", + "type": "DHCP_SUBNET_INFO_VQ" + } + ], + "DhcpEnumOptionValuesV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO6" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "OptionValues", + "type": "LPDHCP_OPTION_VALUE_ARRAY" + }, + { + "name": "OptionsRead", + "type": "DWORD" + }, + { + "name": "OptionsTotal", + "type": "DWORD" + } + ], + "DhcpDsInit": [ + { + "name": "VOID", + "type": "void" + } + ], + "DhcpDsCleanup": [ + { + "name": "VOID", + "type": "void" + } + ], + "DhcpSetThreadOptions": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "LPVOID" + } + ], + "DhcpGetThreadOptions": [ + { + "name": "pFlags", + "type": "LPDWORD" + }, + { + "name": "Reserved", + "type": "LPVOID" + } + ], + "DhcpServerQueryAttribute": [ + { + "name": "ServerIpAddr", + "type": "LPWSTR" + }, + { + "name": "dwReserved", + "type": "ULONG" + }, + { + "name": "DhcpAttribId", + "type": "DHCP_ATTRIB_ID" + }, + { + "name": "pDhcpAttrib", + "type": "LPDHCP_ATTRIB" + } + ], + "DhcpServerQueryAttributes": [ + { + "name": "ServerIpAddr", + "type": "LPWSTR" + }, + { + "name": "dwReserved", + "type": "ULONG" + }, + { + "name": "dwAttribCount", + "type": "ULONG" + }, + { + "name": "pDhcpAttribs", + "type": "DHCP_ATTRIB_ID" + }, + { + "name": "pDhcpAttribArr", + "type": "LPDHCP_ATTRIB_ARRAY" + } + ], + "DhcpServerRedoAuthorization": [ + { + "name": "ServerIpAddr", + "type": "LPWSTR" + }, + { + "name": "dwReserved", + "type": "ULONG" + } + ], + "DhcpAuditLogSetParams": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "AuditLogDir", + "type": "LPWSTR" + }, + { + "name": "DiskCheckInterval", + "type": "DWORD" + }, + { + "name": "MaxLogFilesSize", + "type": "DWORD" + }, + { + "name": "MinSpaceOnDisk", + "type": "DWORD" + } + ], + "DhcpAuditLogGetParams": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "AuditLogDir", + "type": "LPWSTR" + }, + { + "name": "DiskCheckInterval", + "type": "DWORD" + }, + { + "name": "MaxLogFilesSize", + "type": "DWORD" + }, + { + "name": "MinSpaceOnDisk", + "type": "DWORD" + } + ], + "DhcpServerQueryDnsRegCredentials": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "UnameSize", + "type": "ULONG" + }, + { + "name": "Uname", + "type": "LPWSTR" + }, + { + "name": "DomainSize", + "type": "ULONG" + }, + { + "name": "Domain", + "type": "LPWSTR" + } + ], + "DhcpServerSetDnsRegCredentialsV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Uname", + "type": "LPWSTR" + }, + { + "name": "Domain", + "type": "LPWSTR" + }, + { + "name": "Passwd", + "type": "LPWSTR" + } + ], + "DhcpServerBackupDatabase": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Path", + "type": "LPWSTR" + } + ], + "DhcpServerRestoreDatabase": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Path", + "type": "LPWSTR" + } + ], + "DhcpServerSetConfigVQ": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "FieldsToSet", + "type": "DWORD" + }, + { + "name": "ConfigInfo", + "type": "LPDHCP_SERVER_CONFIG_INFO_VQ" + } + ], + "DhcpServerGetConfigVQ": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ConfigInfo", + "type": "LPDHCP_SERVER_CONFIG_INFO_VQ" + } + ], + "DhcpGetServerSpecificStrings": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ServerSpecificStrings", + "type": "LPDHCP_SERVER_SPECIFIC_STRINGS" + } + ], + "DhcpCreateSubnetV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "SubnetInfo", + "type": "LPDHCP_SUBNET_INFO_V6" + } + ], + "DhcpDeleteSubnetV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "ForceFlag", + "type": "DHCP_FORCE_FLAG" + } + ], + "DhcpEnumSubnetsV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "EnumInfo", + "type": "LPDHCPV6_IP_ARRAY" + }, + { + "name": "ElementsRead", + "type": "DWORD" + }, + { + "name": "ElementsTotal", + "type": "DWORD" + } + ], + "DhcpAddSubnetElementV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "AddElementInfo", + "type": "LPDHCP_SUBNET_ELEMENT_DATA_V6" + } + ], + "DhcpRemoveSubnetElementV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "RemoveElementInfo", + "type": "LPDHCP_SUBNET_ELEMENT_DATA_V6" + }, + { + "name": "ForceFlag", + "type": "DHCP_FORCE_FLAG" + } + ], + "DhcpEnumSubnetElementsV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "EnumElementType", + "type": "DHCP_SUBNET_ELEMENT_TYPE_V6" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "EnumElementInfo", + "type": "LPDHCP_SUBNET_ELEMENT_INFO_ARRAY_V6" + }, + { + "name": "ElementsRead", + "type": "DWORD" + }, + { + "name": "ElementsTotal", + "type": "DWORD" + } + ], + "DhcpGetSubnetInfoV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "SubnetInfo", + "type": "LPDHCP_SUBNET_INFO_V6" + } + ], + "DhcpEnumSubnetClientsV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_IPV6_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_ARRAY_V6" + }, + { + "name": "ClientsRead", + "type": "DWORD" + }, + { + "name": "ClientsTotal", + "type": "DWORD" + } + ], + "DhcpServerGetConfigV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO6" + }, + { + "name": "ConfigInfo", + "type": "LPDHCP_SERVER_CONFIG_INFO_V6" + } + ], + "DhcpServerSetConfigV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO6" + }, + { + "name": "FieldsToSet", + "type": "DWORD" + }, + { + "name": "ConfigInfo", + "type": "LPDHCP_SERVER_CONFIG_INFO_V6" + } + ], + "DhcpSetSubnetInfoV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "SubnetInfo", + "type": "LPDHCP_SUBNET_INFO_V6" + } + ], + "DhcpGetMibInfoV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "MibInfo", + "type": "LPDHCP_MIB_INFO_V6" + } + ], + "DhcpGetServerBindingInfoV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "BindElementsInfo", + "type": "LPDHCPV6_BIND_ELEMENT_ARRAY" + } + ], + "DhcpSetServerBindingInfoV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "BindElementInfo", + "type": "LPDHCPV6_BIND_ELEMENT_ARRAY" + } + ], + "DhcpSetClientInfoV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "DHCP_CLIENT_INFO_V6" + } + ], + "DhcpGetClientInfoV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SearchInfo", + "type": "DHCP_SEARCH_INFO_V6" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_V6" + } + ], + "DhcpDeleteClientInfoV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "DHCP_SEARCH_INFO_V6" + } + ], + "DhcpCreateClassV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ReservedMustBeZero", + "type": "DWORD" + }, + { + "name": "ClassInfo", + "type": "LPDHCP_CLASS_INFO_V6" + } + ], + "DhcpModifyClassV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ReservedMustBeZero", + "type": "DWORD" + }, + { + "name": "ClassInfo", + "type": "LPDHCP_CLASS_INFO_V6" + } + ], + "DhcpDeleteClassV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ReservedMustBeZero", + "type": "DWORD" + }, + { + "name": "ClassName", + "type": "LPWSTR" + } + ], + "DhcpEnumClassesV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ReservedMustBeZero", + "type": "DWORD" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ClassInfoArray", + "type": "LPDHCP_CLASS_INFO_ARRAY_V6" + }, + { + "name": "nRead", + "type": "DWORD" + }, + { + "name": "nTotal", + "type": "DWORD" + } + ], + "DhcpSetSubnetDelayOffer": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "TimeDelayInMilliseconds", + "type": "USHORT" + } + ], + "DhcpGetSubnetDelayOffer": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "TimeDelayInMilliseconds", + "type": "USHORT" + } + ], + "DhcpGetMibInfoV5": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "MibInfo", + "type": "LPDHCP_MIB_INFO_V5" + } + ], + "DhcpV4GetOptionValue": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "PolicyName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + }, + { + "name": "OptionValue", + "type": "LPDHCP_OPTION_VALUE" + } + ], + "DhcpV4SetOptionValue": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionId", + "type": "DHCP_OPTION_ID" + }, + { + "name": "PolicyName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + }, + { + "name": "OptionValue", + "type": "LPDHCP_OPTION_DATA" + } + ], + "DhcpV4SetOptionValues": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PolicyName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + }, + { + "name": "OptionValues", + "type": "LPDHCP_OPTION_VALUE_ARRAY" + } + ], + "DhcpV4RemoveOptionValue": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "PolicyName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + } + ], + "DhcpV4GetAllOptionValues": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + }, + { + "name": "Values", + "type": "LPDHCP_ALL_OPTION_VALUES_PB" + } + ], + "DhcpV4FailoverCreateRelationship": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "pRelationship", + "type": "LPDHCP_FAILOVER_RELATIONSHIP" + } + ], + "DhcpV4FailoverSetRelationship": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pRelationship", + "type": "LPDHCP_FAILOVER_RELATIONSHIP" + } + ], + "DhcpV4FailoverDeleteRelationship": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "pRelationshipName", + "type": "LPWSTR" + } + ], + "DhcpV4FailoverGetRelationship": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "pRelationshipName", + "type": "LPWSTR" + }, + { + "name": "pRelationship", + "type": "LPDHCP_FAILOVER_RELATIONSHIP" + } + ], + "DhcpV4FailoverEnumRelationship": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "pRelationship", + "type": "LPDHCP_FAILOVER_RELATIONSHIP_ARRAY" + }, + { + "name": "RelationshipRead", + "type": "LPDWORD" + }, + { + "name": "RelationshipTotal", + "type": "LPDWORD" + } + ], + "DhcpV4FailoverAddScopeToRelationship": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "pRelationship", + "type": "LPDHCP_FAILOVER_RELATIONSHIP" + } + ], + "DhcpV4FailoverDeleteScopeFromRelationship": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "pRelationship", + "type": "LPDHCP_FAILOVER_RELATIONSHIP" + } + ], + "DhcpV4FailoverGetScopeRelationship": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ScopeId", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "pRelationship", + "type": "LPDHCP_FAILOVER_RELATIONSHIP" + } + ], + "DhcpV4FailoverGetScopeStatistics": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ScopeId", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "pStats", + "type": "LPDHCP_FAILOVER_STATISTICS" + } + ], + "DhcpV4FailoverGetClientInfo": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SearchInfo", + "type": "DHCP_SEARCH_INFO" + }, + { + "name": "ClientInfo", + "type": "LPDHCPV4_FAILOVER_CLIENT_INFO" + } + ], + "DhcpV4FailoverGetSystemTime": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "pTime", + "type": "LPDWORD" + }, + { + "name": "pMaxAllowedDeltaTime", + "type": "LPDWORD" + } + ], + "DhcpV4FailoverGetAddressStatus": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "pStatus", + "type": "LPDWORD" + } + ], + "DhcpV4FailoverTriggerAddrAllocation": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "pFailRelName", + "type": "LPWSTR" + } + ], + "DhcpHlprCreateV4Policy": [ + { + "name": "PolicyName", + "type": "LPWSTR" + }, + { + "name": "fGlobalPolicy", + "type": "BOOL" + }, + { + "name": "Subnet", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ProcessingOrder", + "type": "DWORD" + }, + { + "name": "RootOperator", + "type": "DHCP_POL_LOGIC_OPER" + }, + { + "name": "Description", + "type": "LPWSTR" + }, + { + "name": "Enabled", + "type": "BOOL" + }, + { + "name": "Policy", + "type": "LPDHCP_POLICY" + } + ], + "DhcpHlprAddV4PolicyExpr": [ + { + "name": "Policy", + "type": "LPDHCP_POLICY" + }, + { + "name": "ParentExpr", + "type": "DWORD" + }, + { + "name": "Operator", + "type": "DHCP_POL_LOGIC_OPER" + }, + { + "name": "ExprIndex", + "type": "DWORD" + } + ], + "DhcpHlprAddV4PolicyCondition": [ + { + "name": "Policy", + "type": "LPDHCP_POLICY" + }, + { + "name": "ParentExpr", + "type": "DWORD" + }, + { + "name": "Type", + "type": "DHCP_POL_ATTR_TYPE" + }, + { + "name": "OptionID", + "type": "DWORD" + }, + { + "name": "SubOptionID", + "type": "DWORD" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "Operator", + "type": "DHCP_POL_COMPARATOR" + }, + { + "name": "Value", + "type": "LPBYTE" + }, + { + "name": "ValueLength", + "type": "DWORD" + }, + { + "name": "ConditionIndex", + "type": "DWORD" + } + ], + "DhcpHlprAddV4PolicyRange": [ + { + "name": "Policy", + "type": "LPDHCP_POLICY" + }, + { + "name": "Range", + "type": "LPDHCP_IP_RANGE" + } + ], + "DhcpHlprResetV4PolicyExpr": [ + { + "name": "Policy", + "type": "LPDHCP_POLICY" + } + ], + "DhcpHlprModifyV4PolicyExpr": [ + { + "name": "Policy", + "type": "LPDHCP_POLICY" + }, + { + "name": "Operator", + "type": "DHCP_POL_LOGIC_OPER" + } + ], + "DhcpHlprFreeV4Policy": [ + { + "name": "Policy", + "type": "LPDHCP_POLICY" + } + ], + "DhcpHlprIsV4PolicySingleUC": [ + { + "name": "Policy", + "type": "LPDHCP_POLICY" + } + ], + "DhcpV4QueryPolicyEnforcement": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "fGlobalPolicy", + "type": "BOOL" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "Enabled", + "type": "BOOL" + } + ], + "DhcpV4SetPolicyEnforcement": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "fGlobalPolicy", + "type": "BOOL" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "Enable", + "type": "BOOL" + } + ], + "DhcpHlprIsV4PolicyWellFormed": [ + { + "name": "pPolicy", + "type": "LPDHCP_POLICY" + } + ], + "DhcpHlprIsV4PolicyValid": [ + { + "name": "pPolicy", + "type": "LPDHCP_POLICY" + } + ], + "DhcpV4CreatePolicy": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "pPolicy", + "type": "LPDHCP_POLICY" + } + ], + "DhcpV4GetPolicy": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "fGlobalPolicy", + "type": "BOOL" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "PolicyName", + "type": "LPWSTR" + }, + { + "name": "Policy", + "type": "LPDHCP_POLICY" + } + ], + "DhcpV4SetPolicy": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "FieldsModified", + "type": "DWORD" + }, + { + "name": "fGlobalPolicy", + "type": "BOOL" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "PolicyName", + "type": "LPWSTR" + }, + { + "name": "Policy", + "type": "LPDHCP_POLICY" + } + ], + "DhcpV4DeletePolicy": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "fGlobalPolicy", + "type": "BOOL" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "PolicyName", + "type": "LPWSTR" + } + ], + "DhcpV4EnumPolicies": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ResumeHandle", + "type": "LPDWORD" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "fGlobalPolicy", + "type": "BOOL" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "EnumInfo", + "type": "LPDHCP_POLICY_ARRAY" + }, + { + "name": "ElementsRead", + "type": "DWORD" + }, + { + "name": "ElementsTotal", + "type": "DWORD" + } + ], + "DhcpV4AddPolicyRange": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "PolicyName", + "type": "LPWSTR" + }, + { + "name": "Range", + "type": "LPDHCP_IP_RANGE" + } + ], + "DhcpV4RemovePolicyRange": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "PolicyName", + "type": "LPWSTR" + }, + { + "name": "Range", + "type": "LPDHCP_IP_RANGE" + } + ], + "DhcpV6SetStatelessStoreParams": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "fServerLevel", + "type": "BOOL" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "FieldModified", + "type": "DWORD" + }, + { + "name": "Params", + "type": "LPDHCPV6_STATELESS_PARAMS" + } + ], + "DhcpV6GetStatelessStoreParams": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "fServerLevel", + "type": "BOOL" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "Params", + "type": "LPDHCPV6_STATELESS_PARAMS" + } + ], + "DhcpV6GetStatelessStatistics": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "StatelessStats", + "type": "LPDHCPV6_STATELESS_STATS" + } + ], + "DhcpV4CreateClientInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_PB" + } + ], + "DhcpV4EnumSubnetClients": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_PB_ARRAY" + }, + { + "name": "ClientsRead", + "type": "DWORD" + }, + { + "name": "ClientsTotal", + "type": "DWORD" + } + ], + "DhcpV4GetClientInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SearchInfo", + "type": "DHCP_SEARCH_INFO" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_PB" + } + ], + "DhcpV6CreateClientInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_V6" + } + ], + "DhcpV4GetFreeIPAddress": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ScopeId", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "StartIP", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "EndIP", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "NumFreeAddrReq", + "type": "DWORD" + }, + { + "name": "IPAddrList", + "type": "LPDHCP_IP_ARRAY" + } + ], + "DhcpV6GetFreeIPAddress": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ScopeId", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "StartIP", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "EndIP", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "NumFreeAddrReq", + "type": "DWORD" + }, + { + "name": "IPAddrList", + "type": "LPDHCPV6_IP_ARRAY" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/dnsapi_dll.json b/qiling/extensions/windows_sdk/defs/dnsapi_dll.json new file mode 100644 index 000000000..a444de10e --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/dnsapi_dll.json @@ -0,0 +1,534 @@ +{ + "DnsQueryConfig": [ + { + "name": "Config", + "type": "DNS_CONFIG_TYPE" + }, + { + "name": "Flag", + "type": "DWORD" + }, + { + "name": "pwsAdapterName", + "type": "PCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "pBufLen", + "type": "PDWORD" + } + ], + "DnsRecordCopyEx": [ + { + "name": "pRecord", + "type": "PDNS_RECORD" + }, + { + "name": "CharSetIn", + "type": "DNS_CHARSET" + }, + { + "name": "CharSetOut", + "type": "DNS_CHARSET" + } + ], + "DnsRecordSetCopyEx": [ + { + "name": "pRecordSet", + "type": "PDNS_RECORD" + }, + { + "name": "CharSetIn", + "type": "DNS_CHARSET" + }, + { + "name": "CharSetOut", + "type": "DNS_CHARSET" + } + ], + "DnsRecordCompare": [ + { + "name": "pRecord1", + "type": "PDNS_RECORD" + }, + { + "name": "pRecord2", + "type": "PDNS_RECORD" + } + ], + "DnsRecordSetCompare": [ + { + "name": "pRR1", + "type": "PDNS_RECORD" + }, + { + "name": "pRR2", + "type": "PDNS_RECORD" + }, + { + "name": "ppDiff1", + "type": "PDNS_RECORD" + }, + { + "name": "ppDiff2", + "type": "PDNS_RECORD" + } + ], + "DnsRecordSetDetach": [ + { + "name": "pRecordList", + "type": "PDNS_RECORD" + } + ], + "DnsFree": [ + { + "name": "pData", + "type": "PVOID" + }, + { + "name": "FreeType", + "type": "DNS_FREE_TYPE" + } + ], + "DnsQuery_A": [ + { + "name": "pszName", + "type": "PCSTR" + }, + { + "name": "wType", + "type": "WORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "pExtra", + "type": "PVOID" + }, + { + "name": "ppQueryResults", + "type": "PDNS_RECORD" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "DnsQuery_UTF8": [ + { + "name": "pszName", + "type": "PCSTR" + }, + { + "name": "wType", + "type": "WORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "pExtra", + "type": "PVOID" + }, + { + "name": "ppQueryResults", + "type": "PDNS_RECORD" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "DnsQuery_W": [ + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "wType", + "type": "WORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "pExtra", + "type": "PVOID" + }, + { + "name": "ppQueryResults", + "type": "PDNS_RECORD" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "DnsQueryEx": [ + { + "name": "pQueryRequest", + "type": "PDNS_QUERY_REQUEST" + }, + { + "name": "pQueryResults", + "type": "PDNS_QUERY_RESULT" + }, + { + "name": "pCancelHandle", + "type": "PDNS_QUERY_CANCEL" + } + ], + "DnsCancelQuery": [ + { + "name": "pCancelHandle", + "type": "PDNS_QUERY_CANCEL" + } + ], + "DnsAcquireContextHandle_W": [ + { + "name": "CredentialFlags", + "type": "DWORD" + }, + { + "name": "Credentials", + "type": "PVOID" + }, + { + "name": "pContext", + "type": "PHANDLE" + } + ], + "DnsAcquireContextHandle_A": [ + { + "name": "CredentialFlags", + "type": "DWORD" + }, + { + "name": "Credentials", + "type": "PVOID" + }, + { + "name": "pContext", + "type": "PHANDLE" + } + ], + "DnsReleaseContextHandle": [ + { + "name": "hContext", + "type": "HANDLE" + } + ], + "DnsModifyRecordsInSet_W": [ + { + "name": "pAddRecords", + "type": "PDNS_RECORD" + }, + { + "name": "pDeleteRecords", + "type": "PDNS_RECORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "hCredentials", + "type": "HANDLE" + }, + { + "name": "pExtraList", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "DnsModifyRecordsInSet_A": [ + { + "name": "pAddRecords", + "type": "PDNS_RECORD" + }, + { + "name": "pDeleteRecords", + "type": "PDNS_RECORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "hCredentials", + "type": "HANDLE" + }, + { + "name": "pExtraList", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "DnsModifyRecordsInSet_UTF8": [ + { + "name": "pAddRecords", + "type": "PDNS_RECORD" + }, + { + "name": "pDeleteRecords", + "type": "PDNS_RECORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "hCredentials", + "type": "HANDLE" + }, + { + "name": "pExtraList", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "DnsReplaceRecordSetW": [ + { + "name": "pReplaceSet", + "type": "PDNS_RECORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "hContext", + "type": "HANDLE" + }, + { + "name": "pExtraInfo", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "DnsReplaceRecordSetA": [ + { + "name": "pReplaceSet", + "type": "PDNS_RECORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "hContext", + "type": "HANDLE" + }, + { + "name": "pExtraInfo", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "DnsReplaceRecordSetUTF8": [ + { + "name": "pReplaceSet", + "type": "PDNS_RECORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "hContext", + "type": "HANDLE" + }, + { + "name": "pExtraInfo", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "DnsValidateName_W": [ + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "Format", + "type": "DNS_NAME_FORMAT" + } + ], + "DnsValidateName_A": [ + { + "name": "pszName", + "type": "PCSTR" + }, + { + "name": "Format", + "type": "DNS_NAME_FORMAT" + } + ], + "DnsValidateName_UTF8": [ + { + "name": "pszName", + "type": "PCSTR" + }, + { + "name": "Format", + "type": "DNS_NAME_FORMAT" + } + ], + "DnsNameCompare_A": [ + { + "name": "pName1", + "type": "PCSTR" + }, + { + "name": "pName2", + "type": "PCSTR" + } + ], + "DnsNameCompare_W": [ + { + "name": "pName1", + "type": "PCWSTR" + }, + { + "name": "pName2", + "type": "PCWSTR" + } + ], + "DnsWriteQuestionToBuffer_W": [ + { + "name": "pDnsBuffer", + "type": "PDNS_MESSAGE_BUFFER" + }, + { + "name": "pdwBufferSize", + "type": "PDWORD" + }, + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "wType", + "type": "WORD" + }, + { + "name": "Xid", + "type": "WORD" + }, + { + "name": "fRecursionDesired", + "type": "BOOL" + } + ], + "DnsWriteQuestionToBuffer_UTF8": [ + { + "name": "pDnsBuffer", + "type": "PDNS_MESSAGE_BUFFER" + }, + { + "name": "pdwBufferSize", + "type": "PDWORD" + }, + { + "name": "pszName", + "type": "PCSTR" + }, + { + "name": "wType", + "type": "WORD" + }, + { + "name": "Xid", + "type": "WORD" + }, + { + "name": "fRecursionDesired", + "type": "BOOL" + } + ], + "DnsExtractRecordsFromMessage_W": [ + { + "name": "pDnsBuffer", + "type": "PDNS_MESSAGE_BUFFER" + }, + { + "name": "wMessageLength", + "type": "WORD" + }, + { + "name": "ppRecord", + "type": "PDNS_RECORD" + } + ], + "DnsExtractRecordsFromMessage_UTF8": [ + { + "name": "pDnsBuffer", + "type": "PDNS_MESSAGE_BUFFER" + }, + { + "name": "wMessageLength", + "type": "WORD" + }, + { + "name": "ppRecord", + "type": "PDNS_RECORD" + } + ], + "DnsGetProxyInformation": [ + { + "name": "hostName", + "type": "PCWSTR" + }, + { + "name": "proxyInformation", + "type": "DNS_PROXY_INFORMATION" + }, + { + "name": "defaultProxyInformation", + "type": "DNS_PROXY_INFORMATION" + }, + { + "name": "completionRoutine", + "type": "DNS_PROXY_COMPLETION_ROUTINE" + }, + { + "name": "completionContext", + "type": "void" + } + ], + "DnsFreeProxyName": [ + { + "name": "proxyName", + "type": "PWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/drt_dll.json b/qiling/extensions/windows_sdk/defs/drt_dll.json new file mode 100644 index 000000000..25e01ab0d --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/drt_dll.json @@ -0,0 +1,316 @@ +{ + "DrtCreatePnrpBootstrapResolver": [ + { + "name": "fPublish", + "type": "BOOL" + }, + { + "name": "pwzPeerName", + "type": "PCWSTR" + }, + { + "name": "pwzCloudName", + "type": "PCWSTR" + }, + { + "name": "pwzPublishingIdentity", + "type": "PCWSTR" + }, + { + "name": "ppResolver", + "type": "DRT_BOOTSTRAP_PROVIDER" + } + ], + "DrtDeletePnrpBootstrapResolver": [ + { + "name": "pResolver", + "type": "DRT_BOOTSTRAP_PROVIDER" + } + ], + "DrtCreateDnsBootstrapResolver": [ + { + "name": "port", + "type": "USHORT" + }, + { + "name": "pwszAddress", + "type": "PCWSTR" + }, + { + "name": "ppModule", + "type": "DRT_BOOTSTRAP_PROVIDER" + } + ], + "DrtDeleteDnsBootstrapResolver": [ + { + "name": "pResolver", + "type": "DRT_BOOTSTRAP_PROVIDER" + } + ], + "DrtCreateIpv6UdpTransport": [ + { + "name": "scope", + "type": "DRT_SCOPE" + }, + { + "name": "dwScopeId", + "type": "ULONG" + }, + { + "name": "dwLocalityThreshold", + "type": "ULONG" + }, + { + "name": "pwPort", + "type": "USHORT" + }, + { + "name": "phTransport", + "type": "HDRT_TRANSPORT" + } + ], + "DrtDeleteIpv6UdpTransport": [ + { + "name": "hTransport", + "type": "HDRT_TRANSPORT" + } + ], + "DrtCreateDerivedKeySecurityProvider": [ + { + "name": "pRootCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pLocalCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "ppSecurityProvider", + "type": "DRT_SECURITY_PROVIDER" + } + ], + "DrtCreateDerivedKey": [ + { + "name": "pLocalCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pKey", + "type": "DRT_DATA" + } + ], + "DrtDeleteDerivedKeySecurityProvider": [ + { + "name": "pSecurityProvider", + "type": "DRT_SECURITY_PROVIDER" + } + ], + "DrtCreateNullSecurityProvider": [ + { + "name": "ppSecurityProvider", + "type": "DRT_SECURITY_PROVIDER" + } + ], + "DrtDeleteNullSecurityProvider": [ + { + "name": "pSecurityProvider", + "type": "DRT_SECURITY_PROVIDER" + } + ], + "DrtOpen": [ + { + "name": "pSettings", + "type": "DRT_SETTINGS" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "pvContext", + "type": "PVOID" + }, + { + "name": "phDrt", + "type": "HDRT" + } + ], + "DrtClose": [ + { + "name": "hDrt", + "type": "HDRT" + } + ], + "DrtGetEventDataSize": [ + { + "name": "hDrt", + "type": "HDRT" + }, + { + "name": "pulEventDataLen", + "type": "ULONG" + } + ], + "DrtGetEventData": [ + { + "name": "hDrt", + "type": "HDRT" + }, + { + "name": "ulEventDataLen", + "type": "ULONG" + }, + { + "name": "pEventData", + "type": "DRT_EVENT_DATA" + } + ], + "DrtRegisterKey": [ + { + "name": "hDrt", + "type": "HDRT" + }, + { + "name": "pRegistration", + "type": "DRT_REGISTRATION" + }, + { + "name": "pvKeyContext", + "type": "PVOID" + }, + { + "name": "phKeyRegistration", + "type": "HDRT_REGISTRATION_CONTEXT" + } + ], + "DrtUpdateKey": [ + { + "name": "hKeyRegistration", + "type": "HDRT_REGISTRATION_CONTEXT" + }, + { + "name": "pAppData", + "type": "DRT_DATA" + } + ], + "DrtUnregisterKey": [ + { + "name": "hKeyRegistration", + "type": "HDRT_REGISTRATION_CONTEXT" + } + ], + "DrtStartSearch": [ + { + "name": "hDrt", + "type": "HDRT" + }, + { + "name": "pKey", + "type": "DRT_DATA" + }, + { + "name": "pInfo", + "type": "DRT_SEARCH_INFO" + }, + { + "name": "timeout", + "type": "ULONG" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "pvContext", + "type": "PVOID" + }, + { + "name": "hSearchContext", + "type": "HDRT_SEARCH_CONTEXT" + } + ], + "DrtContinueSearch": [ + { + "name": "hSearchContext", + "type": "HDRT_SEARCH_CONTEXT" + } + ], + "DrtGetSearchResultSize": [ + { + "name": "hSearchContext", + "type": "HDRT_SEARCH_CONTEXT" + }, + { + "name": "pulSearchResultSize", + "type": "ULONG" + } + ], + "DrtGetSearchResult": [ + { + "name": "hSearchContext", + "type": "HDRT_SEARCH_CONTEXT" + }, + { + "name": "ulSearchResultSize", + "type": "ULONG" + }, + { + "name": "pSearchResult", + "type": "DRT_SEARCH_RESULT" + } + ], + "DrtGetSearchPathSize": [ + { + "name": "hSearchContext", + "type": "HDRT_SEARCH_CONTEXT" + }, + { + "name": "pulSearchPathSize", + "type": "ULONG" + } + ], + "DrtGetSearchPath": [ + { + "name": "hSearchContext", + "type": "HDRT_SEARCH_CONTEXT" + }, + { + "name": "ulSearchPathSize", + "type": "ULONG" + }, + { + "name": "pSearchPath", + "type": "DRT_ADDRESS_LIST" + } + ], + "DrtEndSearch": [ + { + "name": "hSearchContext", + "type": "HDRT_SEARCH_CONTEXT" + } + ], + "DrtGetInstanceName": [ + { + "name": "hDrt", + "type": "HDRT" + }, + { + "name": "ulcbInstanceNameSize", + "type": "ULONG" + }, + { + "name": "pwzDrtInstanceName", + "type": "PWSTR" + } + ], + "DrtGetInstanceNameSize": [ + { + "name": "hDrt", + "type": "HDRT" + }, + { + "name": "pulcbInstanceNameSize", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/dssec_dll.json b/qiling/extensions/windows_sdk/defs/dssec_dll.json new file mode 100644 index 000000000..8af7946f2 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/dssec_dll.json @@ -0,0 +1,138 @@ +{ + "DSCreateISecurityInfoObject": [ + { + "name": "pwszObjectPath", + "type": "LPCWSTR" + }, + { + "name": "pwszObjectClass", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppSI", + "type": "LPSECURITYINFO" + }, + { + "name": "pfnReadSD", + "type": "PFNREADOBJECTSECURITY" + }, + { + "name": "pfnWriteSD", + "type": "PFNWRITEOBJECTSECURITY" + }, + { + "name": "lpContext", + "type": "LPARAM" + } + ], + "DSCreateISecurityInfoObjectEx": [ + { + "name": "pwszObjectPath", + "type": "LPCWSTR" + }, + { + "name": "pwszObjectClass", + "type": "LPCWSTR" + }, + { + "name": "pwszServer", + "type": "LPCWSTR" + }, + { + "name": "pwszUserName", + "type": "LPCWSTR" + }, + { + "name": "pwszPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppSI", + "type": "LPSECURITYINFO" + }, + { + "name": "pfnReadSD", + "type": "PFNREADOBJECTSECURITY" + }, + { + "name": "pfnWriteSD", + "type": "PFNWRITEOBJECTSECURITY" + }, + { + "name": "lpContext", + "type": "LPARAM" + } + ], + "DSCreateSecurityPage": [ + { + "name": "pwszObjectPath", + "type": "LPCWSTR" + }, + { + "name": "pwszObjectClass", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phPage", + "type": "HPROPSHEETPAGE" + }, + { + "name": "pfnReadSD", + "type": "PFNREADOBJECTSECURITY" + }, + { + "name": "pfnWriteSD", + "type": "PFNWRITEOBJECTSECURITY" + }, + { + "name": "lpContext", + "type": "LPARAM" + } + ], + "DSEditSecurity": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "pwszObjectPath", + "type": "LPCWSTR" + }, + { + "name": "pwszObjectClass", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszCaption", + "type": "LPCWSTR" + }, + { + "name": "pfnReadSD", + "type": "PFNREADOBJECTSECURITY" + }, + { + "name": "pfnWriteSD", + "type": "PFNWRITEOBJECTSECURITY" + }, + { + "name": "lpContext", + "type": "LPARAM" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/dwmapi_dll.json b/qiling/extensions/windows_sdk/defs/dwmapi_dll.json new file mode 100644 index 000000000..333a55b42 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/dwmapi_dll.json @@ -0,0 +1,354 @@ +{ + "DwmDefWindowProc": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "plResult", + "type": "LRESULT" + } + ], + "DwmEnableBlurBehindWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pBlurBehind", + "type": "DWM_BLURBEHIND" + } + ], + "DwmEnableComposition": [ + { + "name": "uCompositionAction", + "type": "UINT" + } + ], + "DwmEnableMMCSS": [ + { + "name": "fEnableMMCSS", + "type": "BOOL" + } + ], + "DwmExtendFrameIntoClientArea": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pMarInset", + "type": "MARGINS" + } + ], + "DwmGetColorizationColor": [ + { + "name": "pcrColorization", + "type": "DWORD" + }, + { + "name": "pfOpaqueBlend", + "type": "BOOL" + } + ], + "DwmGetCompositionTimingInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pTimingInfo", + "type": "DWM_TIMING_INFO" + } + ], + "DwmGetWindowAttribute": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwAttribute", + "type": "DWORD" + }, + { + "name": "pvAttribute", + "type": "PVOID" + }, + { + "name": "cbAttribute", + "type": "DWORD" + } + ], + "DwmIsCompositionEnabled": [ + { + "name": "pfEnabled", + "type": "BOOL" + } + ], + "DwmModifyPreviousDxFrameDuration": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "cRefreshes", + "type": "INT" + }, + { + "name": "fRelative", + "type": "BOOL" + } + ], + "DwmQueryThumbnailSourceSize": [ + { + "name": "hThumbnail", + "type": "HTHUMBNAIL" + }, + { + "name": "pSize", + "type": "PSIZE" + } + ], + "DwmRegisterThumbnail": [ + { + "name": "hwndDestination", + "type": "HWND" + }, + { + "name": "hwndSource", + "type": "HWND" + }, + { + "name": "phThumbnailId", + "type": "PHTHUMBNAIL" + } + ], + "DwmSetDxFrameDuration": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "cRefreshes", + "type": "INT" + } + ], + "DwmSetPresentParameters": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pPresentParams", + "type": "DWM_PRESENT_PARAMETERS" + } + ], + "DwmSetWindowAttribute": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwAttribute", + "type": "DWORD" + }, + { + "name": "pvAttribute", + "type": "LPCVOID" + }, + { + "name": "cbAttribute", + "type": "DWORD" + } + ], + "DwmUnregisterThumbnail": [ + { + "name": "hThumbnailId", + "type": "HTHUMBNAIL" + } + ], + "DwmUpdateThumbnailProperties": [ + { + "name": "hThumbnailId", + "type": "HTHUMBNAIL" + }, + { + "name": "ptnProperties", + "type": "DWM_THUMBNAIL_PROPERTIES" + } + ], + "DwmSetIconicThumbnail": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hbmp", + "type": "HBITMAP" + }, + { + "name": "dwSITFlags", + "type": "DWORD" + } + ], + "DwmSetIconicLivePreviewBitmap": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hbmp", + "type": "HBITMAP" + }, + { + "name": "pptClient", + "type": "POINT" + }, + { + "name": "dwSITFlags", + "type": "DWORD" + } + ], + "DwmInvalidateIconicBitmaps": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "DwmAttachMilContent": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "DwmDetachMilContent": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "DwmGetGraphicsStreamTransformHint": [ + { + "name": "uIndex", + "type": "UINT" + }, + { + "name": "pTransform", + "type": "MilMatrix3x2D" + } + ], + "DwmGetGraphicsStreamClient": [ + { + "name": "uIndex", + "type": "UINT" + }, + { + "name": "pClientUuid", + "type": "UUID" + } + ], + "DwmGetTransportAttributes": [ + { + "name": "pfIsRemoting", + "type": "BOOL" + }, + { + "name": "pfIsConnected", + "type": "BOOL" + }, + { + "name": "pDwGeneration", + "type": "DWORD" + } + ], + "DwmTransitionOwnedWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "target", + "type": { + "name": "DWMTRANSITION_OWNEDWINDOW_TARGET", + "data_type": "Enum", + "enumerators": [] + } + } + ], + "DwmRenderGesture": [ + { + "name": "gt", + "type": { + "name": "GESTURE_TYPE", + "data_type": "Enum", + "enumerators": [] + } + }, + { + "name": "cContacts", + "type": "UINT" + }, + { + "name": "pdwPointerID", + "type": "DWORD" + }, + { + "name": "pPoints", + "type": "POINT" + } + ], + "DwmTetherContact": [ + { + "name": "dwPointerID", + "type": "DWORD" + }, + { + "name": "fEnable", + "type": "BOOL" + }, + { + "name": "ptTether", + "type": "POINT" + } + ], + "DwmShowContact": [ + { + "name": "dwPointerID", + "type": "DWORD" + }, + { + "name": "eShowContact", + "type": { + "name": "DWM_SHOWCONTACT", + "data_type": "Enum", + "enumerators": [] + } + } + ], + "DwmGetUnmetTabRequirements": [ + { + "name": "appWindow", + "type": "HWND" + }, + { + "name": "value", + "type": { + "name": "DWM_TAB_WINDOW_REQUIREMENTS", + "data_type": "Enum", + "enumerators": [] + } + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/dxgi_dll.json b/qiling/extensions/windows_sdk/defs/dxgi_dll.json new file mode 100644 index 000000000..11138d457 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/dxgi_dll.json @@ -0,0 +1,50 @@ +{ + "CreateDXGIFactory2": [ + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppFactory", + "type": "void" + } + ], + "DXGIGetDebugInterface1": [ + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "pDebug", + "type": "void" + } + ], + "CreateDXGIFactory": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppFactory", + "type": "void" + } + ], + "CreateDXGIFactory1": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppFactory", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/dxgidebug_dll.json b/qiling/extensions/windows_sdk/defs/dxgidebug_dll.json new file mode 100644 index 000000000..7fe795c70 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/dxgidebug_dll.json @@ -0,0 +1,12 @@ +{ + "DXGIGetDebugInterface": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppDebug", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/dxva2_dll.json b/qiling/extensions/windows_sdk/defs/dxva2_dll.json new file mode 100644 index 000000000..3d69b60f9 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/dxva2_dll.json @@ -0,0 +1,410 @@ +{ + "GetVCPFeatureAndVCPFeatureReply": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "bVCPCode", + "type": "BYTE" + }, + { + "name": "pvct", + "type": "LPMC_VCP_CODE_TYPE" + }, + { + "name": "pdwCurrentValue", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumValue", + "type": "LPDWORD" + } + ], + "SetVCPFeature": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "bVCPCode", + "type": "BYTE" + }, + { + "name": "dwNewValue", + "type": "DWORD" + } + ], + "SaveCurrentSettings": [ + { + "name": "hMonitor", + "type": "HANDLE" + } + ], + "GetCapabilitiesStringLength": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pdwCapabilitiesStringLengthInCharacters", + "type": "LPDWORD" + } + ], + "CapabilitiesRequestAndCapabilitiesReply": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pszASCIICapabilitiesString", + "type": "LPSTR" + }, + { + "name": "dwCapabilitiesStringLengthInCharacters", + "type": "DWORD" + } + ], + "GetTimingReport": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pmtrMonitorTimingReport", + "type": "LPMC_TIMING_REPORT" + } + ], + "GetMonitorCapabilities": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pdwMonitorCapabilities", + "type": "LPDWORD" + }, + { + "name": "pdwSupportedColorTemperatures", + "type": "LPDWORD" + } + ], + "SaveCurrentMonitorSettings": [ + { + "name": "hMonitor", + "type": "HANDLE" + } + ], + "GetMonitorTechnologyType": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pdtyDisplayTechnologyType", + "type": "LPMC_DISPLAY_TECHNOLOGY_TYPE" + } + ], + "GetMonitorBrightness": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pdwMinimumBrightness", + "type": "LPDWORD" + }, + { + "name": "pdwCurrentBrightness", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumBrightness", + "type": "LPDWORD" + } + ], + "GetMonitorContrast": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pdwMinimumContrast", + "type": "LPDWORD" + }, + { + "name": "pdwCurrentContrast", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumContrast", + "type": "LPDWORD" + } + ], + "GetMonitorColorTemperature": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pctCurrentColorTemperature", + "type": "LPMC_COLOR_TEMPERATURE" + } + ], + "GetMonitorRedGreenOrBlueDrive": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "dtDriveType", + "type": "MC_DRIVE_TYPE" + }, + { + "name": "pdwMinimumDrive", + "type": "LPDWORD" + }, + { + "name": "pdwCurrentDrive", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumDrive", + "type": "LPDWORD" + } + ], + "GetMonitorRedGreenOrBlueGain": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "gtGainType", + "type": "MC_GAIN_TYPE" + }, + { + "name": "pdwMinimumGain", + "type": "LPDWORD" + }, + { + "name": "pdwCurrentGain", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumGain", + "type": "LPDWORD" + } + ], + "SetMonitorBrightness": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "dwNewBrightness", + "type": "DWORD" + } + ], + "SetMonitorContrast": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "dwNewContrast", + "type": "DWORD" + } + ], + "SetMonitorColorTemperature": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "ctCurrentColorTemperature", + "type": "MC_COLOR_TEMPERATURE" + } + ], + "SetMonitorRedGreenOrBlueDrive": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "dtDriveType", + "type": "MC_DRIVE_TYPE" + }, + { + "name": "dwNewDrive", + "type": "DWORD" + } + ], + "SetMonitorRedGreenOrBlueGain": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "gtGainType", + "type": "MC_GAIN_TYPE" + }, + { + "name": "dwNewGain", + "type": "DWORD" + } + ], + "DegaussMonitor": [ + { + "name": "hMonitor", + "type": "HANDLE" + } + ], + "GetMonitorDisplayAreaSize": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "stSizeType", + "type": "MC_SIZE_TYPE" + }, + { + "name": "pdwMinimumWidthOrHeight", + "type": "LPDWORD" + }, + { + "name": "pdwCurrentWidthOrHeight", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumWidthOrHeight", + "type": "LPDWORD" + } + ], + "GetMonitorDisplayAreaPosition": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "ptPositionType", + "type": "MC_POSITION_TYPE" + }, + { + "name": "pdwMinimumPosition", + "type": "LPDWORD" + }, + { + "name": "pdwCurrentPosition", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumPosition", + "type": "LPDWORD" + } + ], + "SetMonitorDisplayAreaSize": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "stSizeType", + "type": "MC_SIZE_TYPE" + }, + { + "name": "dwNewDisplayAreaWidthOrHeight", + "type": "DWORD" + } + ], + "SetMonitorDisplayAreaPosition": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "ptPositionType", + "type": "MC_POSITION_TYPE" + }, + { + "name": "dwNewPosition", + "type": "DWORD" + } + ], + "RestoreMonitorFactoryColorDefaults": [ + { + "name": "hMonitor", + "type": "HANDLE" + } + ], + "RestoreMonitorFactoryDefaults": [ + { + "name": "hMonitor", + "type": "HANDLE" + } + ], + "GetNumberOfPhysicalMonitorsFromHMONITOR": [ + { + "name": "hMonitor", + "type": "HMONITOR" + }, + { + "name": "pdwNumberOfPhysicalMonitors", + "type": "LPDWORD" + } + ], + "GetNumberOfPhysicalMonitorsFromIDirect3DDevice9": [ + { + "name": "pDirect3DDevice9", + "type": "IDirect3DDevice9" + }, + { + "name": "pdwNumberOfPhysicalMonitors", + "type": "LPDWORD" + } + ], + "GetPhysicalMonitorsFromHMONITOR": [ + { + "name": "hMonitor", + "type": "HMONITOR" + }, + { + "name": "dwPhysicalMonitorArraySize", + "type": "DWORD" + }, + { + "name": "pPhysicalMonitorArray", + "type": "LPPHYSICAL_MONITOR" + } + ], + "GetPhysicalMonitorsFromIDirect3DDevice9": [ + { + "name": "pDirect3DDevice9", + "type": "IDirect3DDevice9" + }, + { + "name": "dwPhysicalMonitorArraySize", + "type": "DWORD" + }, + { + "name": "pPhysicalMonitorArray", + "type": "LPPHYSICAL_MONITOR" + } + ], + "DestroyPhysicalMonitor": [ + { + "name": "hMonitor", + "type": "HANDLE" + } + ], + "DestroyPhysicalMonitors": [ + { + "name": "dwPhysicalMonitorArraySize", + "type": "DWORD" + }, + { + "name": "pPhysicalMonitorArray", + "type": "LPPHYSICAL_MONITOR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/eappcfg_dll.json b/qiling/extensions/windows_sdk/defs/eappcfg_dll.json new file mode 100644 index 000000000..2cedae229 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/eappcfg_dll.json @@ -0,0 +1,402 @@ +{ + "EapHostPeerGetMethods": [ + { + "name": "pEapMethodInfoArray", + "type": "EAP_METHOD_INFO_ARRAY" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + } + ], + "EapHostPeerGetMethodProperties": [ + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "eapMethodType", + "type": "EAP_METHOD_TYPE" + }, + { + "name": "hUserImpersonationToken", + "type": "HANDLE" + }, + { + "name": "dwEapConnDataSize", + "type": "DWORD" + }, + { + "name": "pbEapConnData", + "type": "BYTE" + }, + { + "name": "dwUserDataSize", + "type": "DWORD" + }, + { + "name": "pbUserData", + "type": "BYTE" + }, + { + "name": "pMethodPropertyArray", + "type": "EAP_METHOD_PROPERTY_ARRAY" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + } + ], + "EapHostPeerInvokeConfigUI": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "eapMethodType", + "type": "EAP_METHOD_TYPE" + }, + { + "name": "dwSizeOfConfigIn", + "type": "DWORD" + }, + { + "name": "pConfigIn", + "type": "BYTE" + }, + { + "name": "pdwSizeOfConfigOut", + "type": "DWORD" + }, + { + "name": "ppConfigOut", + "type": "BYTE" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + } + ], + "EapHostPeerQueryCredentialInputFields": [ + { + "name": "hUserImpersonationToken", + "type": "HANDLE" + }, + { + "name": "eapMethodType", + "type": "EAP_METHOD_TYPE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwEapConnDataSize", + "type": "DWORD" + }, + { + "name": "pbEapConnData", + "type": "BYTE" + }, + { + "name": "pEapConfigInputFieldArray", + "type": "EAP_CONFIG_INPUT_FIELD_ARRAY" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + } + ], + "EapHostPeerQueryUserBlobFromCredentialInputFields": [ + { + "name": "hUserImpersonationToken", + "type": "HANDLE" + }, + { + "name": "eapMethodType", + "type": "EAP_METHOD_TYPE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwEapConnDataSize", + "type": "DWORD" + }, + { + "name": "pbEapConnData", + "type": "BYTE" + }, + { + "name": "pEapConfigInputFieldArray", + "type": "EAP_CONFIG_INPUT_FIELD_ARRAY" + }, + { + "name": "pdwUserBlobSize", + "type": "DWORD" + }, + { + "name": "ppbUserBlob", + "type": "BYTE" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + } + ], + "EapHostPeerInvokeIdentityUI": [ + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "eapMethodType", + "type": "EAP_METHOD_TYPE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwSizeofConnectionData", + "type": "DWORD" + }, + { + "name": "pConnectionData", + "type": "BYTE" + }, + { + "name": "dwSizeofUserData", + "type": "DWORD" + }, + { + "name": "pUserData", + "type": "BYTE" + }, + { + "name": "pdwSizeOfUserDataOut", + "type": "DWORD" + }, + { + "name": "ppUserDataOut", + "type": "BYTE" + }, + { + "name": "ppwszIdentity", + "type": "LPWSTR" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + }, + { + "name": "ppvReserved", + "type": "LPVOID" + } + ], + "EapHostPeerInvokeInteractiveUI": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwSizeofUIContextData", + "type": "DWORD" + }, + { + "name": "pUIContextData", + "type": "BYTE" + }, + { + "name": "pdwSizeOfDataFromInteractiveUI", + "type": "DWORD" + }, + { + "name": "ppDataFromInteractiveUI", + "type": "BYTE" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + } + ], + "EapHostPeerQueryInteractiveUIInputFields": [ + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwSizeofUIContextData", + "type": "DWORD" + }, + { + "name": "pUIContextData", + "type": "BYTE" + }, + { + "name": "pEapInteractiveUIData", + "type": "EAP_INTERACTIVE_UI_DATA" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + }, + { + "name": "ppvReserved", + "type": "LPVOID" + } + ], + "EapHostPeerQueryUIBlobFromInteractiveUIInputFields": [ + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwSizeofUIContextData", + "type": "DWORD" + }, + { + "name": "pUIContextData", + "type": "BYTE" + }, + { + "name": "pEapInteractiveUIData", + "type": "EAP_INTERACTIVE_UI_DATA" + }, + { + "name": "pdwSizeOfDataFromInteractiveUI", + "type": "DWORD" + }, + { + "name": "ppDataFromInteractiveUI", + "type": "BYTE" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + }, + { + "name": "ppvReserved", + "type": "LPVOID" + } + ], + "EapHostPeerConfigXml2Blob": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pConfigDoc", + "type": "IXMLDOMNode" + }, + { + "name": "pdwSizeOfConfigOut", + "type": "DWORD" + }, + { + "name": "ppConfigOut", + "type": "BYTE" + }, + { + "name": "pEapMethodType", + "type": "EAP_METHOD_TYPE" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + } + ], + "EapHostPeerCredentialsXml2Blob": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pCredentialsDoc", + "type": "IXMLDOMNode" + }, + { + "name": "dwSizeOfConfigIn", + "type": "DWORD" + }, + { + "name": "pConfigIn", + "type": "BYTE" + }, + { + "name": "pdwSizeOfCredentialsOut", + "type": "DWORD" + }, + { + "name": "ppCredentialsOut", + "type": "BYTE" + }, + { + "name": "pEapMethodType", + "type": "EAP_METHOD_TYPE" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + } + ], + "EapHostPeerConfigBlob2Xml": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "eapMethodType", + "type": "EAP_METHOD_TYPE" + }, + { + "name": "dwSizeOfConfigIn", + "type": "DWORD" + }, + { + "name": "pConfigIn", + "type": "BYTE" + }, + { + "name": "ppConfigDoc", + "type": "IXMLDOMDocument2" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + } + ], + "EapHostPeerFreeMemory": [ + { + "name": "pData", + "type": "BYTE" + } + ], + "EapHostPeerFreeErrorMemory": [ + { + "name": "pEapError", + "type": "EAP_ERROR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/elscore_dll.json b/qiling/extensions/windows_sdk/defs/elscore_dll.json new file mode 100644 index 000000000..c9bb013f6 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/elscore_dll.json @@ -0,0 +1,68 @@ +{ + "MappingGetServices": [ + { + "name": "pOptions", + "type": "PMAPPING_ENUM_OPTIONS" + }, + { + "name": "prgServices", + "type": "PMAPPING_SERVICE_INFO" + }, + { + "name": "pdwServicesCount", + "type": "DWORD" + } + ], + "MappingFreeServices": [ + { + "name": "pServiceInfo", + "type": "PMAPPING_SERVICE_INFO" + } + ], + "MappingRecognizeText": [ + { + "name": "pServiceInfo", + "type": "PMAPPING_SERVICE_INFO" + }, + { + "name": "pszText", + "type": "LPCWSTR" + }, + { + "name": "dwLength", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pOptions", + "type": "PMAPPING_OPTIONS" + }, + { + "name": "pbag", + "type": "PMAPPING_PROPERTY_BAG" + } + ], + "MappingDoAction": [ + { + "name": "pBag", + "type": "PMAPPING_PROPERTY_BAG" + }, + { + "name": "dwRangeIndex", + "type": "DWORD" + }, + { + "name": "pszActionId", + "type": "LPCWSTR" + } + ], + "MappingFreePropertyBag": [ + { + "name": "pBag", + "type": "PMAPPING_PROPERTY_BAG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/evr_dll.json b/qiling/extensions/windows_sdk/defs/evr_dll.json new file mode 100644 index 000000000..d6c42eee0 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/evr_dll.json @@ -0,0 +1,26 @@ +{ + "MFCreateDXSurfaceBuffer": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "punkSurface", + "type": "IUnknown" + }, + { + "name": "fBottomUpWhenLinear", + "type": "BOOL" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFIsFormatYUV": [ + { + "name": "Format", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/faultrep_dll.json b/qiling/extensions/windows_sdk/defs/faultrep_dll.json new file mode 100644 index 000000000..adf279e14 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/faultrep_dll.json @@ -0,0 +1,34 @@ +{ + "ReportFault": [ + { + "name": "pep", + "type": "LPEXCEPTION_POINTERS" + }, + { + "name": "dwOpt", + "type": "DWORD" + } + ], + "AddERExcludedApplicationA": [ + { + "name": "szApplication", + "type": "LPCSTR" + } + ], + "AddERExcludedApplicationW": [ + { + "name": "wszApplication", + "type": "LPCWSTR" + } + ], + "WerReportHang": [ + { + "name": "hwndHungApp", + "type": "HWND" + }, + { + "name": "pwzHungApplicationName", + "type": "PCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/firewallapi_dll.json b/qiling/extensions/windows_sdk/defs/firewallapi_dll.json new file mode 100644 index 000000000..d9001a316 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/firewallapi_dll.json @@ -0,0 +1,144 @@ +{ + "NetworkIsolationSetupAppContainerBinaries": [ + { + "name": "applicationContainerSid", + "type": "PSID" + }, + { + "name": "packageFullName", + "type": "LPCWSTR" + }, + { + "name": "packageFolder", + "type": "LPCWSTR" + }, + { + "name": "displayName", + "type": "LPCWSTR" + }, + { + "name": "bBinariesFullyComputed", + "type": "BOOL" + }, + { + "name": "binaries", + "type": "LPCWSTR" + }, + { + "name": "binariesCount", + "type": "DWORD" + } + ], + "NetworkIsolationRegisterForAppContainerChanges": [ + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "callback", + "type": "PAC_CHANGES_CALLBACK_FN" + }, + { + "name": "context", + "type": "PVOID" + }, + { + "name": "registrationObject", + "type": "HANDLE" + } + ], + "NetworkIsolationUnregisterForAppContainerChanges": [ + { + "name": "registrationObject", + "type": "HANDLE" + } + ], + "NetworkIsolationEnumerateAppContainerRules": [ + { + "name": "newEnum", + "type": "IEnumVARIANT" + } + ], + "NetworkIsolationFreeAppContainers": [ + { + "name": "pPublicAppCs", + "type": "PINET_FIREWALL_APP_CONTAINER" + } + ], + "NetworkIsolationEnumAppContainers": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pdwNumPublicAppCs", + "type": "DWORD" + }, + { + "name": "ppPublicAppCs", + "type": "PINET_FIREWALL_APP_CONTAINER" + } + ], + "NetworkIsolationGetAppContainerConfig": [ + { + "name": "pdwNumPublicAppCs", + "type": "DWORD" + }, + { + "name": "appContainerSids", + "type": "PSID_AND_ATTRIBUTES" + } + ], + "NetworkIsolationSetAppContainerConfig": [ + { + "name": "dwNumPublicAppCs", + "type": "DWORD" + }, + { + "name": "appContainerSids", + "type": "PSID_AND_ATTRIBUTES" + } + ], + "NetworkIsolationDiagnoseConnectFailureAndGetInfo": [ + { + "name": "wszServerName", + "type": "LPCWSTR" + }, + { + "name": "netIsoError", + "type": "NETISO_ERROR_TYPE" + } + ], + "NetworkIsolationGetEnterpriseIdAsync": [ + { + "name": "wszServerName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "callback", + "type": "PNETISO_EDP_ID_CALLBACK_FN" + }, + { + "name": "hOperation", + "type": "HANDLE" + } + ], + "NetworkIsolationGetEnterpriseIdClose": [ + { + "name": "hOperation", + "type": "HANDLE" + }, + { + "name": "bWaitForOperation", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/fltlib_dll.json b/qiling/extensions/windows_sdk/defs/fltlib_dll.json new file mode 100644 index 000000000..a1a0e4c5a --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/fltlib_dll.json @@ -0,0 +1,466 @@ +{ + "FilterLoad": [ + { + "name": "lpFilterName", + "type": "LPCWSTR" + } + ], + "FilterUnload": [ + { + "name": "lpFilterName", + "type": "LPCWSTR" + } + ], + "FilterCreate": [ + { + "name": "lpFilterName", + "type": "LPCWSTR" + }, + { + "name": "hFilter", + "type": "HFILTER" + } + ], + "FilterClose": [ + { + "name": "hFilter", + "type": "HFILTER" + } + ], + "FilterInstanceCreate": [ + { + "name": "lpFilterName", + "type": "LPCWSTR" + }, + { + "name": "lpVolumeName", + "type": "LPCWSTR" + }, + { + "name": "lpInstanceName", + "type": "LPCWSTR" + }, + { + "name": "hInstance", + "type": "HFILTER_INSTANCE" + } + ], + "FilterInstanceClose": [ + { + "name": "hInstance", + "type": "HFILTER_INSTANCE" + } + ], + "FilterAttach": [ + { + "name": "lpFilterName", + "type": "LPCWSTR" + }, + { + "name": "lpVolumeName", + "type": "LPCWSTR" + }, + { + "name": "lpInstanceName", + "type": "LPCWSTR" + }, + { + "name": "dwCreatedInstanceNameLength", + "type": "DWORD" + }, + { + "name": "lpCreatedInstanceName", + "type": "LPWSTR" + } + ], + "FilterAttachAtAltitude": [ + { + "name": "lpFilterName", + "type": "LPCWSTR" + }, + { + "name": "lpVolumeName", + "type": "LPCWSTR" + }, + { + "name": "lpAltitude", + "type": "LPCWSTR" + }, + { + "name": "lpInstanceName", + "type": "LPCWSTR" + }, + { + "name": "dwCreatedInstanceNameLength", + "type": "DWORD" + }, + { + "name": "lpCreatedInstanceName", + "type": "LPWSTR" + } + ], + "FilterDetach": [ + { + "name": "lpFilterName", + "type": "LPCWSTR" + }, + { + "name": "lpVolumeName", + "type": "LPCWSTR" + }, + { + "name": "lpInstanceName", + "type": "LPCWSTR" + } + ], + "FilterFindFirst": [ + { + "name": "dwInformationClass", + "type": "FILTER_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + }, + { + "name": "lpFilterFind", + "type": "LPHANDLE" + } + ], + "FilterFindNext": [ + { + "name": "hFilterFind", + "type": "HANDLE" + }, + { + "name": "dwInformationClass", + "type": "FILTER_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "FilterFindClose": [ + { + "name": "hFilterFind", + "type": "HANDLE" + } + ], + "FilterVolumeFindFirst": [ + { + "name": "dwInformationClass", + "type": "FILTER_VOLUME_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + }, + { + "name": "lpVolumeFind", + "type": "PHANDLE" + } + ], + "FilterVolumeFindNext": [ + { + "name": "hVolumeFind", + "type": "HANDLE" + }, + { + "name": "dwInformationClass", + "type": "FILTER_VOLUME_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "FilterVolumeFindClose": [ + { + "name": "hVolumeFind", + "type": "HANDLE" + } + ], + "FilterInstanceFindFirst": [ + { + "name": "lpFilterName", + "type": "LPCWSTR" + }, + { + "name": "dwInformationClass", + "type": "INSTANCE_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + }, + { + "name": "lpFilterInstanceFind", + "type": "LPHANDLE" + } + ], + "FilterInstanceFindNext": [ + { + "name": "hFilterInstanceFind", + "type": "HANDLE" + }, + { + "name": "dwInformationClass", + "type": "INSTANCE_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "FilterInstanceFindClose": [ + { + "name": "hFilterInstanceFind", + "type": "HANDLE" + } + ], + "FilterVolumeInstanceFindFirst": [ + { + "name": "lpVolumeName", + "type": "LPCWSTR" + }, + { + "name": "dwInformationClass", + "type": "INSTANCE_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + }, + { + "name": "lpVolumeInstanceFind", + "type": "LPHANDLE" + } + ], + "FilterVolumeInstanceFindNext": [ + { + "name": "hVolumeInstanceFind", + "type": "HANDLE" + }, + { + "name": "dwInformationClass", + "type": "INSTANCE_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "FilterVolumeInstanceFindClose": [ + { + "name": "hVolumeInstanceFind", + "type": "HANDLE" + } + ], + "FilterGetInformation": [ + { + "name": "hFilter", + "type": "HFILTER" + }, + { + "name": "dwInformationClass", + "type": "FILTER_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "FilterInstanceGetInformation": [ + { + "name": "hInstance", + "type": "HFILTER_INSTANCE" + }, + { + "name": "dwInformationClass", + "type": "INSTANCE_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "FilterConnectCommunicationPort": [ + { + "name": "lpPortName", + "type": "LPCWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "lpContext", + "type": "LPCVOID" + }, + { + "name": "wSizeOfContext", + "type": "WORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "hPort", + "type": "HANDLE" + } + ], + "FilterSendMessage": [ + { + "name": "hPort", + "type": "HANDLE" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "dwInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "dwOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "FilterGetMessage": [ + { + "name": "hPort", + "type": "HANDLE" + }, + { + "name": "lpMessageBuffer", + "type": "PFILTER_MESSAGE_HEADER" + }, + { + "name": "dwMessageBufferSize", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "FilterReplyMessage": [ + { + "name": "hPort", + "type": "HANDLE" + }, + { + "name": "lpReplyBuffer", + "type": "PFILTER_REPLY_HEADER" + }, + { + "name": "dwReplyBufferSize", + "type": "DWORD" + } + ], + "FilterGetDosName": [ + { + "name": "lpVolumeName", + "type": "LPCWSTR" + }, + { + "name": "lpDosName", + "type": "LPWSTR" + }, + { + "name": "dwDosNameBufferSize", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/fontsub_dll.json b/qiling/extensions/windows_sdk/defs/fontsub_dll.json new file mode 100644 index 000000000..ab20f0be0 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/fontsub_dll.json @@ -0,0 +1,122 @@ +{ + "CreateFontPackage": [ + { + "name": "puchSrcBuffer", + "type": "unsigned char" + }, + { + "name": "ulSrcBufferSize", + "type": "unsigned long" + }, + { + "name": "ppuchFontPackageBuffer", + "type": "unsigned char" + }, + { + "name": "pulFontPackageBufferSize", + "type": "unsigned long" + }, + { + "name": "pulBytesWritten", + "type": "unsigned long" + }, + { + "name": "usFlag", + "type": "unsigned short" + }, + { + "name": "usTTCIndex", + "type": "unsigned short" + }, + { + "name": "usSubsetFormat", + "type": "unsigned short" + }, + { + "name": "usSubsetLanguage", + "type": "unsigned short" + }, + { + "name": "usSubsetPlatform", + "type": "unsigned short" + }, + { + "name": "usSubsetEncoding", + "type": "unsigned short" + }, + { + "name": "pusSubsetKeepList", + "type": "unsigned short" + }, + { + "name": "usSubsetListCount", + "type": "unsigned short" + }, + { + "name": "lpfnAllocate", + "type": "CFP_ALLOCPROC" + }, + { + "name": "lpfnReAllocate", + "type": "CFP_REALLOCPROC" + }, + { + "name": "lpfnFree", + "type": "CFP_FREEPROC" + }, + { + "name": "lpvReserved", + "type": "void" + } + ], + "MergeFontPackage": [ + { + "name": "puchMergeFontBuffer", + "type": "unsigned char" + }, + { + "name": "ulMergeFontBufferSize", + "type": "unsigned long" + }, + { + "name": "puchFontPackageBuffer", + "type": "unsigned char" + }, + { + "name": "ulFontPackageBufferSize", + "type": "unsigned long" + }, + { + "name": "ppuchDestBuffer", + "type": "unsigned char" + }, + { + "name": "pulDestBufferSize", + "type": "unsigned long" + }, + { + "name": "pulBytesWritten", + "type": "unsigned long" + }, + { + "name": "usMode", + "type": "unsigned short" + }, + { + "name": "lpfnAllocate", + "type": "CFP_ALLOCPROC" + }, + { + "name": "lpfnReAllocate", + "type": "CFP_REALLOCPROC" + }, + { + "name": "lpfnFree", + "type": "CFP_FREEPROC" + }, + { + "name": "lpvReserved", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/fwpuclnt_dll.json b/qiling/extensions/windows_sdk/defs/fwpuclnt_dll.json new file mode 100644 index 000000000..1dfb4ecb8 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/fwpuclnt_dll.json @@ -0,0 +1,3034 @@ +{ + "FwpmFreeMemory0": [ + { + "name": "p", + "type": "void" + } + ], + "FwpmEngineOpen0": [ + { + "name": "serverName", + "type": "wchar_t" + }, + { + "name": "authnService", + "type": "UINT32" + }, + { + "name": "authIdentity", + "type": "SEC_WINNT_AUTH_IDENTITY_W" + }, + { + "name": "session", + "type": "FWPM_SESSION0" + }, + { + "name": "engineHandle", + "type": "HANDLE" + } + ], + "FwpmEngineClose0": [ + { + "name": "engineHandle", + "type": "HANDLE" + } + ], + "FwpmEngineGetOption0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "option", + "type": "FWPM_ENGINE_OPTION" + }, + { + "name": "value", + "type": "FWP_VALUE0" + } + ], + "FwpmEngineSetOption0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "option", + "type": "FWPM_ENGINE_OPTION" + }, + { + "name": "newValue", + "type": "FWP_VALUE0" + } + ], + "FwpmEngineGetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmEngineSetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmSessionCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "FWPM_SESSION_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmSessionEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_SESSION0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmSessionDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmTransactionBegin0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "flags", + "type": "UINT32" + } + ], + "FwpmTransactionCommit0": [ + { + "name": "engineHandle", + "type": "HANDLE" + } + ], + "FwpmTransactionAbort0": [ + { + "name": "engineHandle", + "type": "HANDLE" + } + ], + "FwpmProviderAdd0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "provider", + "type": "FWPM_PROVIDER0" + }, + { + "name": "sd", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmProviderDeleteByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + } + ], + "FwpmProviderGetByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "provider", + "type": "FWPM_PROVIDER0" + } + ], + "FwpmProviderCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "FWPM_PROVIDER_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmProviderEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_PROVIDER0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmProviderDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmProviderGetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmProviderSetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmProviderSubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_PROVIDER_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_PROVIDER_CHANGE_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmProviderUnsubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmProviderSubscriptionsGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "entries", + "type": "FWPM_PROVIDER_SUBSCRIPTION0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "FwpmProviderContextAdd0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "providerContext", + "type": "FWPM_PROVIDER_CONTEXT0" + }, + { + "name": "sd", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "FwpmProviderContextAdd1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "providerContext", + "type": "FWPM_PROVIDER_CONTEXT1" + }, + { + "name": "sd", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "FwpmProviderContextAdd2": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "providerContext", + "type": "FWPM_PROVIDER_CONTEXT2" + }, + { + "name": "sd", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "FwpmProviderContextDeleteById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "FwpmProviderContextDeleteByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + } + ], + "FwpmProviderContextGetById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "providerContext", + "type": "FWPM_PROVIDER_CONTEXT0" + } + ], + "FwpmProviderContextGetById1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "providerContext", + "type": "FWPM_PROVIDER_CONTEXT1" + } + ], + "FwpmProviderContextGetById2": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "providerContext", + "type": "FWPM_PROVIDER_CONTEXT2" + } + ], + "FwpmProviderContextGetByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "providerContext", + "type": "FWPM_PROVIDER_CONTEXT0" + } + ], + "FwpmProviderContextGetByKey1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "providerContext", + "type": "FWPM_PROVIDER_CONTEXT1" + } + ], + "FwpmProviderContextGetByKey2": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "providerContext", + "type": "FWPM_PROVIDER_CONTEXT2" + } + ], + "FwpmProviderContextCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "FWPM_PROVIDER_CONTEXT_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmProviderContextEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_PROVIDER_CONTEXT0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmProviderContextEnum1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_PROVIDER_CONTEXT1" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmProviderContextEnum2": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_PROVIDER_CONTEXT2" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmProviderContextDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmProviderContextGetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmProviderContextSetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmProviderContextSubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_PROVIDER_CONTEXT_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_PROVIDER_CONTEXT_CHANGE_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmProviderContextUnsubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmProviderContextSubscriptionsGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "entries", + "type": "FWPM_PROVIDER_CONTEXT_SUBSCRIPTION0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "FwpmSubLayerAdd0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subLayer", + "type": "FWPM_SUBLAYER0" + }, + { + "name": "sd", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmSubLayerDeleteByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + } + ], + "FwpmSubLayerGetByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "subLayer", + "type": "FWPM_SUBLAYER0" + } + ], + "FwpmSubLayerCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "FWPM_SUBLAYER_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmSubLayerEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_SUBLAYER0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmSubLayerDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmSubLayerGetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmSubLayerSetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmSubLayerSubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_SUBLAYER_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_SUBLAYER_CHANGE_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmSubLayerUnsubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmSubLayerSubscriptionsGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "entries", + "type": "FWPM_SUBLAYER_SUBSCRIPTION0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "FwpmLayerGetById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT16" + }, + { + "name": "layer", + "type": "FWPM_LAYER0" + } + ], + "FwpmLayerGetByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "layer", + "type": "FWPM_LAYER0" + } + ], + "FwpmLayerCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "FWPM_LAYER_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmLayerEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_LAYER0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmLayerDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmLayerGetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmLayerSetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmCalloutAdd0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "callout", + "type": "FWPM_CALLOUT0" + }, + { + "name": "sd", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "id", + "type": "UINT32" + } + ], + "FwpmCalloutDeleteById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT32" + } + ], + "FwpmCalloutDeleteByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + } + ], + "FwpmCalloutGetById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT32" + }, + { + "name": "callout", + "type": "FWPM_CALLOUT0" + } + ], + "FwpmCalloutGetByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "callout", + "type": "FWPM_CALLOUT0" + } + ], + "FwpmCalloutCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "FWPM_CALLOUT_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmCalloutEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_CALLOUT0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmCalloutDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmCalloutGetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmCalloutSetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmCalloutSubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_CALLOUT_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_CALLOUT_CHANGE_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmCalloutUnsubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmCalloutSubscriptionsGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "entries", + "type": "FWPM_CALLOUT_SUBSCRIPTION0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "FwpmFilterAdd0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "filter", + "type": "FWPM_FILTER0" + }, + { + "name": "sd", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "FwpmFilterDeleteById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "FwpmFilterDeleteByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + } + ], + "FwpmFilterGetById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "filter", + "type": "FWPM_FILTER0" + } + ], + "FwpmFilterGetByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "filter", + "type": "FWPM_FILTER0" + } + ], + "FwpmFilterCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "FWPM_FILTER_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmFilterEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_FILTER0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmFilterDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmFilterGetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmFilterSetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmFilterSubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_FILTER_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_FILTER_CHANGE_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmFilterUnsubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmFilterSubscriptionsGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "entries", + "type": "FWPM_FILTER_SUBSCRIPTION0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "FwpmGetAppIdFromFileName0": [ + { + "name": "fileName", + "type": "PCWSTR" + }, + { + "name": "appId", + "type": "FWP_BYTE_BLOB" + } + ], + "FwpmIPsecTunnelAdd2": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "flags", + "type": "UINT32" + }, + { + "name": "mainModePolicy", + "type": "FWPM_PROVIDER_CONTEXT2" + }, + { + "name": "tunnelPolicy", + "type": "FWPM_PROVIDER_CONTEXT2" + }, + { + "name": "numFilterConditions", + "type": "UINT32" + }, + { + "name": "filterConditions", + "type": "FWPM_FILTER_CONDITION0" + }, + { + "name": "keyModKey", + "type": "GUID" + }, + { + "name": "sd", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmIPsecTunnelDeleteByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + } + ], + "IPsecGetStatistics0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "ipsecStatistics", + "type": "IPSEC_STATISTICS0" + } + ], + "IPsecGetStatistics1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "ipsecStatistics", + "type": "IPSEC_STATISTICS1" + } + ], + "IPsecSaContextCreate0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "outboundTraffic", + "type": "IPSEC_TRAFFIC0" + }, + { + "name": "inboundFilterId", + "type": "UINT64" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "IPsecSaContextCreate1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "outboundTraffic", + "type": "IPSEC_TRAFFIC1" + }, + { + "name": "virtualIfTunnelInfo", + "type": "IPSEC_VIRTUAL_IF_TUNNEL_INFO0" + }, + { + "name": "inboundFilterId", + "type": "UINT64" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "IPsecSaContextDeleteById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "IPsecSaContextGetById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "saContext", + "type": "IPSEC_SA_CONTEXT0" + } + ], + "IPsecSaContextGetById1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "saContext", + "type": "IPSEC_SA_CONTEXT1" + } + ], + "IPsecSaContextGetSpi0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "getSpi", + "type": "IPSEC_GETSPI0" + }, + { + "name": "inboundSpi", + "type": "IPSEC_SA_SPI" + } + ], + "IPsecSaContextGetSpi1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "getSpi", + "type": "IPSEC_GETSPI1" + }, + { + "name": "inboundSpi", + "type": "IPSEC_SA_SPI" + } + ], + "IPsecSaContextSetSpi0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "getSpi", + "type": "IPSEC_GETSPI1" + }, + { + "name": "inboundSpi", + "type": "IPSEC_SA_SPI" + } + ], + "IPsecSaContextAddInbound0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "inboundBundle", + "type": "IPSEC_SA_BUNDLE0" + } + ], + "IPsecSaContextAddOutbound0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "outboundBundle", + "type": "IPSEC_SA_BUNDLE0" + } + ], + "IPsecSaContextAddInbound1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "inboundBundle", + "type": "IPSEC_SA_BUNDLE1" + } + ], + "IPsecSaContextAddOutbound1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "outboundBundle", + "type": "IPSEC_SA_BUNDLE1" + } + ], + "IPsecSaContextExpire0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "IPsecSaContextUpdate0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "flags", + "type": "UINT64" + }, + { + "name": "newValues", + "type": "IPSEC_SA_CONTEXT1" + } + ], + "IPsecSaContextCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "IPSEC_SA_CONTEXT_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "IPsecSaContextEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "IPSEC_SA_CONTEXT0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "IPsecSaContextEnum1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "IPSEC_SA_CONTEXT1" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "IPsecSaContextDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "IPsecSaContextSubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "IPSEC_SA_CONTEXT_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "IPSEC_SA_CONTEXT_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "eventsHandle", + "type": "HANDLE" + } + ], + "IPsecSaContextUnsubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "eventsHandle", + "type": "HANDLE" + } + ], + "IPsecSaContextSubscriptionsGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "entries", + "type": "IPSEC_SA_CONTEXT_SUBSCRIPTION0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "IPsecSaCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "IPSEC_SA_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "IPsecSaEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "IPSEC_SA_DETAILS0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "IPsecSaEnum1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "IPSEC_SA_DETAILS1" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "IPsecSaDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "IPsecSaDbGetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "IPsecSaDbSetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "IPsecDospGetStatistics0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "idpStatistics", + "type": "IPSEC_DOSP_STATISTICS0" + } + ], + "IPsecDospStateCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "IPSEC_DOSP_STATE_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "IPsecDospStateEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "IPSEC_DOSP_STATE0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "IPsecDospStateDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "IPsecDospGetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "IPsecDospSetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "IPsecKeyManagerAddAndRegister0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "keyManager", + "type": "IPSEC_KEY_MANAGER0" + }, + { + "name": "keyManagerCallbacks", + "type": "IPSEC_KEY_MANAGER_CALLBACKS0" + }, + { + "name": "keyMgmtHandle", + "type": "HANDLE" + } + ], + "IPsecKeyManagerUnregisterAndDelete0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "keyMgmtHandle", + "type": "HANDLE" + } + ], + "IPsecKeyManagersGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "entries", + "type": "IPSEC_KEY_MANAGER0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "IPsecKeyManagerGetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "reserved", + "type": "void" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "IPsecKeyManagerSetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "reserved", + "type": "void" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "IkeextGetStatistics0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "ikeextStatistics", + "type": "IKEEXT_STATISTICS0" + } + ], + "IkeextGetStatistics1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "ikeextStatistics", + "type": "IKEEXT_STATISTICS1" + } + ], + "IkeextSaDeleteById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "IkeextSaGetById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "sa", + "type": "IKEEXT_SA_DETAILS0" + } + ], + "IkeextSaGetById1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "saLookupContext", + "type": "GUID" + }, + { + "name": "sa", + "type": "IKEEXT_SA_DETAILS1" + } + ], + "IkeextSaGetById2": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "saLookupContext", + "type": "GUID" + }, + { + "name": "sa", + "type": "IKEEXT_SA_DETAILS2" + } + ], + "IkeextSaCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "IKEEXT_SA_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "IkeextSaEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "IKEEXT_SA_DETAILS0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "IkeextSaEnum1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "IKEEXT_SA_DETAILS1" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "IkeextSaEnum2": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "IKEEXT_SA_DETAILS2" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "IkeextSaDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "IkeextSaDbGetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "IkeextSaDbSetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmNetEventCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "FWPM_NET_EVENT_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmNetEventEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_NET_EVENT0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmNetEventEnum1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_NET_EVENT1" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmNetEventEnum2": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_NET_EVENT2" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmNetEventEnum3": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_NET_EVENT3" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmNetEventDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmNetEventsGetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmNetEventsSetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmNetEventSubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_NET_EVENT_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_NET_EVENT_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "eventsHandle", + "type": "HANDLE" + } + ], + "FwpmNetEventUnsubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "eventsHandle", + "type": "HANDLE" + } + ], + "FwpmNetEventSubscriptionsGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "entries", + "type": "FWPM_NET_EVENT_SUBSCRIPTION0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "FwpmNetEventSubscribe1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_NET_EVENT_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_NET_EVENT_CALLBACK1" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "eventsHandle", + "type": "HANDLE" + } + ], + "FwpmNetEventSubscribe2": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_NET_EVENT_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_NET_EVENT_CALLBACK2" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "eventsHandle", + "type": "HANDLE" + } + ], + "FwpmSystemPortsGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "sysPorts", + "type": "FWPM_SYSTEM_PORTS0" + } + ], + "FwpmSystemPortsSubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "reserved", + "type": "void" + }, + { + "name": "callback", + "type": "FWPM_SYSTEM_PORTS_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "sysPortsHandle", + "type": "HANDLE" + } + ], + "FwpmSystemPortsUnsubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "sysPortsHandle", + "type": "HANDLE" + } + ], + "FwpmConnectionGetById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "connection", + "type": "FWPM_CONNECTION0" + } + ], + "FwpmConnectionEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_CONNECTION0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmConnectionCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "FWPM_CONNECTION_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmConnectionDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmConnectionGetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmConnectionSetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmConnectionSubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_CONNECTION_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_CONNECTION_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "eventsHandle", + "type": "HANDLE" + } + ], + "FwpmConnectionUnsubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "eventsHandle", + "type": "HANDLE" + } + ], + "FwpmConnectionSubscriptionsGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "entries", + "type": "FWPM_CONNECTION_SUBSCRIPTION0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "FwpmvSwitchEventSubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_VSWITCH_EVENT_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_VSWITCH_EVENT_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "subscriptionHandle", + "type": "HANDLE" + } + ], + "FwpmvSwitchEventUnsubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscriptionHandle", + "type": "HANDLE" + } + ], + "FwpmvSwitchEventsGetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmvSwitchEventsSetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/fxsutility_dll.json b/qiling/extensions/windows_sdk/defs/fxsutility_dll.json new file mode 100644 index 000000000..1816a2433 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/fxsutility_dll.json @@ -0,0 +1,12 @@ +{ + "SendToFaxRecipient": [ + { + "name": "sndMode", + "type": "SendToMode" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/gamemode_dll.json b/qiling/extensions/windows_sdk/defs/gamemode_dll.json new file mode 100644 index 000000000..8b220daf8 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/gamemode_dll.json @@ -0,0 +1,14 @@ +{ + "HasExpandedResources": [ + { + "name": "hasExpandedResources", + "type": "BOOL" + } + ], + "GetExpandedResourceExclusiveCpuCount": [ + { + "name": "exclusiveCpuCount", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/gdi32_dll.json b/qiling/extensions/windows_sdk/defs/gdi32_dll.json new file mode 100644 index 000000000..bcf97d5f8 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/gdi32_dll.json @@ -0,0 +1,5004 @@ +{ + "AddFontResourceA": [ + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "AddFontResourceW": [ + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "AnimatePalette": [ + { + "name": "hPal", + "type": "HPALETTE" + }, + { + "name": "iStartIndex", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "ppe", + "type": "PALETTEENTRY" + } + ], + "Arc": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + }, + { + "name": "x3", + "type": "int" + }, + { + "name": "y3", + "type": "int" + }, + { + "name": "x4", + "type": "int" + }, + { + "name": "y4", + "type": "int" + } + ], + "BitBlt": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "CancelDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "Chord": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + }, + { + "name": "x3", + "type": "int" + }, + { + "name": "y3", + "type": "int" + }, + { + "name": "x4", + "type": "int" + }, + { + "name": "y4", + "type": "int" + } + ], + "ChoosePixelFormat": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "ppfd", + "type": "PIXELFORMATDESCRIPTOR" + } + ], + "CloseMetaFile": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CombineRgn": [ + { + "name": "hrgnDst", + "type": "HRGN" + }, + { + "name": "hrgnSrc1", + "type": "HRGN" + }, + { + "name": "hrgnSrc2", + "type": "HRGN" + }, + { + "name": "iMode", + "type": "int" + } + ], + "CopyMetaFileA": [ + { + "name": "VOID", + "type": "HMETAFILE" + }, + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "CopyMetaFileW": [ + { + "name": "VOID", + "type": "HMETAFILE" + }, + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "CreateBitmap": [ + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "nPlanes", + "type": "UINT" + }, + { + "name": "nBitCount", + "type": "UINT" + }, + { + "name": "lpBits", + "type": "void" + } + ], + "CreateBitmapIndirect": [ + { + "name": "pbm", + "type": "BITMAP" + } + ], + "CreateBrushIndirect": [ + { + "name": "plbrush", + "type": "LOGBRUSH" + } + ], + "CreateCompatibleBitmap": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + } + ], + "CreateDiscardableBitmap": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + } + ], + "CreateCompatibleDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CreateDCA": [ + { + "name": "pwszDriver", + "type": "LPCSTR" + }, + { + "name": "pwszDevice", + "type": "LPCSTR" + }, + { + "name": "pszPort", + "type": "LPCSTR" + }, + { + "name": "pdm", + "type": "DEVMODEA" + } + ], + "CreateDCW": [ + { + "name": "pwszDriver", + "type": "LPCWSTR" + }, + { + "name": "pwszDevice", + "type": "LPCWSTR" + }, + { + "name": "pszPort", + "type": "LPCWSTR" + }, + { + "name": "pdm", + "type": "DEVMODEW" + } + ], + "CreateDIBitmap": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pbmih", + "type": "BITMAPINFOHEADER" + }, + { + "name": "flInit", + "type": "DWORD" + }, + { + "name": "pjBits", + "type": "void" + }, + { + "name": "pbmi", + "type": "BITMAPINFO" + }, + { + "name": "iUsage", + "type": "UINT" + } + ], + "CreateDIBPatternBrush": [ + { + "name": "h", + "type": "HGLOBAL" + }, + { + "name": "iUsage", + "type": "UINT" + } + ], + "CreateDIBPatternBrushPt": [ + { + "name": "lpPackedDIB", + "type": "void" + }, + { + "name": "iUsage", + "type": "UINT" + } + ], + "CreateEllipticRgn": [ + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + } + ], + "CreateEllipticRgnIndirect": [ + { + "name": "lprect", + "type": "RECT" + } + ], + "CreateFontIndirectA": [ + { + "name": "lplf", + "type": "LOGFONTA" + } + ], + "CreateFontIndirectW": [ + { + "name": "lplf", + "type": "LOGFONTW" + } + ], + "CreateFontA": [ + { + "name": "cHeight", + "type": "int" + }, + { + "name": "cWidth", + "type": "int" + }, + { + "name": "cEscapement", + "type": "int" + }, + { + "name": "cOrientation", + "type": "int" + }, + { + "name": "cWeight", + "type": "int" + }, + { + "name": "bItalic", + "type": "DWORD" + }, + { + "name": "bUnderline", + "type": "DWORD" + }, + { + "name": "bStrikeOut", + "type": "DWORD" + }, + { + "name": "iCharSet", + "type": "DWORD" + }, + { + "name": "iOutPrecision", + "type": "DWORD" + }, + { + "name": "iClipPrecision", + "type": "DWORD" + }, + { + "name": "iQuality", + "type": "DWORD" + }, + { + "name": "iPitchAndFamily", + "type": "DWORD" + }, + { + "name": "pszFaceName", + "type": "LPCSTR" + } + ], + "CreateFontW": [ + { + "name": "cHeight", + "type": "int" + }, + { + "name": "cWidth", + "type": "int" + }, + { + "name": "cEscapement", + "type": "int" + }, + { + "name": "cOrientation", + "type": "int" + }, + { + "name": "cWeight", + "type": "int" + }, + { + "name": "bItalic", + "type": "DWORD" + }, + { + "name": "bUnderline", + "type": "DWORD" + }, + { + "name": "bStrikeOut", + "type": "DWORD" + }, + { + "name": "iCharSet", + "type": "DWORD" + }, + { + "name": "iOutPrecision", + "type": "DWORD" + }, + { + "name": "iClipPrecision", + "type": "DWORD" + }, + { + "name": "iQuality", + "type": "DWORD" + }, + { + "name": "iPitchAndFamily", + "type": "DWORD" + }, + { + "name": "pszFaceName", + "type": "LPCWSTR" + } + ], + "CreateHatchBrush": [ + { + "name": "iHatch", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "CreateICA": [ + { + "name": "pszDriver", + "type": "LPCSTR" + }, + { + "name": "pszDevice", + "type": "LPCSTR" + }, + { + "name": "pszPort", + "type": "LPCSTR" + }, + { + "name": "pdm", + "type": "DEVMODEA" + } + ], + "CreateICW": [ + { + "name": "pszDriver", + "type": "LPCWSTR" + }, + { + "name": "pszDevice", + "type": "LPCWSTR" + }, + { + "name": "pszPort", + "type": "LPCWSTR" + }, + { + "name": "pdm", + "type": "DEVMODEW" + } + ], + "CreateMetaFileA": [ + { + "name": "pszFile", + "type": "LPCSTR" + } + ], + "CreateMetaFileW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + } + ], + "CreatePalette": [ + { + "name": "plpal", + "type": "LOGPALETTE" + } + ], + "CreatePen": [ + { + "name": "iStyle", + "type": "int" + }, + { + "name": "cWidth", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "CreatePenIndirect": [ + { + "name": "plpen", + "type": "LOGPEN" + } + ], + "CreatePolyPolygonRgn": [ + { + "name": "pptl", + "type": "POINT" + }, + { + "name": "pc", + "type": "INT" + }, + { + "name": "cPoly", + "type": "int" + }, + { + "name": "iMode", + "type": "int" + } + ], + "CreatePatternBrush": [ + { + "name": "hbm", + "type": "HBITMAP" + } + ], + "CreateRectRgn": [ + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + } + ], + "CreateRectRgnIndirect": [ + { + "name": "lprect", + "type": "RECT" + } + ], + "CreateRoundRectRgn": [ + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + } + ], + "CreateScalableFontResourceA": [ + { + "name": "fdwHidden", + "type": "DWORD" + }, + { + "name": "lpszFont", + "type": "LPCSTR" + }, + { + "name": "lpszFile", + "type": "LPCSTR" + }, + { + "name": "lpszPath", + "type": "LPCSTR" + } + ], + "CreateScalableFontResourceW": [ + { + "name": "fdwHidden", + "type": "DWORD" + }, + { + "name": "lpszFont", + "type": "LPCWSTR" + }, + { + "name": "lpszFile", + "type": "LPCWSTR" + }, + { + "name": "lpszPath", + "type": "LPCWSTR" + } + ], + "CreateSolidBrush": [ + { + "name": "color", + "type": "COLORREF" + } + ], + "DeleteDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "DeleteMetaFile": [ + { + "name": "hmf", + "type": "HMETAFILE" + } + ], + "DeleteObject": [ + { + "name": "ho", + "type": "HGDIOBJ" + } + ], + "DescribePixelFormat": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPixelFormat", + "type": "int" + }, + { + "name": "nBytes", + "type": "UINT" + }, + { + "name": "ppfd", + "type": "LPPIXELFORMATDESCRIPTOR" + } + ], + "DrawEscape": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iEscape", + "type": "int" + }, + { + "name": "cjIn", + "type": "int" + }, + { + "name": "lpIn", + "type": "LPCSTR" + } + ], + "Ellipse": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "EnumFontFamiliesExA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPLOGFONTA" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumFontFamiliesExW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPLOGFONTW" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumFontFamiliesA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumFontFamiliesW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCWSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumFontsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumFontsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCWSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumObjects": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nType", + "type": "int" + }, + { + "name": "lpFunc", + "type": "GOBJENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EqualRgn": [ + { + "name": "hrgn1", + "type": "HRGN" + }, + { + "name": "hrgn2", + "type": "HRGN" + } + ], + "Escape": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iEscape", + "type": "int" + }, + { + "name": "cjIn", + "type": "int" + }, + { + "name": "pvIn", + "type": "LPCSTR" + }, + { + "name": "pvOut", + "type": "LPVOID" + } + ], + "ExtEscape": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iEscape", + "type": "int" + }, + { + "name": "cjInput", + "type": "int" + }, + { + "name": "lpInData", + "type": "LPCSTR" + }, + { + "name": "cjOutput", + "type": "int" + }, + { + "name": "lpOutData", + "type": "LPSTR" + } + ], + "ExcludeClipRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "ExtCreateRegion": [ + { + "name": "lpx", + "type": "XFORM" + }, + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "RGNDATA" + } + ], + "ExtFloodFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + }, + { + "name": "type", + "type": "UINT" + } + ], + "FillRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "hbr", + "type": "HBRUSH" + } + ], + "FloodFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "FrameRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "hbr", + "type": "HBRUSH" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + } + ], + "GetROP2": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetAspectRatioFilterEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetBkColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetDCBrushColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetDCPenColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetBkMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetBitmapBits": [ + { + "name": "hbit", + "type": "HBITMAP" + }, + { + "name": "cb", + "type": "LONG" + }, + { + "name": "lpvBits", + "type": "LPVOID" + } + ], + "GetBitmapDimensionEx": [ + { + "name": "hbit", + "type": "HBITMAP" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetBoundsRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "LPRECT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "GetBrushOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "GetCharWidthA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidthW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidth32A": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidth32W": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidthFloatA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "PFLOAT" + } + ], + "GetCharWidthFloatW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "PFLOAT" + } + ], + "GetCharABCWidthsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "wFirst", + "type": "UINT" + }, + { + "name": "wLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABC" + } + ], + "GetCharABCWidthsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "wFirst", + "type": "UINT" + }, + { + "name": "wLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABC" + } + ], + "GetCharABCWidthsFloatA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABCFLOAT" + } + ], + "GetCharABCWidthsFloatW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABCFLOAT" + } + ], + "GetClipBox": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "LPRECT" + } + ], + "GetClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "GetMetaRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "GetCurrentObject": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "type", + "type": "UINT" + } + ], + "GetCurrentPositionEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "GetDeviceCaps": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "index", + "type": "int" + } + ], + "GetDIBits": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "start", + "type": "UINT" + }, + { + "name": "cLines", + "type": "UINT" + }, + { + "name": "lpvBits", + "type": "LPVOID" + }, + { + "name": "lpbmi", + "type": "LPBITMAPINFO" + }, + { + "name": "usage", + "type": "UINT" + } + ], + "GetFontData": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "dwTable", + "type": "DWORD" + }, + { + "name": "dwOffset", + "type": "DWORD" + }, + { + "name": "pvBuffer", + "type": "PVOID" + }, + { + "name": "cjBuffer", + "type": "DWORD" + } + ], + "GetGlyphOutlineA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "uChar", + "type": "UINT" + }, + { + "name": "fuFormat", + "type": "UINT" + }, + { + "name": "lpgm", + "type": "LPGLYPHMETRICS" + }, + { + "name": "cjBuffer", + "type": "DWORD" + }, + { + "name": "pvBuffer", + "type": "LPVOID" + }, + { + "name": "lpmat2", + "type": "MAT2" + } + ], + "GetGlyphOutlineW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "uChar", + "type": "UINT" + }, + { + "name": "fuFormat", + "type": "UINT" + }, + { + "name": "lpgm", + "type": "LPGLYPHMETRICS" + }, + { + "name": "cjBuffer", + "type": "DWORD" + }, + { + "name": "pvBuffer", + "type": "LPVOID" + }, + { + "name": "lpmat2", + "type": "MAT2" + } + ], + "GetGraphicsMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetMapMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetMetaFileBitsEx": [ + { + "name": "hMF", + "type": "HMETAFILE" + }, + { + "name": "cbBuffer", + "type": "UINT" + }, + { + "name": "lpData", + "type": "LPVOID" + } + ], + "GetMetaFileA": [ + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "GetMetaFileW": [ + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "GetNearestColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "GetNearestPaletteIndex": [ + { + "name": "h", + "type": "HPALETTE" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "GetObjectType": [ + { + "name": "h", + "type": "HGDIOBJ" + } + ], + "GetOutlineTextMetricsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cjCopy", + "type": "UINT" + }, + { + "name": "potm", + "type": "LPOUTLINETEXTMETRICA" + } + ], + "GetOutlineTextMetricsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cjCopy", + "type": "UINT" + }, + { + "name": "potm", + "type": "LPOUTLINETEXTMETRICW" + } + ], + "GetPaletteEntries": [ + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "pPalEntries", + "type": "LPPALETTEENTRY" + } + ], + "GetPixel": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "GetPixelFormat": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetPolyFillMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetRasterizerCaps": [ + { + "name": "lpraststat", + "type": "LPRASTERIZER_STATUS" + }, + { + "name": "cjBytes", + "type": "UINT" + } + ], + "GetRandomRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "i", + "type": "INT" + } + ], + "GetRegionData": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "lpRgnData", + "type": "LPRGNDATA" + } + ], + "GetRgnBox": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "lprc", + "type": "LPRECT" + } + ], + "GetStockObject": [ + { + "name": "i", + "type": "int" + } + ], + "GetStretchBltMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetSystemPaletteEntries": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "pPalEntries", + "type": "LPPALETTEENTRY" + } + ], + "GetSystemPaletteUse": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextCharacterExtra": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextAlign": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextExtentPointA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "GetTextExtentPointW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "GetTextExtentPoint32A": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "psizl", + "type": "LPSIZE" + } + ], + "GetTextExtentPoint32W": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "psizl", + "type": "LPSIZE" + } + ], + "GetTextExtentExPointA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpszString", + "type": "LPCSTR" + }, + { + "name": "cchString", + "type": "int" + }, + { + "name": "nMaxExtent", + "type": "int" + }, + { + "name": "lpnFit", + "type": "LPINT" + }, + { + "name": "lpnDx", + "type": "LPINT" + }, + { + "name": "lpSize", + "type": "LPSIZE" + } + ], + "GetTextExtentExPointW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpszString", + "type": "LPCWSTR" + }, + { + "name": "cchString", + "type": "int" + }, + { + "name": "nMaxExtent", + "type": "int" + }, + { + "name": "lpnFit", + "type": "LPINT" + }, + { + "name": "lpnDx", + "type": "LPINT" + }, + { + "name": "lpSize", + "type": "LPSIZE" + } + ], + "GetTextCharset": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextCharsetInfo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpSig", + "type": "LPFONTSIGNATURE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "TranslateCharsetInfo": [ + { + "name": "lpSrc", + "type": "DWORD" + }, + { + "name": "lpCs", + "type": "LPCHARSETINFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetFontLanguageInfo": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetCharacterPlacementA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "nCount", + "type": "int" + }, + { + "name": "nMexExtent", + "type": "int" + }, + { + "name": "lpResults", + "type": "LPGCP_RESULTSA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetCharacterPlacementW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "nCount", + "type": "int" + }, + { + "name": "nMexExtent", + "type": "int" + }, + { + "name": "lpResults", + "type": "LPGCP_RESULTSW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetFontUnicodeRanges": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpgs", + "type": "LPGLYPHSET" + } + ], + "GetGlyphIndicesA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpstr", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "fl", + "type": "DWORD" + } + ], + "GetGlyphIndicesW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpstr", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "fl", + "type": "DWORD" + } + ], + "GetTextExtentPointI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pgiIn", + "type": "LPWORD" + }, + { + "name": "cgi", + "type": "int" + }, + { + "name": "psize", + "type": "LPSIZE" + } + ], + "GetTextExtentExPointI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpwszString", + "type": "LPWORD" + }, + { + "name": "cwchString", + "type": "int" + }, + { + "name": "nMaxExtent", + "type": "int" + }, + { + "name": "lpnFit", + "type": "LPINT" + }, + { + "name": "lpnDx", + "type": "LPINT" + }, + { + "name": "lpSize", + "type": "LPSIZE" + } + ], + "GetCharWidthI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "giFirst", + "type": "UINT" + }, + { + "name": "cgi", + "type": "UINT" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "piWidths", + "type": "LPINT" + } + ], + "GetCharABCWidthsI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "giFirst", + "type": "UINT" + }, + { + "name": "cgi", + "type": "UINT" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "pabc", + "type": "LPABC" + } + ], + "AddFontResourceExA": [ + { + "name": "name", + "type": "LPCSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "res", + "type": "PVOID" + } + ], + "AddFontResourceExW": [ + { + "name": "name", + "type": "LPCWSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "res", + "type": "PVOID" + } + ], + "RemoveFontResourceExA": [ + { + "name": "name", + "type": "LPCSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "pdv", + "type": "PVOID" + } + ], + "RemoveFontResourceExW": [ + { + "name": "name", + "type": "LPCWSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "pdv", + "type": "PVOID" + } + ], + "AddFontMemResourceEx": [ + { + "name": "pFileView", + "type": "PVOID" + }, + { + "name": "cjSize", + "type": "DWORD" + }, + { + "name": "pvResrved", + "type": "PVOID" + }, + { + "name": "pNumFonts", + "type": "DWORD" + } + ], + "RemoveFontMemResourceEx": [ + { + "name": "h", + "type": "HANDLE" + } + ], + "CreateFontIndirectExA": [ + { + "name": "VOID", + "type": "ENUMLOGFONTEXDVA" + } + ], + "CreateFontIndirectExW": [ + { + "name": "VOID", + "type": "ENUMLOGFONTEXDVW" + } + ], + "GetViewportExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetViewportOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppoint", + "type": "LPPOINT" + } + ], + "GetWindowExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetWindowOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppoint", + "type": "LPPOINT" + } + ], + "IntersectClipRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "InvertRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "LineDDA": [ + { + "name": "xStart", + "type": "int" + }, + { + "name": "yStart", + "type": "int" + }, + { + "name": "xEnd", + "type": "int" + }, + { + "name": "yEnd", + "type": "int" + }, + { + "name": "lpProc", + "type": "LINEDDAPROC" + }, + { + "name": "data", + "type": "LPARAM" + } + ], + "LineTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "MaskBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "width", + "type": "int" + }, + { + "name": "height", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "hbmMask", + "type": "HBITMAP" + }, + { + "name": "xMask", + "type": "int" + }, + { + "name": "yMask", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "PlgBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "lpPoint", + "type": "POINT" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "width", + "type": "int" + }, + { + "name": "height", + "type": "int" + }, + { + "name": "hbmMask", + "type": "HBITMAP" + }, + { + "name": "xMask", + "type": "int" + }, + { + "name": "yMask", + "type": "int" + } + ], + "OffsetClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "OffsetRgn": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "PatBlt": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "Pie": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + }, + { + "name": "xr1", + "type": "int" + }, + { + "name": "yr1", + "type": "int" + }, + { + "name": "xr2", + "type": "int" + }, + { + "name": "yr2", + "type": "int" + } + ], + "PlayMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HMETAFILE" + } + ], + "PaintRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "PolyPolygon": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "asz", + "type": "INT" + }, + { + "name": "csz", + "type": "int" + } + ], + "PtInRegion": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "PtVisible": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "RectInRegion": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "lprect", + "type": "RECT" + } + ], + "RectVisible": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "RECT" + } + ], + "Rectangle": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "RestoreDC": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nSavedDC", + "type": "int" + } + ], + "ResetDCA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdm", + "type": "DEVMODEA" + } + ], + "ResetDCW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdm", + "type": "DEVMODEW" + } + ], + "RealizePalette": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "RemoveFontResourceA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "RemoveFontResourceW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "RoundRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + }, + { + "name": "width", + "type": "int" + }, + { + "name": "height", + "type": "int" + } + ], + "ResizePalette": [ + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "n", + "type": "UINT" + } + ], + "SaveDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SelectClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "ExtSelectClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetMetaRgn": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SelectObject": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "h", + "type": "HGDIOBJ" + } + ], + "SelectPalette": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hPal", + "type": "HPALETTE" + }, + { + "name": "bForceBkgd", + "type": "BOOL" + } + ], + "SetBkColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetDCBrushColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetDCPenColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetBkMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetBitmapBits": [ + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "pvBits", + "type": "void" + } + ], + "SetBoundsRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "RECT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "SetDIBits": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "start", + "type": "UINT" + }, + { + "name": "cLines", + "type": "UINT" + }, + { + "name": "lpBits", + "type": "void" + }, + { + "name": "lpbmi", + "type": "BITMAPINFO" + }, + { + "name": "ColorUse", + "type": "UINT" + } + ], + "SetDIBitsToDevice": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "w", + "type": "DWORD" + }, + { + "name": "h", + "type": "DWORD" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "StartScan", + "type": "UINT" + }, + { + "name": "cLines", + "type": "UINT" + }, + { + "name": "lpvBits", + "type": "void" + }, + { + "name": "lpbmi", + "type": "BITMAPINFO" + }, + { + "name": "ColorUse", + "type": "UINT" + } + ], + "SetMapperFlags": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "flags", + "type": "DWORD" + } + ], + "SetGraphicsMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iMode", + "type": "int" + } + ], + "SetMapMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iMode", + "type": "int" + } + ], + "SetLayout": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "l", + "type": "DWORD" + } + ], + "GetLayout": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SetMetaFileBitsEx": [ + { + "name": "cbBuffer", + "type": "UINT" + }, + { + "name": "lpData", + "type": "BYTE" + } + ], + "SetPaletteEntries": [ + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "pPalEntries", + "type": "PALETTEENTRY" + } + ], + "SetPixel": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetPixelV": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetPixelFormat": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "format", + "type": "int" + }, + { + "name": "ppfd", + "type": "PIXELFORMATDESCRIPTOR" + } + ], + "SetPolyFillMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "StretchBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "SetRectRgn": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "StretchDIBits": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "DestWidth", + "type": "int" + }, + { + "name": "DestHeight", + "type": "int" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "SrcWidth", + "type": "int" + }, + { + "name": "SrcHeight", + "type": "int" + }, + { + "name": "lpBits", + "type": "void" + }, + { + "name": "lpbmi", + "type": "BITMAPINFO" + }, + { + "name": "iUsage", + "type": "UINT" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "SetROP2": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "rop2", + "type": "int" + } + ], + "SetStretchBltMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetSystemPaletteUse": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "use", + "type": "UINT" + } + ], + "SetTextCharacterExtra": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "extra", + "type": "int" + } + ], + "SetTextColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetTextAlign": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "align", + "type": "UINT" + } + ], + "SetTextJustification": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "extra", + "type": "int" + }, + { + "name": "count", + "type": "int" + } + ], + "UpdateColors": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GdiAlphaBlend": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "ftn", + "type": "BLENDFUNCTION" + } + ], + "GdiTransparentBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "crTransparent", + "type": "UINT" + } + ], + "GdiGradientFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pVertex", + "type": "PTRIVERTEX" + }, + { + "name": "nVertex", + "type": "ULONG" + }, + { + "name": "pMesh", + "type": "PVOID" + }, + { + "name": "nCount", + "type": "ULONG" + }, + { + "name": "ulMode", + "type": "ULONG" + } + ], + "PlayMetaFileRecord": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpHandleTable", + "type": "LPHANDLETABLE" + }, + { + "name": "lpMR", + "type": "LPMETARECORD" + }, + { + "name": "noObjs", + "type": "UINT" + } + ], + "EnumMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HMETAFILE" + }, + { + "name": "proc", + "type": "MFENUMPROC" + }, + { + "name": "param", + "type": "LPARAM" + } + ], + "CloseEnhMetaFile": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CopyEnhMetaFileA": [ + { + "name": "hEnh", + "type": "HENHMETAFILE" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "CopyEnhMetaFileW": [ + { + "name": "hEnh", + "type": "HENHMETAFILE" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "CreateEnhMetaFileA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFilename", + "type": "LPCSTR" + }, + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "lpDesc", + "type": "LPCSTR" + } + ], + "CreateEnhMetaFileW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFilename", + "type": "LPCWSTR" + }, + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "lpDesc", + "type": "LPCWSTR" + } + ], + "DeleteEnhMetaFile": [ + { + "name": "hmf", + "type": "HENHMETAFILE" + } + ], + "EnumEnhMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HENHMETAFILE" + }, + { + "name": "proc", + "type": "ENHMFENUMPROC" + }, + { + "name": "param", + "type": "LPVOID" + }, + { + "name": "lpRect", + "type": "RECT" + } + ], + "GetEnhMetaFileA": [ + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "GetEnhMetaFileW": [ + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "GetEnhMetaFileBits": [ + { + "name": "hEMF", + "type": "HENHMETAFILE" + }, + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpData", + "type": "LPBYTE" + } + ], + "GetEnhMetaFileDescriptionA": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cchBuffer", + "type": "UINT" + }, + { + "name": "lpDescription", + "type": "LPSTR" + } + ], + "GetEnhMetaFileDescriptionW": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cchBuffer", + "type": "UINT" + }, + { + "name": "lpDescription", + "type": "LPWSTR" + } + ], + "GetEnhMetaFileHeader": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpEnhMetaHeader", + "type": "LPENHMETAHEADER" + } + ], + "GetEnhMetaFilePaletteEntries": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "nNumEntries", + "type": "UINT" + }, + { + "name": "lpPaletteEntries", + "type": "LPPALETTEENTRY" + } + ], + "GetEnhMetaFilePixelFormat": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cbBuffer", + "type": "UINT" + }, + { + "name": "ppfd", + "type": "PIXELFORMATDESCRIPTOR" + } + ], + "GetWinMetaFileBits": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cbData16", + "type": "UINT" + }, + { + "name": "pData16", + "type": "LPBYTE" + }, + { + "name": "iMapMode", + "type": "INT" + }, + { + "name": "hdcRef", + "type": "HDC" + } + ], + "PlayEnhMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HENHMETAFILE" + }, + { + "name": "lprect", + "type": "RECT" + } + ], + "PlayEnhMetaFileRecord": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pht", + "type": "LPHANDLETABLE" + }, + { + "name": "pmr", + "type": "ENHMETARECORD" + }, + { + "name": "cht", + "type": "UINT" + } + ], + "SetEnhMetaFileBits": [ + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "pb", + "type": "BYTE" + } + ], + "SetWinMetaFileBits": [ + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpMeta16Data", + "type": "BYTE" + }, + { + "name": "hdcRef", + "type": "HDC" + }, + { + "name": "lpMFP", + "type": "METAFILEPICT" + } + ], + "GdiComment": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpData", + "type": "BYTE" + } + ], + "GetTextMetricsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lptm", + "type": "LPTEXTMETRICA" + } + ], + "GetTextMetricsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lptm", + "type": "LPTEXTMETRICW" + } + ], + "AngleArc": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "r", + "type": "DWORD" + }, + { + "name": "StartAngle", + "type": "FLOAT" + }, + { + "name": "SweepAngle", + "type": "FLOAT" + } + ], + "PolyPolyline": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "asz", + "type": "DWORD" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "GetWorldTransform": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpxf", + "type": "LPXFORM" + } + ], + "SetWorldTransform": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpxf", + "type": "XFORM" + } + ], + "ModifyWorldTransform": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpxf", + "type": "XFORM" + }, + { + "name": "mode", + "type": "DWORD" + } + ], + "CombineTransform": [ + { + "name": "lpxfOut", + "type": "LPXFORM" + }, + { + "name": "lpxf1", + "type": "XFORM" + }, + { + "name": "lpxf2", + "type": "XFORM" + } + ], + "CreateDIBSection": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pbmi", + "type": "BITMAPINFO" + }, + { + "name": "usage", + "type": "UINT" + }, + { + "name": "ppvBits", + "type": "void" + }, + { + "name": "hSection", + "type": "HANDLE" + }, + { + "name": "offset", + "type": "DWORD" + } + ], + "GetDIBColorTable": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "prgbq", + "type": "RGBQUAD" + } + ], + "SetDIBColorTable": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "prgbq", + "type": "RGBQUAD" + } + ], + "SetColorAdjustment": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpca", + "type": "COLORADJUSTMENT" + } + ], + "GetColorAdjustment": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpca", + "type": "LPCOLORADJUSTMENT" + } + ], + "CreateHalftonePalette": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "StartDocA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdi", + "type": "DOCINFOA" + } + ], + "StartDocW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdi", + "type": "DOCINFOW" + } + ], + "EndDoc": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "StartPage": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "EndPage": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "AbortDoc": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SetAbortProc": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "proc", + "type": "ABORTPROC" + } + ], + "AbortPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "ArcTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + }, + { + "name": "xr1", + "type": "int" + }, + { + "name": "yr1", + "type": "int" + }, + { + "name": "xr2", + "type": "int" + }, + { + "name": "yr2", + "type": "int" + } + ], + "BeginPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CloseFigure": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "EndPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "FillPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "FlattenPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetPath": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "LPPOINT" + }, + { + "name": "aj", + "type": "LPBYTE" + }, + { + "name": "cpt", + "type": "int" + } + ], + "PathToRegion": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "PolyDraw": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "aj", + "type": "BYTE" + }, + { + "name": "cpt", + "type": "int" + } + ], + "SelectClipPath": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetArcDirection": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "dir", + "type": "int" + } + ], + "SetMiterLimit": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "limit", + "type": "FLOAT" + }, + { + "name": "old", + "type": "PFLOAT" + } + ], + "StrokeAndFillPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "StrokePath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "WidenPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "ExtCreatePen": [ + { + "name": "iPenStyle", + "type": "DWORD" + }, + { + "name": "cWidth", + "type": "DWORD" + }, + { + "name": "plbrush", + "type": "LOGBRUSH" + }, + { + "name": "cStyle", + "type": "DWORD" + }, + { + "name": "pstyle", + "type": "DWORD" + } + ], + "GetMiterLimit": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "plimit", + "type": "PFLOAT" + } + ], + "GetArcDirection": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetObjectA": [ + { + "name": "h", + "type": "HANDLE" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pv", + "type": "LPVOID" + } + ], + "GetObjectW": [ + { + "name": "h", + "type": "HANDLE" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pv", + "type": "LPVOID" + } + ], + "MoveToEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "TextOutA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + } + ], + "TextOutW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + } + ], + "ExtTextOutA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "options", + "type": "UINT" + }, + { + "name": "lprect", + "type": "RECT" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "UINT" + }, + { + "name": "lpDx", + "type": "INT" + } + ], + "ExtTextOutW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "options", + "type": "UINT" + }, + { + "name": "lprect", + "type": "RECT" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "UINT" + }, + { + "name": "lpDx", + "type": "INT" + } + ], + "PolyTextOutA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "ppt", + "type": "POLYTEXTA" + }, + { + "name": "nstrings", + "type": "int" + } + ], + "PolyTextOutW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "ppt", + "type": "POLYTEXTW" + }, + { + "name": "nstrings", + "type": "int" + } + ], + "CreatePolygonRgn": [ + { + "name": "pptl", + "type": "POINT" + }, + { + "name": "cPoint", + "type": "int" + }, + { + "name": "iMode", + "type": "int" + } + ], + "DPtoLP": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + }, + { + "name": "c", + "type": "int" + } + ], + "LPtoDP": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + }, + { + "name": "c", + "type": "int" + } + ], + "Polygon": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "int" + } + ], + "Polyline": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "int" + } + ], + "PolyBezier": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "DWORD" + } + ], + "PolyBezierTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "DWORD" + } + ], + "PolylineTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "DWORD" + } + ], + "SetViewportExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetViewportOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "SetWindowExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetWindowOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "OffsetViewportOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "OffsetWindowOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "ScaleViewportExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xn", + "type": "int" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "yn", + "type": "int" + }, + { + "name": "yd", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "ScaleWindowExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xn", + "type": "int" + }, + { + "name": "xd", + "type": "int" + }, + { + "name": "yn", + "type": "int" + }, + { + "name": "yd", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetBitmapDimensionEx": [ + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetBrushOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "GetTextFaceA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpName", + "type": "LPSTR" + } + ], + "GetTextFaceW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpName", + "type": "LPWSTR" + } + ], + "GetKerningPairsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nPairs", + "type": "DWORD" + }, + { + "name": "lpKernPair", + "type": "LPKERNINGPAIR" + } + ], + "GetKerningPairsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nPairs", + "type": "DWORD" + }, + { + "name": "lpKernPair", + "type": "LPKERNINGPAIR" + } + ], + "GetDCOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "UnrealizeObject": [ + { + "name": "h", + "type": "HGDIOBJ" + } + ], + "GdiFlush": [ + { + "name": "VOID", + "type": "void" + } + ], + "GdiSetBatchLimit": [ + { + "name": "dw", + "type": "DWORD" + } + ], + "GdiGetBatchLimit": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetICMMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "CheckColorsInGamut": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpRGBTriple", + "type": "LPRGBTRIPLE" + }, + { + "name": "dlpBuffer", + "type": "LPVOID" + }, + { + "name": "nCount", + "type": "DWORD" + } + ], + "GetColorSpace": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetLogColorSpaceA": [ + { + "name": "hColorSpace", + "type": "HCOLORSPACE" + }, + { + "name": "lpBuffer", + "type": "LPLOGCOLORSPACEA" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetLogColorSpaceW": [ + { + "name": "hColorSpace", + "type": "HCOLORSPACE" + }, + { + "name": "lpBuffer", + "type": "LPLOGCOLORSPACEW" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "CreateColorSpaceA": [ + { + "name": "lplcs", + "type": "LPLOGCOLORSPACEA" + } + ], + "CreateColorSpaceW": [ + { + "name": "lplcs", + "type": "LPLOGCOLORSPACEW" + } + ], + "SetColorSpace": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hcs", + "type": "HCOLORSPACE" + } + ], + "DeleteColorSpace": [ + { + "name": "hcs", + "type": "HCOLORSPACE" + } + ], + "GetICMProfileA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pBufSize", + "type": "LPDWORD" + }, + { + "name": "pszFilename", + "type": "LPSTR" + } + ], + "GetICMProfileW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pBufSize", + "type": "LPDWORD" + }, + { + "name": "pszFilename", + "type": "LPWSTR" + } + ], + "SetICMProfileA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFileName", + "type": "LPSTR" + } + ], + "SetICMProfileW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFileName", + "type": "LPWSTR" + } + ], + "GetDeviceGammaRamp": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpRamp", + "type": "LPVOID" + } + ], + "SetDeviceGammaRamp": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpRamp", + "type": "LPVOID" + } + ], + "ColorMatchToTarget": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hdcTarget", + "type": "HDC" + }, + { + "name": "action", + "type": "DWORD" + } + ], + "EnumICMProfilesA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "proc", + "type": "ICMENUMPROCA" + }, + { + "name": "param", + "type": "LPARAM" + } + ], + "EnumICMProfilesW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "proc", + "type": "ICMENUMPROCW" + }, + { + "name": "param", + "type": "LPARAM" + } + ], + "UpdateICMRegKeyA": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "lpszCMID", + "type": "LPSTR" + }, + { + "name": "lpszFileName", + "type": "LPSTR" + }, + { + "name": "command", + "type": "UINT" + } + ], + "UpdateICMRegKeyW": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "lpszCMID", + "type": "LPWSTR" + }, + { + "name": "lpszFileName", + "type": "LPWSTR" + }, + { + "name": "command", + "type": "UINT" + } + ], + "ColorCorrectPalette": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hPal", + "type": "HPALETTE" + }, + { + "name": "deFirst", + "type": "DWORD" + }, + { + "name": "num", + "type": "DWORD" + } + ], + "SwapBuffers": [ + { + "name": "VOID", + "type": "HDC" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/gpedit_dll.json b/qiling/extensions/windows_sdk/defs/gpedit_dll.json new file mode 100644 index 000000000..d6ccf2f39 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/gpedit_dll.json @@ -0,0 +1,58 @@ +{ + "CreateGPOLink": [ + { + "name": "lpGPO", + "type": "LPOLESTR" + }, + { + "name": "lpContainer", + "type": "LPOLESTR" + }, + { + "name": "fHighPriority", + "type": "BOOL" + } + ], + "DeleteGPOLink": [ + { + "name": "lpGPO", + "type": "LPOLESTR" + }, + { + "name": "lpContainer", + "type": "LPOLESTR" + } + ], + "DeleteAllGPOLinks": [ + { + "name": "lpContainer", + "type": "LPOLESTR" + } + ], + "BrowseForGPO": [ + { + "name": "lpBrowseInfo", + "type": "LPGPOBROWSEINFO" + } + ], + "ImportRSoPData": [ + { + "name": "lpNameSpace", + "type": "LPOLESTR" + }, + { + "name": "lpFileName", + "type": "LPOLESTR" + } + ], + "ExportRSoPData": [ + { + "name": "lpNameSpace", + "type": "LPOLESTR" + }, + { + "name": "lpFileName", + "type": "LPOLESTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/htmlhelp_dll.json b/qiling/extensions/windows_sdk/defs/htmlhelp_dll.json new file mode 100644 index 000000000..e40097122 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/htmlhelp_dll.json @@ -0,0 +1,38 @@ +{ + "HtmlHelpA": [ + { + "name": "hwndCaller", + "type": "HWND" + }, + { + "name": "pszFile", + "type": "LPCSTR" + }, + { + "name": "uCommand", + "type": "UINT" + }, + { + "name": "dwData", + "type": "DWORD_PTR" + } + ], + "HtmlHelpW": [ + { + "name": "hwndCaller", + "type": "HWND" + }, + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "uCommand", + "type": "UINT" + }, + { + "name": "dwData", + "type": "DWORD_PTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/imagehlp_dll.json b/qiling/extensions/windows_sdk/defs/imagehlp_dll.json new file mode 100644 index 000000000..685ff2b72 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/imagehlp_dll.json @@ -0,0 +1,414 @@ +{ + "BindImage": [ + { + "name": "ImageName", + "type": "PCSTR" + }, + { + "name": "DllPath", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + } + ], + "BindImageEx": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ImageName", + "type": "PCSTR" + }, + { + "name": "DllPath", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + }, + { + "name": "StatusRoutine", + "type": "PIMAGEHLP_STATUS_ROUTINE" + } + ], + "ReBaseImage": [ + { + "name": "CurrentImageName", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + }, + { + "name": "fReBase", + "type": "BOOL" + }, + { + "name": "fRebaseSysfileOk", + "type": "BOOL" + }, + { + "name": "fGoingDown", + "type": "BOOL" + }, + { + "name": "CheckImageSize", + "type": "ULONG" + }, + { + "name": "OldImageSize", + "type": "ULONG" + }, + { + "name": "OldImageBase", + "type": "ULONG_PTR" + }, + { + "name": "NewImageSize", + "type": "ULONG" + }, + { + "name": "NewImageBase", + "type": "ULONG_PTR" + }, + { + "name": "TimeStamp", + "type": "ULONG" + } + ], + "ReBaseImage64": [ + { + "name": "CurrentImageName", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + }, + { + "name": "fReBase", + "type": "BOOL" + }, + { + "name": "fRebaseSysfileOk", + "type": "BOOL" + }, + { + "name": "fGoingDown", + "type": "BOOL" + }, + { + "name": "CheckImageSize", + "type": "ULONG" + }, + { + "name": "OldImageSize", + "type": "ULONG" + }, + { + "name": "OldImageBase", + "type": "ULONG64" + }, + { + "name": "NewImageSize", + "type": "ULONG" + }, + { + "name": "NewImageBase", + "type": "ULONG64" + }, + { + "name": "TimeStamp", + "type": "ULONG" + } + ], + "CheckSumMappedFile": [ + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "FileLength", + "type": "DWORD" + }, + { + "name": "HeaderSum", + "type": "PDWORD" + }, + { + "name": "CheckSum", + "type": "PDWORD" + } + ], + "MapFileAndCheckSumA": [ + { + "name": "Filename", + "type": "PCSTR" + }, + { + "name": "HeaderSum", + "type": "PDWORD" + }, + { + "name": "CheckSum", + "type": "PDWORD" + } + ], + "MapFileAndCheckSumW": [ + { + "name": "Filename", + "type": "PCWSTR" + }, + { + "name": "HeaderSum", + "type": "PDWORD" + }, + { + "name": "CheckSum", + "type": "PDWORD" + } + ], + "GetImageConfigInformation": [ + { + "name": "LoadedImage", + "type": "PLOADED_IMAGE" + }, + { + "name": "ImageConfigInformation", + "type": "PIMAGE_LOAD_CONFIG_DIRECTORY" + } + ], + "GetImageUnusedHeaderBytes": [ + { + "name": "LoadedImage", + "type": "PLOADED_IMAGE" + }, + { + "name": "SizeUnusedHeaderBytes", + "type": "PDWORD" + } + ], + "SetImageConfigInformation": [ + { + "name": "LoadedImage", + "type": "PLOADED_IMAGE" + }, + { + "name": "ImageConfigInformation", + "type": "PIMAGE_LOAD_CONFIG_DIRECTORY" + } + ], + "ImageGetDigestStream": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "DigestLevel", + "type": "DWORD" + }, + { + "name": "DigestFunction", + "type": "DIGEST_FUNCTION" + }, + { + "name": "DigestHandle", + "type": "DIGEST_HANDLE" + } + ], + "ImageAddCertificate": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "Certificate", + "type": "LPWIN_CERTIFICATE" + }, + { + "name": "Index", + "type": "PDWORD" + } + ], + "ImageRemoveCertificate": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "Index", + "type": "DWORD" + } + ], + "ImageEnumerateCertificates": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "TypeFilter", + "type": "WORD" + }, + { + "name": "CertificateCount", + "type": "PDWORD" + }, + { + "name": "Indices", + "type": "PDWORD" + }, + { + "name": "IndexCount", + "type": "DWORD" + } + ], + "ImageGetCertificateData": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "CertificateIndex", + "type": "DWORD" + }, + { + "name": "Certificate", + "type": "LPWIN_CERTIFICATE" + }, + { + "name": "RequiredLength", + "type": "PDWORD" + } + ], + "ImageGetCertificateHeader": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "CertificateIndex", + "type": "DWORD" + }, + { + "name": "Certificateheader", + "type": "LPWIN_CERTIFICATE" + } + ], + "ImageLoad": [ + { + "name": "DllName", + "type": "PCSTR" + }, + { + "name": "DllPath", + "type": "PCSTR" + } + ], + "ImageUnload": [ + { + "name": "LoadedImage", + "type": "PLOADED_IMAGE" + } + ], + "MapAndLoad": [ + { + "name": "ImageName", + "type": "PCSTR" + }, + { + "name": "DllPath", + "type": "PCSTR" + }, + { + "name": "LoadedImage", + "type": "PLOADED_IMAGE" + }, + { + "name": "DotDll", + "type": "BOOL" + }, + { + "name": "ReadOnly", + "type": "BOOL" + } + ], + "UnMapAndLoad": [ + { + "name": "LoadedImage", + "type": "PLOADED_IMAGE" + } + ], + "TouchFileTimes": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "pSystemTime", + "type": "PSYSTEMTIME" + } + ], + "SplitSymbols": [ + { + "name": "ImageName", + "type": "PSTR" + }, + { + "name": "SymbolsPath", + "type": "PCSTR" + }, + { + "name": "SymbolFilePath", + "type": "PSTR" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "UpdateDebugInfoFile": [ + { + "name": "ImageFileName", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + }, + { + "name": "DebugFilePath", + "type": "PSTR" + }, + { + "name": "NtHeaders", + "type": "PIMAGE_NT_HEADERS32" + } + ], + "UpdateDebugInfoFileEx": [ + { + "name": "ImageFileName", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + }, + { + "name": "DebugFilePath", + "type": "PSTR" + }, + { + "name": "NtHeaders", + "type": "PIMAGE_NT_HEADERS32" + }, + { + "name": "OldCheckSum", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/imm32_dll.json b/qiling/extensions/windows_sdk/defs/imm32_dll.json new file mode 100644 index 000000000..db9653b71 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/imm32_dll.json @@ -0,0 +1,932 @@ +{ + "ImmInstallIMEA": [ + { + "name": "lpszIMEFileName", + "type": "LPCSTR" + }, + { + "name": "lpszLayoutText", + "type": "LPCSTR" + } + ], + "ImmInstallIMEW": [ + { + "name": "lpszIMEFileName", + "type": "LPCWSTR" + }, + { + "name": "lpszLayoutText", + "type": "LPCWSTR" + } + ], + "ImmGetDefaultIMEWnd": [ + { + "name": "VOID", + "type": "HWND" + } + ], + "ImmGetDescriptionA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszDescription", + "type": "LPSTR" + }, + { + "name": "uBufLen", + "type": "UINT" + } + ], + "ImmGetDescriptionW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszDescription", + "type": "LPWSTR" + }, + { + "name": "uBufLen", + "type": "UINT" + } + ], + "ImmGetIMEFileNameA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszFileName", + "type": "LPSTR" + }, + { + "name": "uBufLen", + "type": "UINT" + } + ], + "ImmGetIMEFileNameW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszFileName", + "type": "LPWSTR" + }, + { + "name": "uBufLen", + "type": "UINT" + } + ], + "ImmGetProperty": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "ImmIsIME": [ + { + "name": "VOID", + "type": "HKL" + } + ], + "ImmSimulateHotKey": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "ImmCreateContext": [ + { + "name": "VOID", + "type": "void" + } + ], + "ImmDestroyContext": [ + { + "name": "VOID", + "type": "HIMC" + } + ], + "ImmGetContext": [ + { + "name": "VOID", + "type": "HWND" + } + ], + "ImmReleaseContext": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "HIMC" + } + ], + "ImmAssociateContext": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "HIMC" + } + ], + "ImmAssociateContextEx": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "ImmGetCompositionStringA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpBuf", + "type": "LPVOID" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "ImmGetCompositionStringW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpBuf", + "type": "LPVOID" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "ImmSetCompositionStringA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpComp", + "type": "LPVOID" + }, + { + "name": "dwCompLen", + "type": "DWORD" + }, + { + "name": "lpRead", + "type": "LPVOID" + }, + { + "name": "dwReadLen", + "type": "DWORD" + } + ], + "ImmSetCompositionStringW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpComp", + "type": "LPVOID" + }, + { + "name": "dwCompLen", + "type": "DWORD" + }, + { + "name": "lpRead", + "type": "LPVOID" + }, + { + "name": "dwReadLen", + "type": "DWORD" + } + ], + "ImmGetCandidateListCountA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpdwListCount", + "type": "LPDWORD" + } + ], + "ImmGetCandidateListCountW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpdwListCount", + "type": "LPDWORD" + } + ], + "ImmGetCandidateListA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "deIndex", + "type": "DWORD" + }, + { + "name": "lpCandList", + "type": "LPCANDIDATELIST" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "ImmGetCandidateListW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "deIndex", + "type": "DWORD" + }, + { + "name": "lpCandList", + "type": "LPCANDIDATELIST" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "ImmGetGuideLineA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpBuf", + "type": "LPSTR" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "ImmGetGuideLineW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpBuf", + "type": "LPWSTR" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "ImmGetConversionStatus": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpfdwConversion", + "type": "LPDWORD" + }, + { + "name": "lpfdwSentence", + "type": "LPDWORD" + } + ], + "ImmSetConversionStatus": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "ImmGetOpenStatus": [ + { + "name": "VOID", + "type": "HIMC" + } + ], + "ImmSetOpenStatus": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "ImmGetCompositionFontA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lplf", + "type": "LPLOGFONTA" + } + ], + "ImmGetCompositionFontW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lplf", + "type": "LPLOGFONTW" + } + ], + "ImmSetCompositionFontA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lplf", + "type": "LPLOGFONTA" + } + ], + "ImmSetCompositionFontW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lplf", + "type": "LPLOGFONTW" + } + ], + "ImmConfigureIMEA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPVOID" + } + ], + "ImmConfigureIMEW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPVOID" + } + ], + "ImmEscapeA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "LPVOID" + } + ], + "ImmEscapeW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "LPVOID" + } + ], + "ImmGetConversionListA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpSrc", + "type": "LPCSTR" + }, + { + "name": "lpDst", + "type": "LPCANDIDATELIST" + }, + { + "name": "dwBufLen", + "type": "DWORD" + }, + { + "name": "uFlag", + "type": "UINT" + } + ], + "ImmGetConversionListW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpSrc", + "type": "LPCWSTR" + }, + { + "name": "lpDst", + "type": "LPCANDIDATELIST" + }, + { + "name": "dwBufLen", + "type": "DWORD" + }, + { + "name": "uFlag", + "type": "UINT" + } + ], + "ImmNotifyIME": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "dwAction", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "dwValue", + "type": "DWORD" + } + ], + "ImmGetStatusWindowPos": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpptPos", + "type": "LPPOINT" + } + ], + "ImmSetStatusWindowPos": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpptPos", + "type": "LPPOINT" + } + ], + "ImmGetCompositionWindow": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpCompForm", + "type": "LPCOMPOSITIONFORM" + } + ], + "ImmSetCompositionWindow": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpCompForm", + "type": "LPCOMPOSITIONFORM" + } + ], + "ImmGetCandidateWindow": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpCandidate", + "type": "LPCANDIDATEFORM" + } + ], + "ImmSetCandidateWindow": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpCandidate", + "type": "LPCANDIDATEFORM" + } + ], + "ImmIsUIMessageA": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "WPARAM" + }, + { + "name": "VOID", + "type": "LPARAM" + } + ], + "ImmIsUIMessageW": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "WPARAM" + }, + { + "name": "VOID", + "type": "LPARAM" + } + ], + "ImmGetVirtualKey": [ + { + "name": "VOID", + "type": "HWND" + } + ], + "ImmRegisterWordA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszReading", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpszRegister", + "type": "LPCSTR" + } + ], + "ImmRegisterWordW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszReading", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpszRegister", + "type": "LPCWSTR" + } + ], + "ImmUnregisterWordA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszReading", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpszUnregister", + "type": "LPCSTR" + } + ], + "ImmUnregisterWordW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszReading", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpszUnregister", + "type": "LPCWSTR" + } + ], + "ImmGetRegisterWordStyleA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "nItem", + "type": "UINT" + }, + { + "name": "lpStyleBuf", + "type": "LPSTYLEBUFA" + } + ], + "ImmGetRegisterWordStyleW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "nItem", + "type": "UINT" + }, + { + "name": "lpStyleBuf", + "type": "LPSTYLEBUFW" + } + ], + "ImmEnumRegisterWordA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "REGISTERWORDENUMPROCA" + }, + { + "name": "lpszReading", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpszRegister", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPVOID" + } + ], + "ImmEnumRegisterWordW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "REGISTERWORDENUMPROCW" + }, + { + "name": "lpszReading", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpszRegister", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPVOID" + } + ], + "ImmDisableIME": [ + { + "name": "VOID", + "type": "DWORD" + } + ], + "ImmEnumInputContext": [ + { + "name": "idThread", + "type": "DWORD" + }, + { + "name": "lpfn", + "type": "IMCENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "ImmGetImeMenuItemsA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpImeParentMenu", + "type": "LPIMEMENUITEMINFOA" + }, + { + "name": "lpImeMenu", + "type": "LPIMEMENUITEMINFOA" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "ImmGetImeMenuItemsW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpImeParentMenu", + "type": "LPIMEMENUITEMINFOW" + }, + { + "name": "lpImeMenu", + "type": "LPIMEMENUITEMINFOW" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "ImmDisableTextFrameService": [ + { + "name": "idThread", + "type": "DWORD" + } + ], + "ImmRequestMessageA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "WPARAM" + }, + { + "name": "VOID", + "type": "LPARAM" + } + ], + "ImmRequestMessageW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "WPARAM" + }, + { + "name": "VOID", + "type": "LPARAM" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/inetcfg_dll.json b/qiling/extensions/windows_sdk/defs/inetcfg_dll.json new file mode 100644 index 000000000..bea280a2c --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/inetcfg_dll.json @@ -0,0 +1,18 @@ +{ + "CheckConnectionWizard": [ + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "SetShellNext": [ + { + "name": "szShellNext", + "type": "PSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/instrsa5_dll.json b/qiling/extensions/windows_sdk/defs/instrsa5_dll.json new file mode 100644 index 000000000..406874b73 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/instrsa5_dll.json @@ -0,0 +1,12 @@ +{ + "GetEncSChannel": [ + { + "name": "pData", + "type": "BYTE" + }, + { + "name": "dwDecSize", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/iphlpapi_dll.json b/qiling/extensions/windows_sdk/defs/iphlpapi_dll.json new file mode 100644 index 000000000..a32112a05 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/iphlpapi_dll.json @@ -0,0 +1,806 @@ +{ + "GetNumberOfInterfaces": [ + { + "name": "pdwNumIf", + "type": "PDWORD" + } + ], + "GetIfEntry": [ + { + "name": "pIfRow", + "type": "PMIB_IFROW" + } + ], + "GetIfTable": [ + { + "name": "pIfTable", + "type": "PMIB_IFTABLE" + }, + { + "name": "pdwSize", + "type": "PULONG" + }, + { + "name": "bOrder", + "type": "BOOL" + } + ], + "GetIpAddrTable": [ + { + "name": "pIpAddrTable", + "type": "PMIB_IPADDRTABLE" + }, + { + "name": "pdwSize", + "type": "PULONG" + }, + { + "name": "bOrder", + "type": "BOOL" + } + ], + "GetIpNetTable": [ + { + "name": "IpNetTable", + "type": "PMIB_IPNETTABLE" + }, + { + "name": "SizePointer", + "type": "PULONG" + }, + { + "name": "Order", + "type": "BOOL" + } + ], + "GetIpForwardTable": [ + { + "name": "pIpForwardTable", + "type": "PMIB_IPFORWARDTABLE" + }, + { + "name": "pdwSize", + "type": "PULONG" + }, + { + "name": "bOrder", + "type": "BOOL" + } + ], + "GetTcpTable": [ + { + "name": "TcpTable", + "type": "PMIB_TCPTABLE" + }, + { + "name": "SizePointer", + "type": "PULONG" + }, + { + "name": "Order", + "type": "BOOL" + } + ], + "GetExtendedTcpTable": [ + { + "name": "pTcpTable", + "type": "PVOID" + }, + { + "name": "pdwSize", + "type": "PDWORD" + }, + { + "name": "bOrder", + "type": "BOOL" + }, + { + "name": "ulAf", + "type": "ULONG" + }, + { + "name": "TableClass", + "type": "TCP_TABLE_CLASS" + }, + { + "name": "Reserved", + "type": "ULONG" + } + ], + "GetOwnerModuleFromTcpEntry": [ + { + "name": "pTcpEntry", + "type": "PMIB_TCPROW_OWNER_MODULE" + }, + { + "name": "Class", + "type": "TCPIP_OWNER_MODULE_INFO_CLASS" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "pdwSize", + "type": "PDWORD" + } + ], + "GetUdpTable": [ + { + "name": "UdpTable", + "type": "PMIB_UDPTABLE" + }, + { + "name": "SizePointer", + "type": "PULONG" + }, + { + "name": "Order", + "type": "BOOL" + } + ], + "GetExtendedUdpTable": [ + { + "name": "pUdpTable", + "type": "PVOID" + }, + { + "name": "pdwSize", + "type": "PDWORD" + }, + { + "name": "bOrder", + "type": "BOOL" + }, + { + "name": "ulAf", + "type": "ULONG" + }, + { + "name": "TableClass", + "type": "UDP_TABLE_CLASS" + }, + { + "name": "Reserved", + "type": "ULONG" + } + ], + "GetOwnerModuleFromUdpEntry": [ + { + "name": "pUdpEntry", + "type": "PMIB_UDPROW_OWNER_MODULE" + }, + { + "name": "Class", + "type": "TCPIP_OWNER_MODULE_INFO_CLASS" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "pdwSize", + "type": "PDWORD" + } + ], + "GetTcpTable2": [ + { + "name": "TcpTable", + "type": "PMIB_TCPTABLE2" + }, + { + "name": "SizePointer", + "type": "PULONG" + }, + { + "name": "Order", + "type": "BOOL" + } + ], + "GetIpStatistics": [ + { + "name": "Statistics", + "type": "PMIB_IPSTATS" + } + ], + "GetIcmpStatistics": [ + { + "name": "Statistics", + "type": "PMIB_ICMP" + } + ], + "GetTcpStatistics": [ + { + "name": "Statistics", + "type": "PMIB_TCPSTATS" + } + ], + "GetUdpStatistics": [ + { + "name": "Stats", + "type": "PMIB_UDPSTATS" + } + ], + "SetIpStatisticsEx": [ + { + "name": "Statistics", + "type": "PMIB_IPSTATS" + }, + { + "name": "Family", + "type": "ULONG" + } + ], + "GetIpStatisticsEx": [ + { + "name": "Statistics", + "type": "PMIB_IPSTATS" + }, + { + "name": "Family", + "type": "ULONG" + } + ], + "GetIcmpStatisticsEx": [ + { + "name": "Statistics", + "type": "PMIB_ICMP_EX" + }, + { + "name": "Family", + "type": "ULONG" + } + ], + "GetTcpStatisticsEx": [ + { + "name": "Statistics", + "type": "PMIB_TCPSTATS" + }, + { + "name": "Family", + "type": "ULONG" + } + ], + "GetUdpStatisticsEx": [ + { + "name": "Statistics", + "type": "PMIB_UDPSTATS" + }, + { + "name": "Family", + "type": "ULONG" + } + ], + "GetTcpStatisticsEx2": [ + { + "name": "Statistics", + "type": "PMIB_TCPSTATS2" + }, + { + "name": "Family", + "type": "ULONG" + } + ], + "GetUdpStatisticsEx2": [ + { + "name": "Statistics", + "type": "PMIB_UDPSTATS2" + }, + { + "name": "Family", + "type": "ULONG" + } + ], + "SetIfEntry": [ + { + "name": "pIfRow", + "type": "PMIB_IFROW" + } + ], + "CreateIpForwardEntry": [ + { + "name": "pRoute", + "type": "PMIB_IPFORWARDROW" + } + ], + "SetIpForwardEntry": [ + { + "name": "pRoute", + "type": "PMIB_IPFORWARDROW" + } + ], + "DeleteIpForwardEntry": [ + { + "name": "pRoute", + "type": "PMIB_IPFORWARDROW" + } + ], + "SetIpStatistics": [ + { + "name": "pIpStats", + "type": "PMIB_IPSTATS" + } + ], + "SetIpTTL": [ + { + "name": "nTTL", + "type": "UINT" + } + ], + "CreateIpNetEntry": [ + { + "name": "pArpEntry", + "type": "PMIB_IPNETROW" + } + ], + "SetIpNetEntry": [ + { + "name": "pArpEntry", + "type": "PMIB_IPNETROW" + } + ], + "DeleteIpNetEntry": [ + { + "name": "pArpEntry", + "type": "PMIB_IPNETROW" + } + ], + "FlushIpNetTable": [ + { + "name": "dwIfIndex", + "type": "DWORD" + } + ], + "CreateProxyArpEntry": [ + { + "name": "dwAddress", + "type": "DWORD" + }, + { + "name": "dwMask", + "type": "DWORD" + }, + { + "name": "dwIfIndex", + "type": "DWORD" + } + ], + "DeleteProxyArpEntry": [ + { + "name": "dwAddress", + "type": "DWORD" + }, + { + "name": "dwMask", + "type": "DWORD" + }, + { + "name": "dwIfIndex", + "type": "DWORD" + } + ], + "SetTcpEntry": [ + { + "name": "pTcpRow", + "type": "PMIB_TCPROW" + } + ], + "GetInterfaceInfo": [ + { + "name": "pIfTable", + "type": "PIP_INTERFACE_INFO" + }, + { + "name": "dwOutBufLen", + "type": "PULONG" + } + ], + "GetUniDirectionalAdapterInfo": [ + { + "name": "pIPIfInfo", + "type": "PIP_UNIDIRECTIONAL_ADAPTER_ADDRESS" + }, + { + "name": "dwOutBufLen", + "type": "PULONG" + } + ], + "NhpAllocateAndGetInterfaceInfoFromStack": [ + { + "name": "ppTable", + "type": "IP_INTERFACE_NAME_INFO" + }, + { + "name": "pdwCount", + "type": "PDWORD" + }, + { + "name": "bOrder", + "type": "BOOL" + }, + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetBestInterface": [ + { + "name": "dwDestAddr", + "type": "IPAddr" + }, + { + "name": "pdwBestIfIndex", + "type": "PDWORD" + } + ], + "GetBestInterfaceEx": [ + { + "name": "pDestAddr", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "pdwBestIfIndex", + "type": "PDWORD" + } + ], + "GetBestRoute": [ + { + "name": "dwDestAddr", + "type": "DWORD" + }, + { + "name": "dwSourceAddr", + "type": "DWORD" + }, + { + "name": "pBestRoute", + "type": "PMIB_IPFORWARDROW" + } + ], + "NotifyAddrChange": [ + { + "name": "Handle", + "type": "PHANDLE" + }, + { + "name": "overlapped", + "type": "LPOVERLAPPED" + } + ], + "NotifyRouteChange": [ + { + "name": "Handle", + "type": "PHANDLE" + }, + { + "name": "overlapped", + "type": "LPOVERLAPPED" + } + ], + "CancelIPChangeNotify": [ + { + "name": "notifyOverlapped", + "type": "LPOVERLAPPED" + } + ], + "GetAdapterIndex": [ + { + "name": "AdapterName", + "type": "LPWSTR" + }, + { + "name": "IfIndex", + "type": "PULONG" + } + ], + "AddIPAddress": [ + { + "name": "Address", + "type": "IPAddr" + }, + { + "name": "IpMask", + "type": "IPMask" + }, + { + "name": "IfIndex", + "type": "DWORD" + }, + { + "name": "NTEContext", + "type": "PULONG" + }, + { + "name": "NTEInstance", + "type": "PULONG" + } + ], + "DeleteIPAddress": [ + { + "name": "NTEContext", + "type": "ULONG" + } + ], + "GetNetworkParams": [ + { + "name": "pFixedInfo", + "type": "PFIXED_INFO" + }, + { + "name": "pOutBufLen", + "type": "PULONG" + } + ], + "GetAdaptersInfo": [ + { + "name": "AdapterInfo", + "type": "PIP_ADAPTER_INFO" + }, + { + "name": "SizePointer", + "type": "PULONG" + } + ], + "GetAdapterOrderMap": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetPerAdapterInfo": [ + { + "name": "IfIndex", + "type": "ULONG" + }, + { + "name": "pPerAdapterInfo", + "type": "PIP_PER_ADAPTER_INFO" + }, + { + "name": "pOutBufLen", + "type": "PULONG" + } + ], + "GetInterfaceCurrentTimestampCapabilities": [ + { + "name": "InterfaceLuid", + "type": "NET_LUID" + }, + { + "name": "TimestampCapabilites", + "type": "PINTERFACE_TIMESTAMP_CAPABILITIES" + } + ], + "GetInterfaceHardwareTimestampCapabilities": [ + { + "name": "InterfaceLuid", + "type": "NET_LUID" + }, + { + "name": "TimestampCapabilites", + "type": "PINTERFACE_TIMESTAMP_CAPABILITIES" + } + ], + "CaptureInterfaceHardwareCrossTimestamp": [ + { + "name": "InterfaceLuid", + "type": "NET_LUID" + }, + { + "name": "CrossTimestamp", + "type": "PINTERFACE_HARDWARE_CROSSTIMESTAMP" + } + ], + "NotifyIfTimestampConfigChange": [ + { + "name": "CallerContext", + "type": "PVOID" + }, + { + "name": "Callback", + "type": "PINTERFACE_TIMESTAMP_CONFIG_CHANGE_CALLBACK" + }, + { + "name": "NotificationHandle", + "type": "HIFTIMESTAMPCHANGE" + } + ], + "CancelIfTimestampConfigChange": [ + { + "name": "NotificationHandle", + "type": "HIFTIMESTAMPCHANGE" + } + ], + "IpReleaseAddress": [ + { + "name": "AdapterInfo", + "type": "PIP_ADAPTER_INDEX_MAP" + } + ], + "IpRenewAddress": [ + { + "name": "AdapterInfo", + "type": "PIP_ADAPTER_INDEX_MAP" + } + ], + "SendARP": [ + { + "name": "DestIP", + "type": "IPAddr" + }, + { + "name": "SrcIP", + "type": "IPAddr" + }, + { + "name": "pMacAddr", + "type": "PVOID" + }, + { + "name": "PhyAddrLen", + "type": "PULONG" + } + ], + "GetRTTAndHopCount": [ + { + "name": "DestIpAddress", + "type": "IPAddr" + }, + { + "name": "HopCount", + "type": "PULONG" + }, + { + "name": "MaxHops", + "type": "ULONG" + }, + { + "name": "RTT", + "type": "PULONG" + } + ], + "GetFriendlyIfIndex": [ + { + "name": "IfIndex", + "type": "DWORD" + } + ], + "EnableRouter": [ + { + "name": "pHandle", + "type": "HANDLE" + }, + { + "name": "pOverlapped", + "type": "OVERLAPPED" + } + ], + "UnenableRouter": [ + { + "name": "pOverlapped", + "type": "OVERLAPPED" + }, + { + "name": "lpdwEnableCount", + "type": "LPDWORD" + } + ], + "DisableMediaSense": [ + { + "name": "pHandle", + "type": "HANDLE" + }, + { + "name": "pOverLapped", + "type": "OVERLAPPED" + } + ], + "RestoreMediaSense": [ + { + "name": "pOverlapped", + "type": "OVERLAPPED" + }, + { + "name": "lpdwEnableCount", + "type": "LPDWORD" + } + ], + "GetIpErrorString": [ + { + "name": "ErrorCode", + "type": "IP_STATUS" + }, + { + "name": "Buffer", + "type": "PWSTR" + }, + { + "name": "Size", + "type": "PDWORD" + } + ], + "CreatePersistentTcpPortReservation": [ + { + "name": "StartPort", + "type": "USHORT" + }, + { + "name": "NumberOfPorts", + "type": "USHORT" + }, + { + "name": "Token", + "type": "PULONG64" + } + ], + "CreatePersistentUdpPortReservation": [ + { + "name": "StartPort", + "type": "USHORT" + }, + { + "name": "NumberOfPorts", + "type": "USHORT" + }, + { + "name": "Token", + "type": "PULONG64" + } + ], + "DeletePersistentTcpPortReservation": [ + { + "name": "StartPort", + "type": "USHORT" + }, + { + "name": "NumberOfPorts", + "type": "USHORT" + } + ], + "DeletePersistentUdpPortReservation": [ + { + "name": "StartPort", + "type": "USHORT" + }, + { + "name": "NumberOfPorts", + "type": "USHORT" + } + ], + "LookupPersistentTcpPortReservation": [ + { + "name": "StartPort", + "type": "USHORT" + }, + { + "name": "NumberOfPorts", + "type": "USHORT" + }, + { + "name": "Token", + "type": "PULONG64" + } + ], + "LookupPersistentUdpPortReservation": [ + { + "name": "StartPort", + "type": "USHORT" + }, + { + "name": "NumberOfPorts", + "type": "USHORT" + }, + { + "name": "Token", + "type": "PULONG64" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/jsproxy_dll.json b/qiling/extensions/windows_sdk/defs/jsproxy_dll.json new file mode 100644 index 000000000..eb57e02dd --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/jsproxy_dll.json @@ -0,0 +1,8 @@ +{ + "InternetInitializeAutoProxyDll": [ + { + "name": "dwReserved", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/kernel32_dll.json b/qiling/extensions/windows_sdk/defs/kernel32_dll.json new file mode 100644 index 000000000..24f3c1435 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/kernel32_dll.json @@ -0,0 +1,15504 @@ +{ + "WerRegisterFile": [ + { + "name": "pwzFile", + "type": "PCWSTR" + }, + { + "name": "regFileType", + "type": "WER_REGISTER_FILE_TYPE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WerUnregisterFile": [ + { + "name": "pwzFilePath", + "type": "PCWSTR" + } + ], + "WerRegisterMemoryBlock": [ + { + "name": "pvAddress", + "type": "PVOID" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "WerUnregisterMemoryBlock": [ + { + "name": "pvAddress", + "type": "PVOID" + } + ], + "WerRegisterExcludedMemoryBlock": [ + { + "name": "address", + "type": "void" + }, + { + "name": "size", + "type": "DWORD" + } + ], + "WerUnregisterExcludedMemoryBlock": [ + { + "name": "address", + "type": "void" + } + ], + "WerRegisterCustomMetadata": [ + { + "name": "key", + "type": "PCWSTR" + }, + { + "name": "value", + "type": "PCWSTR" + } + ], + "WerRegisterAdditionalProcess": [ + { + "name": "processId", + "type": "DWORD" + }, + { + "name": "captureExtraInfoForThreadId", + "type": "DWORD" + } + ], + "WerUnregisterAdditionalProcess": [ + { + "name": "processId", + "type": "DWORD" + } + ], + "WerSetFlags": [ + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WerGetFlags": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pdwFlags", + "type": "PDWORD" + } + ], + "WerRegisterRuntimeExceptionModule": [ + { + "name": "pwszOutOfProcessCallbackDll", + "type": "PCWSTR" + }, + { + "name": "pContext", + "type": "PVOID" + } + ], + "WerUnregisterRuntimeExceptionModule": [ + { + "name": "pwszOutOfProcessCallbackDll", + "type": "PCWSTR" + }, + { + "name": "pContext", + "type": "PVOID" + } + ], + "CreateThreadpool": [ + { + "name": "reserved", + "type": "PVOID" + } + ], + "SetThreadpoolThreadMaximum": [ + { + "name": "ptpp", + "type": "PTP_POOL" + }, + { + "name": "cthrdMost", + "type": "DWORD" + } + ], + "SetThreadpoolThreadMinimum": [ + { + "name": "ptpp", + "type": "PTP_POOL" + }, + { + "name": "cthrdMic", + "type": "DWORD" + } + ], + "SetThreadpoolStackInformation": [ + { + "name": "ptpp", + "type": "PTP_POOL" + }, + { + "name": "ptpsi", + "type": "PTP_POOL_STACK_INFORMATION" + } + ], + "QueryThreadpoolStackInformation": [ + { + "name": "ptpp", + "type": "PTP_POOL" + }, + { + "name": "ptpsi", + "type": "PTP_POOL_STACK_INFORMATION" + } + ], + "CloseThreadpool": [ + { + "name": "ptpp", + "type": "PTP_POOL" + } + ], + "CreateThreadpoolCleanupGroup": [ + { + "name": "VOID", + "type": "void" + } + ], + "CloseThreadpoolCleanupGroupMembers": [ + { + "name": "ptpcg", + "type": "PTP_CLEANUP_GROUP" + }, + { + "name": "fCancelPendingCallbacks", + "type": "BOOL" + }, + { + "name": "pvCleanupContext", + "type": "PVOID" + } + ], + "CloseThreadpoolCleanupGroup": [ + { + "name": "ptpcg", + "type": "PTP_CLEANUP_GROUP" + } + ], + "SetEventWhenCallbackReturns": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + }, + { + "name": "evt", + "type": "HANDLE" + } + ], + "ReleaseSemaphoreWhenCallbackReturns": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + }, + { + "name": "sem", + "type": "HANDLE" + }, + { + "name": "crel", + "type": "DWORD" + } + ], + "ReleaseMutexWhenCallbackReturns": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + }, + { + "name": "mut", + "type": "HANDLE" + } + ], + "LeaveCriticalSectionWhenCallbackReturns": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + }, + { + "name": "pcs", + "type": "PCRITICAL_SECTION" + } + ], + "FreeLibraryWhenCallbackReturns": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + }, + { + "name": "mod", + "type": "HMODULE" + } + ], + "CallbackMayRunLong": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + } + ], + "DisassociateCurrentThreadFromCallback": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + } + ], + "TrySubmitThreadpoolCallback": [ + { + "name": "pfns", + "type": "PTP_SIMPLE_CALLBACK" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "pcbe", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "CreateThreadpoolWork": [ + { + "name": "pfnwk", + "type": "PTP_WORK_CALLBACK" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "pcbe", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "SubmitThreadpoolWork": [ + { + "name": "pwk", + "type": "PTP_WORK" + } + ], + "WaitForThreadpoolWorkCallbacks": [ + { + "name": "pwk", + "type": "PTP_WORK" + }, + { + "name": "fCancelPendingCallbacks", + "type": "BOOL" + } + ], + "CloseThreadpoolWork": [ + { + "name": "pwk", + "type": "PTP_WORK" + } + ], + "CreateThreadpoolTimer": [ + { + "name": "pfnti", + "type": "PTP_TIMER_CALLBACK" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "pcbe", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "SetThreadpoolTimer": [ + { + "name": "pti", + "type": "PTP_TIMER" + }, + { + "name": "pftDueTime", + "type": "PFILETIME" + }, + { + "name": "msPeriod", + "type": "DWORD" + }, + { + "name": "msWindowLength", + "type": "DWORD" + } + ], + "IsThreadpoolTimerSet": [ + { + "name": "pti", + "type": "PTP_TIMER" + } + ], + "WaitForThreadpoolTimerCallbacks": [ + { + "name": "pti", + "type": "PTP_TIMER" + }, + { + "name": "fCancelPendingCallbacks", + "type": "BOOL" + } + ], + "CloseThreadpoolTimer": [ + { + "name": "pti", + "type": "PTP_TIMER" + } + ], + "CreateThreadpoolWait": [ + { + "name": "pfnwa", + "type": "PTP_WAIT_CALLBACK" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "pcbe", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "SetThreadpoolWait": [ + { + "name": "pwa", + "type": "PTP_WAIT" + }, + { + "name": "h", + "type": "HANDLE" + }, + { + "name": "pftTimeout", + "type": "PFILETIME" + } + ], + "WaitForThreadpoolWaitCallbacks": [ + { + "name": "pwa", + "type": "PTP_WAIT" + }, + { + "name": "fCancelPendingCallbacks", + "type": "BOOL" + } + ], + "CloseThreadpoolWait": [ + { + "name": "pwa", + "type": "PTP_WAIT" + } + ], + "CreateThreadpoolIo": [ + { + "name": "fl", + "type": "HANDLE" + }, + { + "name": "pfnio", + "type": "PTP_WIN32_IO_CALLBACK" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "pcbe", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "StartThreadpoolIo": [ + { + "name": "pio", + "type": "PTP_IO" + } + ], + "CancelThreadpoolIo": [ + { + "name": "pio", + "type": "PTP_IO" + } + ], + "WaitForThreadpoolIoCallbacks": [ + { + "name": "pio", + "type": "PTP_IO" + }, + { + "name": "fCancelPendingCallbacks", + "type": "BOOL" + } + ], + "CloseThreadpoolIo": [ + { + "name": "pio", + "type": "PTP_IO" + } + ], + "SetThreadpoolTimerEx": [ + { + "name": "pti", + "type": "PTP_TIMER" + }, + { + "name": "pftDueTime", + "type": "PFILETIME" + }, + { + "name": "msPeriod", + "type": "DWORD" + }, + { + "name": "msWindowLength", + "type": "DWORD" + } + ], + "SetThreadpoolWaitEx": [ + { + "name": "pwa", + "type": "PTP_WAIT" + }, + { + "name": "h", + "type": "HANDLE" + }, + { + "name": "pftTimeout", + "type": "PFILETIME" + }, + { + "name": "Reserved", + "type": "PVOID" + } + ], + "IsProcessInJob": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "JobHandle", + "type": "HANDLE" + }, + { + "name": "Result", + "type": "PBOOL" + } + ], + "LoadEnclaveImageW": [ + { + "name": "lpEnclaveAddress", + "type": "LPVOID" + }, + { + "name": "lpImageName", + "type": "LPCWSTR" + } + ], + "TerminateEnclave": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "fWait", + "type": "BOOL" + } + ], + "DeleteEnclave": [ + { + "name": "lpAddress", + "type": "LPVOID" + } + ], + "K32EnumProcesses": [ + { + "name": "lpidProcess", + "type": "DWORD" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "lpcbNeeded", + "type": "LPDWORD" + } + ], + "K32EnumProcessModules": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lphModule", + "type": "HMODULE" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "lpcbNeeded", + "type": "LPDWORD" + } + ], + "K32EnumProcessModulesEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lphModule", + "type": "HMODULE" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "lpcbNeeded", + "type": "LPDWORD" + }, + { + "name": "dwFilterFlag", + "type": "DWORD" + } + ], + "K32GetModuleBaseNameA": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpBaseName", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetModuleBaseNameW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpBaseName", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetModuleFileNameExA": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpFilename", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetModuleFileNameExW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpFilename", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetModuleInformation": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpmodinfo", + "type": "LPMODULEINFO" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "K32EmptyWorkingSet": [ + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "K32QueryWorkingSet": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "K32QueryWorkingSetEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "K32InitializeProcessForWsWatch": [ + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "K32GetWsChanges": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpWatchInfo", + "type": "PPSAPI_WS_WATCH_INFORMATION" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "K32GetWsChangesEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpWatchInfoEx", + "type": "PPSAPI_WS_WATCH_INFORMATION_EX" + }, + { + "name": "cb", + "type": "PDWORD" + } + ], + "K32GetMappedFileNameW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpv", + "type": "LPVOID" + }, + { + "name": "lpFilename", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetMappedFileNameA": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpv", + "type": "LPVOID" + }, + { + "name": "lpFilename", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32EnumDeviceDrivers": [ + { + "name": "lpImageBase", + "type": "LPVOID" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "lpcbNeeded", + "type": "LPDWORD" + } + ], + "K32GetDeviceDriverBaseNameA": [ + { + "name": "ImageBase", + "type": "LPVOID" + }, + { + "name": "lpFilename", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetDeviceDriverBaseNameW": [ + { + "name": "ImageBase", + "type": "LPVOID" + }, + { + "name": "lpBaseName", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetDeviceDriverFileNameA": [ + { + "name": "ImageBase", + "type": "LPVOID" + }, + { + "name": "lpFilename", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetDeviceDriverFileNameW": [ + { + "name": "ImageBase", + "type": "LPVOID" + }, + { + "name": "lpFilename", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetProcessMemoryInfo": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "ppsmemCounters", + "type": "PPROCESS_MEMORY_COUNTERS" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "K32GetPerformanceInfo": [ + { + "name": "pPerformanceInformation", + "type": "PPERFORMANCE_INFORMATION" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "K32EnumPageFilesW": [ + { + "name": "pCallBackRoutine", + "type": "PENUM_PAGE_FILE_CALLBACKW" + }, + { + "name": "pContext", + "type": "LPVOID" + } + ], + "K32EnumPageFilesA": [ + { + "name": "pCallBackRoutine", + "type": "PENUM_PAGE_FILE_CALLBACKA" + }, + { + "name": "pContext", + "type": "LPVOID" + } + ], + "GetCurrentPackageId": [ + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "BYTE" + } + ], + "GetCurrentPackageFullName": [ + { + "name": "packageFullNameLength", + "type": "UINT32" + }, + { + "name": "packageFullName", + "type": "PWSTR" + } + ], + "GetCurrentPackageFamilyName": [ + { + "name": "packageFamilyNameLength", + "type": "UINT32" + }, + { + "name": "packageFamilyName", + "type": "PWSTR" + } + ], + "GetCurrentPackagePath": [ + { + "name": "pathLength", + "type": "UINT32" + }, + { + "name": "path", + "type": "PWSTR" + } + ], + "GetPackageId": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "BYTE" + } + ], + "GetPackageFullName": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "packageFullNameLength", + "type": "UINT32" + }, + { + "name": "packageFullName", + "type": "PWSTR" + } + ], + "GetPackageFullNameFromToken": [ + { + "name": "token", + "type": "HANDLE" + }, + { + "name": "packageFullNameLength", + "type": "UINT32" + }, + { + "name": "packageFullName", + "type": "PWSTR" + } + ], + "GetPackageFamilyName": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "packageFamilyNameLength", + "type": "UINT32" + }, + { + "name": "packageFamilyName", + "type": "PWSTR" + } + ], + "GetPackageFamilyNameFromToken": [ + { + "name": "token", + "type": "HANDLE" + }, + { + "name": "packageFamilyNameLength", + "type": "UINT32" + }, + { + "name": "packageFamilyName", + "type": "PWSTR" + } + ], + "GetPackagePath": [ + { + "name": "packageId", + "type": "PACKAGE_ID" + }, + { + "name": "reserved", + "type": "UINT32" + }, + { + "name": "pathLength", + "type": "UINT32" + }, + { + "name": "path", + "type": "PWSTR" + } + ], + "GetPackagePathByFullName": [ + { + "name": "packageFullName", + "type": "PCWSTR" + }, + { + "name": "pathLength", + "type": "UINT32" + }, + { + "name": "path", + "type": "PWSTR" + } + ], + "GetStagedPackagePathByFullName": [ + { + "name": "packageFullName", + "type": "PCWSTR" + }, + { + "name": "pathLength", + "type": "UINT32" + }, + { + "name": "path", + "type": "PWSTR" + } + ], + "GetCurrentApplicationUserModelId": [ + { + "name": "applicationUserModelIdLength", + "type": "UINT32" + }, + { + "name": "applicationUserModelId", + "type": "PWSTR" + } + ], + "GetApplicationUserModelId": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "applicationUserModelIdLength", + "type": "UINT32" + }, + { + "name": "applicationUserModelId", + "type": "PWSTR" + } + ], + "GetApplicationUserModelIdFromToken": [ + { + "name": "token", + "type": "HANDLE" + }, + { + "name": "applicationUserModelIdLength", + "type": "UINT32" + }, + { + "name": "applicationUserModelId", + "type": "PWSTR" + } + ], + "PackageIdFromFullName": [ + { + "name": "packageFullName", + "type": "PCWSTR" + }, + { + "name": "flags", + "type": "UINT32" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "BYTE" + } + ], + "PackageFullNameFromId": [ + { + "name": "packageId", + "type": "PACKAGE_ID" + }, + { + "name": "packageFullNameLength", + "type": "UINT32" + }, + { + "name": "packageFullName", + "type": "PWSTR" + } + ], + "PackageFamilyNameFromId": [ + { + "name": "packageId", + "type": "PACKAGE_ID" + }, + { + "name": "packageFamilyNameLength", + "type": "UINT32" + }, + { + "name": "packageFamilyName", + "type": "PWSTR" + } + ], + "PackageFamilyNameFromFullName": [ + { + "name": "packageFullName", + "type": "PCWSTR" + }, + { + "name": "packageFamilyNameLength", + "type": "UINT32" + }, + { + "name": "packageFamilyName", + "type": "PWSTR" + } + ], + "PackageNameAndPublisherIdFromFamilyName": [ + { + "name": "packageFamilyName", + "type": "PCWSTR" + }, + { + "name": "packageNameLength", + "type": "UINT32" + }, + { + "name": "packageName", + "type": "PWSTR" + }, + { + "name": "packagePublisherIdLength", + "type": "UINT32" + }, + { + "name": "packagePublisherId", + "type": "PWSTR" + } + ], + "FormatApplicationUserModelId": [ + { + "name": "packageFamilyName", + "type": "PCWSTR" + }, + { + "name": "packageRelativeApplicationId", + "type": "PCWSTR" + }, + { + "name": "applicationUserModelIdLength", + "type": "UINT32" + }, + { + "name": "applicationUserModelId", + "type": "PWSTR" + } + ], + "ParseApplicationUserModelId": [ + { + "name": "applicationUserModelId", + "type": "PCWSTR" + }, + { + "name": "packageFamilyNameLength", + "type": "UINT32" + }, + { + "name": "packageFamilyName", + "type": "PWSTR" + }, + { + "name": "packageRelativeApplicationIdLength", + "type": "UINT32" + }, + { + "name": "packageRelativeApplicationId", + "type": "PWSTR" + } + ], + "GetPackagesByPackageFamily": [ + { + "name": "packageFamilyName", + "type": "PCWSTR" + }, + { + "name": "count", + "type": "UINT32" + }, + { + "name": "packageFullNames", + "type": "PWSTR" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "WCHAR" + } + ], + "FindPackagesByPackageFamily": [ + { + "name": "packageFamilyName", + "type": "PCWSTR" + }, + { + "name": "packageFilters", + "type": "UINT32" + }, + { + "name": "count", + "type": "UINT32" + }, + { + "name": "packageFullNames", + "type": "PWSTR" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "WCHAR" + }, + { + "name": "packageProperties", + "type": "UINT32" + } + ], + "GetStagedPackageOrigin": [ + { + "name": "packageFullName", + "type": "PCWSTR" + }, + { + "name": "origin", + "type": "PackageOrigin" + } + ], + "GetCurrentPackageInfo": [ + { + "name": "flags", + "type": "UINT32" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "BYTE" + }, + { + "name": "count", + "type": "UINT32" + } + ], + "OpenPackageInfoByFullName": [ + { + "name": "packageFullName", + "type": "PCWSTR" + }, + { + "name": "reserved", + "type": "UINT32" + }, + { + "name": "packageInfoReference", + "type": "PACKAGE_INFO_REFERENCE" + } + ], + "ClosePackageInfo": [ + { + "name": "packageInfoReference", + "type": "PACKAGE_INFO_REFERENCE" + } + ], + "GetPackageInfo": [ + { + "name": "packageInfoReference", + "type": "PACKAGE_INFO_REFERENCE" + }, + { + "name": "flags", + "type": "UINT32" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "BYTE" + }, + { + "name": "count", + "type": "UINT32" + } + ], + "GetPackageApplicationIds": [ + { + "name": "packageInfoReference", + "type": "PACKAGE_INFO_REFERENCE" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "BYTE" + }, + { + "name": "count", + "type": "UINT32" + } + ], + "CreateIoCompletionPort": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "ExistingCompletionPort", + "type": "HANDLE" + }, + { + "name": "CompletionKey", + "type": "ULONG_PTR" + }, + { + "name": "NumberOfConcurrentThreads", + "type": "DWORD" + } + ], + "GetQueuedCompletionStatus": [ + { + "name": "CompletionPort", + "type": "HANDLE" + }, + { + "name": "lpNumberOfBytesTransferred", + "type": "LPDWORD" + }, + { + "name": "lpCompletionKey", + "type": "PULONG_PTR" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "GetQueuedCompletionStatusEx": [ + { + "name": "CompletionPort", + "type": "HANDLE" + }, + { + "name": "lpCompletionPortEntries", + "type": "LPOVERLAPPED_ENTRY" + }, + { + "name": "ulCount", + "type": "ULONG" + }, + { + "name": "ulNumEntriesRemoved", + "type": "PULONG" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "fAlertable", + "type": "BOOL" + } + ], + "PostQueuedCompletionStatus": [ + { + "name": "CompletionPort", + "type": "HANDLE" + }, + { + "name": "dwNumberOfBytesTransferred", + "type": "DWORD" + }, + { + "name": "dwCompletionKey", + "type": "ULONG_PTR" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "DeviceIoControl": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwIoControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "GetOverlappedResult": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpNumberOfBytesTransferred", + "type": "LPDWORD" + }, + { + "name": "bWait", + "type": "BOOL" + } + ], + "CancelIoEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "CancelIo": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "GetOverlappedResultEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpNumberOfBytesTransferred", + "type": "LPDWORD" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "bAlertable", + "type": "BOOL" + } + ], + "CancelSynchronousIo": [ + { + "name": "hThread", + "type": "HANDLE" + } + ], + "SystemTimeToTzSpecificLocalTime": [ + { + "name": "lpTimeZoneInformation", + "type": "TIME_ZONE_INFORMATION" + }, + { + "name": "lpUniversalTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpLocalTime", + "type": "LPSYSTEMTIME" + } + ], + "TzSpecificLocalTimeToSystemTime": [ + { + "name": "lpTimeZoneInformation", + "type": "TIME_ZONE_INFORMATION" + }, + { + "name": "lpLocalTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpUniversalTime", + "type": "LPSYSTEMTIME" + } + ], + "FileTimeToSystemTime": [ + { + "name": "lpFileTime", + "type": "FILETIME" + }, + { + "name": "lpSystemTime", + "type": "LPSYSTEMTIME" + } + ], + "SystemTimeToFileTime": [ + { + "name": "lpSystemTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpFileTime", + "type": "LPFILETIME" + } + ], + "GetTimeZoneInformation": [ + { + "name": "lpTimeZoneInformation", + "type": "LPTIME_ZONE_INFORMATION" + } + ], + "SetTimeZoneInformation": [ + { + "name": "lpTimeZoneInformation", + "type": "TIME_ZONE_INFORMATION" + } + ], + "SetDynamicTimeZoneInformation": [ + { + "name": "lpTimeZoneInformation", + "type": "DYNAMIC_TIME_ZONE_INFORMATION" + } + ], + "GetDynamicTimeZoneInformation": [ + { + "name": "pTimeZoneInformation", + "type": "PDYNAMIC_TIME_ZONE_INFORMATION" + } + ], + "GetTimeZoneInformationForYear": [ + { + "name": "wYear", + "type": "USHORT" + }, + { + "name": "pdtzi", + "type": "PDYNAMIC_TIME_ZONE_INFORMATION" + }, + { + "name": "ptzi", + "type": "LPTIME_ZONE_INFORMATION" + } + ], + "EnumDynamicTimeZoneInformation": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpTimeZoneInformation", + "type": "PDYNAMIC_TIME_ZONE_INFORMATION" + } + ], + "GetDynamicTimeZoneInformationEffectiveYears": [ + { + "name": "lpTimeZoneInformation", + "type": "PDYNAMIC_TIME_ZONE_INFORMATION" + }, + { + "name": "FirstYear", + "type": "LPDWORD" + }, + { + "name": "LastYear", + "type": "LPDWORD" + } + ], + "SystemTimeToTzSpecificLocalTimeEx": [ + { + "name": "lpTimeZoneInformation", + "type": "DYNAMIC_TIME_ZONE_INFORMATION" + }, + { + "name": "lpUniversalTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpLocalTime", + "type": "LPSYSTEMTIME" + } + ], + "TzSpecificLocalTimeToSystemTimeEx": [ + { + "name": "lpTimeZoneInformation", + "type": "DYNAMIC_TIME_ZONE_INFORMATION" + }, + { + "name": "lpLocalTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpUniversalTime", + "type": "LPSYSTEMTIME" + } + ], + "HeapCreate": [ + { + "name": "flOptions", + "type": "DWORD" + }, + { + "name": "dwInitialSize", + "type": "SIZE_T" + }, + { + "name": "dwMaximumSize", + "type": "SIZE_T" + } + ], + "HeapDestroy": [ + { + "name": "hHeap", + "type": "HANDLE" + } + ], + "HeapAlloc": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwBytes", + "type": "SIZE_T" + } + ], + "HeapReAlloc": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpMem", + "type": "LPVOID" + }, + { + "name": "dwBytes", + "type": "SIZE_T" + } + ], + "HeapFree": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpMem", + "type": "LPVOID" + } + ], + "HeapSize": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpMem", + "type": "LPCVOID" + } + ], + "GetProcessHeap": [ + { + "name": "VOID", + "type": "void" + } + ], + "HeapCompact": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "HeapSetInformation": [ + { + "name": "HeapHandle", + "type": "HANDLE" + }, + { + "name": "HeapInformationClass", + "type": "HEAP_INFORMATION_CLASS" + }, + { + "name": "HeapInformation", + "type": "PVOID" + }, + { + "name": "HeapInformationLength", + "type": "SIZE_T" + } + ], + "HeapValidate": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpMem", + "type": "LPCVOID" + } + ], + "GetProcessHeaps": [ + { + "name": "NumberOfHeaps", + "type": "DWORD" + }, + { + "name": "ProcessHeaps", + "type": "PHANDLE" + } + ], + "HeapLock": [ + { + "name": "hHeap", + "type": "HANDLE" + } + ], + "HeapUnlock": [ + { + "name": "hHeap", + "type": "HANDLE" + } + ], + "HeapWalk": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "lpEntry", + "type": "LPPROCESS_HEAP_ENTRY" + } + ], + "HeapQueryInformation": [ + { + "name": "HeapHandle", + "type": "HANDLE" + }, + { + "name": "HeapInformationClass", + "type": "HEAP_INFORMATION_CLASS" + }, + { + "name": "HeapInformation", + "type": "PVOID" + }, + { + "name": "HeapInformationLength", + "type": "SIZE_T" + }, + { + "name": "ReturnLength", + "type": "PSIZE_T" + } + ], + "QueueUserAPC": [ + { + "name": "pfnAPC", + "type": "PAPCFUNC" + }, + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dwData", + "type": "ULONG_PTR" + } + ], + "GetProcessTimes": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpCreationTime", + "type": "LPFILETIME" + }, + { + "name": "lpExitTime", + "type": "LPFILETIME" + }, + { + "name": "lpKernelTime", + "type": "LPFILETIME" + }, + { + "name": "lpUserTime", + "type": "LPFILETIME" + } + ], + "GetCurrentProcess": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetCurrentProcessId": [ + { + "name": "VOID", + "type": "void" + } + ], + "ExitProcess": [ + { + "name": "uExitCode", + "type": "UINT" + } + ], + "TerminateProcess": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "uExitCode", + "type": "UINT" + } + ], + "GetExitCodeProcess": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpExitCode", + "type": "LPDWORD" + } + ], + "SwitchToThread": [ + { + "name": "VOID", + "type": "void" + } + ], + "CreateThread": [ + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwStackSize", + "type": "SIZE_T" + }, + { + "name": "lpStartAddress", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "lpParameter", + "type": "LPVOID" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpThreadId", + "type": "LPDWORD" + } + ], + "CreateRemoteThread": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwStackSize", + "type": "SIZE_T" + }, + { + "name": "lpStartAddress", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "lpParameter", + "type": "LPVOID" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpThreadId", + "type": "LPDWORD" + } + ], + "GetCurrentThread": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetCurrentThreadId": [ + { + "name": "VOID", + "type": "void" + } + ], + "OpenThread": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "dwThreadId", + "type": "DWORD" + } + ], + "SetThreadPriority": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "nPriority", + "type": "int" + } + ], + "SetThreadPriorityBoost": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "bDisablePriorityBoost", + "type": "BOOL" + } + ], + "GetThreadPriorityBoost": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "pDisablePriorityBoost", + "type": "PBOOL" + } + ], + "GetThreadPriority": [ + { + "name": "hThread", + "type": "HANDLE" + } + ], + "ExitThread": [ + { + "name": "dwExitCode", + "type": "DWORD" + } + ], + "TerminateThread": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dwExitCode", + "type": "DWORD" + } + ], + "GetExitCodeThread": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpExitCode", + "type": "LPDWORD" + } + ], + "SuspendThread": [ + { + "name": "hThread", + "type": "HANDLE" + } + ], + "ResumeThread": [ + { + "name": "hThread", + "type": "HANDLE" + } + ], + "CreateProcessA": [ + { + "name": "lpApplicationName", + "type": "LPCSTR" + }, + { + "name": "lpCommandLine", + "type": "LPSTR" + }, + { + "name": "lpProcessAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bInheritHandles", + "type": "BOOL" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "lpCurrentDirectory", + "type": "LPCSTR" + }, + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOA" + }, + { + "name": "lpProcessInformation", + "type": "LPPROCESS_INFORMATION" + } + ], + "CreateProcessW": [ + { + "name": "lpApplicationName", + "type": "LPCWSTR" + }, + { + "name": "lpCommandLine", + "type": "LPWSTR" + }, + { + "name": "lpProcessAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bInheritHandles", + "type": "BOOL" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "lpCurrentDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOW" + }, + { + "name": "lpProcessInformation", + "type": "LPPROCESS_INFORMATION" + } + ], + "SetProcessShutdownParameters": [ + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetProcessVersion": [ + { + "name": "ProcessId", + "type": "DWORD" + } + ], + "GetStartupInfoW": [ + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOW" + } + ], + "SetPriorityClass": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwPriorityClass", + "type": "DWORD" + } + ], + "GetPriorityClass": [ + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "SetThreadStackGuarantee": [ + { + "name": "StackSizeInBytes", + "type": "PULONG" + } + ], + "ProcessIdToSessionId": [ + { + "name": "dwProcessId", + "type": "DWORD" + }, + { + "name": "pSessionId", + "type": "DWORD" + } + ], + "GetProcessId": [ + { + "name": "Process", + "type": "HANDLE" + } + ], + "GetThreadId": [ + { + "name": "Thread", + "type": "HANDLE" + } + ], + "FlushProcessWriteBuffers": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetProcessIdOfThread": [ + { + "name": "Thread", + "type": "HANDLE" + } + ], + "InitializeProcThreadAttributeList": [ + { + "name": "lpAttributeList", + "type": "LPPROC_THREAD_ATTRIBUTE_LIST" + }, + { + "name": "dwAttributeCount", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpSize", + "type": "PSIZE_T" + } + ], + "DeleteProcThreadAttributeList": [ + { + "name": "lpAttributeList", + "type": "LPPROC_THREAD_ATTRIBUTE_LIST" + } + ], + "UpdateProcThreadAttribute": [ + { + "name": "lpAttributeList", + "type": "LPPROC_THREAD_ATTRIBUTE_LIST" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "Attribute", + "type": "DWORD_PTR" + }, + { + "name": "lpValue", + "type": "PVOID" + }, + { + "name": "cbSize", + "type": "SIZE_T" + }, + { + "name": "lpPreviousValue", + "type": "PVOID" + }, + { + "name": "lpReturnSize", + "type": "PSIZE_T" + } + ], + "SetProcessAffinityUpdateMode": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "QueryProcessAffinityUpdateMode": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpdwFlags", + "type": "LPDWORD" + } + ], + "CreateRemoteThreadEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwStackSize", + "type": "SIZE_T" + }, + { + "name": "lpStartAddress", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "lpParameter", + "type": "LPVOID" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpAttributeList", + "type": "LPPROC_THREAD_ATTRIBUTE_LIST" + }, + { + "name": "lpThreadId", + "type": "LPDWORD" + } + ], + "GetCurrentThreadStackLimits": [ + { + "name": "LowLimit", + "type": "PULONG_PTR" + }, + { + "name": "HighLimit", + "type": "PULONG_PTR" + } + ], + "GetThreadContext": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpContext", + "type": "LPCONTEXT" + } + ], + "GetProcessMitigationPolicy": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "MitigationPolicy", + "type": "PROCESS_MITIGATION_POLICY" + }, + { + "name": "lpBuffer", + "type": "PVOID" + }, + { + "name": "dwLength", + "type": "SIZE_T" + } + ], + "SetThreadContext": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpContext", + "type": "CONTEXT" + } + ], + "SetProcessMitigationPolicy": [ + { + "name": "MitigationPolicy", + "type": "PROCESS_MITIGATION_POLICY" + }, + { + "name": "lpBuffer", + "type": "PVOID" + }, + { + "name": "dwLength", + "type": "SIZE_T" + } + ], + "FlushInstructionCache": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpBaseAddress", + "type": "LPCVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + } + ], + "GetThreadTimes": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpCreationTime", + "type": "LPFILETIME" + }, + { + "name": "lpExitTime", + "type": "LPFILETIME" + }, + { + "name": "lpKernelTime", + "type": "LPFILETIME" + }, + { + "name": "lpUserTime", + "type": "LPFILETIME" + } + ], + "OpenProcess": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "IsProcessorFeaturePresent": [ + { + "name": "ProcessorFeature", + "type": "DWORD" + } + ], + "GetProcessHandleCount": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pdwHandleCount", + "type": "PDWORD" + } + ], + "GetCurrentProcessorNumber": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetThreadIdealProcessorEx": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpIdealProcessor", + "type": "PPROCESSOR_NUMBER" + }, + { + "name": "lpPreviousIdealProcessor", + "type": "PPROCESSOR_NUMBER" + } + ], + "GetThreadIdealProcessorEx": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpIdealProcessor", + "type": "PPROCESSOR_NUMBER" + } + ], + "GetCurrentProcessorNumberEx": [ + { + "name": "ProcNumber", + "type": "PPROCESSOR_NUMBER" + } + ], + "GetProcessPriorityBoost": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pDisablePriorityBoost", + "type": "PBOOL" + } + ], + "SetProcessPriorityBoost": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "bDisablePriorityBoost", + "type": "BOOL" + } + ], + "GetThreadIOPendingFlag": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpIOIsPending", + "type": "PBOOL" + } + ], + "GetSystemTimes": [ + { + "name": "lpIdleTime", + "type": "PFILETIME" + }, + { + "name": "lpKernelTime", + "type": "PFILETIME" + }, + { + "name": "lpUserTime", + "type": "PFILETIME" + } + ], + "GetThreadInformation": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "ThreadInformationClass", + "type": "THREAD_INFORMATION_CLASS" + }, + { + "name": "ThreadInformation", + "type": "LPVOID" + }, + { + "name": "ThreadInformationSize", + "type": "DWORD" + } + ], + "SetThreadInformation": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "ThreadInformationClass", + "type": "THREAD_INFORMATION_CLASS" + }, + { + "name": "ThreadInformation", + "type": "LPVOID" + }, + { + "name": "ThreadInformationSize", + "type": "DWORD" + } + ], + "SetProtectedPolicy": [ + { + "name": "PolicyGuid", + "type": "LPCGUID" + }, + { + "name": "PolicyValue", + "type": "ULONG_PTR" + }, + { + "name": "OldPolicyValue", + "type": "PULONG_PTR" + } + ], + "QueryProtectedPolicy": [ + { + "name": "PolicyGuid", + "type": "LPCGUID" + }, + { + "name": "PolicyValue", + "type": "PULONG_PTR" + } + ], + "SetThreadIdealProcessor": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dwIdealProcessor", + "type": "DWORD" + } + ], + "SetProcessInformation": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ProcessInformationClass", + "type": "PROCESS_INFORMATION_CLASS" + }, + { + "name": "ProcessInformation", + "type": "LPVOID" + }, + { + "name": "ProcessInformationSize", + "type": "DWORD" + } + ], + "GetProcessInformation": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ProcessInformationClass", + "type": "PROCESS_INFORMATION_CLASS" + }, + { + "name": "ProcessInformation", + "type": "LPVOID" + }, + { + "name": "ProcessInformationSize", + "type": "DWORD" + } + ], + "GetProcessShutdownParameters": [ + { + "name": "lpdwLevel", + "type": "LPDWORD" + }, + { + "name": "lpdwFlags", + "type": "LPDWORD" + } + ], + "SetThreadDescription": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpThreadDescription", + "type": "PCWSTR" + } + ], + "GetThreadDescription": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "ppszThreadDescription", + "type": "PWSTR" + } + ], + "GetStartupInfoA": [ + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOA" + } + ], + "VirtualAlloc": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flAllocationType", + "type": "DWORD" + }, + { + "name": "flProtect", + "type": "DWORD" + } + ], + "VirtualProtect": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flNewProtect", + "type": "DWORD" + }, + { + "name": "lpflOldProtect", + "type": "PDWORD" + } + ], + "VirtualFree": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "dwFreeType", + "type": "DWORD" + } + ], + "VirtualQuery": [ + { + "name": "lpAddress", + "type": "LPCVOID" + }, + { + "name": "lpBuffer", + "type": "PMEMORY_BASIC_INFORMATION" + }, + { + "name": "dwLength", + "type": "SIZE_T" + } + ], + "VirtualAllocEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flAllocationType", + "type": "DWORD" + }, + { + "name": "flProtect", + "type": "DWORD" + } + ], + "VirtualProtectEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flNewProtect", + "type": "DWORD" + }, + { + "name": "lpflOldProtect", + "type": "PDWORD" + } + ], + "VirtualQueryEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPCVOID" + }, + { + "name": "lpBuffer", + "type": "PMEMORY_BASIC_INFORMATION" + }, + { + "name": "dwLength", + "type": "SIZE_T" + } + ], + "ReadProcessMemory": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpBaseAddress", + "type": "LPCVOID" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nSize", + "type": "SIZE_T" + }, + { + "name": "lpNumberOfBytesRead", + "type": "SIZE_T" + } + ], + "WriteProcessMemory": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpBaseAddress", + "type": "LPVOID" + }, + { + "name": "lpBuffer", + "type": "LPCVOID" + }, + { + "name": "nSize", + "type": "SIZE_T" + }, + { + "name": "lpNumberOfBytesWritten", + "type": "SIZE_T" + } + ], + "MapViewOfFile": [ + { + "name": "hFileMappingObject", + "type": "HANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwFileOffsetHigh", + "type": "DWORD" + }, + { + "name": "dwFileOffsetLow", + "type": "DWORD" + }, + { + "name": "dwNumberOfBytesToMap", + "type": "SIZE_T" + } + ], + "MapViewOfFileEx": [ + { + "name": "hFileMappingObject", + "type": "HANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwFileOffsetHigh", + "type": "DWORD" + }, + { + "name": "dwFileOffsetLow", + "type": "DWORD" + }, + { + "name": "dwNumberOfBytesToMap", + "type": "SIZE_T" + }, + { + "name": "lpBaseAddress", + "type": "LPVOID" + } + ], + "VirtualFreeEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "dwFreeType", + "type": "DWORD" + } + ], + "FlushViewOfFile": [ + { + "name": "lpBaseAddress", + "type": "LPCVOID" + }, + { + "name": "dwNumberOfBytesToFlush", + "type": "SIZE_T" + } + ], + "UnmapViewOfFile": [ + { + "name": "lpBaseAddress", + "type": "LPCVOID" + } + ], + "GetLargePageMinimum": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetProcessWorkingSetSizeEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpMinimumWorkingSetSize", + "type": "PSIZE_T" + }, + { + "name": "lpMaximumWorkingSetSize", + "type": "PSIZE_T" + }, + { + "name": "Flags", + "type": "PDWORD" + } + ], + "SetProcessWorkingSetSizeEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwMinimumWorkingSetSize", + "type": "SIZE_T" + }, + { + "name": "dwMaximumWorkingSetSize", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "VirtualLock": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + } + ], + "VirtualUnlock": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + } + ], + "GetWriteWatch": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpBaseAddress", + "type": "PVOID" + }, + { + "name": "dwRegionSize", + "type": "SIZE_T" + }, + { + "name": "lpAddresses", + "type": "PVOID" + }, + { + "name": "lpdwCount", + "type": "ULONG_PTR" + }, + { + "name": "lpdwGranularity", + "type": "LPDWORD" + } + ], + "ResetWriteWatch": [ + { + "name": "lpBaseAddress", + "type": "LPVOID" + }, + { + "name": "dwRegionSize", + "type": "SIZE_T" + } + ], + "CreateMemoryResourceNotification": [ + { + "name": "NotificationType", + "type": "MEMORY_RESOURCE_NOTIFICATION_TYPE" + } + ], + "QueryMemoryResourceNotification": [ + { + "name": "ResourceNotificationHandle", + "type": "HANDLE" + }, + { + "name": "ResourceState", + "type": "PBOOL" + } + ], + "GetSystemFileCacheSize": [ + { + "name": "lpMinimumFileCacheSize", + "type": "PSIZE_T" + }, + { + "name": "lpMaximumFileCacheSize", + "type": "PSIZE_T" + }, + { + "name": "lpFlags", + "type": "PDWORD" + } + ], + "SetSystemFileCacheSize": [ + { + "name": "MinimumFileCacheSize", + "type": "SIZE_T" + }, + { + "name": "MaximumFileCacheSize", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "PrefetchVirtualMemory": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "NumberOfEntries", + "type": "ULONG_PTR" + }, + { + "name": "VirtualAddresses", + "type": "PWIN32_MEMORY_RANGE_ENTRY" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "CreateFileMappingFromApp": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "SecurityAttributes", + "type": "PSECURITY_ATTRIBUTES" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "MaximumSize", + "type": "ULONG64" + }, + { + "name": "Name", + "type": "PCWSTR" + } + ], + "MapViewOfFileFromApp": [ + { + "name": "hFileMappingObject", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "ULONG" + }, + { + "name": "FileOffset", + "type": "ULONG64" + }, + { + "name": "NumberOfBytesToMap", + "type": "SIZE_T" + } + ], + "UnmapViewOfFileEx": [ + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "UnmapFlags", + "type": "ULONG" + } + ], + "AllocateUserPhysicalPages": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "NumberOfPages", + "type": "PULONG_PTR" + }, + { + "name": "PageArray", + "type": "PULONG_PTR" + } + ], + "FreeUserPhysicalPages": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "NumberOfPages", + "type": "PULONG_PTR" + }, + { + "name": "PageArray", + "type": "PULONG_PTR" + } + ], + "MapUserPhysicalPages": [ + { + "name": "VirtualAddress", + "type": "PVOID" + }, + { + "name": "NumberOfPages", + "type": "ULONG_PTR" + }, + { + "name": "PageArray", + "type": "PULONG_PTR" + } + ], + "AllocateUserPhysicalPagesNuma": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "NumberOfPages", + "type": "PULONG_PTR" + }, + { + "name": "PageArray", + "type": "PULONG_PTR" + }, + { + "name": "nndPreferred", + "type": "DWORD" + } + ], + "VirtualAllocExNuma": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flAllocationType", + "type": "DWORD" + }, + { + "name": "flProtect", + "type": "DWORD" + }, + { + "name": "nndPreferred", + "type": "DWORD" + } + ], + "GetMemoryErrorHandlingCapabilities": [ + { + "name": "Capabilities", + "type": "PULONG" + } + ], + "RegisterBadMemoryNotification": [ + { + "name": "Callback", + "type": "PBAD_MEMORY_CALLBACK_ROUTINE" + } + ], + "UnregisterBadMemoryNotification": [ + { + "name": "RegistrationHandle", + "type": "PVOID" + } + ], + "OfferVirtualMemory": [ + { + "name": "VirtualAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "Priority", + "type": "OFFER_PRIORITY" + } + ], + "ReclaimVirtualMemory": [ + { + "name": "VirtualAddress", + "type": "void" + }, + { + "name": "Size", + "type": "SIZE_T" + } + ], + "DiscardVirtualMemory": [ + { + "name": "VirtualAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + } + ], + "VirtualAllocFromApp": [ + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "Protection", + "type": "ULONG" + } + ], + "VirtualProtectFromApp": [ + { + "name": "Address", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "NewProtection", + "type": "ULONG" + }, + { + "name": "OldProtection", + "type": "PULONG" + } + ], + "OpenFileMappingFromApp": [ + { + "name": "DesiredAccess", + "type": "ULONG" + }, + { + "name": "InheritHandle", + "type": "BOOL" + }, + { + "name": "Name", + "type": "PCWSTR" + } + ], + "MapViewOfFile2": [ + { + "name": "FileMappingHandle", + "type": "HANDLE" + }, + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "Offset", + "type": "ULONG64" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "ViewSize", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + } + ], + "UnmapViewOfFile2": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "UnmapFlags", + "type": "ULONG" + } + ], + "VirtualAlloc2": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "ExtendedParameters", + "type": "MEM_EXTENDED_PARAMETER" + }, + { + "name": "ParameterCount", + "type": "ULONG" + } + ], + "MapViewOfFile3": [ + { + "name": "FileMapping", + "type": "HANDLE" + }, + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Offset", + "type": "ULONG64" + }, + { + "name": "ViewSize", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "ExtendedParameters", + "type": "MEM_EXTENDED_PARAMETER" + }, + { + "name": "ParameterCount", + "type": "ULONG" + } + ], + "VirtualAlloc2FromApp": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "ExtendedParameters", + "type": "MEM_EXTENDED_PARAMETER" + }, + { + "name": "ParameterCount", + "type": "ULONG" + } + ], + "MapViewOfFile3FromApp": [ + { + "name": "FileMapping", + "type": "HANDLE" + }, + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Offset", + "type": "ULONG64" + }, + { + "name": "ViewSize", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "ExtendedParameters", + "type": "MEM_EXTENDED_PARAMETER" + }, + { + "name": "ParameterCount", + "type": "ULONG" + } + ], + "Wow64DisableWow64FsRedirection": [ + { + "name": "OldValue", + "type": "PVOID" + } + ], + "Wow64RevertWow64FsRedirection": [ + { + "name": "OlValue", + "type": "PVOID" + } + ], + "IsWow64Process": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Wow64Process", + "type": "PBOOL" + } + ], + "GetSystemWow64DirectoryA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetSystemWow64DirectoryW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "IsWow64Process2": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pProcessMachine", + "type": "USHORT" + }, + { + "name": "pNativeMachine", + "type": "USHORT" + } + ], + "GetDurationFormatEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDuration", + "type": "SYSTEMTIME" + }, + { + "name": "ullDuration", + "type": "ULONGLONG" + }, + { + "name": "lpFormat", + "type": "LPCWSTR" + }, + { + "name": "lpDurationStr", + "type": "LPWSTR" + }, + { + "name": "cchDuration", + "type": "int" + } + ], + "CompareStringW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwCmpFlags", + "type": "DWORD" + }, + { + "name": "lpString1", + "type": "PCNZWCH" + }, + { + "name": "cchCount1", + "type": "int" + }, + { + "name": "lpString2", + "type": "PCNZWCH" + }, + { + "name": "cchCount2", + "type": "int" + } + ], + "FoldStringW": [ + { + "name": "dwMapFlags", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCWCH" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpDestStr", + "type": "LPWSTR" + }, + { + "name": "cchDest", + "type": "int" + } + ], + "IsValidCodePage": [ + { + "name": "CodePage", + "type": "UINT" + } + ], + "GetACP": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetOEMCP": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetCPInfo": [ + { + "name": "CodePage", + "type": "UINT" + }, + { + "name": "lpCPInfo", + "type": "LPCPINFO" + } + ], + "GetCPInfoExA": [ + { + "name": "CodePage", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpCPInfoEx", + "type": "LPCPINFOEXA" + } + ], + "GetCPInfoExW": [ + { + "name": "CodePage", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpCPInfoEx", + "type": "LPCPINFOEXW" + } + ], + "CompareStringA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwCmpFlags", + "type": "DWORD" + }, + { + "name": "lpString1", + "type": "PCNZCH" + }, + { + "name": "cchCount1", + "type": "int" + }, + { + "name": "lpString2", + "type": "PCNZCH" + }, + { + "name": "cchCount2", + "type": "int" + } + ], + "FindNLSString": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFindNLSStringFlags", + "type": "DWORD" + }, + { + "name": "lpStringSource", + "type": "LPCWSTR" + }, + { + "name": "cchSource", + "type": "int" + }, + { + "name": "lpStringValue", + "type": "LPCWSTR" + }, + { + "name": "cchValue", + "type": "int" + }, + { + "name": "pcchFound", + "type": "LPINT" + } + ], + "LCMapStringW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwMapFlags", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCWSTR" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpDestStr", + "type": "LPWSTR" + }, + { + "name": "cchDest", + "type": "int" + } + ], + "LCMapStringA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwMapFlags", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCSTR" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpDestStr", + "type": "LPSTR" + }, + { + "name": "cchDest", + "type": "int" + } + ], + "GetLocaleInfoW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "LCType", + "type": "LCTYPE" + }, + { + "name": "lpLCData", + "type": "LPWSTR" + }, + { + "name": "cchData", + "type": "int" + } + ], + "GetLocaleInfoA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "LCType", + "type": "LCTYPE" + }, + { + "name": "lpLCData", + "type": "LPSTR" + }, + { + "name": "cchData", + "type": "int" + } + ], + "SetLocaleInfoA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "LCType", + "type": "LCTYPE" + }, + { + "name": "lpLCData", + "type": "LPCSTR" + } + ], + "SetLocaleInfoW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "LCType", + "type": "LCTYPE" + }, + { + "name": "lpLCData", + "type": "LPCWSTR" + } + ], + "GetCalendarInfoA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + }, + { + "name": "lpCalData", + "type": "LPSTR" + }, + { + "name": "cchData", + "type": "int" + }, + { + "name": "lpValue", + "type": "LPDWORD" + } + ], + "GetCalendarInfoW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + }, + { + "name": "lpCalData", + "type": "LPWSTR" + }, + { + "name": "cchData", + "type": "int" + }, + { + "name": "lpValue", + "type": "LPDWORD" + } + ], + "SetCalendarInfoA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + }, + { + "name": "lpCalData", + "type": "LPCSTR" + } + ], + "SetCalendarInfoW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + }, + { + "name": "lpCalData", + "type": "LPCWSTR" + } + ], + "LoadStringByReference": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Language", + "type": "PCWSTR" + }, + { + "name": "SourceString", + "type": "PCWSTR" + }, + { + "name": "Buffer", + "type": "PWSTR" + }, + { + "name": "cchBuffer", + "type": "ULONG" + }, + { + "name": "Directory", + "type": "PCWSTR" + }, + { + "name": "pcchBufferOut", + "type": "PULONG" + } + ], + "IsDBCSLeadByte": [ + { + "name": "TestChar", + "type": "BYTE" + } + ], + "IsDBCSLeadByteEx": [ + { + "name": "CodePage", + "type": "UINT" + }, + { + "name": "TestChar", + "type": "BYTE" + } + ], + "LocaleNameToLCID": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "LCIDToLocaleName": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "lpName", + "type": "LPWSTR" + }, + { + "name": "cchName", + "type": "int" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetDurationFormat": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDuration", + "type": "SYSTEMTIME" + }, + { + "name": "ullDuration", + "type": "ULONGLONG" + }, + { + "name": "lpFormat", + "type": "LPCWSTR" + }, + { + "name": "lpDurationStr", + "type": "LPWSTR" + }, + { + "name": "cchDuration", + "type": "int" + } + ], + "GetNumberFormatA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpValue", + "type": "LPCSTR" + }, + { + "name": "lpFormat", + "type": "NUMBERFMTA" + }, + { + "name": "lpNumberStr", + "type": "LPSTR" + }, + { + "name": "cchNumber", + "type": "int" + } + ], + "GetNumberFormatW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpValue", + "type": "LPCWSTR" + }, + { + "name": "lpFormat", + "type": "NUMBERFMTW" + }, + { + "name": "lpNumberStr", + "type": "LPWSTR" + }, + { + "name": "cchNumber", + "type": "int" + } + ], + "GetCurrencyFormatA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpValue", + "type": "LPCSTR" + }, + { + "name": "lpFormat", + "type": "CURRENCYFMTA" + }, + { + "name": "lpCurrencyStr", + "type": "LPSTR" + }, + { + "name": "cchCurrency", + "type": "int" + } + ], + "GetCurrencyFormatW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpValue", + "type": "LPCWSTR" + }, + { + "name": "lpFormat", + "type": "CURRENCYFMTW" + }, + { + "name": "lpCurrencyStr", + "type": "LPWSTR" + }, + { + "name": "cchCurrency", + "type": "int" + } + ], + "EnumCalendarInfoA": [ + { + "name": "lpCalInfoEnumProc", + "type": "CALINFO_ENUMPROCA" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + } + ], + "EnumCalendarInfoW": [ + { + "name": "lpCalInfoEnumProc", + "type": "CALINFO_ENUMPROCW" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + } + ], + "EnumCalendarInfoExA": [ + { + "name": "lpCalInfoEnumProcEx", + "type": "CALINFO_ENUMPROCEXA" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + } + ], + "EnumCalendarInfoExW": [ + { + "name": "lpCalInfoEnumProcEx", + "type": "CALINFO_ENUMPROCEXW" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + } + ], + "EnumTimeFormatsA": [ + { + "name": "lpTimeFmtEnumProc", + "type": "TIMEFMT_ENUMPROCA" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumTimeFormatsW": [ + { + "name": "lpTimeFmtEnumProc", + "type": "TIMEFMT_ENUMPROCW" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDateFormatsA": [ + { + "name": "lpDateFmtEnumProc", + "type": "DATEFMT_ENUMPROCA" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDateFormatsW": [ + { + "name": "lpDateFmtEnumProc", + "type": "DATEFMT_ENUMPROCW" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDateFormatsExA": [ + { + "name": "lpDateFmtEnumProcEx", + "type": "DATEFMT_ENUMPROCEXA" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDateFormatsExW": [ + { + "name": "lpDateFmtEnumProcEx", + "type": "DATEFMT_ENUMPROCEXW" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "IsValidLanguageGroup": [ + { + "name": "LanguageGroup", + "type": "LGRPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetNLSVersion": [ + { + "name": "Function", + "type": "NLS_FUNCTION" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFO" + } + ], + "IsValidLocale": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetGeoInfoA": [ + { + "name": "Location", + "type": "GEOID" + }, + { + "name": "GeoType", + "type": "GEOTYPE" + }, + { + "name": "lpGeoData", + "type": "LPSTR" + }, + { + "name": "cchData", + "type": "int" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "GetGeoInfoW": [ + { + "name": "Location", + "type": "GEOID" + }, + { + "name": "GeoType", + "type": "GEOTYPE" + }, + { + "name": "lpGeoData", + "type": "LPWSTR" + }, + { + "name": "cchData", + "type": "int" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "GetGeoInfoEx": [ + { + "name": "location", + "type": "PWSTR" + }, + { + "name": "geoType", + "type": "GEOTYPE" + }, + { + "name": "geoData", + "type": "PWSTR" + }, + { + "name": "geoDataCount", + "type": "int" + } + ], + "EnumSystemGeoID": [ + { + "name": "GeoClass", + "type": "GEOCLASS" + }, + { + "name": "ParentGeoId", + "type": "GEOID" + }, + { + "name": "lpGeoEnumProc", + "type": "GEO_ENUMPROC" + } + ], + "EnumSystemGeoNames": [ + { + "name": "geoClass", + "type": "GEOCLASS" + }, + { + "name": "geoEnumProc", + "type": "GEO_ENUMNAMEPROC" + }, + { + "name": "data", + "type": "LPARAM" + } + ], + "GetUserGeoID": [ + { + "name": "GeoClass", + "type": "GEOCLASS" + } + ], + "GetUserDefaultGeoName": [ + { + "name": "geoName", + "type": "LPWSTR" + }, + { + "name": "geoNameCount", + "type": "int" + } + ], + "SetUserGeoID": [ + { + "name": "GeoId", + "type": "GEOID" + } + ], + "SetUserGeoName": [ + { + "name": "geoName", + "type": "PWSTR" + } + ], + "ConvertDefaultLocale": [ + { + "name": "Locale", + "type": "LCID" + } + ], + "GetSystemDefaultUILanguage": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetThreadLocale": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetThreadLocale": [ + { + "name": "Locale", + "type": "LCID" + } + ], + "GetUserDefaultUILanguage": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetUserDefaultLangID": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetSystemDefaultLangID": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetSystemDefaultLCID": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetUserDefaultLCID": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetThreadUILanguage": [ + { + "name": "LangId", + "type": "LANGID" + } + ], + "GetThreadUILanguage": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetProcessPreferredUILanguages": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pulNumLanguages", + "type": "PULONG" + }, + { + "name": "pwszLanguagesBuffer", + "type": "PZZWSTR" + }, + { + "name": "pcchLanguagesBuffer", + "type": "PULONG" + } + ], + "SetProcessPreferredUILanguages": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszLanguagesBuffer", + "type": "PCZZWSTR" + }, + { + "name": "pulNumLanguages", + "type": "PULONG" + } + ], + "GetUserPreferredUILanguages": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pulNumLanguages", + "type": "PULONG" + }, + { + "name": "pwszLanguagesBuffer", + "type": "PZZWSTR" + }, + { + "name": "pcchLanguagesBuffer", + "type": "PULONG" + } + ], + "GetSystemPreferredUILanguages": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pulNumLanguages", + "type": "PULONG" + }, + { + "name": "pwszLanguagesBuffer", + "type": "PZZWSTR" + }, + { + "name": "pcchLanguagesBuffer", + "type": "PULONG" + } + ], + "GetThreadPreferredUILanguages": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pulNumLanguages", + "type": "PULONG" + }, + { + "name": "pwszLanguagesBuffer", + "type": "PZZWSTR" + }, + { + "name": "pcchLanguagesBuffer", + "type": "PULONG" + } + ], + "SetThreadPreferredUILanguages": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszLanguagesBuffer", + "type": "PCZZWSTR" + }, + { + "name": "pulNumLanguages", + "type": "PULONG" + } + ], + "GetFileMUIInfo": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pcwszFilePath", + "type": "PCWSTR" + }, + { + "name": "pFileMUIInfo", + "type": "PFILEMUIINFO" + }, + { + "name": "pcbFileMUIInfo", + "type": "DWORD" + } + ], + "GetFileMUIPath": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pcwszFilePath", + "type": "PCWSTR" + }, + { + "name": "pwszLanguage", + "type": "PWSTR" + }, + { + "name": "pcchLanguage", + "type": "PULONG" + }, + { + "name": "pwszFileMUIPath", + "type": "PWSTR" + }, + { + "name": "pcchFileMUIPath", + "type": "PULONG" + }, + { + "name": "pululEnumerator", + "type": "PULONGLONG" + } + ], + "GetUILanguageInfo": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwmszLanguage", + "type": "PCZZWSTR" + }, + { + "name": "pwszFallbackLanguages", + "type": "PZZWSTR" + }, + { + "name": "pcchFallbackLanguages", + "type": "PDWORD" + }, + { + "name": "pAttributes", + "type": "PDWORD" + } + ], + "NotifyUILanguageChange": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pcwstrNewLanguage", + "type": "PCWSTR" + }, + { + "name": "pcwstrPreviousLanguage", + "type": "PCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "pdwStatusRtrn", + "type": "PDWORD" + } + ], + "GetStringTypeA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCSTR" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpCharType", + "type": "LPWORD" + } + ], + "FoldStringA": [ + { + "name": "dwMapFlags", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCSTR" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpDestStr", + "type": "LPSTR" + }, + { + "name": "cchDest", + "type": "int" + } + ], + "EnumSystemLocalesA": [ + { + "name": "lpLocaleEnumProc", + "type": "LOCALE_ENUMPROCA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumSystemLocalesW": [ + { + "name": "lpLocaleEnumProc", + "type": "LOCALE_ENUMPROCW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumSystemLanguageGroupsA": [ + { + "name": "lpLanguageGroupEnumProc", + "type": "LANGUAGEGROUP_ENUMPROCA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumSystemLanguageGroupsW": [ + { + "name": "lpLanguageGroupEnumProc", + "type": "LANGUAGEGROUP_ENUMPROCW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumLanguageGroupLocalesA": [ + { + "name": "lpLangGroupLocaleEnumProc", + "type": "LANGGROUPLOCALE_ENUMPROCA" + }, + { + "name": "LanguageGroup", + "type": "LGRPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumLanguageGroupLocalesW": [ + { + "name": "lpLangGroupLocaleEnumProc", + "type": "LANGGROUPLOCALE_ENUMPROCW" + }, + { + "name": "LanguageGroup", + "type": "LGRPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumUILanguagesA": [ + { + "name": "lpUILanguageEnumProc", + "type": "UILANGUAGE_ENUMPROCA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumUILanguagesW": [ + { + "name": "lpUILanguageEnumProc", + "type": "UILANGUAGE_ENUMPROCW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumSystemCodePagesA": [ + { + "name": "lpCodePageEnumProc", + "type": "CODEPAGE_ENUMPROCA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumSystemCodePagesW": [ + { + "name": "lpCodePageEnumProc", + "type": "CODEPAGE_ENUMPROCW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "VerifyScripts": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpLocaleScripts", + "type": "LPCWSTR" + }, + { + "name": "cchLocaleScripts", + "type": "int" + }, + { + "name": "lpTestScripts", + "type": "LPCWSTR" + }, + { + "name": "cchTestScripts", + "type": "int" + } + ], + "GetStringScripts": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "cchString", + "type": "int" + }, + { + "name": "lpScripts", + "type": "LPWSTR" + }, + { + "name": "cchScripts", + "type": "int" + } + ], + "GetLocaleInfoEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "LCType", + "type": "LCTYPE" + }, + { + "name": "lpLCData", + "type": "LPWSTR" + }, + { + "name": "cchData", + "type": "int" + } + ], + "GetCalendarInfoEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "lpReserved", + "type": "LPCWSTR" + }, + { + "name": "CalType", + "type": "CALTYPE" + }, + { + "name": "lpCalData", + "type": "LPWSTR" + }, + { + "name": "cchData", + "type": "int" + }, + { + "name": "lpValue", + "type": "LPDWORD" + } + ], + "GetNumberFormatEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpValue", + "type": "LPCWSTR" + }, + { + "name": "lpFormat", + "type": "NUMBERFMTW" + }, + { + "name": "lpNumberStr", + "type": "LPWSTR" + }, + { + "name": "cchNumber", + "type": "int" + } + ], + "GetCurrencyFormatEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpValue", + "type": "LPCWSTR" + }, + { + "name": "lpFormat", + "type": "CURRENCYFMTW" + }, + { + "name": "lpCurrencyStr", + "type": "LPWSTR" + }, + { + "name": "cchCurrency", + "type": "int" + } + ], + "GetUserDefaultLocaleName": [ + { + "name": "lpLocaleName", + "type": "LPWSTR" + }, + { + "name": "cchLocaleName", + "type": "int" + } + ], + "GetSystemDefaultLocaleName": [ + { + "name": "lpLocaleName", + "type": "LPWSTR" + }, + { + "name": "cchLocaleName", + "type": "int" + } + ], + "IsNLSDefinedString": [ + { + "name": "Function", + "type": "NLS_FUNCTION" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFO" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "cchStr", + "type": "INT" + } + ], + "GetNLSVersionEx": [ + { + "name": "function", + "type": "NLS_FUNCTION" + }, + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFOEX" + } + ], + "IsValidNLSVersion": [ + { + "name": "function", + "type": "NLS_FUNCTION" + }, + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFOEX" + } + ], + "FindNLSStringEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFindNLSStringFlags", + "type": "DWORD" + }, + { + "name": "lpStringSource", + "type": "LPCWSTR" + }, + { + "name": "cchSource", + "type": "int" + }, + { + "name": "lpStringValue", + "type": "LPCWSTR" + }, + { + "name": "cchValue", + "type": "int" + }, + { + "name": "pcchFound", + "type": "LPINT" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFO" + }, + { + "name": "lpReserved", + "type": "LPVOID" + }, + { + "name": "sortHandle", + "type": "LPARAM" + } + ], + "LCMapStringEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwMapFlags", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCWSTR" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpDestStr", + "type": "LPWSTR" + }, + { + "name": "cchDest", + "type": "int" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFO" + }, + { + "name": "lpReserved", + "type": "LPVOID" + }, + { + "name": "sortHandle", + "type": "LPARAM" + } + ], + "IsValidLocaleName": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + } + ], + "EnumCalendarInfoExEx": [ + { + "name": "pCalInfoEnumProcExEx", + "type": "CALINFO_ENUMPROCEXEX" + }, + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "lpReserved", + "type": "LPCWSTR" + }, + { + "name": "CalType", + "type": "CALTYPE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumDateFormatsExEx": [ + { + "name": "lpDateFmtEnumProcExEx", + "type": "DATEFMT_ENUMPROCEXEX" + }, + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumTimeFormatsEx": [ + { + "name": "lpTimeFmtEnumProcEx", + "type": "TIMEFMT_ENUMPROCEX" + }, + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumSystemLocalesEx": [ + { + "name": "lpLocaleEnumProcEx", + "type": "LOCALE_ENUMPROCEX" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "ResolveLocaleName": [ + { + "name": "lpNameToResolve", + "type": "LPCWSTR" + }, + { + "name": "lpLocaleName", + "type": "LPWSTR" + }, + { + "name": "cchLocaleName", + "type": "int" + } + ], + "GetProcessGroupAffinity": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "GroupCount", + "type": "PUSHORT" + }, + { + "name": "GroupArray", + "type": "PUSHORT" + } + ], + "GetThreadGroupAffinity": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "GroupAffinity", + "type": "PGROUP_AFFINITY" + } + ], + "SetThreadGroupAffinity": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "GroupAffinity", + "type": "GROUP_AFFINITY" + }, + { + "name": "PreviousGroupAffinity", + "type": "PGROUP_AFFINITY" + } + ], + "FlsAlloc": [ + { + "name": "lpCallback", + "type": "PFLS_CALLBACK_FUNCTION" + } + ], + "FlsGetValue": [ + { + "name": "dwFlsIndex", + "type": "DWORD" + } + ], + "FlsSetValue": [ + { + "name": "dwFlsIndex", + "type": "DWORD" + }, + { + "name": "lpFlsData", + "type": "PVOID" + } + ], + "FlsFree": [ + { + "name": "dwFlsIndex", + "type": "DWORD" + } + ], + "IsThreadAFiber": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegisterWaitUntilOOBECompleted": [ + { + "name": "OOBECompletedCallback", + "type": "OOBE_COMPLETED_CALLBACK" + }, + { + "name": "CallbackContext", + "type": "PVOID" + }, + { + "name": "WaitHandle", + "type": "PVOID" + } + ], + "UnregisterWaitUntilOOBECompleted": [ + { + "name": "WaitHandle", + "type": "PVOID" + } + ], + "GetDateFormatA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDate", + "type": "SYSTEMTIME" + }, + { + "name": "lpFormat", + "type": "LPCSTR" + }, + { + "name": "lpDateStr", + "type": "LPSTR" + }, + { + "name": "cchDate", + "type": "int" + } + ], + "GetDateFormatW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDate", + "type": "SYSTEMTIME" + }, + { + "name": "lpFormat", + "type": "LPCWSTR" + }, + { + "name": "lpDateStr", + "type": "LPWSTR" + }, + { + "name": "cchDate", + "type": "int" + } + ], + "GetTimeFormatA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpFormat", + "type": "LPCSTR" + }, + { + "name": "lpTimeStr", + "type": "LPSTR" + }, + { + "name": "cchTime", + "type": "int" + } + ], + "GetTimeFormatW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpFormat", + "type": "LPCWSTR" + }, + { + "name": "lpTimeStr", + "type": "LPWSTR" + }, + { + "name": "cchTime", + "type": "int" + } + ], + "GetTimeFormatEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpFormat", + "type": "LPCWSTR" + }, + { + "name": "lpTimeStr", + "type": "LPWSTR" + }, + { + "name": "cchTime", + "type": "int" + } + ], + "GetDateFormatEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDate", + "type": "SYSTEMTIME" + }, + { + "name": "lpFormat", + "type": "LPCWSTR" + }, + { + "name": "lpDateStr", + "type": "LPWSTR" + }, + { + "name": "cchDate", + "type": "int" + }, + { + "name": "lpCalendar", + "type": "LPCWSTR" + } + ], + "QueryThreadCycleTime": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + }, + { + "name": "CycleTime", + "type": "PULONG64" + } + ], + "QueryProcessCycleTime": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "CycleTime", + "type": "PULONG64" + } + ], + "QueryIdleProcessorCycleTime": [ + { + "name": "BufferLength", + "type": "PULONG" + }, + { + "name": "ProcessorIdleCycleTime", + "type": "PULONG64" + } + ], + "QueryIdleProcessorCycleTimeEx": [ + { + "name": "Group", + "type": "USHORT" + }, + { + "name": "BufferLength", + "type": "PULONG" + }, + { + "name": "ProcessorIdleCycleTime", + "type": "PULONG64" + } + ], + "QueryInterruptTimePrecise": [ + { + "name": "lpInterruptTimePrecise", + "type": "PULONGLONG" + } + ], + "QueryUnbiasedInterruptTimePrecise": [ + { + "name": "lpUnbiasedInterruptTimePrecise", + "type": "PULONGLONG" + } + ], + "QueryInterruptTime": [ + { + "name": "lpInterruptTime", + "type": "PULONGLONG" + } + ], + "QueryUnbiasedInterruptTime": [ + { + "name": "UnbiasedTime", + "type": "PULONGLONG" + } + ], + "QueryAuxiliaryCounterFrequency": [ + { + "name": "lpAuxiliaryCounterFrequency", + "type": "PULONGLONG" + } + ], + "ConvertAuxiliaryCounterToPerformanceCounter": [ + { + "name": "ullAuxiliaryCounterValue", + "type": "ULONGLONG" + }, + { + "name": "lpPerformanceCounterValue", + "type": "PULONGLONG" + }, + { + "name": "lpConversionError", + "type": "PULONGLONG" + } + ], + "ConvertPerformanceCounterToAuxiliaryCounter": [ + { + "name": "ullPerformanceCounterValue", + "type": "ULONGLONG" + }, + { + "name": "lpAuxiliaryCounterValue", + "type": "PULONGLONG" + }, + { + "name": "lpConversionError", + "type": "PULONGLONG" + } + ], + "IsDebuggerPresent": [ + { + "name": "VOID", + "type": "void" + } + ], + "DebugBreak": [ + { + "name": "VOID", + "type": "void" + } + ], + "OutputDebugStringA": [ + { + "name": "lpOutputString", + "type": "LPCSTR" + } + ], + "OutputDebugStringW": [ + { + "name": "lpOutputString", + "type": "LPCWSTR" + } + ], + "ContinueDebugEvent": [ + { + "name": "dwProcessId", + "type": "DWORD" + }, + { + "name": "dwThreadId", + "type": "DWORD" + }, + { + "name": "dwContinueStatus", + "type": "DWORD" + } + ], + "WaitForDebugEvent": [ + { + "name": "lpDebugEvent", + "type": "LPDEBUG_EVENT" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "DebugActiveProcess": [ + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "DebugActiveProcessStop": [ + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "CheckRemoteDebuggerPresent": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pbDebuggerPresent", + "type": "PBOOL" + } + ], + "WaitForDebugEventEx": [ + { + "name": "lpDebugEvent", + "type": "LPDEBUG_EVENT" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "AddResourceAttributeAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "pAttributeInfo", + "type": "PCLAIM_SECURITY_ATTRIBUTES_INFORMATION" + }, + { + "name": "pReturnLength", + "type": "PDWORD" + } + ], + "AddScopedPolicyIDAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "CheckTokenCapability": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "CapabilitySidToCheck", + "type": "PSID" + }, + { + "name": "HasCapability", + "type": "PBOOL" + } + ], + "CheckTokenMembershipEx": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "SidToCheck", + "type": "PSID" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "IsMember", + "type": "PBOOL" + } + ], + "DeriveCapabilitySidsFromName": [ + { + "name": "CapName", + "type": "LPCWSTR" + }, + { + "name": "CapabilityGroupSids", + "type": "PSID" + }, + { + "name": "CapabilityGroupSidCount", + "type": "DWORD" + }, + { + "name": "CapabilitySids", + "type": "PSID" + }, + { + "name": "CapabilitySidCount", + "type": "DWORD" + } + ], + "DisableThreadLibraryCalls": [ + { + "name": "hLibModule", + "type": "HMODULE" + } + ], + "FindStringOrdinal": [ + { + "name": "dwFindStringOrdinalFlags", + "type": "DWORD" + }, + { + "name": "lpStringSource", + "type": "LPCWSTR" + }, + { + "name": "cchSource", + "type": "int" + }, + { + "name": "lpStringValue", + "type": "LPCWSTR" + }, + { + "name": "cchValue", + "type": "int" + }, + { + "name": "bIgnoreCase", + "type": "BOOL" + } + ], + "FreeLibrary": [ + { + "name": "hLibModule", + "type": "HMODULE" + } + ], + "FreeLibraryAndExitThread": [ + { + "name": "hLibModule", + "type": "HMODULE" + }, + { + "name": "dwExitCode", + "type": "DWORD" + } + ], + "FreeResource": [ + { + "name": "hResData", + "type": "HGLOBAL" + } + ], + "GetModuleFileNameA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpFilename", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetModuleFileNameW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpFilename", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetModuleHandleA": [ + { + "name": "lpModuleName", + "type": "LPCSTR" + } + ], + "GetModuleHandleW": [ + { + "name": "lpModuleName", + "type": "LPCWSTR" + } + ], + "GetModuleHandleExA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpModuleName", + "type": "LPCSTR" + }, + { + "name": "phModule", + "type": "HMODULE" + } + ], + "GetModuleHandleExW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpModuleName", + "type": "LPCWSTR" + }, + { + "name": "phModule", + "type": "HMODULE" + } + ], + "GetProcAddress": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpProcName", + "type": "LPCSTR" + } + ], + "LoadLibraryExA": [ + { + "name": "lpLibFileName", + "type": "LPCSTR" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "LoadLibraryExW": [ + { + "name": "lpLibFileName", + "type": "LPCWSTR" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "LoadResource": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "hResInfo", + "type": "HRSRC" + } + ], + "LockResource": [ + { + "name": "hResData", + "type": "HGLOBAL" + } + ], + "SizeofResource": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "hResInfo", + "type": "HRSRC" + } + ], + "AddDllDirectory": [ + { + "name": "NewDirectory", + "type": "PCWSTR" + } + ], + "RemoveDllDirectory": [ + { + "name": "Cookie", + "type": "DLL_DIRECTORY_COOKIE" + } + ], + "SetDefaultDllDirectories": [ + { + "name": "DirectoryFlags", + "type": "DWORD" + } + ], + "EnumResourceLanguagesExA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCSTR" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESLANGPROCA" + }, + { + "name": "lParam", + "type": "LONG_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "EnumResourceLanguagesExW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCWSTR" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESLANGPROCW" + }, + { + "name": "lParam", + "type": "LONG_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "EnumResourceNamesExA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESNAMEPROCA" + }, + { + "name": "lParam", + "type": "LONG_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "EnumResourceNamesExW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCWSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESNAMEPROCW" + }, + { + "name": "lParam", + "type": "LONG_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "EnumResourceTypesExA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESTYPEPROCA" + }, + { + "name": "lParam", + "type": "LONG_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "EnumResourceTypesExW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESTYPEPROCW" + }, + { + "name": "lParam", + "type": "LONG_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "LoadLibraryA": [ + { + "name": "lpLibFileName", + "type": "LPCSTR" + } + ], + "LoadLibraryW": [ + { + "name": "lpLibFileName", + "type": "LPCWSTR" + } + ], + "QueryPerformanceCounter": [ + { + "name": "lpPerformanceCount", + "type": "LARGE_INTEGER" + } + ], + "QueryPerformanceFrequency": [ + { + "name": "lpFrequency", + "type": "LARGE_INTEGER" + } + ], + "FreeMemoryJobObject": [ + { + "name": "Buffer", + "type": "void" + } + ], + "AssignProcessToJobObject": [ + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "TerminateJobObject": [ + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "uExitCode", + "type": "UINT" + } + ], + "SetInformationJobObject": [ + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "JobObjectInformationClass", + "type": "JOBOBJECTINFOCLASS" + }, + { + "name": "lpJobObjectInformation", + "type": "LPVOID" + }, + { + "name": "cbJobObjectInformationLength", + "type": "DWORD" + } + ], + "SetIoRateControlInformationJobObject": [ + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "IoRateControlInfo", + "type": "JOBOBJECT_IO_RATE_CONTROL_INFORMATION" + } + ], + "QueryInformationJobObject": [ + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "JobObjectInformationClass", + "type": "JOBOBJECTINFOCLASS" + }, + { + "name": "lpJobObjectInformation", + "type": "LPVOID" + }, + { + "name": "cbJobObjectInformationLength", + "type": "DWORD" + }, + { + "name": "lpReturnLength", + "type": "LPDWORD" + } + ], + "QueryIoRateControlInformationJobObject": [ + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "VolumeName", + "type": "PCWSTR" + }, + { + "name": "InfoBlocks", + "type": "JOBOBJECT_IO_RATE_CONTROL_INFORMATION" + }, + { + "name": "InfoBlockCount", + "type": "ULONG" + } + ], + "CompareStringEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwCmpFlags", + "type": "DWORD" + }, + { + "name": "lpString1", + "type": "LPCWCH" + }, + { + "name": "cchCount1", + "type": "int" + }, + { + "name": "lpString2", + "type": "LPCWCH" + }, + { + "name": "cchCount2", + "type": "int" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFO" + }, + { + "name": "lpReserved", + "type": "LPVOID" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "CompareStringOrdinal": [ + { + "name": "lpString1", + "type": "LPCWCH" + }, + { + "name": "cchCount1", + "type": "int" + }, + { + "name": "lpString2", + "type": "LPCWCH" + }, + { + "name": "cchCount2", + "type": "int" + }, + { + "name": "bIgnoreCase", + "type": "BOOL" + } + ], + "GetStringTypeExW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCWCH" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpCharType", + "type": "LPWORD" + } + ], + "GetStringTypeW": [ + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCWCH" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpCharType", + "type": "LPWORD" + } + ], + "MultiByteToWideChar": [ + { + "name": "CodePage", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpMultiByteStr", + "type": "LPCCH" + }, + { + "name": "cbMultiByte", + "type": "int" + }, + { + "name": "lpWideCharStr", + "type": "LPWSTR" + }, + { + "name": "cchWideChar", + "type": "int" + } + ], + "WideCharToMultiByte": [ + { + "name": "CodePage", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpWideCharStr", + "type": "LPCWCH" + }, + { + "name": "cchWideChar", + "type": "int" + }, + { + "name": "lpMultiByteStr", + "type": "LPSTR" + }, + { + "name": "cbMultiByte", + "type": "int" + }, + { + "name": "lpDefaultChar", + "type": "LPCCH" + }, + { + "name": "lpUsedDefaultChar", + "type": "LPBOOL" + } + ], + "GetStringTypeExA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCSTR" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpCharType", + "type": "LPWORD" + } + ], + "ClosePrivateNamespace": [ + { + "name": "Handle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "AddSIDToBoundaryDescriptor": [ + { + "name": "BoundaryDescriptor", + "type": "HANDLE" + }, + { + "name": "RequiredSid", + "type": "PSID" + } + ], + "DeleteBoundaryDescriptor": [ + { + "name": "BoundaryDescriptor", + "type": "HANDLE" + } + ], + "PssCaptureSnapshot": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "CaptureFlags", + "type": "PSS_CAPTURE_FLAGS" + }, + { + "name": "ThreadContextFlags", + "type": "DWORD" + }, + { + "name": "SnapshotHandle", + "type": "HPSS" + } + ], + "PssFreeSnapshot": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "SnapshotHandle", + "type": "HPSS" + } + ], + "PssQuerySnapshot": [ + { + "name": "SnapshotHandle", + "type": "HPSS" + }, + { + "name": "InformationClass", + "type": "PSS_QUERY_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "void" + }, + { + "name": "BufferLength", + "type": "DWORD" + } + ], + "PssWalkSnapshot": [ + { + "name": "SnapshotHandle", + "type": "HPSS" + }, + { + "name": "InformationClass", + "type": "PSS_WALK_INFORMATION_CLASS" + }, + { + "name": "WalkMarkerHandle", + "type": "HPSSWALK" + }, + { + "name": "Buffer", + "type": "void" + }, + { + "name": "BufferLength", + "type": "DWORD" + } + ], + "PssDuplicateSnapshot": [ + { + "name": "SourceProcessHandle", + "type": "HANDLE" + }, + { + "name": "SnapshotHandle", + "type": "HPSS" + }, + { + "name": "TargetProcessHandle", + "type": "HANDLE" + }, + { + "name": "TargetSnapshotHandle", + "type": "HPSS" + }, + { + "name": "Flags", + "type": "PSS_DUPLICATE_FLAGS" + } + ], + "PssWalkMarkerCreate": [ + { + "name": "Allocator", + "type": "PSS_ALLOCATOR" + }, + { + "name": "WalkMarkerHandle", + "type": "HPSSWALK" + } + ], + "PssWalkMarkerFree": [ + { + "name": "WalkMarkerHandle", + "type": "HPSSWALK" + } + ], + "PssWalkMarkerGetPosition": [ + { + "name": "WalkMarkerHandle", + "type": "HPSSWALK" + }, + { + "name": "Position", + "type": "ULONG_PTR" + } + ], + "PssWalkMarkerSetPosition": [ + { + "name": "WalkMarkerHandle", + "type": "HPSSWALK" + }, + { + "name": "Position", + "type": "ULONG_PTR" + } + ], + "PssWalkMarkerSeekToBeginning": [ + { + "name": "WalkMarkerHandle", + "type": "HPSSWALK" + } + ], + "CreatePipe": [ + { + "name": "hReadPipe", + "type": "PHANDLE" + }, + { + "name": "hWritePipe", + "type": "PHANDLE" + }, + { + "name": "lpPipeAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "ConnectNamedPipe": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "DisconnectNamedPipe": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + } + ], + "SetNamedPipeHandleState": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpMode", + "type": "LPDWORD" + }, + { + "name": "lpMaxCollectionCount", + "type": "LPDWORD" + }, + { + "name": "lpCollectDataTimeout", + "type": "LPDWORD" + } + ], + "PeekNamedPipe": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesRead", + "type": "LPDWORD" + }, + { + "name": "lpTotalBytesAvail", + "type": "LPDWORD" + }, + { + "name": "lpBytesLeftThisMessage", + "type": "LPDWORD" + } + ], + "TransactNamedPipe": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesRead", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "GetNamedPipeInfo": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpFlags", + "type": "LPDWORD" + }, + { + "name": "lpOutBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpInBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpMaxInstances", + "type": "LPDWORD" + } + ], + "RaiseException": [ + { + "name": "dwExceptionCode", + "type": "DWORD" + }, + { + "name": "dwExceptionFlags", + "type": "DWORD" + }, + { + "name": "nNumberOfArguments", + "type": "DWORD" + }, + { + "name": "lpArguments", + "type": "ULONG_PTR" + } + ], + "UnhandledExceptionFilter": [ + { + "name": "ExceptionInfo", + "type": { + "name": "_EXCEPTION_POINTERS", + "data_type": "Struct", + "elements": [] + } + } + ], + "SetUnhandledExceptionFilter": [ + { + "name": "lpTopLevelExceptionFilter", + "type": "LPTOP_LEVEL_EXCEPTION_FILTER" + } + ], + "GetLastError": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetLastError": [ + { + "name": "dwErrCode", + "type": "DWORD" + } + ], + "GetErrorMode": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetErrorMode": [ + { + "name": "uMode", + "type": "UINT" + } + ], + "AddVectoredExceptionHandler": [ + { + "name": "First", + "type": "ULONG" + }, + { + "name": "Handler", + "type": "PVECTORED_EXCEPTION_HANDLER" + } + ], + "RemoveVectoredExceptionHandler": [ + { + "name": "Handle", + "type": "PVOID" + } + ], + "AddVectoredContinueHandler": [ + { + "name": "First", + "type": "ULONG" + }, + { + "name": "Handler", + "type": "PVECTORED_EXCEPTION_HANDLER" + } + ], + "RemoveVectoredContinueHandler": [ + { + "name": "Handle", + "type": "PVOID" + } + ], + "RaiseFailFastException": [ + { + "name": "pExceptionRecord", + "type": "PEXCEPTION_RECORD" + }, + { + "name": "pContextRecord", + "type": "PCONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "FatalAppExitA": [ + { + "name": "uAction", + "type": "UINT" + }, + { + "name": "lpMessageText", + "type": "LPCSTR" + } + ], + "FatalAppExitW": [ + { + "name": "uAction", + "type": "UINT" + }, + { + "name": "lpMessageText", + "type": "LPCWSTR" + } + ], + "GetThreadErrorMode": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetThreadErrorMode": [ + { + "name": "dwNewMode", + "type": "DWORD" + }, + { + "name": "lpOldMode", + "type": "LPDWORD" + } + ], + "QueueUserWorkItem": [ + { + "name": "Function", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "UnregisterWaitEx": [ + { + "name": "WaitHandle", + "type": "HANDLE" + }, + { + "name": "CompletionEvent", + "type": "HANDLE" + } + ], + "CreateTimerQueue": [ + { + "name": "VOID", + "type": "void" + } + ], + "CreateTimerQueueTimer": [ + { + "name": "phNewTimer", + "type": "PHANDLE" + }, + { + "name": "TimerQueue", + "type": "HANDLE" + }, + { + "name": "Callback", + "type": "WAITORTIMERCALLBACK" + }, + { + "name": "Parameter", + "type": "PVOID" + }, + { + "name": "DueTime", + "type": "DWORD" + }, + { + "name": "Period", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "ChangeTimerQueueTimer": [ + { + "name": "TimerQueue", + "type": "HANDLE" + }, + { + "name": "Timer", + "type": "HANDLE" + }, + { + "name": "DueTime", + "type": "ULONG" + }, + { + "name": "Period", + "type": "ULONG" + } + ], + "DeleteTimerQueueTimer": [ + { + "name": "TimerQueue", + "type": "HANDLE" + }, + { + "name": "Timer", + "type": "HANDLE" + }, + { + "name": "CompletionEvent", + "type": "HANDLE" + } + ], + "DeleteTimerQueueEx": [ + { + "name": "TimerQueue", + "type": "HANDLE" + }, + { + "name": "CompletionEvent", + "type": "HANDLE" + } + ], + "uaw_wcslen": [ + { + "name": "String", + "type": "PCUWSTR" + } + ], + "GetEnvironmentVariableA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetEnvironmentVariableW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "SetEnvironmentVariableA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpValue", + "type": "LPCSTR" + } + ], + "SetEnvironmentVariableW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpValue", + "type": "LPCWSTR" + } + ], + "SetCurrentDirectoryA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + } + ], + "SetCurrentDirectoryW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + } + ], + "GetCurrentDirectoryA": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + } + ], + "GetCurrentDirectoryW": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + } + ], + "CreateDirectoryA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateDirectoryW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "DefineDosDeviceW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDeviceName", + "type": "LPCWSTR" + }, + { + "name": "lpTargetPath", + "type": "LPCWSTR" + } + ], + "DeleteFileA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "DeleteFileW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "DeleteVolumeMountPointW": [ + { + "name": "lpszVolumeMountPoint", + "type": "LPCWSTR" + } + ], + "FindFirstVolumeW": [ + { + "name": "lpszVolumeName", + "type": "LPWSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindNextVolumeW": [ + { + "name": "hFindVolume", + "type": "HANDLE" + }, + { + "name": "lpszVolumeName", + "type": "LPWSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "GetLogicalDriveStringsW": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + } + ], + "GetShortPathNameW": [ + { + "name": "lpszLongPath", + "type": "LPCWSTR" + }, + { + "name": "lpszShortPath", + "type": "LPWSTR" + }, + { + "name": "cchBuffer", + "type": "DWORD" + } + ], + "GetTempFileNameW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + }, + { + "name": "lpPrefixString", + "type": "LPCWSTR" + }, + { + "name": "uUnique", + "type": "UINT" + }, + { + "name": "lpTempFileName", + "type": "LPWSTR" + } + ], + "GetVolumePathNameW": [ + { + "name": "lpszFileName", + "type": "LPCWSTR" + }, + { + "name": "lpszVolumePathName", + "type": "LPWSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "QueryDosDeviceW": [ + { + "name": "lpDeviceName", + "type": "LPCWSTR" + }, + { + "name": "lpTargetPath", + "type": "LPWSTR" + }, + { + "name": "ucchMax", + "type": "DWORD" + } + ], + "GetVolumeNameForVolumeMountPointW": [ + { + "name": "lpszVolumeMountPoint", + "type": "LPCWSTR" + }, + { + "name": "lpszVolumeName", + "type": "LPWSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "GetVolumePathNamesForVolumeNameW": [ + { + "name": "lpszVolumeName", + "type": "LPCWSTR" + }, + { + "name": "lpszVolumePathNames", + "type": "LPWCH" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + }, + { + "name": "lpcchReturnLength", + "type": "PDWORD" + } + ], + "GetTempFileNameA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + }, + { + "name": "lpPrefixString", + "type": "LPCSTR" + }, + { + "name": "uUnique", + "type": "UINT" + }, + { + "name": "lpTempFileName", + "type": "LPSTR" + } + ], + "CreateNamedPipeW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "dwOpenMode", + "type": "DWORD" + }, + { + "name": "dwPipeMode", + "type": "DWORD" + }, + { + "name": "nMaxInstances", + "type": "DWORD" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "nDefaultTimeOut", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "WaitNamedPipeW": [ + { + "name": "lpNamedPipeName", + "type": "LPCWSTR" + }, + { + "name": "nTimeOut", + "type": "DWORD" + } + ], + "GetNamedPipeClientComputerNameW": [ + { + "name": "Pipe", + "type": "HANDLE" + }, + { + "name": "ClientComputerName", + "type": "LPWSTR" + }, + { + "name": "ClientComputerNameLength", + "type": "ULONG" + } + ], + "GetNamedPipeHandleStateW": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpState", + "type": "LPDWORD" + }, + { + "name": "lpCurInstances", + "type": "LPDWORD" + }, + { + "name": "lpMaxCollectionCount", + "type": "LPDWORD" + }, + { + "name": "lpCollectDataTimeout", + "type": "LPDWORD" + }, + { + "name": "lpUserName", + "type": "LPWSTR" + }, + { + "name": "nMaxUserNameSize", + "type": "DWORD" + } + ], + "CallNamedPipeW": [ + { + "name": "lpNamedPipeName", + "type": "LPCWSTR" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesRead", + "type": "LPDWORD" + }, + { + "name": "nTimeOut", + "type": "DWORD" + } + ], + "CreateSemaphoreExW": [ + { + "name": "lpSemaphoreAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lInitialCount", + "type": "LONG" + }, + { + "name": "lMaximumCount", + "type": "LONG" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "CreateSemaphoreW": [ + { + "name": "lpSemaphoreAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lInitialCount", + "type": "LONG" + }, + { + "name": "lMaximumCount", + "type": "LONG" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "CreateFileMappingW": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileMappingAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "flProtect", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeHigh", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeLow", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "OpenFileMappingW": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "CreateFileMappingNumaW": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileMappingAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "flProtect", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeHigh", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeLow", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "nndPreferred", + "type": "DWORD" + } + ], + "CreateJobObjectW": [ + { + "name": "lpJobAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "OpenJobObjectW": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "Wow64GetThreadContext": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpContext", + "type": "PWOW64_CONTEXT" + } + ], + "Wow64SetThreadContext": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpContext", + "type": "WOW64_CONTEXT" + } + ], + "Wow64SuspendThread": [ + { + "name": "hThread", + "type": "HANDLE" + } + ], + "FindResourceExW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCWSTR" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "wLanguage", + "type": "WORD" + } + ], + "FindResourceW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpType", + "type": "LPCWSTR" + } + ], + "EnumResourceNamesW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCWSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESNAMEPROCW" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "CreatePrivateNamespaceW": [ + { + "name": "lpPrivateNamespaceAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpBoundaryDescriptor", + "type": "LPVOID" + }, + { + "name": "lpAliasPrefix", + "type": "LPCWSTR" + } + ], + "OpenPrivateNamespaceW": [ + { + "name": "lpBoundaryDescriptor", + "type": "LPVOID" + }, + { + "name": "lpAliasPrefix", + "type": "LPCWSTR" + } + ], + "CreateBoundaryDescriptorW": [ + { + "name": "Name", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "GlobalAlloc": [ + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "dwBytes", + "type": "SIZE_T" + } + ], + "GlobalReAlloc": [ + { + "name": "hMem", + "type": "HGLOBAL" + }, + { + "name": "dwBytes", + "type": "SIZE_T" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "GlobalSize": [ + { + "name": "hMem", + "type": "HGLOBAL" + } + ], + "GlobalUnlock": [ + { + "name": "hMem", + "type": "HGLOBAL" + } + ], + "GlobalLock": [ + { + "name": "hMem", + "type": "HGLOBAL" + } + ], + "GlobalFlags": [ + { + "name": "hMem", + "type": "HGLOBAL" + } + ], + "GlobalHandle": [ + { + "name": "pMem", + "type": "LPCVOID" + } + ], + "GlobalFree": [ + { + "name": "hMem", + "type": "HGLOBAL" + } + ], + "GlobalMemoryStatus": [ + { + "name": "lpBuffer", + "type": "LPMEMORYSTATUS" + } + ], + "LocalAlloc": [ + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uBytes", + "type": "SIZE_T" + } + ], + "LocalReAlloc": [ + { + "name": "hMem", + "type": "HLOCAL" + }, + { + "name": "uBytes", + "type": "SIZE_T" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "LocalLock": [ + { + "name": "hMem", + "type": "HLOCAL" + } + ], + "LocalHandle": [ + { + "name": "pMem", + "type": "LPCVOID" + } + ], + "LocalUnlock": [ + { + "name": "hMem", + "type": "HLOCAL" + } + ], + "LocalSize": [ + { + "name": "hMem", + "type": "HLOCAL" + } + ], + "LocalFlags": [ + { + "name": "hMem", + "type": "HLOCAL" + } + ], + "LocalFree": [ + { + "name": "hMem", + "type": "HLOCAL" + } + ], + "GetBinaryTypeA": [ + { + "name": "lpApplicationName", + "type": "LPCSTR" + }, + { + "name": "lpBinaryType", + "type": "LPDWORD" + } + ], + "GetBinaryTypeW": [ + { + "name": "lpApplicationName", + "type": "LPCWSTR" + }, + { + "name": "lpBinaryType", + "type": "LPDWORD" + } + ], + "GetShortPathNameA": [ + { + "name": "lpszLongPath", + "type": "LPCSTR" + }, + { + "name": "lpszShortPath", + "type": "LPSTR" + }, + { + "name": "cchBuffer", + "type": "DWORD" + } + ], + "GetLongPathNameTransactedA": [ + { + "name": "lpszShortPath", + "type": "LPCSTR" + }, + { + "name": "lpszLongPath", + "type": "LPSTR" + }, + { + "name": "cchBuffer", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetLongPathNameTransactedW": [ + { + "name": "lpszShortPath", + "type": "LPCWSTR" + }, + { + "name": "lpszLongPath", + "type": "LPWSTR" + }, + { + "name": "cchBuffer", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetProcessAffinityMask": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpProcessAffinityMask", + "type": "PDWORD_PTR" + }, + { + "name": "lpSystemAffinityMask", + "type": "PDWORD_PTR" + } + ], + "SetProcessAffinityMask": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwProcessAffinityMask", + "type": "DWORD_PTR" + } + ], + "GetProcessIoCounters": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpIoCounters", + "type": "PIO_COUNTERS" + } + ], + "GetProcessWorkingSetSize": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpMinimumWorkingSetSize", + "type": "PSIZE_T" + }, + { + "name": "lpMaximumWorkingSetSize", + "type": "PSIZE_T" + } + ], + "SetProcessWorkingSetSize": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwMinimumWorkingSetSize", + "type": "SIZE_T" + }, + { + "name": "dwMaximumWorkingSetSize", + "type": "SIZE_T" + } + ], + "FatalExit": [ + { + "name": "ExitCode", + "type": "int" + } + ], + "SwitchToFiber": [ + { + "name": "lpFiber", + "type": "LPVOID" + } + ], + "DeleteFiber": [ + { + "name": "lpFiber", + "type": "LPVOID" + } + ], + "ConvertFiberToThread": [ + { + "name": "VOID", + "type": "void" + } + ], + "CreateFiberEx": [ + { + "name": "dwStackCommitSize", + "type": "SIZE_T" + }, + { + "name": "dwStackReserveSize", + "type": "SIZE_T" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpStartAddress", + "type": "LPFIBER_START_ROUTINE" + }, + { + "name": "lpParameter", + "type": "LPVOID" + } + ], + "ConvertThreadToFiberEx": [ + { + "name": "lpParameter", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CreateFiber": [ + { + "name": "dwStackSize", + "type": "SIZE_T" + }, + { + "name": "lpStartAddress", + "type": "LPFIBER_START_ROUTINE" + }, + { + "name": "lpParameter", + "type": "LPVOID" + } + ], + "ConvertThreadToFiber": [ + { + "name": "lpParameter", + "type": "LPVOID" + } + ], + "CreateUmsCompletionList": [ + { + "name": "UmsCompletionList", + "type": "PUMS_COMPLETION_LIST" + } + ], + "DequeueUmsCompletionListItems": [ + { + "name": "UmsCompletionList", + "type": "PUMS_COMPLETION_LIST" + }, + { + "name": "WaitTimeOut", + "type": "DWORD" + }, + { + "name": "UmsThreadList", + "type": "PUMS_CONTEXT" + } + ], + "GetUmsCompletionListEvent": [ + { + "name": "UmsCompletionList", + "type": "PUMS_COMPLETION_LIST" + }, + { + "name": "UmsCompletionEvent", + "type": "PHANDLE" + } + ], + "ExecuteUmsThread": [ + { + "name": "UmsThread", + "type": "PUMS_CONTEXT" + } + ], + "UmsThreadYield": [ + { + "name": "SchedulerParam", + "type": "PVOID" + } + ], + "DeleteUmsCompletionList": [ + { + "name": "UmsCompletionList", + "type": "PUMS_COMPLETION_LIST" + } + ], + "GetCurrentUmsThread": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetNextUmsListItem": [ + { + "name": "UmsContext", + "type": "PUMS_CONTEXT" + } + ], + "QueryUmsThreadInformation": [ + { + "name": "UmsThread", + "type": "PUMS_CONTEXT" + }, + { + "name": "UmsThreadInfoClass", + "type": "UMS_THREAD_INFO_CLASS" + }, + { + "name": "UmsThreadInformation", + "type": "PVOID" + }, + { + "name": "UmsThreadInformationLength", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "SetUmsThreadInformation": [ + { + "name": "UmsThread", + "type": "PUMS_CONTEXT" + }, + { + "name": "UmsThreadInfoClass", + "type": "UMS_THREAD_INFO_CLASS" + }, + { + "name": "UmsThreadInformation", + "type": "PVOID" + }, + { + "name": "UmsThreadInformationLength", + "type": "ULONG" + } + ], + "DeleteUmsThreadContext": [ + { + "name": "UmsThread", + "type": "PUMS_CONTEXT" + } + ], + "CreateUmsThreadContext": [ + { + "name": "lpUmsThread", + "type": "PUMS_CONTEXT" + } + ], + "EnterUmsSchedulingMode": [ + { + "name": "SchedulerStartupInfo", + "type": "PUMS_SCHEDULER_STARTUP_INFO" + } + ], + "GetUmsSystemThreadInformation": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + }, + { + "name": "SystemThreadInfo", + "type": "PUMS_SYSTEM_THREAD_INFORMATION" + } + ], + "SetThreadAffinityMask": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dwThreadAffinityMask", + "type": "DWORD_PTR" + } + ], + "SetProcessDEPPolicy": [ + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetProcessDEPPolicy": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpFlags", + "type": "LPDWORD" + }, + { + "name": "lpPermanent", + "type": "PBOOL" + } + ], + "RequestWakeupLatency": [ + { + "name": "latency", + "type": "LATENCY_TIME" + } + ], + "IsSystemResumeAutomatic": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetThreadSelectorEntry": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dwSelector", + "type": "DWORD" + }, + { + "name": "lpSelectorEntry", + "type": "LPLDT_ENTRY" + } + ], + "SetThreadExecutionState": [ + { + "name": "esFlags", + "type": "EXECUTION_STATE" + } + ], + "PowerCreateRequest": [ + { + "name": "Context", + "type": "PREASON_CONTEXT" + } + ], + "PowerSetRequest": [ + { + "name": "PowerRequest", + "type": "HANDLE" + }, + { + "name": "RequestType", + "type": "POWER_REQUEST_TYPE" + } + ], + "PowerClearRequest": [ + { + "name": "PowerRequest", + "type": "HANDLE" + }, + { + "name": "RequestType", + "type": "POWER_REQUEST_TYPE" + } + ], + "SetFileCompletionNotificationModes": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "UCHAR" + } + ], + "Wow64GetThreadSelectorEntry": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dwSelector", + "type": "DWORD" + }, + { + "name": "lpSelectorEntry", + "type": "PWOW64_LDT_ENTRY" + } + ], + "DebugSetProcessKillOnExit": [ + { + "name": "KillOnExit", + "type": "BOOL" + } + ], + "DebugBreakProcess": [ + { + "name": "Process", + "type": "HANDLE" + } + ], + "PulseEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "GlobalDeleteAtom": [ + { + "name": "nAtom", + "type": "ATOM" + } + ], + "InitAtomTable": [ + { + "name": "nSize", + "type": "DWORD" + } + ], + "DeleteAtom": [ + { + "name": "nAtom", + "type": "ATOM" + } + ], + "SetHandleCount": [ + { + "name": "uNumber", + "type": "UINT" + } + ], + "GetDevicePowerState": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "pfOn", + "type": "BOOL" + } + ], + "SetFileShortNameA": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpShortName", + "type": "LPCSTR" + } + ], + "SetFileShortNameW": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpShortName", + "type": "LPCWSTR" + } + ], + "LoadModule": [ + { + "name": "lpModuleName", + "type": "LPCSTR" + }, + { + "name": "lpParameterBlock", + "type": "LPVOID" + } + ], + "WinExec": [ + { + "name": "lpCmdLine", + "type": "LPCSTR" + }, + { + "name": "uCmdShow", + "type": "UINT" + } + ], + "ClearCommBreak": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "ClearCommError": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpErrors", + "type": "LPDWORD" + }, + { + "name": "lpStat", + "type": "LPCOMSTAT" + } + ], + "SetupComm": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwInQueue", + "type": "DWORD" + }, + { + "name": "dwOutQueue", + "type": "DWORD" + } + ], + "EscapeCommFunction": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFunc", + "type": "DWORD" + } + ], + "GetCommConfig": [ + { + "name": "hCommDev", + "type": "HANDLE" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + } + ], + "GetCommMask": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpEvtMask", + "type": "LPDWORD" + } + ], + "GetCommProperties": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpCommProp", + "type": "LPCOMMPROP" + } + ], + "GetCommModemStatus": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpModemStat", + "type": "LPDWORD" + } + ], + "GetCommState": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpDCB", + "type": "LPDCB" + } + ], + "GetCommTimeouts": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpCommTimeouts", + "type": "LPCOMMTIMEOUTS" + } + ], + "PurgeComm": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SetCommBreak": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "SetCommConfig": [ + { + "name": "hCommDev", + "type": "HANDLE" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "SetCommMask": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwEvtMask", + "type": "DWORD" + } + ], + "SetCommState": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpDCB", + "type": "LPDCB" + } + ], + "SetCommTimeouts": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpCommTimeouts", + "type": "LPCOMMTIMEOUTS" + } + ], + "TransmitCommChar": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "cChar", + "type": "char" + } + ], + "WaitCommEvent": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpEvtMask", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "SetTapePosition": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwPositionMethod", + "type": "DWORD" + }, + { + "name": "dwPartition", + "type": "DWORD" + }, + { + "name": "dwOffsetLow", + "type": "DWORD" + }, + { + "name": "dwOffsetHigh", + "type": "DWORD" + }, + { + "name": "bImmediate", + "type": "BOOL" + } + ], + "GetTapePosition": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwPositionType", + "type": "DWORD" + }, + { + "name": "lpdwPartition", + "type": "LPDWORD" + }, + { + "name": "lpdwOffsetLow", + "type": "LPDWORD" + }, + { + "name": "lpdwOffsetHigh", + "type": "LPDWORD" + } + ], + "PrepareTape": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwOperation", + "type": "DWORD" + }, + { + "name": "bImmediate", + "type": "BOOL" + } + ], + "EraseTape": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwEraseType", + "type": "DWORD" + }, + { + "name": "bImmediate", + "type": "BOOL" + } + ], + "CreateTapePartition": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwPartitionMethod", + "type": "DWORD" + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "WriteTapemark": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwTapemarkType", + "type": "DWORD" + }, + { + "name": "dwTapemarkCount", + "type": "DWORD" + }, + { + "name": "bImmediate", + "type": "BOOL" + } + ], + "GetTapeStatus": [ + { + "name": "hDevice", + "type": "HANDLE" + } + ], + "GetTapeParameters": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwOperation", + "type": "DWORD" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + }, + { + "name": "lpTapeInformation", + "type": "LPVOID" + } + ], + "SetTapeParameters": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwOperation", + "type": "DWORD" + }, + { + "name": "lpTapeInformation", + "type": "LPVOID" + } + ], + "MulDiv": [ + { + "name": "nNumber", + "type": "int" + }, + { + "name": "nNumerator", + "type": "int" + }, + { + "name": "nDenominator", + "type": "int" + } + ], + "GetSystemDEPPolicy": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetSystemRegistryQuota": [ + { + "name": "pdwQuotaAllowed", + "type": "PDWORD" + }, + { + "name": "pdwQuotaUsed", + "type": "PDWORD" + } + ], + "FileTimeToDosDateTime": [ + { + "name": "lpFileTime", + "type": "FILETIME" + }, + { + "name": "lpFatDate", + "type": "LPWORD" + }, + { + "name": "lpFatTime", + "type": "LPWORD" + } + ], + "DosDateTimeToFileTime": [ + { + "name": "wFatDate", + "type": "WORD" + }, + { + "name": "wFatTime", + "type": "WORD" + }, + { + "name": "lpFileTime", + "type": "LPFILETIME" + } + ], + "FormatMessageA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpSource", + "type": "LPCVOID" + }, + { + "name": "dwMessageId", + "type": "DWORD" + }, + { + "name": "dwLanguageId", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "Arguments", + "type": "va_list" + } + ], + "FormatMessageW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpSource", + "type": "LPCVOID" + }, + { + "name": "dwMessageId", + "type": "DWORD" + }, + { + "name": "dwLanguageId", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "Arguments", + "type": "va_list" + } + ], + "CreateMailslotA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "nMaxMessageSize", + "type": "DWORD" + }, + { + "name": "lReadTimeout", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateMailslotW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "nMaxMessageSize", + "type": "DWORD" + }, + { + "name": "lReadTimeout", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "GetMailslotInfo": [ + { + "name": "hMailslot", + "type": "HANDLE" + }, + { + "name": "lpMaxMessageSize", + "type": "LPDWORD" + }, + { + "name": "lpNextSize", + "type": "LPDWORD" + }, + { + "name": "lpMessageCount", + "type": "LPDWORD" + }, + { + "name": "lpReadTimeout", + "type": "LPDWORD" + } + ], + "SetMailslotInfo": [ + { + "name": "hMailslot", + "type": "HANDLE" + }, + { + "name": "lReadTimeout", + "type": "DWORD" + } + ], + "lstrcmpA": [ + { + "name": "lpString1", + "type": "LPCSTR" + }, + { + "name": "lpString2", + "type": "LPCSTR" + } + ], + "lstrcmpW": [ + { + "name": "lpString1", + "type": "LPCWSTR" + }, + { + "name": "lpString2", + "type": "LPCWSTR" + } + ], + "lstrcmpiA": [ + { + "name": "lpString1", + "type": "LPCSTR" + }, + { + "name": "lpString2", + "type": "LPCSTR" + } + ], + "lstrcmpiW": [ + { + "name": "lpString1", + "type": "LPCWSTR" + }, + { + "name": "lpString2", + "type": "LPCWSTR" + } + ], + "lstrcpynA": [ + { + "name": "lpString1", + "type": "LPSTR" + }, + { + "name": "lpString2", + "type": "LPCSTR" + }, + { + "name": "iMaxLength", + "type": "int" + } + ], + "lstrcpynW": [ + { + "name": "lpString1", + "type": "LPWSTR" + }, + { + "name": "lpString2", + "type": "LPCWSTR" + }, + { + "name": "iMaxLength", + "type": "int" + } + ], + "lstrcpyA": [ + { + "name": "lpString1", + "type": "LPSTR" + }, + { + "name": "lpString2", + "type": "LPCSTR" + } + ], + "lstrcpyW": [ + { + "name": "lpString1", + "type": "LPWSTR" + }, + { + "name": "lpString2", + "type": "LPCWSTR" + } + ], + "lstrcatA": [ + { + "name": "lpString1", + "type": "LPSTR" + }, + { + "name": "lpString2", + "type": "LPCSTR" + } + ], + "lstrcatW": [ + { + "name": "lpString1", + "type": "LPWSTR" + }, + { + "name": "lpString2", + "type": "LPCWSTR" + } + ], + "lstrlenA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "lstrlenW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "OpenFile": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpReOpenBuff", + "type": "LPOFSTRUCT" + }, + { + "name": "uStyle", + "type": "UINT" + } + ], + "_lopen": [ + { + "name": "lpPathName", + "type": "LPCSTR" + }, + { + "name": "iReadWrite", + "type": "int" + } + ], + "_lcreat": [ + { + "name": "lpPathName", + "type": "LPCSTR" + }, + { + "name": "iAttribute", + "type": "int" + } + ], + "_lread": [ + { + "name": "hFile", + "type": "HFILE" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "uBytes", + "type": "UINT" + } + ], + "_lwrite": [ + { + "name": "hFile", + "type": "HFILE" + }, + { + "name": "lpBuffer", + "type": "LPCCH" + }, + { + "name": "uBytes", + "type": "UINT" + } + ], + "_lclose": [ + { + "name": "hFile", + "type": "HFILE" + } + ], + "_llseek": [ + { + "name": "hFile", + "type": "HFILE" + }, + { + "name": "lOffset", + "type": "LONG" + }, + { + "name": "iOrigin", + "type": "int" + } + ], + "BackupRead": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "nNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesRead", + "type": "LPDWORD" + }, + { + "name": "bAbort", + "type": "BOOL" + }, + { + "name": "bProcessSecurity", + "type": "BOOL" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "BackupSeek": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwLowBytesToSeek", + "type": "DWORD" + }, + { + "name": "dwHighBytesToSeek", + "type": "DWORD" + }, + { + "name": "lpdwLowByteSeeked", + "type": "LPDWORD" + }, + { + "name": "lpdwHighByteSeeked", + "type": "LPDWORD" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "BackupWrite": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "nNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesWritten", + "type": "LPDWORD" + }, + { + "name": "bAbort", + "type": "BOOL" + }, + { + "name": "bProcessSecurity", + "type": "BOOL" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "CreateSemaphoreA": [ + { + "name": "lpSemaphoreAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lInitialCount", + "type": "LONG" + }, + { + "name": "lMaximumCount", + "type": "LONG" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "CreateSemaphoreExA": [ + { + "name": "lpSemaphoreAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lInitialCount", + "type": "LONG" + }, + { + "name": "lMaximumCount", + "type": "LONG" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "CreateFileMappingA": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileMappingAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "flProtect", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeHigh", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeLow", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "CreateFileMappingNumaA": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileMappingAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "flProtect", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeHigh", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeLow", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "nndPreferred", + "type": "DWORD" + } + ], + "OpenFileMappingA": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "GetLogicalDriveStringsA": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + } + ], + "LoadPackagedLibrary": [ + { + "name": "lpwLibFileName", + "type": "LPCWSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "QueryFullProcessImageNameA": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpExeName", + "type": "LPSTR" + }, + { + "name": "lpdwSize", + "type": "PDWORD" + } + ], + "QueryFullProcessImageNameW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpExeName", + "type": "LPWSTR" + }, + { + "name": "lpdwSize", + "type": "PDWORD" + } + ], + "GetFirmwareEnvironmentVariableA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpGuid", + "type": "LPCSTR" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetFirmwareEnvironmentVariableW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpGuid", + "type": "LPCWSTR" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetFirmwareEnvironmentVariableExA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpGuid", + "type": "LPCSTR" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "pdwAttribubutes", + "type": "PDWORD" + } + ], + "GetFirmwareEnvironmentVariableExW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpGuid", + "type": "LPCWSTR" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "pdwAttribubutes", + "type": "PDWORD" + } + ], + "SetFirmwareEnvironmentVariableA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpGuid", + "type": "LPCSTR" + }, + { + "name": "pValue", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "SetFirmwareEnvironmentVariableW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpGuid", + "type": "LPCWSTR" + }, + { + "name": "pValue", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "SetFirmwareEnvironmentVariableExA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpGuid", + "type": "LPCSTR" + }, + { + "name": "pValue", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + } + ], + "SetFirmwareEnvironmentVariableExW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpGuid", + "type": "LPCWSTR" + }, + { + "name": "pValue", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + } + ], + "GetFirmwareType": [ + { + "name": "FirmwareType", + "type": "PFIRMWARE_TYPE" + } + ], + "IsNativeVhdBoot": [ + { + "name": "NativeVhdBoot", + "type": "PBOOL" + } + ], + "FindResourceA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpType", + "type": "LPCSTR" + } + ], + "FindResourceExA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCSTR" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "wLanguage", + "type": "WORD" + } + ], + "EnumResourceTypesA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESTYPEPROCA" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumResourceTypesW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESTYPEPROCW" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumResourceNamesA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESNAMEPROCA" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumResourceLanguagesA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCSTR" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESLANGPROCA" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumResourceLanguagesW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCWSTR" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESLANGPROCW" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "BeginUpdateResourceA": [ + { + "name": "pFileName", + "type": "LPCSTR" + }, + { + "name": "bDeleteExistingResources", + "type": "BOOL" + } + ], + "BeginUpdateResourceW": [ + { + "name": "pFileName", + "type": "LPCWSTR" + }, + { + "name": "bDeleteExistingResources", + "type": "BOOL" + } + ], + "UpdateResourceA": [ + { + "name": "hUpdate", + "type": "HANDLE" + }, + { + "name": "lpType", + "type": "LPCSTR" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "wLanguage", + "type": "WORD" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "UpdateResourceW": [ + { + "name": "hUpdate", + "type": "HANDLE" + }, + { + "name": "lpType", + "type": "LPCWSTR" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "wLanguage", + "type": "WORD" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "EndUpdateResourceA": [ + { + "name": "hUpdate", + "type": "HANDLE" + }, + { + "name": "fDiscard", + "type": "BOOL" + } + ], + "EndUpdateResourceW": [ + { + "name": "hUpdate", + "type": "HANDLE" + }, + { + "name": "fDiscard", + "type": "BOOL" + } + ], + "GlobalAddAtomA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "GlobalAddAtomW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GlobalAddAtomExA": [ + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "GlobalAddAtomExW": [ + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "GlobalFindAtomA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "GlobalFindAtomW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GlobalGetAtomNameA": [ + { + "name": "nAtom", + "type": "ATOM" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "int" + } + ], + "GlobalGetAtomNameW": [ + { + "name": "nAtom", + "type": "ATOM" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "int" + } + ], + "AddAtomA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "AddAtomW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "FindAtomA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "FindAtomW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GetAtomNameA": [ + { + "name": "nAtom", + "type": "ATOM" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "int" + } + ], + "GetAtomNameW": [ + { + "name": "nAtom", + "type": "ATOM" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "int" + } + ], + "GetProfileIntA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpKeyName", + "type": "LPCSTR" + }, + { + "name": "nDefault", + "type": "INT" + } + ], + "GetProfileIntW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpKeyName", + "type": "LPCWSTR" + }, + { + "name": "nDefault", + "type": "INT" + } + ], + "GetProfileStringA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpKeyName", + "type": "LPCSTR" + }, + { + "name": "lpDefault", + "type": "LPCSTR" + }, + { + "name": "lpReturnedString", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetProfileStringW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpKeyName", + "type": "LPCWSTR" + }, + { + "name": "lpDefault", + "type": "LPCWSTR" + }, + { + "name": "lpReturnedString", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "WriteProfileStringA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpKeyName", + "type": "LPCSTR" + }, + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "WriteProfileStringW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpKeyName", + "type": "LPCWSTR" + }, + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GetProfileSectionA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpReturnedString", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetProfileSectionW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpReturnedString", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "WriteProfileSectionA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "WriteProfileSectionW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GetPrivateProfileIntA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpKeyName", + "type": "LPCSTR" + }, + { + "name": "nDefault", + "type": "INT" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "GetPrivateProfileIntW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpKeyName", + "type": "LPCWSTR" + }, + { + "name": "nDefault", + "type": "INT" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "GetPrivateProfileStringA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpKeyName", + "type": "LPCSTR" + }, + { + "name": "lpDefault", + "type": "LPCSTR" + }, + { + "name": "lpReturnedString", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "GetPrivateProfileStringW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpKeyName", + "type": "LPCWSTR" + }, + { + "name": "lpDefault", + "type": "LPCWSTR" + }, + { + "name": "lpReturnedString", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "WritePrivateProfileStringA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpKeyName", + "type": "LPCSTR" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "WritePrivateProfileStringW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpKeyName", + "type": "LPCWSTR" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "GetPrivateProfileSectionA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpReturnedString", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "GetPrivateProfileSectionW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpReturnedString", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "WritePrivateProfileSectionA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "WritePrivateProfileSectionW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "GetPrivateProfileSectionNamesA": [ + { + "name": "lpszReturnBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "GetPrivateProfileSectionNamesW": [ + { + "name": "lpszReturnBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "GetPrivateProfileStructA": [ + { + "name": "lpszSection", + "type": "LPCSTR" + }, + { + "name": "lpszKey", + "type": "LPCSTR" + }, + { + "name": "lpStruct", + "type": "LPVOID" + }, + { + "name": "uSizeStruct", + "type": "UINT" + }, + { + "name": "szFile", + "type": "LPCSTR" + } + ], + "GetPrivateProfileStructW": [ + { + "name": "lpszSection", + "type": "LPCWSTR" + }, + { + "name": "lpszKey", + "type": "LPCWSTR" + }, + { + "name": "lpStruct", + "type": "LPVOID" + }, + { + "name": "uSizeStruct", + "type": "UINT" + }, + { + "name": "szFile", + "type": "LPCWSTR" + } + ], + "WritePrivateProfileStructA": [ + { + "name": "lpszSection", + "type": "LPCSTR" + }, + { + "name": "lpszKey", + "type": "LPCSTR" + }, + { + "name": "lpStruct", + "type": "LPVOID" + }, + { + "name": "uSizeStruct", + "type": "UINT" + }, + { + "name": "szFile", + "type": "LPCSTR" + } + ], + "WritePrivateProfileStructW": [ + { + "name": "lpszSection", + "type": "LPCWSTR" + }, + { + "name": "lpszKey", + "type": "LPCWSTR" + }, + { + "name": "lpStruct", + "type": "LPVOID" + }, + { + "name": "uSizeStruct", + "type": "UINT" + }, + { + "name": "szFile", + "type": "LPCWSTR" + } + ], + "Wow64EnableWow64FsRedirection": [ + { + "name": "Wow64FsEnableRedirection", + "type": "BOOLEAN" + } + ], + "SetDllDirectoryA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + } + ], + "SetDllDirectoryW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + } + ], + "GetDllDirectoryA": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + } + ], + "GetDllDirectoryW": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + } + ], + "SetSearchPathMode": [ + { + "name": "Flags", + "type": "DWORD" + } + ], + "CreateDirectoryExA": [ + { + "name": "lpTemplateDirectory", + "type": "LPCSTR" + }, + { + "name": "lpNewDirectory", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateDirectoryExW": [ + { + "name": "lpTemplateDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpNewDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateDirectoryTransactedA": [ + { + "name": "lpTemplateDirectory", + "type": "LPCSTR" + }, + { + "name": "lpNewDirectory", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CreateDirectoryTransactedW": [ + { + "name": "lpTemplateDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpNewDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "RemoveDirectoryTransactedA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "RemoveDirectoryTransactedW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetFullPathNameTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "lpFilePart", + "type": "LPSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetFullPathNameTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "lpFilePart", + "type": "LPWSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "DefineDosDeviceA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDeviceName", + "type": "LPCSTR" + }, + { + "name": "lpTargetPath", + "type": "LPCSTR" + } + ], + "QueryDosDeviceA": [ + { + "name": "lpDeviceName", + "type": "LPCSTR" + }, + { + "name": "lpTargetPath", + "type": "LPSTR" + }, + { + "name": "ucchMax", + "type": "DWORD" + } + ], + "CreateFileTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwCreationDisposition", + "type": "DWORD" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + }, + { + "name": "hTemplateFile", + "type": "HANDLE" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pusMiniVersion", + "type": "PUSHORT" + }, + { + "name": "lpExtendedParameter", + "type": "PVOID" + } + ], + "CreateFileTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwCreationDisposition", + "type": "DWORD" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + }, + { + "name": "hTemplateFile", + "type": "HANDLE" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pusMiniVersion", + "type": "PUSHORT" + }, + { + "name": "lpExtendedParameter", + "type": "PVOID" + } + ], + "ReOpenFile": [ + { + "name": "hOriginalFile", + "type": "HANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + } + ], + "SetFileAttributesTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "dwFileAttributes", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "SetFileAttributesTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFileAttributes", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetFileAttributesTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "fInfoLevelId", + "type": "GET_FILEEX_INFO_LEVELS" + }, + { + "name": "lpFileInformation", + "type": "LPVOID" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetFileAttributesTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "fInfoLevelId", + "type": "GET_FILEEX_INFO_LEVELS" + }, + { + "name": "lpFileInformation", + "type": "LPVOID" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetCompressedFileSizeTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpFileSizeHigh", + "type": "LPDWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetCompressedFileSizeTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpFileSizeHigh", + "type": "LPDWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "DeleteFileTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "DeleteFileTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CheckNameLegalDOS8Dot3A": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpOemName", + "type": "LPSTR" + }, + { + "name": "OemNameSize", + "type": "DWORD" + }, + { + "name": "pbNameContainsSpaces", + "type": "PBOOL" + }, + { + "name": "pbNameLegal", + "type": "PBOOL" + } + ], + "CheckNameLegalDOS8Dot3W": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpOemName", + "type": "LPSTR" + }, + { + "name": "OemNameSize", + "type": "DWORD" + }, + { + "name": "pbNameContainsSpaces", + "type": "PBOOL" + }, + { + "name": "pbNameLegal", + "type": "PBOOL" + } + ], + "FindFirstFileTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "fInfoLevelId", + "type": "FINDEX_INFO_LEVELS" + }, + { + "name": "lpFindFileData", + "type": "LPVOID" + }, + { + "name": "fSearchOp", + "type": "FINDEX_SEARCH_OPS" + }, + { + "name": "lpSearchFilter", + "type": "LPVOID" + }, + { + "name": "dwAdditionalFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "FindFirstFileTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "fInfoLevelId", + "type": "FINDEX_INFO_LEVELS" + }, + { + "name": "lpFindFileData", + "type": "LPVOID" + }, + { + "name": "fSearchOp", + "type": "FINDEX_SEARCH_OPS" + }, + { + "name": "lpSearchFilter", + "type": "LPVOID" + }, + { + "name": "dwAdditionalFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CopyFileA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + }, + { + "name": "bFailIfExists", + "type": "BOOL" + } + ], + "CopyFileW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + }, + { + "name": "bFailIfExists", + "type": "BOOL" + } + ], + "CopyFileExA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "pbCancel", + "type": "LPBOOL" + }, + { + "name": "dwCopyFlags", + "type": "DWORD" + } + ], + "CopyFileExW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "pbCancel", + "type": "LPBOOL" + }, + { + "name": "dwCopyFlags", + "type": "DWORD" + } + ], + "CopyFileTransactedA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "pbCancel", + "type": "LPBOOL" + }, + { + "name": "dwCopyFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CopyFileTransactedW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "pbCancel", + "type": "LPBOOL" + }, + { + "name": "dwCopyFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CopyFile2": [ + { + "name": "pwszExistingFileName", + "type": "PCWSTR" + }, + { + "name": "pwszNewFileName", + "type": "PCWSTR" + }, + { + "name": "pExtendedParameters", + "type": "COPYFILE2_EXTENDED_PARAMETERS" + } + ], + "MoveFileA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + } + ], + "MoveFileW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + } + ], + "MoveFileExA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MoveFileExW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MoveFileWithProgressA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MoveFileWithProgressW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MoveFileTransactedA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "MoveFileTransactedW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "ReplaceFileA": [ + { + "name": "lpReplacedFileName", + "type": "LPCSTR" + }, + { + "name": "lpReplacementFileName", + "type": "LPCSTR" + }, + { + "name": "lpBackupFileName", + "type": "LPCSTR" + }, + { + "name": "dwReplaceFlags", + "type": "DWORD" + }, + { + "name": "lpExclude", + "type": "LPVOID" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "ReplaceFileW": [ + { + "name": "lpReplacedFileName", + "type": "LPCWSTR" + }, + { + "name": "lpReplacementFileName", + "type": "LPCWSTR" + }, + { + "name": "lpBackupFileName", + "type": "LPCWSTR" + }, + { + "name": "dwReplaceFlags", + "type": "DWORD" + }, + { + "name": "lpExclude", + "type": "LPVOID" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "CreateHardLinkA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateHardLinkW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateHardLinkTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CreateHardLinkTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "FindFirstStreamTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "InfoLevel", + "type": "STREAM_INFO_LEVELS" + }, + { + "name": "lpFindStreamData", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "FindFirstFileNameTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "StringLength", + "type": "LPDWORD" + }, + { + "name": "LinkName", + "type": "PWSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CreateNamedPipeA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "dwOpenMode", + "type": "DWORD" + }, + { + "name": "dwPipeMode", + "type": "DWORD" + }, + { + "name": "nMaxInstances", + "type": "DWORD" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "nDefaultTimeOut", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "GetNamedPipeHandleStateA": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpState", + "type": "LPDWORD" + }, + { + "name": "lpCurInstances", + "type": "LPDWORD" + }, + { + "name": "lpMaxCollectionCount", + "type": "LPDWORD" + }, + { + "name": "lpCollectDataTimeout", + "type": "LPDWORD" + }, + { + "name": "lpUserName", + "type": "LPSTR" + }, + { + "name": "nMaxUserNameSize", + "type": "DWORD" + } + ], + "CallNamedPipeA": [ + { + "name": "lpNamedPipeName", + "type": "LPCSTR" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesRead", + "type": "LPDWORD" + }, + { + "name": "nTimeOut", + "type": "DWORD" + } + ], + "WaitNamedPipeA": [ + { + "name": "lpNamedPipeName", + "type": "LPCSTR" + }, + { + "name": "nTimeOut", + "type": "DWORD" + } + ], + "GetNamedPipeClientComputerNameA": [ + { + "name": "Pipe", + "type": "HANDLE" + }, + { + "name": "ClientComputerName", + "type": "LPSTR" + }, + { + "name": "ClientComputerNameLength", + "type": "ULONG" + } + ], + "GetNamedPipeClientProcessId": [ + { + "name": "Pipe", + "type": "HANDLE" + }, + { + "name": "ClientProcessId", + "type": "PULONG" + } + ], + "GetNamedPipeClientSessionId": [ + { + "name": "Pipe", + "type": "HANDLE" + }, + { + "name": "ClientSessionId", + "type": "PULONG" + } + ], + "GetNamedPipeServerProcessId": [ + { + "name": "Pipe", + "type": "HANDLE" + }, + { + "name": "ServerProcessId", + "type": "PULONG" + } + ], + "GetNamedPipeServerSessionId": [ + { + "name": "Pipe", + "type": "HANDLE" + }, + { + "name": "ServerSessionId", + "type": "PULONG" + } + ], + "SetVolumeLabelA": [ + { + "name": "lpRootPathName", + "type": "LPCSTR" + }, + { + "name": "lpVolumeName", + "type": "LPCSTR" + } + ], + "SetVolumeLabelW": [ + { + "name": "lpRootPathName", + "type": "LPCWSTR" + }, + { + "name": "lpVolumeName", + "type": "LPCWSTR" + } + ], + "SetFileBandwidthReservation": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "nPeriodMilliseconds", + "type": "DWORD" + }, + { + "name": "nBytesPerPeriod", + "type": "DWORD" + }, + { + "name": "bDiscardable", + "type": "BOOL" + }, + { + "name": "lpTransferSize", + "type": "LPDWORD" + }, + { + "name": "lpNumOutstandingRequests", + "type": "LPDWORD" + } + ], + "GetFileBandwidthReservation": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpPeriodMilliseconds", + "type": "LPDWORD" + }, + { + "name": "lpBytesPerPeriod", + "type": "LPDWORD" + }, + { + "name": "pDiscardable", + "type": "LPBOOL" + }, + { + "name": "lpTransferSize", + "type": "LPDWORD" + }, + { + "name": "lpNumOutstandingRequests", + "type": "LPDWORD" + } + ], + "ReadDirectoryChangesW": [ + { + "name": "hDirectory", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "bWatchSubtree", + "type": "BOOL" + }, + { + "name": "dwNotifyFilter", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "ReadDirectoryChangesExW": [ + { + "name": "hDirectory", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "bWatchSubtree", + "type": "BOOL" + }, + { + "name": "dwNotifyFilter", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPOVERLAPPED_COMPLETION_ROUTINE" + }, + { + "name": "ReadDirectoryNotifyInformationClass", + "type": "READ_DIRECTORY_NOTIFY_INFORMATION_CLASS" + } + ], + "MapViewOfFileExNuma": [ + { + "name": "hFileMappingObject", + "type": "HANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwFileOffsetHigh", + "type": "DWORD" + }, + { + "name": "dwFileOffsetLow", + "type": "DWORD" + }, + { + "name": "dwNumberOfBytesToMap", + "type": "SIZE_T" + }, + { + "name": "lpBaseAddress", + "type": "LPVOID" + }, + { + "name": "nndPreferred", + "type": "DWORD" + } + ], + "IsBadReadPtr": [ + { + "name": "lp", + "type": "void" + }, + { + "name": "ucb", + "type": "UINT_PTR" + } + ], + "IsBadWritePtr": [ + { + "name": "lp", + "type": "LPVOID" + }, + { + "name": "ucb", + "type": "UINT_PTR" + } + ], + "IsBadCodePtr": [ + { + "name": "lpfn", + "type": "FARPROC" + } + ], + "IsBadStringPtrA": [ + { + "name": "lpsz", + "type": "LPCSTR" + }, + { + "name": "ucchMax", + "type": "UINT_PTR" + } + ], + "IsBadStringPtrW": [ + { + "name": "lpsz", + "type": "LPCWSTR" + }, + { + "name": "ucchMax", + "type": "UINT_PTR" + } + ], + "BuildCommDCBA": [ + { + "name": "lpDef", + "type": "LPCSTR" + }, + { + "name": "lpDCB", + "type": "LPDCB" + } + ], + "BuildCommDCBW": [ + { + "name": "lpDef", + "type": "LPCWSTR" + }, + { + "name": "lpDCB", + "type": "LPDCB" + } + ], + "BuildCommDCBAndTimeoutsA": [ + { + "name": "lpDef", + "type": "LPCSTR" + }, + { + "name": "lpDCB", + "type": "LPDCB" + }, + { + "name": "lpCommTimeouts", + "type": "LPCOMMTIMEOUTS" + } + ], + "BuildCommDCBAndTimeoutsW": [ + { + "name": "lpDef", + "type": "LPCWSTR" + }, + { + "name": "lpDCB", + "type": "LPDCB" + }, + { + "name": "lpCommTimeouts", + "type": "LPCOMMTIMEOUTS" + } + ], + "CommConfigDialogA": [ + { + "name": "lpszName", + "type": "LPCSTR" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + } + ], + "CommConfigDialogW": [ + { + "name": "lpszName", + "type": "LPCWSTR" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + } + ], + "GetDefaultCommConfigA": [ + { + "name": "lpszName", + "type": "LPCSTR" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + } + ], + "GetDefaultCommConfigW": [ + { + "name": "lpszName", + "type": "LPCWSTR" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + } + ], + "SetDefaultCommConfigA": [ + { + "name": "lpszName", + "type": "LPCSTR" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "SetDefaultCommConfigW": [ + { + "name": "lpszName", + "type": "LPCWSTR" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "GetComputerNameA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "GetComputerNameW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "DnsHostnameToComputerNameA": [ + { + "name": "Hostname", + "type": "LPCSTR" + }, + { + "name": "ComputerName", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "DnsHostnameToComputerNameW": [ + { + "name": "Hostname", + "type": "LPCWSTR" + }, + { + "name": "ComputerName", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "RegisterWaitForSingleObject": [ + { + "name": "phNewWaitObject", + "type": "PHANDLE" + }, + { + "name": "hObject", + "type": "HANDLE" + }, + { + "name": "Callback", + "type": "WAITORTIMERCALLBACK" + }, + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "dwMilliseconds", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "UnregisterWait": [ + { + "name": "WaitHandle", + "type": "HANDLE" + } + ], + "BindIoCompletionCallback": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "Function", + "type": "LPOVERLAPPED_COMPLETION_ROUTINE" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "DeleteTimerQueue": [ + { + "name": "TimerQueue", + "type": "HANDLE" + } + ], + "CreatePrivateNamespaceA": [ + { + "name": "lpPrivateNamespaceAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpBoundaryDescriptor", + "type": "LPVOID" + }, + { + "name": "lpAliasPrefix", + "type": "LPCSTR" + } + ], + "OpenPrivateNamespaceA": [ + { + "name": "lpBoundaryDescriptor", + "type": "LPVOID" + }, + { + "name": "lpAliasPrefix", + "type": "LPCSTR" + } + ], + "CreateBoundaryDescriptorA": [ + { + "name": "Name", + "type": "LPCSTR" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "AddIntegrityLabelToBoundaryDescriptor": [ + { + "name": "BoundaryDescriptor", + "type": "HANDLE" + }, + { + "name": "IntegrityLabel", + "type": "PSID" + } + ], + "VerifyVersionInfoA": [ + { + "name": "lpVersionInformation", + "type": "LPOSVERSIONINFOEXA" + }, + { + "name": "dwTypeMask", + "type": "DWORD" + }, + { + "name": "dwlConditionMask", + "type": "DWORDLONG" + } + ], + "VerifyVersionInfoW": [ + { + "name": "lpVersionInformation", + "type": "LPOSVERSIONINFOEXW" + }, + { + "name": "dwTypeMask", + "type": "DWORD" + }, + { + "name": "dwlConditionMask", + "type": "DWORDLONG" + } + ], + "SetSystemPowerState": [ + { + "name": "fSuspend", + "type": "BOOL" + }, + { + "name": "fForce", + "type": "BOOL" + } + ], + "GetSystemPowerStatus": [ + { + "name": "lpSystemPowerStatus", + "type": "LPSYSTEM_POWER_STATUS" + } + ], + "MapUserPhysicalPagesScatter": [ + { + "name": "VirtualAddresses", + "type": "PVOID" + }, + { + "name": "NumberOfPages", + "type": "ULONG_PTR" + }, + { + "name": "PageArray", + "type": "PULONG_PTR" + } + ], + "CreateJobObjectA": [ + { + "name": "lpJobAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "OpenJobObjectA": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "FindFirstVolumeA": [ + { + "name": "lpszVolumeName", + "type": "LPSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindNextVolumeA": [ + { + "name": "hFindVolume", + "type": "HANDLE" + }, + { + "name": "lpszVolumeName", + "type": "LPSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindFirstVolumeMountPointA": [ + { + "name": "lpszRootPathName", + "type": "LPCSTR" + }, + { + "name": "lpszVolumeMountPoint", + "type": "LPSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindFirstVolumeMountPointW": [ + { + "name": "lpszRootPathName", + "type": "LPCWSTR" + }, + { + "name": "lpszVolumeMountPoint", + "type": "LPWSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindNextVolumeMountPointA": [ + { + "name": "hFindVolumeMountPoint", + "type": "HANDLE" + }, + { + "name": "lpszVolumeMountPoint", + "type": "LPSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindNextVolumeMountPointW": [ + { + "name": "hFindVolumeMountPoint", + "type": "HANDLE" + }, + { + "name": "lpszVolumeMountPoint", + "type": "LPWSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindVolumeMountPointClose": [ + { + "name": "hFindVolumeMountPoint", + "type": "HANDLE" + } + ], + "SetVolumeMountPointA": [ + { + "name": "lpszVolumeMountPoint", + "type": "LPCSTR" + }, + { + "name": "lpszVolumeName", + "type": "LPCSTR" + } + ], + "SetVolumeMountPointW": [ + { + "name": "lpszVolumeMountPoint", + "type": "LPCWSTR" + }, + { + "name": "lpszVolumeName", + "type": "LPCWSTR" + } + ], + "DeleteVolumeMountPointA": [ + { + "name": "lpszVolumeMountPoint", + "type": "LPCSTR" + } + ], + "GetVolumeNameForVolumeMountPointA": [ + { + "name": "lpszVolumeMountPoint", + "type": "LPCSTR" + }, + { + "name": "lpszVolumeName", + "type": "LPSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "GetVolumePathNameA": [ + { + "name": "lpszFileName", + "type": "LPCSTR" + }, + { + "name": "lpszVolumePathName", + "type": "LPSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "GetVolumePathNamesForVolumeNameA": [ + { + "name": "lpszVolumeName", + "type": "LPCSTR" + }, + { + "name": "lpszVolumePathNames", + "type": "LPCH" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + }, + { + "name": "lpcchReturnLength", + "type": "PDWORD" + } + ], + "CreateActCtxA": [ + { + "name": "pActCtx", + "type": "PCACTCTXA" + } + ], + "CreateActCtxW": [ + { + "name": "pActCtx", + "type": "PCACTCTXW" + } + ], + "AddRefActCtx": [ + { + "name": "hActCtx", + "type": "HANDLE" + } + ], + "ReleaseActCtx": [ + { + "name": "hActCtx", + "type": "HANDLE" + } + ], + "ZombifyActCtx": [ + { + "name": "hActCtx", + "type": "HANDLE" + } + ], + "ActivateActCtx": [ + { + "name": "hActCtx", + "type": "HANDLE" + }, + { + "name": "lpCookie", + "type": "ULONG_PTR" + } + ], + "DeactivateActCtx": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ulCookie", + "type": "ULONG_PTR" + } + ], + "GetCurrentActCtx": [ + { + "name": "lphActCtx", + "type": "HANDLE" + } + ], + "FindActCtxSectionStringA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpExtensionGuid", + "type": "GUID" + }, + { + "name": "ulSectionId", + "type": "ULONG" + }, + { + "name": "lpStringToFind", + "type": "LPCSTR" + }, + { + "name": "ReturnedData", + "type": "PACTCTX_SECTION_KEYED_DATA" + } + ], + "FindActCtxSectionStringW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpExtensionGuid", + "type": "GUID" + }, + { + "name": "ulSectionId", + "type": "ULONG" + }, + { + "name": "lpStringToFind", + "type": "LPCWSTR" + }, + { + "name": "ReturnedData", + "type": "PACTCTX_SECTION_KEYED_DATA" + } + ], + "FindActCtxSectionGuid": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpExtensionGuid", + "type": "GUID" + }, + { + "name": "ulSectionId", + "type": "ULONG" + }, + { + "name": "lpGuidToFind", + "type": "GUID" + }, + { + "name": "ReturnedData", + "type": "PACTCTX_SECTION_KEYED_DATA" + } + ], + "QueryActCtxW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hActCtx", + "type": "HANDLE" + }, + { + "name": "pvSubInstance", + "type": "PVOID" + }, + { + "name": "ulInfoClass", + "type": "ULONG" + }, + { + "name": "pvBuffer", + "type": "PVOID" + }, + { + "name": "cbBuffer", + "type": "SIZE_T" + }, + { + "name": "pcbWrittenOrRequired", + "type": "SIZE_T" + } + ], + "WTSGetActiveConsoleSessionId": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetActiveProcessorGroupCount": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetMaximumProcessorGroupCount": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetActiveProcessorCount": [ + { + "name": "GroupNumber", + "type": "WORD" + } + ], + "GetMaximumProcessorCount": [ + { + "name": "GroupNumber", + "type": "WORD" + } + ], + "GetNumaProcessorNode": [ + { + "name": "Processor", + "type": "UCHAR" + }, + { + "name": "NodeNumber", + "type": "PUCHAR" + } + ], + "GetNumaNodeNumberFromHandle": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "NodeNumber", + "type": "PUSHORT" + } + ], + "GetNumaProcessorNodeEx": [ + { + "name": "Processor", + "type": "PPROCESSOR_NUMBER" + }, + { + "name": "NodeNumber", + "type": "PUSHORT" + } + ], + "GetNumaNodeProcessorMask": [ + { + "name": "Node", + "type": "UCHAR" + }, + { + "name": "ProcessorMask", + "type": "PULONGLONG" + } + ], + "GetNumaAvailableMemoryNode": [ + { + "name": "Node", + "type": "UCHAR" + }, + { + "name": "AvailableBytes", + "type": "PULONGLONG" + } + ], + "GetNumaAvailableMemoryNodeEx": [ + { + "name": "Node", + "type": "USHORT" + }, + { + "name": "AvailableBytes", + "type": "PULONGLONG" + } + ], + "GetNumaProximityNode": [ + { + "name": "ProximityId", + "type": "ULONG" + }, + { + "name": "NodeNumber", + "type": "PUCHAR" + } + ], + "RegisterApplicationRecoveryCallback": [ + { + "name": "pRecoveyCallback", + "type": "APPLICATION_RECOVERY_CALLBACK" + }, + { + "name": "pvParameter", + "type": "PVOID" + }, + { + "name": "dwPingInterval", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UnregisterApplicationRecoveryCallback": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegisterApplicationRestart": [ + { + "name": "pwzCommandline", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UnregisterApplicationRestart": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetApplicationRecoveryCallback": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pRecoveryCallback", + "type": "APPLICATION_RECOVERY_CALLBACK" + }, + { + "name": "ppvParameter", + "type": "PVOID" + }, + { + "name": "pdwPingInterval", + "type": "PDWORD" + }, + { + "name": "pdwFlags", + "type": "PDWORD" + } + ], + "GetApplicationRestartSettings": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pwzCommandline", + "type": "PWSTR" + }, + { + "name": "pcchSize", + "type": "PDWORD" + }, + { + "name": "pdwFlags", + "type": "PDWORD" + } + ], + "ApplicationRecoveryInProgress": [ + { + "name": "pbCancelled", + "type": "PBOOL" + } + ], + "ApplicationRecoveryFinished": [ + { + "name": "bSuccess", + "type": "BOOL" + } + ], + "GetFileInformationByHandleEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "FileInformationClass", + "type": "FILE_INFO_BY_HANDLE_CLASS" + }, + { + "name": "lpFileInformation", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + } + ], + "OpenFileById": [ + { + "name": "hVolumeHint", + "type": "HANDLE" + }, + { + "name": "lpFileId", + "type": "LPFILE_ID_DESCRIPTOR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + } + ], + "CreateSymbolicLinkA": [ + { + "name": "lpSymlinkFileName", + "type": "LPCSTR" + }, + { + "name": "lpTargetFileName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CreateSymbolicLinkW": [ + { + "name": "lpSymlinkFileName", + "type": "LPCWSTR" + }, + { + "name": "lpTargetFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "QueryActCtxSettingsW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hActCtx", + "type": "HANDLE" + }, + { + "name": "settingsNameSpace", + "type": "PCWSTR" + }, + { + "name": "settingName", + "type": "PCWSTR" + }, + { + "name": "pvBuffer", + "type": "PWSTR" + }, + { + "name": "dwBuffer", + "type": "SIZE_T" + }, + { + "name": "pdwWrittenOrRequired", + "type": "SIZE_T" + } + ], + "CreateSymbolicLinkTransactedA": [ + { + "name": "lpSymlinkFileName", + "type": "LPCSTR" + }, + { + "name": "lpTargetFileName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CreateSymbolicLinkTransactedW": [ + { + "name": "lpSymlinkFileName", + "type": "LPCWSTR" + }, + { + "name": "lpTargetFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "AddSecureMemoryCacheCallback": [ + { + "name": "pfnCallBack", + "type": "PSECURE_MEMORY_CACHE_CALLBACK" + } + ], + "RemoveSecureMemoryCacheCallback": [ + { + "name": "pfnCallBack", + "type": "PSECURE_MEMORY_CACHE_CALLBACK" + } + ], + "CopyContext": [ + { + "name": "Destination", + "type": "PCONTEXT" + }, + { + "name": "ContextFlags", + "type": "DWORD" + }, + { + "name": "Source", + "type": "PCONTEXT" + } + ], + "InitializeContext": [ + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "ContextFlags", + "type": "DWORD" + }, + { + "name": "Context", + "type": "PCONTEXT" + }, + { + "name": "ContextLength", + "type": "PDWORD" + } + ], + "GetEnabledXStateFeatures": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetXStateFeaturesMask": [ + { + "name": "Context", + "type": "PCONTEXT" + }, + { + "name": "FeatureMask", + "type": "PDWORD64" + } + ], + "LocateXStateFeature": [ + { + "name": "Context", + "type": "PCONTEXT" + }, + { + "name": "FeatureId", + "type": "DWORD" + }, + { + "name": "Length", + "type": "PDWORD" + } + ], + "SetXStateFeaturesMask": [ + { + "name": "Context", + "type": "PCONTEXT" + }, + { + "name": "FeatureMask", + "type": "DWORD64" + } + ], + "EnableThreadProfiling": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "HardwareCounters", + "type": "DWORD64" + }, + { + "name": "PerformanceDataHandle", + "type": "HANDLE" + } + ], + "DisableThreadProfiling": [ + { + "name": "PerformanceDataHandle", + "type": "HANDLE" + } + ], + "QueryThreadProfiling": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + }, + { + "name": "Enabled", + "type": "PBOOLEAN" + } + ], + "ReadThreadProfilingData": [ + { + "name": "PerformanceDataHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PerformanceData", + "type": "PPERFORMANCE_DATA" + } + ], + "Beep": [ + { + "name": "dwFreq", + "type": "DWORD" + }, + { + "name": "dwDuration", + "type": "DWORD" + } + ], + "InitializeSListHead": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + } + ], + "InterlockedPopEntrySList": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + } + ], + "InterlockedPushEntrySList": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + }, + { + "name": "ListEntry", + "type": "PSLIST_ENTRY" + } + ], + "InterlockedPushListSListEx": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + }, + { + "name": "List", + "type": "PSLIST_ENTRY" + }, + { + "name": "ListEnd", + "type": "PSLIST_ENTRY" + }, + { + "name": "Count", + "type": "ULONG" + } + ], + "InterlockedFlushSList": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + } + ], + "QueryDepthSList": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + } + ], + "GetCommandLineA": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetCommandLineW": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetEnvironmentStrings": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetEnvironmentStringsW": [ + { + "name": "VOID", + "type": "void" + } + ], + "FreeEnvironmentStringsA": [ + { + "name": "penv", + "type": "LPCH" + } + ], + "FreeEnvironmentStringsW": [ + { + "name": "penv", + "type": "LPWCH" + } + ], + "ExpandEnvironmentStringsA": [ + { + "name": "lpSrc", + "type": "LPCSTR" + }, + { + "name": "lpDst", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "ExpandEnvironmentStringsW": [ + { + "name": "lpSrc", + "type": "LPCWSTR" + }, + { + "name": "lpDst", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "SearchPathW": [ + { + "name": "lpPath", + "type": "LPCWSTR" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpExtension", + "type": "LPCWSTR" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "lpFilePart", + "type": "LPWSTR" + } + ], + "SearchPathA": [ + { + "name": "lpPath", + "type": "LPCSTR" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpExtension", + "type": "LPCSTR" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "lpFilePart", + "type": "LPSTR" + } + ], + "NeedCurrentDirectoryForExePathA": [ + { + "name": "ExeName", + "type": "LPCSTR" + } + ], + "NeedCurrentDirectoryForExePathW": [ + { + "name": "ExeName", + "type": "LPCWSTR" + } + ], + "CreateToolhelp32Snapshot": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "th32ProcessID", + "type": "DWORD" + } + ], + "Heap32ListFirst": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lphl", + "type": "LPHEAPLIST32" + } + ], + "Heap32ListNext": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lphl", + "type": "LPHEAPLIST32" + } + ], + "Heap32First": [ + { + "name": "lphe", + "type": "LPHEAPENTRY32" + }, + { + "name": "th32ProcessID", + "type": "DWORD" + }, + { + "name": "th32HeapID", + "type": "ULONG_PTR" + } + ], + "Heap32Next": [ + { + "name": "lphe", + "type": "LPHEAPENTRY32" + } + ], + "Toolhelp32ReadProcessMemory": [ + { + "name": "th32ProcessID", + "type": "DWORD" + }, + { + "name": "lpBaseAddress", + "type": "LPCVOID" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "cbRead", + "type": "SIZE_T" + }, + { + "name": "lpNumberOfBytesRead", + "type": "SIZE_T" + } + ], + "Process32FirstW": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lppe", + "type": "LPPROCESSENTRY32W" + } + ], + "Process32NextW": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lppe", + "type": "LPPROCESSENTRY32W" + } + ], + "Process32First": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lppe", + "type": "LPPROCESSENTRY32" + } + ], + "Process32Next": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lppe", + "type": "LPPROCESSENTRY32" + } + ], + "Thread32First": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lpte", + "type": "LPTHREADENTRY32" + } + ], + "Thread32Next": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lpte", + "type": "LPTHREADENTRY32" + } + ], + "Module32FirstW": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lpme", + "type": "LPMODULEENTRY32W" + } + ], + "Module32NextW": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lpme", + "type": "LPMODULEENTRY32W" + } + ], + "Module32First": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lpme", + "type": "LPMODULEENTRY32" + } + ], + "Module32Next": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lpme", + "type": "LPMODULEENTRY32" + } + ], + "CloseHandle": [ + { + "name": "hObject", + "type": "HANDLE" + } + ], + "DuplicateHandle": [ + { + "name": "hSourceProcessHandle", + "type": "HANDLE" + }, + { + "name": "hSourceHandle", + "type": "HANDLE" + }, + { + "name": "hTargetProcessHandle", + "type": "HANDLE" + }, + { + "name": "lpTargetHandle", + "type": "LPHANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "GetHandleInformation": [ + { + "name": "hObject", + "type": "HANDLE" + }, + { + "name": "lpdwFlags", + "type": "LPDWORD" + } + ], + "SetHandleInformation": [ + { + "name": "hObject", + "type": "HANDLE" + }, + { + "name": "dwMask", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CompareFileTime": [ + { + "name": "lpFileTime1", + "type": "FILETIME" + }, + { + "name": "lpFileTime2", + "type": "FILETIME" + } + ], + "CreateFileA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwCreationDisposition", + "type": "DWORD" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + }, + { + "name": "hTemplateFile", + "type": "HANDLE" + } + ], + "CreateFileW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwCreationDisposition", + "type": "DWORD" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + }, + { + "name": "hTemplateFile", + "type": "HANDLE" + } + ], + "FileTimeToLocalFileTime": [ + { + "name": "lpFileTime", + "type": "FILETIME" + }, + { + "name": "lpLocalFileTime", + "type": "LPFILETIME" + } + ], + "FindClose": [ + { + "name": "hFindFile", + "type": "HANDLE" + } + ], + "FindCloseChangeNotification": [ + { + "name": "hChangeHandle", + "type": "HANDLE" + } + ], + "FindFirstChangeNotificationA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + }, + { + "name": "bWatchSubtree", + "type": "BOOL" + }, + { + "name": "dwNotifyFilter", + "type": "DWORD" + } + ], + "FindFirstChangeNotificationW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + }, + { + "name": "bWatchSubtree", + "type": "BOOL" + }, + { + "name": "dwNotifyFilter", + "type": "DWORD" + } + ], + "FindFirstFileA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpFindFileData", + "type": "LPWIN32_FIND_DATAA" + } + ], + "FindFirstFileW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpFindFileData", + "type": "LPWIN32_FIND_DATAW" + } + ], + "FindFirstFileExA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "fInfoLevelId", + "type": "FINDEX_INFO_LEVELS" + }, + { + "name": "lpFindFileData", + "type": "LPVOID" + }, + { + "name": "fSearchOp", + "type": "FINDEX_SEARCH_OPS" + }, + { + "name": "lpSearchFilter", + "type": "LPVOID" + }, + { + "name": "dwAdditionalFlags", + "type": "DWORD" + } + ], + "FindFirstFileExW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "fInfoLevelId", + "type": "FINDEX_INFO_LEVELS" + }, + { + "name": "lpFindFileData", + "type": "LPVOID" + }, + { + "name": "fSearchOp", + "type": "FINDEX_SEARCH_OPS" + }, + { + "name": "lpSearchFilter", + "type": "LPVOID" + }, + { + "name": "dwAdditionalFlags", + "type": "DWORD" + } + ], + "FindNextChangeNotification": [ + { + "name": "hChangeHandle", + "type": "HANDLE" + } + ], + "FindNextFileA": [ + { + "name": "hFindFile", + "type": "HANDLE" + }, + { + "name": "lpFindFileData", + "type": "LPWIN32_FIND_DATAA" + } + ], + "FindNextFileW": [ + { + "name": "hFindFile", + "type": "HANDLE" + }, + { + "name": "lpFindFileData", + "type": "LPWIN32_FIND_DATAW" + } + ], + "FindVolumeClose": [ + { + "name": "hFindVolume", + "type": "HANDLE" + } + ], + "FlushFileBuffers": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "GetDiskFreeSpaceA": [ + { + "name": "lpRootPathName", + "type": "LPCSTR" + }, + { + "name": "lpSectorsPerCluster", + "type": "LPDWORD" + }, + { + "name": "lpBytesPerSector", + "type": "LPDWORD" + }, + { + "name": "lpNumberOfFreeClusters", + "type": "LPDWORD" + }, + { + "name": "lpTotalNumberOfClusters", + "type": "LPDWORD" + } + ], + "GetDiskFreeSpaceW": [ + { + "name": "lpRootPathName", + "type": "LPCWSTR" + }, + { + "name": "lpSectorsPerCluster", + "type": "LPDWORD" + }, + { + "name": "lpBytesPerSector", + "type": "LPDWORD" + }, + { + "name": "lpNumberOfFreeClusters", + "type": "LPDWORD" + }, + { + "name": "lpTotalNumberOfClusters", + "type": "LPDWORD" + } + ], + "GetDiskFreeSpaceExA": [ + { + "name": "lpDirectoryName", + "type": "LPCSTR" + }, + { + "name": "lpFreeBytesAvailableToCaller", + "type": "PULARGE_INTEGER" + }, + { + "name": "lpTotalNumberOfBytes", + "type": "PULARGE_INTEGER" + }, + { + "name": "lpTotalNumberOfFreeBytes", + "type": "PULARGE_INTEGER" + } + ], + "GetDiskFreeSpaceExW": [ + { + "name": "lpDirectoryName", + "type": "LPCWSTR" + }, + { + "name": "lpFreeBytesAvailableToCaller", + "type": "PULARGE_INTEGER" + }, + { + "name": "lpTotalNumberOfBytes", + "type": "PULARGE_INTEGER" + }, + { + "name": "lpTotalNumberOfFreeBytes", + "type": "PULARGE_INTEGER" + } + ], + "GetDriveTypeA": [ + { + "name": "lpRootPathName", + "type": "LPCSTR" + } + ], + "GetDriveTypeW": [ + { + "name": "lpRootPathName", + "type": "LPCWSTR" + } + ], + "GetFileAttributesA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "GetFileAttributesW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "GetFileAttributesExA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "fInfoLevelId", + "type": "GET_FILEEX_INFO_LEVELS" + }, + { + "name": "lpFileInformation", + "type": "LPVOID" + } + ], + "GetFileAttributesExW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "fInfoLevelId", + "type": "GET_FILEEX_INFO_LEVELS" + }, + { + "name": "lpFileInformation", + "type": "LPVOID" + } + ], + "GetFileInformationByHandle": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileInformation", + "type": "LPBY_HANDLE_FILE_INFORMATION" + } + ], + "GetFileSize": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileSizeHigh", + "type": "LPDWORD" + } + ], + "GetFileSizeEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileSize", + "type": "PLARGE_INTEGER" + } + ], + "GetFileType": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "GetFinalPathNameByHandleA": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpszFilePath", + "type": "LPSTR" + }, + { + "name": "cchFilePath", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetFinalPathNameByHandleW": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpszFilePath", + "type": "LPWSTR" + }, + { + "name": "cchFilePath", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetFileTime": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpCreationTime", + "type": "LPFILETIME" + }, + { + "name": "lpLastAccessTime", + "type": "LPFILETIME" + }, + { + "name": "lpLastWriteTime", + "type": "LPFILETIME" + } + ], + "GetFullPathNameW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "lpFilePart", + "type": "LPWSTR" + } + ], + "GetFullPathNameA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "lpFilePart", + "type": "LPSTR" + } + ], + "GetLogicalDrives": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetLongPathNameA": [ + { + "name": "lpszShortPath", + "type": "LPCSTR" + }, + { + "name": "lpszLongPath", + "type": "LPSTR" + }, + { + "name": "cchBuffer", + "type": "DWORD" + } + ], + "GetLongPathNameW": [ + { + "name": "lpszShortPath", + "type": "LPCWSTR" + }, + { + "name": "lpszLongPath", + "type": "LPWSTR" + }, + { + "name": "cchBuffer", + "type": "DWORD" + } + ], + "GetVolumeInformationByHandleW": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpVolumeNameBuffer", + "type": "LPWSTR" + }, + { + "name": "nVolumeNameSize", + "type": "DWORD" + }, + { + "name": "lpVolumeSerialNumber", + "type": "LPDWORD" + }, + { + "name": "lpMaximumComponentLength", + "type": "LPDWORD" + }, + { + "name": "lpFileSystemFlags", + "type": "LPDWORD" + }, + { + "name": "lpFileSystemNameBuffer", + "type": "LPWSTR" + }, + { + "name": "nFileSystemNameSize", + "type": "DWORD" + } + ], + "GetVolumeInformationW": [ + { + "name": "lpRootPathName", + "type": "LPCWSTR" + }, + { + "name": "lpVolumeNameBuffer", + "type": "LPWSTR" + }, + { + "name": "nVolumeNameSize", + "type": "DWORD" + }, + { + "name": "lpVolumeSerialNumber", + "type": "LPDWORD" + }, + { + "name": "lpMaximumComponentLength", + "type": "LPDWORD" + }, + { + "name": "lpFileSystemFlags", + "type": "LPDWORD" + }, + { + "name": "lpFileSystemNameBuffer", + "type": "LPWSTR" + }, + { + "name": "nFileSystemNameSize", + "type": "DWORD" + } + ], + "LocalFileTimeToFileTime": [ + { + "name": "lpLocalFileTime", + "type": "FILETIME" + }, + { + "name": "lpFileTime", + "type": "LPFILETIME" + } + ], + "LockFile": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFileOffsetLow", + "type": "DWORD" + }, + { + "name": "dwFileOffsetHigh", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToLockLow", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToLockHigh", + "type": "DWORD" + } + ], + "LockFileEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToLockLow", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToLockHigh", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "ReadFile": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesRead", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "ReadFileEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "ReadFileScatter": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "aSegmentArray", + "type": "FILE_SEGMENT_ELEMENT" + }, + { + "name": "nNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "RemoveDirectoryA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + } + ], + "RemoveDirectoryW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + } + ], + "SetEndOfFile": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "SetFileAttributesA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "dwFileAttributes", + "type": "DWORD" + } + ], + "SetFileAttributesW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFileAttributes", + "type": "DWORD" + } + ], + "SetFileInformationByHandle": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "FileInformationClass", + "type": "FILE_INFO_BY_HANDLE_CLASS" + }, + { + "name": "lpFileInformation", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + } + ], + "SetFilePointer": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lDistanceToMove", + "type": "LONG" + }, + { + "name": "lpDistanceToMoveHigh", + "type": "PLONG" + }, + { + "name": "dwMoveMethod", + "type": "DWORD" + } + ], + "SetFilePointerEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "liDistanceToMove", + "type": "LARGE_INTEGER" + }, + { + "name": "lpNewFilePointer", + "type": "PLARGE_INTEGER" + }, + { + "name": "dwMoveMethod", + "type": "DWORD" + } + ], + "SetFileTime": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpCreationTime", + "type": "FILETIME" + }, + { + "name": "lpLastAccessTime", + "type": "FILETIME" + }, + { + "name": "lpLastWriteTime", + "type": "FILETIME" + } + ], + "SetFileValidData": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "ValidDataLength", + "type": "LONGLONG" + } + ], + "UnlockFile": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFileOffsetLow", + "type": "DWORD" + }, + { + "name": "dwFileOffsetHigh", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToUnlockLow", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToUnlockHigh", + "type": "DWORD" + } + ], + "UnlockFileEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToUnlockLow", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToUnlockHigh", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "WriteFile": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPCVOID" + }, + { + "name": "nNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesWritten", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "WriteFileEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPCVOID" + }, + { + "name": "nNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "WriteFileGather": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "aSegmentArray", + "type": "FILE_SEGMENT_ELEMENT" + }, + { + "name": "nNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "GetTempPathW": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + } + ], + "CreateFile2": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "dwCreationDisposition", + "type": "DWORD" + }, + { + "name": "pCreateExParams", + "type": "LPCREATEFILE2_EXTENDED_PARAMETERS" + } + ], + "SetFileIoOverlappedRange": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "OverlappedRangeStart", + "type": "PUCHAR" + }, + { + "name": "Length", + "type": "ULONG" + } + ], + "GetCompressedFileSizeA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpFileSizeHigh", + "type": "LPDWORD" + } + ], + "GetCompressedFileSizeW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpFileSizeHigh", + "type": "LPDWORD" + } + ], + "FindFirstStreamW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "InfoLevel", + "type": "STREAM_INFO_LEVELS" + }, + { + "name": "lpFindStreamData", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "FindNextStreamW": [ + { + "name": "hFindStream", + "type": "HANDLE" + }, + { + "name": "lpFindStreamData", + "type": "LPVOID" + } + ], + "AreFileApisANSI": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetTempPathA": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + } + ], + "FindFirstFileNameW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "StringLength", + "type": "LPDWORD" + }, + { + "name": "LinkName", + "type": "PWSTR" + } + ], + "FindNextFileNameW": [ + { + "name": "hFindStream", + "type": "HANDLE" + }, + { + "name": "StringLength", + "type": "LPDWORD" + }, + { + "name": "LinkName", + "type": "PWSTR" + } + ], + "GetVolumeInformationA": [ + { + "name": "lpRootPathName", + "type": "LPCSTR" + }, + { + "name": "lpVolumeNameBuffer", + "type": "LPSTR" + }, + { + "name": "nVolumeNameSize", + "type": "DWORD" + }, + { + "name": "lpVolumeSerialNumber", + "type": "LPDWORD" + }, + { + "name": "lpMaximumComponentLength", + "type": "LPDWORD" + }, + { + "name": "lpFileSystemFlags", + "type": "LPDWORD" + }, + { + "name": "lpFileSystemNameBuffer", + "type": "LPSTR" + }, + { + "name": "nFileSystemNameSize", + "type": "DWORD" + } + ], + "SetFileApisToOEM": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetFileApisToANSI": [ + { + "name": "VOID", + "type": "void" + } + ], + "InitializeSRWLock": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "ReleaseSRWLockExclusive": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "ReleaseSRWLockShared": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "AcquireSRWLockExclusive": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "AcquireSRWLockShared": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "TryAcquireSRWLockExclusive": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "TryAcquireSRWLockShared": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "InitializeCriticalSection": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + } + ], + "EnterCriticalSection": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + } + ], + "LeaveCriticalSection": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + } + ], + "InitializeCriticalSectionAndSpinCount": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + }, + { + "name": "dwSpinCount", + "type": "DWORD" + } + ], + "InitializeCriticalSectionEx": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + }, + { + "name": "dwSpinCount", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetCriticalSectionSpinCount": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + }, + { + "name": "dwSpinCount", + "type": "DWORD" + } + ], + "TryEnterCriticalSection": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + } + ], + "DeleteCriticalSection": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + } + ], + "InitOnceInitialize": [ + { + "name": "InitOnce", + "type": "PINIT_ONCE" + } + ], + "InitOnceExecuteOnce": [ + { + "name": "InitOnce", + "type": "PINIT_ONCE" + }, + { + "name": "InitFn", + "type": "PINIT_ONCE_FN" + }, + { + "name": "Parameter", + "type": "PVOID" + }, + { + "name": "Context", + "type": "LPVOID" + } + ], + "InitOnceBeginInitialize": [ + { + "name": "lpInitOnce", + "type": "LPINIT_ONCE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "fPending", + "type": "PBOOL" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "InitOnceComplete": [ + { + "name": "lpInitOnce", + "type": "LPINIT_ONCE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "InitializeConditionVariable": [ + { + "name": "ConditionVariable", + "type": "PCONDITION_VARIABLE" + } + ], + "WakeConditionVariable": [ + { + "name": "ConditionVariable", + "type": "PCONDITION_VARIABLE" + } + ], + "WakeAllConditionVariable": [ + { + "name": "ConditionVariable", + "type": "PCONDITION_VARIABLE" + } + ], + "SleepConditionVariableCS": [ + { + "name": "ConditionVariable", + "type": "PCONDITION_VARIABLE" + }, + { + "name": "CriticalSection", + "type": "PCRITICAL_SECTION" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "SleepConditionVariableSRW": [ + { + "name": "ConditionVariable", + "type": "PCONDITION_VARIABLE" + }, + { + "name": "SRWLock", + "type": "PSRWLOCK" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "SetEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "ResetEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "ReleaseSemaphore": [ + { + "name": "hSemaphore", + "type": "HANDLE" + }, + { + "name": "lReleaseCount", + "type": "LONG" + }, + { + "name": "lpPreviousCount", + "type": "LPLONG" + } + ], + "ReleaseMutex": [ + { + "name": "hMutex", + "type": "HANDLE" + } + ], + "WaitForSingleObject": [ + { + "name": "hHandle", + "type": "HANDLE" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "WaitForSingleObjectEx": [ + { + "name": "hHandle", + "type": "HANDLE" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "bAlertable", + "type": "BOOL" + } + ], + "WaitForMultipleObjectsEx": [ + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "lpHandles", + "type": "HANDLE" + }, + { + "name": "bWaitAll", + "type": "BOOL" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "bAlertable", + "type": "BOOL" + } + ], + "CreateMutexA": [ + { + "name": "lpMutexAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bInitialOwner", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "CreateMutexW": [ + { + "name": "lpMutexAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bInitialOwner", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "OpenMutexW": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "CreateEventA": [ + { + "name": "lpEventAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bManualReset", + "type": "BOOL" + }, + { + "name": "bInitialState", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "CreateEventW": [ + { + "name": "lpEventAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bManualReset", + "type": "BOOL" + }, + { + "name": "bInitialState", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "OpenEventA": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "OpenEventW": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "OpenSemaphoreW": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "OpenWaitableTimerW": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpTimerName", + "type": "LPCWSTR" + } + ], + "SetWaitableTimerEx": [ + { + "name": "hTimer", + "type": "HANDLE" + }, + { + "name": "lpDueTime", + "type": "LARGE_INTEGER" + }, + { + "name": "lPeriod", + "type": "LONG" + }, + { + "name": "pfnCompletionRoutine", + "type": "PTIMERAPCROUTINE" + }, + { + "name": "lpArgToCompletionRoutine", + "type": "LPVOID" + }, + { + "name": "WakeContext", + "type": "PREASON_CONTEXT" + }, + { + "name": "TolerableDelay", + "type": "ULONG" + } + ], + "SetWaitableTimer": [ + { + "name": "hTimer", + "type": "HANDLE" + }, + { + "name": "lpDueTime", + "type": "LARGE_INTEGER" + }, + { + "name": "lPeriod", + "type": "LONG" + }, + { + "name": "pfnCompletionRoutine", + "type": "PTIMERAPCROUTINE" + }, + { + "name": "lpArgToCompletionRoutine", + "type": "LPVOID" + }, + { + "name": "fResume", + "type": "BOOL" + } + ], + "CancelWaitableTimer": [ + { + "name": "hTimer", + "type": "HANDLE" + } + ], + "CreateMutexExA": [ + { + "name": "lpMutexAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "CreateMutexExW": [ + { + "name": "lpMutexAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "CreateEventExA": [ + { + "name": "lpEventAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "CreateEventExW": [ + { + "name": "lpEventAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "CreateWaitableTimerExW": [ + { + "name": "lpTimerAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpTimerName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "EnterSynchronizationBarrier": [ + { + "name": "lpBarrier", + "type": "LPSYNCHRONIZATION_BARRIER" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InitializeSynchronizationBarrier": [ + { + "name": "lpBarrier", + "type": "LPSYNCHRONIZATION_BARRIER" + }, + { + "name": "lTotalThreads", + "type": "LONG" + }, + { + "name": "lSpinCount", + "type": "LONG" + } + ], + "DeleteSynchronizationBarrier": [ + { + "name": "lpBarrier", + "type": "LPSYNCHRONIZATION_BARRIER" + } + ], + "Sleep": [ + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "WaitOnAddress": [ + { + "name": "Address", + "type": "void" + }, + { + "name": "CompareAddress", + "type": "PVOID" + }, + { + "name": "AddressSize", + "type": "SIZE_T" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "WakeByAddressSingle": [ + { + "name": "Address", + "type": "PVOID" + } + ], + "WakeByAddressAll": [ + { + "name": "Address", + "type": "PVOID" + } + ], + "SignalObjectAndWait": [ + { + "name": "hObjectToSignal", + "type": "HANDLE" + }, + { + "name": "hObjectToWaitOn", + "type": "HANDLE" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "bAlertable", + "type": "BOOL" + } + ], + "WaitForMultipleObjects": [ + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "lpHandles", + "type": "HANDLE" + }, + { + "name": "bWaitAll", + "type": "BOOL" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "CreateWaitableTimerW": [ + { + "name": "lpTimerAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bManualReset", + "type": "BOOL" + }, + { + "name": "lpTimerName", + "type": "LPCWSTR" + } + ], + "OpenMutexA": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "OpenSemaphoreA": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "CreateWaitableTimerA": [ + { + "name": "lpTimerAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bManualReset", + "type": "BOOL" + }, + { + "name": "lpTimerName", + "type": "LPCSTR" + } + ], + "OpenWaitableTimerA": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpTimerName", + "type": "LPCSTR" + } + ], + "CreateWaitableTimerExA": [ + { + "name": "lpTimerAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpTimerName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "GetAppContainerNamedObjectPath": [ + { + "name": "Token", + "type": "HANDLE" + }, + { + "name": "AppContainerSid", + "type": "PSID" + }, + { + "name": "ObjectPathLength", + "type": "ULONG" + }, + { + "name": "ObjectPath", + "type": "LPWSTR" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "GlobalMemoryStatusEx": [ + { + "name": "lpBuffer", + "type": "LPMEMORYSTATUSEX" + } + ], + "GetSystemInfo": [ + { + "name": "lpSystemInfo", + "type": "LPSYSTEM_INFO" + } + ], + "GetSystemTime": [ + { + "name": "lpSystemTime", + "type": "LPSYSTEMTIME" + } + ], + "GetSystemTimeAsFileTime": [ + { + "name": "lpSystemTimeAsFileTime", + "type": "LPFILETIME" + } + ], + "GetLocalTime": [ + { + "name": "lpSystemTime", + "type": "LPSYSTEMTIME" + } + ], + "GetVersion": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetLocalTime": [ + { + "name": "lpSystemTime", + "type": "SYSTEMTIME" + } + ], + "GetTickCount": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetTickCount64": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetSystemTimeAdjustment": [ + { + "name": "lpTimeAdjustment", + "type": "PDWORD" + }, + { + "name": "lpTimeIncrement", + "type": "PDWORD" + }, + { + "name": "lpTimeAdjustmentDisabled", + "type": "PBOOL" + } + ], + "GetSystemDirectoryA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetSystemDirectoryW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetWindowsDirectoryA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetWindowsDirectoryW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetSystemWindowsDirectoryA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetSystemWindowsDirectoryW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetComputerNameExA": [ + { + "name": "NameType", + "type": "COMPUTER_NAME_FORMAT" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "GetComputerNameExW": [ + { + "name": "NameType", + "type": "COMPUTER_NAME_FORMAT" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "SetComputerNameExW": [ + { + "name": "NameType", + "type": "COMPUTER_NAME_FORMAT" + }, + { + "name": "lpBuffer", + "type": "LPCWSTR" + } + ], + "SetSystemTime": [ + { + "name": "lpSystemTime", + "type": "SYSTEMTIME" + } + ], + "GetVersionExA": [ + { + "name": "lpVersionInformation", + "type": "LPOSVERSIONINFOA" + } + ], + "GetVersionExW": [ + { + "name": "lpVersionInformation", + "type": "LPOSVERSIONINFOW" + } + ], + "GetLogicalProcessorInformation": [ + { + "name": "Buffer", + "type": "PSYSTEM_LOGICAL_PROCESSOR_INFORMATION" + }, + { + "name": "ReturnedLength", + "type": "PDWORD" + } + ], + "GetLogicalProcessorInformationEx": [ + { + "name": "RelationshipType", + "type": "LOGICAL_PROCESSOR_RELATIONSHIP" + }, + { + "name": "Buffer", + "type": "PSYSTEM_LOGICAL_PROCESSOR_INFORMATION_EX" + }, + { + "name": "ReturnedLength", + "type": "PDWORD" + } + ], + "GetNativeSystemInfo": [ + { + "name": "lpSystemInfo", + "type": "LPSYSTEM_INFO" + } + ], + "GetSystemTimePreciseAsFileTime": [ + { + "name": "lpSystemTimeAsFileTime", + "type": "LPFILETIME" + } + ], + "GetProductInfo": [ + { + "name": "dwOSMajorVersion", + "type": "DWORD" + }, + { + "name": "dwOSMinorVersion", + "type": "DWORD" + }, + { + "name": "dwSpMajorVersion", + "type": "DWORD" + }, + { + "name": "dwSpMinorVersion", + "type": "DWORD" + }, + { + "name": "pdwReturnedProductType", + "type": "PDWORD" + } + ], + "EnumSystemFirmwareTables": [ + { + "name": "FirmwareTableProviderSignature", + "type": "DWORD" + }, + { + "name": "pFirmwareTableEnumBuffer", + "type": "PVOID" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "GetSystemFirmwareTable": [ + { + "name": "FirmwareTableProviderSignature", + "type": "DWORD" + }, + { + "name": "FirmwareTableID", + "type": "DWORD" + }, + { + "name": "pFirmwareTableBuffer", + "type": "PVOID" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "GetPhysicallyInstalledSystemMemory": [ + { + "name": "TotalMemoryInKilobytes", + "type": "PULONGLONG" + } + ], + "SetSystemTimeAdjustment": [ + { + "name": "dwTimeAdjustment", + "type": "DWORD" + }, + { + "name": "bTimeAdjustmentDisabled", + "type": "BOOL" + } + ], + "InstallELAMCertificateInfo": [ + { + "name": "ELAMFile", + "type": "HANDLE" + } + ], + "GetProcessorSystemCycleTime": [ + { + "name": "Group", + "type": "USHORT" + }, + { + "name": "Buffer", + "type": "PSYSTEM_PROCESSOR_CYCLE_TIME_INFORMATION" + }, + { + "name": "ReturnedLength", + "type": "PDWORD" + } + ], + "SetComputerNameA": [ + { + "name": "lpComputerName", + "type": "LPCSTR" + } + ], + "SetComputerNameW": [ + { + "name": "lpComputerName", + "type": "LPCWSTR" + } + ], + "SetComputerNameExA": [ + { + "name": "NameType", + "type": "COMPUTER_NAME_FORMAT" + }, + { + "name": "lpBuffer", + "type": "LPCSTR" + } + ], + "GetNumaHighestNodeNumber": [ + { + "name": "HighestNodeNumber", + "type": "PULONG" + } + ], + "GetNumaNodeProcessorMaskEx": [ + { + "name": "Node", + "type": "USHORT" + }, + { + "name": "ProcessorMask", + "type": "PGROUP_AFFINITY" + } + ], + "GetNumaProximityNodeEx": [ + { + "name": "ProximityId", + "type": "ULONG" + }, + { + "name": "NodeNumber", + "type": "PUSHORT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/kernel32_lib.json b/qiling/extensions/windows_sdk/defs/kernel32_lib.json new file mode 100644 index 000000000..38ea744cf --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/kernel32_lib.json @@ -0,0 +1,40 @@ +{ + "GetSystemWow64Directory2A": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "uSize", + "type": "UINT" + }, + { + "name": "ImageFileMachineType", + "type": "WORD" + } + ], + "GetSystemWow64Directory2W": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "uSize", + "type": "UINT" + }, + { + "name": "ImageFileMachineType", + "type": "WORD" + } + ], + "IsWow64GuestMachineSupported": [ + { + "name": "WowGuestMachine", + "type": "USHORT" + }, + { + "name": "MachineIsSupported", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/kernel_dll.json b/qiling/extensions/windows_sdk/defs/kernel_dll.json new file mode 100644 index 000000000..954a762fd --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/kernel_dll.json @@ -0,0 +1,34 @@ +{ + "GetAutoRotationState": [ + { + "name": "pState", + "type": "PAR_STATE" + } + ], + "GetDisplayAutoRotationPreferences": [ + { + "name": "pOrientation", + "type": "ORIENTATION_PREFERENCE" + } + ], + "GetDisplayAutoRotationPreferencesByProcessId": [ + { + "name": "dwProcessId", + "type": "DWORD" + }, + { + "name": "pOrientation", + "type": "ORIENTATION_PREFERENCE" + }, + { + "name": "fRotateScreen", + "type": "BOOL" + } + ], + "SetDisplayAutoRotationPreferences": [ + { + "name": "orientation", + "type": "ORIENTATION_PREFERENCE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/kernelbase_dll.json b/qiling/extensions/windows_sdk/defs/kernelbase_dll.json new file mode 100644 index 000000000..6251dc354 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/kernelbase_dll.json @@ -0,0 +1,106 @@ +{ + "WerRegisterAppLocalDump": [ + { + "name": "localAppDataRelativePath", + "type": "PCWSTR" + } + ], + "TlsAlloc": [ + { + "name": "VOID", + "type": "void" + } + ], + "TlsGetValue": [ + { + "name": "dwTlsIndex", + "type": "DWORD" + } + ], + "TlsSetValue": [ + { + "name": "dwTlsIndex", + "type": "DWORD" + }, + { + "name": "lpTlsValue", + "type": "LPVOID" + } + ], + "TlsFree": [ + { + "name": "dwTlsIndex", + "type": "DWORD" + } + ], + "SetProcessValidCallTargets": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "VirtualAddress", + "type": "PVOID" + }, + { + "name": "RegionSize", + "type": "SIZE_T" + }, + { + "name": "NumberOfOffsets", + "type": "ULONG" + }, + { + "name": "OffsetInformation", + "type": "PCFG_CALL_TARGET_INFO" + } + ], + "OpenCommPort": [ + { + "name": "uPortNumber", + "type": "ULONG" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + } + ], + "GetCommPorts": [ + { + "name": "lpPortNumbers", + "type": "PULONG" + }, + { + "name": "uPortNumbersCount", + "type": "ULONG" + }, + { + "name": "puPortNumbersFound", + "type": "PULONG" + } + ], + "CompareObjectHandles": [ + { + "name": "hFirstObjectHandle", + "type": "HANDLE" + }, + { + "name": "hSecondObjectHandle", + "type": "HANDLE" + } + ], + "SleepEx": [ + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "bAlertable", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/ktmw32_dll.json b/qiling/extensions/windows_sdk/defs/ktmw32_dll.json new file mode 100644 index 000000000..00e40e86f --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/ktmw32_dll.json @@ -0,0 +1,512 @@ +{ + "CreateTransaction": [ + { + "name": "lpTransactionAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "UOW", + "type": "LPGUID" + }, + { + "name": "CreateOptions", + "type": "DWORD" + }, + { + "name": "IsolationLevel", + "type": "DWORD" + }, + { + "name": "IsolationFlags", + "type": "DWORD" + }, + { + "name": "Timeout", + "type": "DWORD" + }, + { + "name": "Description", + "type": "LPWSTR" + } + ], + "OpenTransaction": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "TransactionId", + "type": "LPGUID" + } + ], + "CommitTransaction": [ + { + "name": "TransactionHandle", + "type": "HANDLE" + } + ], + "CommitTransactionAsync": [ + { + "name": "TransactionHandle", + "type": "HANDLE" + } + ], + "RollbackTransaction": [ + { + "name": "TransactionHandle", + "type": "HANDLE" + } + ], + "RollbackTransactionAsync": [ + { + "name": "TransactionHandle", + "type": "HANDLE" + } + ], + "GetTransactionId": [ + { + "name": "TransactionHandle", + "type": "HANDLE" + }, + { + "name": "TransactionId", + "type": "LPGUID" + } + ], + "GetTransactionInformation": [ + { + "name": "TransactionHandle", + "type": "HANDLE" + }, + { + "name": "Outcome", + "type": "PDWORD" + }, + { + "name": "IsolationLevel", + "type": "PDWORD" + }, + { + "name": "IsolationFlags", + "type": "PDWORD" + }, + { + "name": "Timeout", + "type": "PDWORD" + }, + { + "name": "BufferLength", + "type": "DWORD" + }, + { + "name": "Description", + "type": "LPWSTR" + } + ], + "SetTransactionInformation": [ + { + "name": "TransactionHandle", + "type": "HANDLE" + }, + { + "name": "IsolationLevel", + "type": "DWORD" + }, + { + "name": "IsolationFlags", + "type": "DWORD" + }, + { + "name": "Timeout", + "type": "DWORD" + }, + { + "name": "Description", + "type": "LPWSTR" + } + ], + "CreateTransactionManager": [ + { + "name": "lpTransactionAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "LogFileName", + "type": "LPWSTR" + }, + { + "name": "CreateOptions", + "type": "ULONG" + }, + { + "name": "CommitStrength", + "type": "ULONG" + } + ], + "OpenTransactionManager": [ + { + "name": "LogFileName", + "type": "LPWSTR" + }, + { + "name": "DesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "OpenOptions", + "type": "ULONG" + } + ], + "OpenTransactionManagerById": [ + { + "name": "TransactionManagerId", + "type": "LPGUID" + }, + { + "name": "DesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "OpenOptions", + "type": "ULONG" + } + ], + "RenameTransactionManager": [ + { + "name": "LogFileName", + "type": "LPWSTR" + }, + { + "name": "ExistingTransactionManagerGuid", + "type": "LPGUID" + } + ], + "RollforwardTransactionManager": [ + { + "name": "TransactionManagerHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "RecoverTransactionManager": [ + { + "name": "TransactionManagerHandle", + "type": "HANDLE" + } + ], + "GetCurrentClockTransactionManager": [ + { + "name": "TransactionManagerHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "GetTransactionManagerId": [ + { + "name": "TransactionManagerHandle", + "type": "HANDLE" + }, + { + "name": "TransactionManagerId", + "type": "LPGUID" + } + ], + "CreateResourceManager": [ + { + "name": "lpResourceManagerAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "ResourceManagerId", + "type": "LPGUID" + }, + { + "name": "CreateOptions", + "type": "DWORD" + }, + { + "name": "TmHandle", + "type": "HANDLE" + }, + { + "name": "Description", + "type": "LPWSTR" + } + ], + "OpenResourceManager": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "TmHandle", + "type": "HANDLE" + }, + { + "name": "ResourceManagerId", + "type": "LPGUID" + } + ], + "RecoverResourceManager": [ + { + "name": "ResourceManagerHandle", + "type": "HANDLE" + } + ], + "GetNotificationResourceManager": [ + { + "name": "ResourceManagerHandle", + "type": "HANDLE" + }, + { + "name": "TransactionNotification", + "type": "PTRANSACTION_NOTIFICATION" + }, + { + "name": "NotificationLength", + "type": "ULONG" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "GetNotificationResourceManagerAsync": [ + { + "name": "ResourceManagerHandle", + "type": "HANDLE" + }, + { + "name": "TransactionNotification", + "type": "PTRANSACTION_NOTIFICATION" + }, + { + "name": "TransactionNotificationLength", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "SetResourceManagerCompletionPort": [ + { + "name": "ResourceManagerHandle", + "type": "HANDLE" + }, + { + "name": "IoCompletionPortHandle", + "type": "HANDLE" + }, + { + "name": "CompletionKey", + "type": "ULONG_PTR" + } + ], + "CreateEnlistment": [ + { + "name": "lpEnlistmentAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "ResourceManagerHandle", + "type": "HANDLE" + }, + { + "name": "TransactionHandle", + "type": "HANDLE" + }, + { + "name": "NotificationMask", + "type": "NOTIFICATION_MASK" + }, + { + "name": "CreateOptions", + "type": "DWORD" + }, + { + "name": "EnlistmentKey", + "type": "PVOID" + } + ], + "OpenEnlistment": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "ResourceManagerHandle", + "type": "HANDLE" + }, + { + "name": "EnlistmentId", + "type": "LPGUID" + } + ], + "RecoverEnlistment": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "EnlistmentKey", + "type": "PVOID" + } + ], + "GetEnlistmentRecoveryInformation": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "BufferSize", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "BufferUsed", + "type": "PULONG" + } + ], + "GetEnlistmentId": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "EnlistmentId", + "type": "LPGUID" + } + ], + "SetEnlistmentRecoveryInformation": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "BufferSize", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "PrepareEnlistment": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "PrePrepareEnlistment": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "CommitEnlistment": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "RollbackEnlistment": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "PrePrepareComplete": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "PrepareComplete": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "ReadOnlyEnlistment": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "CommitComplete": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "RollbackComplete": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "SinglePhaseReject": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/loadperf_dll.json b/qiling/extensions/windows_sdk/defs/loadperf_dll.json new file mode 100644 index 000000000..a627062cc --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/loadperf_dll.json @@ -0,0 +1,70 @@ +{ + "InstallPerfDllW": [ + { + "name": "szComputerName", + "type": "LPCWSTR" + }, + { + "name": "lpIniFile", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "ULONG_PTR" + } + ], + "InstallPerfDllA": [ + { + "name": "szComputerName", + "type": "LPCSTR" + }, + { + "name": "lpIniFile", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "ULONG_PTR" + } + ], + "LoadPerfCounterTextStringsA": [ + { + "name": "lpCommandLine", + "type": "LPSTR" + }, + { + "name": "bQuietModeArg", + "type": "BOOL" + } + ], + "LoadPerfCounterTextStringsW": [ + { + "name": "lpCommandLine", + "type": "LPWSTR" + }, + { + "name": "bQuietModeArg", + "type": "BOOL" + } + ], + "UnloadPerfCounterTextStringsW": [ + { + "name": "lpCommandLine", + "type": "LPWSTR" + }, + { + "name": "bQuietModeArg", + "type": "BOOL" + } + ], + "UnloadPerfCounterTextStringsA": [ + { + "name": "lpCommandLine", + "type": "LPSTR" + }, + { + "name": "bQuietModeArg", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/lz32_dll.json b/qiling/extensions/windows_sdk/defs/lz32_dll.json new file mode 100644 index 000000000..8bc7983cf --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/lz32_dll.json @@ -0,0 +1,100 @@ +{ + "LZCopy": [ + { + "name": "hfSource", + "type": "INT" + }, + { + "name": "hfDest", + "type": "INT" + } + ], + "LZInit": [ + { + "name": "hfSource", + "type": "INT" + } + ], + "GetExpandedNameA": [ + { + "name": "lpszSource", + "type": "LPSTR" + }, + { + "name": "lpszBuffer", + "type": "LPSTR" + } + ], + "GetExpandedNameW": [ + { + "name": "lpszSource", + "type": "LPWSTR" + }, + { + "name": "lpszBuffer", + "type": "LPWSTR" + } + ], + "LZOpenFileA": [ + { + "name": "lpFileName", + "type": "LPSTR" + }, + { + "name": "lpReOpenBuf", + "type": "LPOFSTRUCT" + }, + { + "name": "wStyle", + "type": "WORD" + } + ], + "LZOpenFileW": [ + { + "name": "lpFileName", + "type": "LPWSTR" + }, + { + "name": "lpReOpenBuf", + "type": "LPOFSTRUCT" + }, + { + "name": "wStyle", + "type": "WORD" + } + ], + "LZSeek": [ + { + "name": "hFile", + "type": "INT" + }, + { + "name": "lOffset", + "type": "LONG" + }, + { + "name": "iOrigin", + "type": "INT" + } + ], + "LZRead": [ + { + "name": "hFile", + "type": "INT" + }, + { + "name": "lpBuffer", + "type": "CHAR" + }, + { + "name": "cbRead", + "type": "INT" + } + ], + "LZClose": [ + { + "name": "hFile", + "type": "INT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/mdmregistration_dll.json b/qiling/extensions/windows_sdk/defs/mdmregistration_dll.json new file mode 100644 index 000000000..a2fe164ce --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/mdmregistration_dll.json @@ -0,0 +1,98 @@ +{ + "GetDeviceRegistrationInfo": [ + { + "name": "DeviceInformationClass", + "type": "REGISTRATION_INFORMATION_CLASS" + }, + { + "name": "ppDeviceRegistrationInfo", + "type": "PVOID" + } + ], + "IsDeviceRegisteredWithManagement": [ + { + "name": "pfIsDeviceRegisteredWithManagement", + "type": "BOOL" + }, + { + "name": "cchUPN", + "type": "DWORD" + }, + { + "name": "pszUPN", + "type": "LPWSTR" + } + ], + "IsManagementRegistrationAllowed": [ + { + "name": "pfIsManagementRegistrationAllowed", + "type": "BOOL" + } + ], + "SetManagedExternally": [ + { + "name": "IsManagedExternally", + "type": "BOOL" + } + ], + "DiscoverManagementService": [ + { + "name": "pszUPN", + "type": "LPCWSTR" + }, + { + "name": "ppMgmtInfo", + "type": "PMANAGEMENT_SERVICE_INFO" + } + ], + "RegisterDeviceWithManagementUsingAADCredentials": [ + { + "name": "UserToken", + "type": "HANDLE" + } + ], + "RegisterDeviceWithManagement": [ + { + "name": "pszUPN", + "type": "LPCWSTR" + }, + { + "name": "ppszMDMServiceUri", + "type": "LPCWSTR" + }, + { + "name": "ppzsAccessToken", + "type": "LPCWSTR" + } + ], + "UnregisterDeviceWithManagement": [ + { + "name": "enrollmentID", + "type": "LPCWSTR" + } + ], + "GetManagementAppHyperlink": [ + { + "name": "cchHyperlink", + "type": "DWORD" + }, + { + "name": "pszHyperlink", + "type": "LPWSTR" + } + ], + "DiscoverManagementServiceEx": [ + { + "name": "pszUPN", + "type": "LPCWSTR" + }, + { + "name": "pszDiscoveryServiceCandidate", + "type": "LPCWSTR" + }, + { + "name": "ppMgmtInfo", + "type": "PMANAGEMENT_SERVICE_INFO" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/mf_dll.json b/qiling/extensions/windows_sdk/defs/mf_dll.json new file mode 100644 index 000000000..51fdf25e1 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/mf_dll.json @@ -0,0 +1,690 @@ +{ + "MFCreateASFContentInfo": [ + { + "name": "ppIContentInfo", + "type": "IMFASFContentInfo" + } + ], + "MFCreateASFIndexer": [ + { + "name": "ppIIndexer", + "type": "IMFASFIndexer" + } + ], + "MFCreateASFIndexerByteStream": [ + { + "name": "pIContentByteStream", + "type": "IMFByteStream" + }, + { + "name": "cbIndexStartOffset", + "type": "QWORD" + }, + { + "name": "pIIndexByteStream", + "type": "IMFByteStream" + } + ], + "MFCreateASFSplitter": [ + { + "name": "ppISplitter", + "type": "IMFASFSplitter" + } + ], + "MFCreateASFProfile": [ + { + "name": "ppIProfile", + "type": "IMFASFProfile" + } + ], + "MFCreateASFProfileFromPresentationDescriptor": [ + { + "name": "pIPD", + "type": "IMFPresentationDescriptor" + }, + { + "name": "ppIProfile", + "type": "IMFASFProfile" + } + ], + "MFCreatePresentationDescriptorFromASFProfile": [ + { + "name": "pIProfile", + "type": "IMFASFProfile" + }, + { + "name": "ppIPD", + "type": "IMFPresentationDescriptor" + } + ], + "MFCreateASFMultiplexer": [ + { + "name": "ppIMultiplexer", + "type": "IMFASFMultiplexer" + } + ], + "MFCreateASFStreamSelector": [ + { + "name": "pIASFProfile", + "type": "IMFASFProfile" + }, + { + "name": "ppSelector", + "type": "IMFASFStreamSelector" + } + ], + "MFCreateASFMediaSink": [ + { + "name": "pIByteStream", + "type": "IMFByteStream" + }, + { + "name": "ppIMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateASFMediaSinkActivate": [ + { + "name": "pwszFileName", + "type": "LPCWSTR" + }, + { + "name": "pContentInfo", + "type": "IMFASFContentInfo" + }, + { + "name": "ppIActivate", + "type": "IMFActivate" + } + ], + "MFCreateWMVEncoderActivate": [ + { + "name": "pMediaType", + "type": "IMFMediaType" + }, + { + "name": "pEncodingConfigurationProperties", + "type": "IPropertyStore" + }, + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFCreateWMAEncoderActivate": [ + { + "name": "pMediaType", + "type": "IMFMediaType" + }, + { + "name": "pEncodingConfigurationProperties", + "type": "IPropertyStore" + }, + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFCreateASFStreamingMediaSink": [ + { + "name": "pIByteStream", + "type": "IMFByteStream" + }, + { + "name": "ppIMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateASFStreamingMediaSinkActivate": [ + { + "name": "pByteStreamActivate", + "type": "IMFActivate" + }, + { + "name": "pContentInfo", + "type": "IMFASFContentInfo" + }, + { + "name": "ppIActivate", + "type": "IMFActivate" + } + ], + "MFCreateMediaSession": [ + { + "name": "pConfiguration", + "type": "IMFAttributes" + }, + { + "name": "ppMediaSession", + "type": "IMFMediaSession" + } + ], + "MFCreatePMPMediaSession": [ + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "pConfiguration", + "type": "IMFAttributes" + }, + { + "name": "ppMediaSession", + "type": "IMFMediaSession" + }, + { + "name": "ppEnablerActivate", + "type": "IMFActivate" + } + ], + "MFGetSupportedSchemes": [ + { + "name": "pPropVarSchemeArray", + "type": "PROPVARIANT" + } + ], + "MFGetSupportedMimeTypes": [ + { + "name": "pPropVarMimeTypeArray", + "type": "PROPVARIANT" + } + ], + "MFCreateTopology": [ + { + "name": "ppTopo", + "type": "IMFTopology" + } + ], + "MFCreateTopologyNode": [ + { + "name": "NodeType", + "type": "MF_TOPOLOGY_TYPE" + }, + { + "name": "ppNode", + "type": "IMFTopologyNode" + } + ], + "MFGetTopoNodeCurrentType": [ + { + "name": "pNode", + "type": "IMFTopologyNode" + }, + { + "name": "dwStreamIndex", + "type": "DWORD" + }, + { + "name": "fOutput", + "type": "BOOL" + }, + { + "name": "ppType", + "type": "IMFMediaType" + } + ], + "MFGetService": [ + { + "name": "punkObject", + "type": "IUnknown" + }, + { + "name": "guidService", + "type": "GUID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "LPVOID" + } + ], + "MFCreatePresentationClock": [ + { + "name": "ppPresentationClock", + "type": "IMFPresentationClock" + } + ], + "MFRequireProtectedEnvironment": [ + { + "name": "pPresentationDescriptor", + "type": "IMFPresentationDescriptor" + } + ], + "MFCreateSimpleTypeHandler": [ + { + "name": "ppHandler", + "type": "IMFMediaTypeHandler" + } + ], + "MFShutdownObject": [ + { + "name": "pUnk", + "type": "IUnknown" + } + ], + "MFCreateAudioRenderer": [ + { + "name": "pAudioAttributes", + "type": "IMFAttributes" + }, + { + "name": "ppSink", + "type": "IMFMediaSink" + } + ], + "MFCreateAudioRendererActivate": [ + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFCreateVideoRendererActivate": [ + { + "name": "hwndVideo", + "type": "HWND" + }, + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFCreateMPEG4MediaSink": [ + { + "name": "pIByteStream", + "type": "IMFByteStream" + }, + { + "name": "pVideoMediaType", + "type": "IMFMediaType" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppIMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreate3GPMediaSink": [ + { + "name": "pIByteStream", + "type": "IMFByteStream" + }, + { + "name": "pVideoMediaType", + "type": "IMFMediaType" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppIMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateMP3MediaSink": [ + { + "name": "pTargetByteStream", + "type": "IMFByteStream" + }, + { + "name": "ppMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateAC3MediaSink": [ + { + "name": "pTargetByteStream", + "type": "IMFByteStream" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateADTSMediaSink": [ + { + "name": "pTargetByteStream", + "type": "IMFByteStream" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateMuxSink": [ + { + "name": "guidOutputSubType", + "type": "GUID" + }, + { + "name": "pOutputAttributes", + "type": "IMFAttributes" + }, + { + "name": "pOutputByteStream", + "type": "IMFByteStream" + }, + { + "name": "ppMuxSink", + "type": "IMFMediaSink" + } + ], + "MFCreateFMPEG4MediaSink": [ + { + "name": "pIByteStream", + "type": "IMFByteStream" + }, + { + "name": "pVideoMediaType", + "type": "IMFMediaType" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppIMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateAVIMediaSink": [ + { + "name": "pIByteStream", + "type": "IMFByteStream" + }, + { + "name": "pVideoMediaType", + "type": "IMFMediaType" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppIMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateWAVEMediaSink": [ + { + "name": "pTargetByteStream", + "type": "IMFByteStream" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateTopoLoader": [ + { + "name": "ppObj", + "type": "IMFTopoLoader" + } + ], + "MFCreateSampleGrabberSinkActivate": [ + { + "name": "pIMFMediaType", + "type": "IMFMediaType" + }, + { + "name": "pIMFSampleGrabberSinkCallback", + "type": "IMFSampleGrabberSinkCallback" + }, + { + "name": "ppIActivate", + "type": "IMFActivate" + } + ], + "MFCreateStandardQualityManager": [ + { + "name": "ppQualityManager", + "type": "IMFQualityManager" + } + ], + "MFCreateSequencerSource": [ + { + "name": "pReserved", + "type": "IUnknown" + }, + { + "name": "ppSequencerSource", + "type": "IMFSequencerSource" + } + ], + "MFCreateSequencerSegmentOffset": [ + { + "name": "dwId", + "type": "MFSequencerElementId" + }, + { + "name": "hnsOffset", + "type": "MFTIME" + }, + { + "name": "pvarSegmentOffset", + "type": "PROPVARIANT" + } + ], + "MFCreateAggregateSource": [ + { + "name": "pSourceCollection", + "type": "IMFCollection" + }, + { + "name": "ppAggSource", + "type": "IMFMediaSource" + } + ], + "MFCreateCredentialCache": [ + { + "name": "ppCache", + "type": "IMFNetCredentialCache" + } + ], + "MFCreateProxyLocator": [ + { + "name": "pszProtocol", + "type": "LPCWSTR" + }, + { + "name": "pProxyConfig", + "type": "IPropertyStore" + }, + { + "name": "ppProxyLocator", + "type": "IMFNetProxyLocator" + } + ], + "MFCreateNetSchemePlugin": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvHandler", + "type": "LPVOID" + } + ], + "MFCreatePMPServer": [ + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "ppPMPServer", + "type": "IMFPMPServer" + } + ], + "MFCreateRemoteDesktopPlugin": [ + { + "name": "ppPlugin", + "type": "IMFRemoteDesktopPlugin" + } + ], + "CreateNamedPropertyStore": [ + { + "name": "ppStore", + "type": "INamedPropertyStore" + } + ], + "MFCreateSampleCopierMFT": [ + { + "name": "ppCopierMFT", + "type": "IMFTransform" + } + ], + "MFCreateTranscodeProfile": [ + { + "name": "ppTranscodeProfile", + "type": "IMFTranscodeProfile" + } + ], + "MFCreateTranscodeTopology": [ + { + "name": "pSrc", + "type": "IMFMediaSource" + }, + { + "name": "pwszOutputFilePath", + "type": "LPCWSTR" + }, + { + "name": "pProfile", + "type": "IMFTranscodeProfile" + }, + { + "name": "ppTranscodeTopo", + "type": "IMFTopology" + } + ], + "MFCreateTranscodeTopologyFromByteStream": [ + { + "name": "pSrc", + "type": "IMFMediaSource" + }, + { + "name": "pOutputStream", + "type": "IMFByteStream" + }, + { + "name": "pProfile", + "type": "IMFTranscodeProfile" + }, + { + "name": "ppTranscodeTopo", + "type": "IMFTopology" + } + ], + "MFTranscodeGetAudioOutputAvailableTypes": [ + { + "name": "guidSubType", + "type": "GUID" + }, + { + "name": "dwMFTFlags", + "type": "DWORD" + }, + { + "name": "pCodecConfig", + "type": "IMFAttributes" + }, + { + "name": "ppAvailableTypes", + "type": "IMFCollection" + } + ], + "MFCreateTranscodeSinkActivate": [ + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFEnumDeviceSources": [ + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "pppSourceActivate", + "type": "IMFActivate" + }, + { + "name": "pcSourceActivate", + "type": "UINT32" + } + ], + "MFCreateDeviceSource": [ + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "ppSource", + "type": "IMFMediaSource" + } + ], + "MFCreateDeviceSourceActivate": [ + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFCreateProtectedEnvironmentAccess": [ + { + "name": "ppAccess", + "type": "IMFProtectedEnvironmentAccess" + } + ], + "MFLoadSignedLibrary": [ + { + "name": "pszName", + "type": "LPCWSTR" + }, + { + "name": "ppLib", + "type": "IMFSignedLibrary" + } + ], + "MFGetSystemId": [ + { + "name": "ppId", + "type": "IMFSystemId" + } + ], + "MFGetLocalId": [ + { + "name": "verifier", + "type": "BYTE" + }, + { + "name": "size", + "type": "UINT32" + }, + { + "name": "id", + "type": "LPWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/mfplat_dll.json b/qiling/extensions/windows_sdk/defs/mfplat_dll.json new file mode 100644 index 000000000..7515a77cb --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/mfplat_dll.json @@ -0,0 +1,1902 @@ +{ + "MFStartup": [ + { + "name": "Version", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MFPutWorkItem": [ + { + "name": "dwQueue", + "type": "DWORD" + }, + { + "name": "pCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pState", + "type": "IUnknown" + } + ], + "MFPutWorkItem2": [ + { + "name": "dwQueue", + "type": "DWORD" + }, + { + "name": "Priority", + "type": "LONG" + }, + { + "name": "pCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pState", + "type": "IUnknown" + } + ], + "MFPutWorkItemEx": [ + { + "name": "dwQueue", + "type": "DWORD" + }, + { + "name": "pResult", + "type": "IMFAsyncResult" + } + ], + "MFPutWorkItemEx2": [ + { + "name": "dwQueue", + "type": "DWORD" + }, + { + "name": "Priority", + "type": "LONG" + }, + { + "name": "pResult", + "type": "IMFAsyncResult" + } + ], + "MFPutWaitingWorkItem": [ + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "Priority", + "type": "LONG" + }, + { + "name": "pResult", + "type": "IMFAsyncResult" + }, + { + "name": "pKey", + "type": "MFWORKITEM_KEY" + } + ], + "MFAllocateSerialWorkQueue": [ + { + "name": "dwWorkQueue", + "type": "DWORD" + }, + { + "name": "pdwWorkQueue", + "type": "DWORD" + } + ], + "MFScheduleWorkItemEx": [ + { + "name": "pResult", + "type": "IMFAsyncResult" + }, + { + "name": "Timeout", + "type": "INT64" + }, + { + "name": "pKey", + "type": "MFWORKITEM_KEY" + } + ], + "MFScheduleWorkItem": [ + { + "name": "pCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pState", + "type": "IUnknown" + }, + { + "name": "Timeout", + "type": "INT64" + }, + { + "name": "pKey", + "type": "MFWORKITEM_KEY" + } + ], + "MFCancelWorkItem": [ + { + "name": "Key", + "type": "MFWORKITEM_KEY" + } + ], + "MFGetTimerPeriodicity": [ + { + "name": "Periodicity", + "type": "DWORD" + } + ], + "MFAddPeriodicCallback": [ + { + "name": "Callback", + "type": "MFPERIODICCALLBACK" + }, + { + "name": "pContext", + "type": "IUnknown" + }, + { + "name": "pdwKey", + "type": "DWORD" + } + ], + "MFRemovePeriodicCallback": [ + { + "name": "dwKey", + "type": "DWORD" + } + ], + "MFAllocateWorkQueueEx": [ + { + "name": "WorkQueueType", + "type": "MFASYNC_WORKQUEUE_TYPE" + }, + { + "name": "pdwWorkQueue", + "type": "DWORD" + } + ], + "MFAllocateWorkQueue": [ + { + "name": "pdwWorkQueue", + "type": "DWORD" + } + ], + "MFLockWorkQueue": [ + { + "name": "dwWorkQueue", + "type": "DWORD" + } + ], + "MFUnlockWorkQueue": [ + { + "name": "dwWorkQueue", + "type": "DWORD" + } + ], + "MFBeginRegisterWorkQueueWithMMCSS": [ + { + "name": "dwWorkQueueId", + "type": "DWORD" + }, + { + "name": "wszClass", + "type": "LPCWSTR" + }, + { + "name": "dwTaskId", + "type": "DWORD" + }, + { + "name": "pDoneCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pDoneState", + "type": "IUnknown" + } + ], + "MFBeginRegisterWorkQueueWithMMCSSEx": [ + { + "name": "dwWorkQueueId", + "type": "DWORD" + }, + { + "name": "wszClass", + "type": "LPCWSTR" + }, + { + "name": "dwTaskId", + "type": "DWORD" + }, + { + "name": "lPriority", + "type": "LONG" + }, + { + "name": "pDoneCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pDoneState", + "type": "IUnknown" + } + ], + "MFEndRegisterWorkQueueWithMMCSS": [ + { + "name": "pResult", + "type": "IMFAsyncResult" + }, + { + "name": "pdwTaskId", + "type": "DWORD" + } + ], + "MFBeginUnregisterWorkQueueWithMMCSS": [ + { + "name": "dwWorkQueueId", + "type": "DWORD" + }, + { + "name": "pDoneCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pDoneState", + "type": "IUnknown" + } + ], + "MFEndUnregisterWorkQueueWithMMCSS": [ + { + "name": "pResult", + "type": "IMFAsyncResult" + } + ], + "MFGetWorkQueueMMCSSClass": [ + { + "name": "dwWorkQueueId", + "type": "DWORD" + }, + { + "name": "pwszClass", + "type": "LPWSTR" + }, + { + "name": "pcchClass", + "type": "DWORD" + } + ], + "MFGetWorkQueueMMCSSTaskId": [ + { + "name": "dwWorkQueueId", + "type": "DWORD" + }, + { + "name": "pdwTaskId", + "type": "LPDWORD" + } + ], + "MFRegisterPlatformWithMMCSS": [ + { + "name": "wszClass", + "type": "PCWSTR" + }, + { + "name": "pdwTaskId", + "type": "DWORD" + }, + { + "name": "lPriority", + "type": "LONG" + } + ], + "MFLockSharedWorkQueue": [ + { + "name": "wszClass", + "type": "PCWSTR" + }, + { + "name": "BasePriority", + "type": "LONG" + }, + { + "name": "pdwTaskId", + "type": "DWORD" + }, + { + "name": "pID", + "type": "DWORD" + } + ], + "MFGetWorkQueueMMCSSPriority": [ + { + "name": "dwWorkQueueId", + "type": "DWORD" + }, + { + "name": "lPriority", + "type": "LONG" + } + ], + "MFCreateAsyncResult": [ + { + "name": "punkObject", + "type": "IUnknown" + }, + { + "name": "pCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "punkState", + "type": "IUnknown" + }, + { + "name": "ppAsyncResult", + "type": "IMFAsyncResult" + } + ], + "MFInvokeCallback": [ + { + "name": "pAsyncResult", + "type": "IMFAsyncResult" + } + ], + "MFCreateFile": [ + { + "name": "AccessMode", + "type": "MF_FILE_ACCESSMODE" + }, + { + "name": "OpenMode", + "type": "MF_FILE_OPENMODE" + }, + { + "name": "fFlags", + "type": "MF_FILE_FLAGS" + }, + { + "name": "pwszFileURL", + "type": "LPCWSTR" + }, + { + "name": "ppIByteStream", + "type": "IMFByteStream" + } + ], + "MFCreateTempFile": [ + { + "name": "AccessMode", + "type": "MF_FILE_ACCESSMODE" + }, + { + "name": "OpenMode", + "type": "MF_FILE_OPENMODE" + }, + { + "name": "fFlags", + "type": "MF_FILE_FLAGS" + }, + { + "name": "ppIByteStream", + "type": "IMFByteStream" + } + ], + "MFBeginCreateFile": [ + { + "name": "AccessMode", + "type": "MF_FILE_ACCESSMODE" + }, + { + "name": "OpenMode", + "type": "MF_FILE_OPENMODE" + }, + { + "name": "fFlags", + "type": "MF_FILE_FLAGS" + }, + { + "name": "pwszFilePath", + "type": "LPCWSTR" + }, + { + "name": "pCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pState", + "type": "IUnknown" + }, + { + "name": "ppCancelCookie", + "type": "IUnknown" + } + ], + "MFEndCreateFile": [ + { + "name": "pResult", + "type": "IMFAsyncResult" + }, + { + "name": "ppFile", + "type": "IMFByteStream" + } + ], + "MFCancelCreateFile": [ + { + "name": "pCancelCookie", + "type": "IUnknown" + } + ], + "MFCreateMemoryBuffer": [ + { + "name": "cbMaxLength", + "type": "DWORD" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateMediaBufferWrapper": [ + { + "name": "pBuffer", + "type": "IMFMediaBuffer" + }, + { + "name": "cbOffset", + "type": "DWORD" + }, + { + "name": "dwLength", + "type": "DWORD" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateLegacyMediaBufferOnMFMediaBuffer": [ + { + "name": "pSample", + "type": "IMFSample" + }, + { + "name": "pMFMediaBuffer", + "type": "IMFMediaBuffer" + }, + { + "name": "cbOffset", + "type": "DWORD" + }, + { + "name": "ppMediaBuffer", + "type": "IMediaBuffer" + } + ], + "MFMapDX9FormatToDXGIFormat": [ + { + "name": "dx9", + "type": "DWORD" + } + ], + "MFMapDXGIFormatToDX9Format": [ + { + "name": "dx11", + "type": "DXGI_FORMAT" + } + ], + "MFLockDXGIDeviceManager": [ + { + "name": "pResetToken", + "type": "UINT" + }, + { + "name": "ppManager", + "type": "IMFDXGIDeviceManager" + } + ], + "MFCreateWICBitmapBuffer": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "punkSurface", + "type": "IUnknown" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateDXGISurfaceBuffer": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "punkSurface", + "type": "IUnknown" + }, + { + "name": "uSubresourceIndex", + "type": "UINT" + }, + { + "name": "fBottomUpWhenLinear", + "type": "BOOL" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateVideoSampleAllocatorEx": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppSampleAllocator", + "type": "void" + } + ], + "MFCreateDXGIDeviceManager": [ + { + "name": "resetToken", + "type": "UINT" + }, + { + "name": "ppDeviceManager", + "type": "IMFDXGIDeviceManager" + } + ], + "MFCreateAlignedMemoryBuffer": [ + { + "name": "cbMaxLength", + "type": "DWORD" + }, + { + "name": "cbAligment", + "type": "DWORD" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateMediaEvent": [ + { + "name": "met", + "type": "MediaEventType" + }, + { + "name": "guidExtendedType", + "type": "GUID" + }, + { + "name": "hrStatus", + "type": "HRESULT" + }, + { + "name": "pvValue", + "type": "PROPVARIANT" + }, + { + "name": "ppEvent", + "type": "IMFMediaEvent" + } + ], + "MFCreateEventQueue": [ + { + "name": "ppMediaEventQueue", + "type": "IMFMediaEventQueue" + } + ], + "MFCreateSample": [ + { + "name": "ppIMFSample", + "type": "IMFSample" + } + ], + "MFCreateAttributes": [ + { + "name": "ppMFAttributes", + "type": "IMFAttributes" + }, + { + "name": "cInitialSize", + "type": "UINT32" + } + ], + "MFInitAttributesFromBlob": [ + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "pBuf", + "type": "UINT8" + }, + { + "name": "cbBufSize", + "type": "UINT" + } + ], + "MFGetAttributesAsBlobSize": [ + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "pcbBufSize", + "type": "UINT32" + } + ], + "MFGetAttributesAsBlob": [ + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "pBuf", + "type": "UINT8" + }, + { + "name": "cbBufSize", + "type": "UINT" + } + ], + "MFTRegister": [ + { + "name": "clsidMFT", + "type": "CLSID" + }, + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "pszName", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "cInputTypes", + "type": "UINT32" + }, + { + "name": "pInputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "cOutputTypes", + "type": "UINT32" + }, + { + "name": "pOutputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pAttributes", + "type": "IMFAttributes" + } + ], + "MFTUnregister": [ + { + "name": "clsidMFT", + "type": "CLSID" + } + ], + "MFTRegisterLocal": [ + { + "name": "pClassFactory", + "type": "IClassFactory" + }, + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "pszName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "cInputTypes", + "type": "UINT32" + }, + { + "name": "pInputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "cOutputTypes", + "type": "UINT32" + }, + { + "name": "pOutputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + } + ], + "MFTUnregisterLocal": [ + { + "name": "pClassFactory", + "type": "IClassFactory" + } + ], + "MFTRegisterLocalByCLSID": [ + { + "name": "clisdMFT", + "type": "IID" + }, + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "pszName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "cInputTypes", + "type": "UINT32" + }, + { + "name": "pInputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "cOutputTypes", + "type": "UINT32" + }, + { + "name": "pOutputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + } + ], + "MFTUnregisterLocalByCLSID": [ + { + "name": "clsidMFT", + "type": "CLSID" + } + ], + "MFTEnum": [ + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "pInputType", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pOutputType", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "ppclsidMFT", + "type": "CLSID" + }, + { + "name": "pcMFTs", + "type": "UINT32" + } + ], + "MFTEnumEx": [ + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "pInputType", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pOutputType", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pppMFTActivate", + "type": "IMFActivate" + }, + { + "name": "pnumMFTActivate", + "type": "UINT32" + } + ], + "MFTEnum2": [ + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "pInputType", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pOutputType", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "pppMFTActivate", + "type": "IMFActivate" + }, + { + "name": "pnumMFTActivate", + "type": "UINT32" + } + ], + "MFTGetInfo": [ + { + "name": "clsidMFT", + "type": "CLSID" + }, + { + "name": "pszName", + "type": "LPWSTR" + }, + { + "name": "ppInputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pcInputTypes", + "type": "UINT32" + }, + { + "name": "ppOutputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pcOutputTypes", + "type": "UINT32" + }, + { + "name": "ppAttributes", + "type": "IMFAttributes" + } + ], + "MFGetPluginControl": [ + { + "name": "ppPluginControl", + "type": "IMFPluginControl" + } + ], + "MFGetMFTMerit": [ + { + "name": "pMFT", + "type": "IUnknown" + }, + { + "name": "cbVerifier", + "type": "UINT32" + }, + { + "name": "verifier", + "type": "BYTE" + }, + { + "name": "merit", + "type": "DWORD" + } + ], + "MFRegisterLocalSchemeHandler": [ + { + "name": "szScheme", + "type": "PCWSTR" + }, + { + "name": "pActivate", + "type": "IMFActivate" + } + ], + "MFRegisterLocalByteStreamHandler": [ + { + "name": "szFileExtension", + "type": "PCWSTR" + }, + { + "name": "szMimeType", + "type": "PCWSTR" + }, + { + "name": "pActivate", + "type": "IMFActivate" + } + ], + "MFCreateMFByteStreamWrapper": [ + { + "name": "pStream", + "type": "IMFByteStream" + }, + { + "name": "ppStreamWrapper", + "type": "IMFByteStream" + } + ], + "MFCreateMediaExtensionActivate": [ + { + "name": "szActivatableClassId", + "type": "PCWSTR" + }, + { + "name": "pConfiguration", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "LPVOID" + } + ], + "MFCreateMuxStreamAttributes": [ + { + "name": "pAttributesToMux", + "type": "IMFCollection" + }, + { + "name": "ppMuxAttribs", + "type": "IMFAttributes" + } + ], + "MFCreateMuxStreamMediaType": [ + { + "name": "pMediaTypesToMux", + "type": "IMFCollection" + }, + { + "name": "ppMuxMediaType", + "type": "IMFMediaType" + } + ], + "MFCreateMuxStreamSample": [ + { + "name": "pSamplesToMux", + "type": "IMFCollection" + }, + { + "name": "ppMuxSample", + "type": "IMFSample" + } + ], + "MFValidateMediaTypeSize": [ + { + "name": "FormatType", + "type": "GUID" + }, + { + "name": "pBlock", + "type": "UINT8" + }, + { + "name": "cbSize", + "type": "UINT32" + } + ], + "MFCreateMediaType": [ + { + "name": "ppMFType", + "type": "IMFMediaType" + } + ], + "MFCreateMFVideoFormatFromMFMediaType": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "ppMFVF", + "type": "MFVIDEOFORMAT" + }, + { + "name": "pcbSize", + "type": "UINT32" + } + ], + "MFCreateWaveFormatExFromMFMediaType": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "ppWF", + "type": "WAVEFORMATEX" + }, + { + "name": "pcbSize", + "type": "UINT32" + }, + { + "name": "Flags", + "type": "UINT32" + } + ], + "MFInitMediaTypeFromVideoInfoHeader": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pVIH", + "type": "VIDEOINFOHEADER" + }, + { + "name": "cbBufSize", + "type": "UINT32" + }, + { + "name": "pSubtype", + "type": "GUID" + } + ], + "MFInitMediaTypeFromVideoInfoHeader2": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pVIH2", + "type": "VIDEOINFOHEADER2" + }, + { + "name": "cbBufSize", + "type": "UINT32" + }, + { + "name": "pSubtype", + "type": "GUID" + } + ], + "MFInitMediaTypeFromMPEG1VideoInfo": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pMP1VI", + "type": "MPEG1VIDEOINFO" + }, + { + "name": "cbBufSize", + "type": "UINT32" + }, + { + "name": "pSubtype", + "type": "GUID" + } + ], + "MFInitMediaTypeFromMPEG2VideoInfo": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pMP2VI", + "type": "MPEG2VIDEOINFO" + }, + { + "name": "cbBufSize", + "type": "UINT32" + }, + { + "name": "pSubtype", + "type": "GUID" + } + ], + "MFCalculateBitmapImageSize": [ + { + "name": "pBMIH", + "type": "BITMAPINFOHEADER" + }, + { + "name": "cbBufSize", + "type": "UINT32" + }, + { + "name": "pcbImageSize", + "type": "UINT32" + }, + { + "name": "pbKnown", + "type": "BOOL" + } + ], + "MFCalculateImageSize": [ + { + "name": "guidSubtype", + "type": "GUID" + }, + { + "name": "unWidth", + "type": "UINT32" + }, + { + "name": "unHeight", + "type": "UINT32" + }, + { + "name": "pcbImageSize", + "type": "UINT32" + } + ], + "MFFrameRateToAverageTimePerFrame": [ + { + "name": "unNumerator", + "type": "UINT32" + }, + { + "name": "unDenominator", + "type": "UINT32" + }, + { + "name": "punAverageTimePerFrame", + "type": "UINT64" + } + ], + "MFAverageTimePerFrameToFrameRate": [ + { + "name": "unAverageTimePerFrame", + "type": "UINT64" + }, + { + "name": "punNumerator", + "type": "UINT32" + }, + { + "name": "punDenominator", + "type": "UINT32" + } + ], + "MFInitMediaTypeFromMFVideoFormat": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pMFVF", + "type": "MFVIDEOFORMAT" + }, + { + "name": "cbBufSize", + "type": "UINT32" + } + ], + "MFInitMediaTypeFromWaveFormatEx": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pWaveFormat", + "type": "WAVEFORMATEX" + }, + { + "name": "cbBufSize", + "type": "UINT32" + } + ], + "MFInitMediaTypeFromAMMediaType": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pAMType", + "type": "AM_MEDIA_TYPE" + } + ], + "MFInitAMMediaTypeFromMFMediaType": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "guidFormatBlockType", + "type": "GUID" + }, + { + "name": "pAMType", + "type": "AM_MEDIA_TYPE" + } + ], + "MFCreateAMMediaTypeFromMFMediaType": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "guidFormatBlockType", + "type": "GUID" + }, + { + "name": "ppAMType", + "type": "AM_MEDIA_TYPE" + } + ], + "MFCompareFullToPartialMediaType": [ + { + "name": "pMFTypeFull", + "type": "IMFMediaType" + }, + { + "name": "pMFTypePartial", + "type": "IMFMediaType" + } + ], + "MFWrapMediaType": [ + { + "name": "pOrig", + "type": "IMFMediaType" + }, + { + "name": "MajorType", + "type": "GUID" + }, + { + "name": "SubType", + "type": "GUID" + }, + { + "name": "ppWrap", + "type": "IMFMediaType" + } + ], + "MFUnwrapMediaType": [ + { + "name": "pWrap", + "type": "IMFMediaType" + }, + { + "name": "ppOrig", + "type": "IMFMediaType" + } + ], + "MFCreateVideoMediaType": [ + { + "name": "pVideoFormat", + "type": "MFVIDEOFORMAT" + }, + { + "name": "ppIVideoMediaType", + "type": "IMFVideoMediaType" + } + ], + "MFCreateVideoMediaTypeFromSubtype": [ + { + "name": "pAMSubtype", + "type": "GUID" + }, + { + "name": "ppIVideoMediaType", + "type": "IMFVideoMediaType" + } + ], + "MFCreateVideoMediaTypeFromBitMapInfoHeader": [ + { + "name": "pbmihBitMapInfoHeader", + "type": "BITMAPINFOHEADER" + }, + { + "name": "dwPixelAspectRatioX", + "type": "DWORD" + }, + { + "name": "dwPixelAspectRatioY", + "type": "DWORD" + }, + { + "name": "InterlaceMode", + "type": "MFVideoInterlaceMode" + }, + { + "name": "VideoFlags", + "type": "QWORD" + }, + { + "name": "qwFramesPerSecondNumerator", + "type": "QWORD" + }, + { + "name": "qwFramesPerSecondDenominator", + "type": "QWORD" + }, + { + "name": "dwMaxBitRate", + "type": "DWORD" + }, + { + "name": "ppIVideoMediaType", + "type": "IMFVideoMediaType" + } + ], + "MFGetStrideForBitmapInfoHeader": [ + { + "name": "format", + "type": "DWORD" + }, + { + "name": "dwWidth", + "type": "DWORD" + }, + { + "name": "pStride", + "type": "LONG" + } + ], + "MFGetPlaneSize": [ + { + "name": "format", + "type": "DWORD" + }, + { + "name": "dwWidth", + "type": "DWORD" + }, + { + "name": "dwHeight", + "type": "DWORD" + }, + { + "name": "pdwPlaneSize", + "type": "DWORD" + } + ], + "MFCreateVideoMediaTypeFromBitMapInfoHeaderEx": [ + { + "name": "pbmihBitMapInfoHeader", + "type": "BITMAPINFOHEADER" + }, + { + "name": "cbBitMapInfoHeader", + "type": "UINT32" + }, + { + "name": "dwPixelAspectRatioX", + "type": "DWORD" + }, + { + "name": "dwPixelAspectRatioY", + "type": "DWORD" + }, + { + "name": "InterlaceMode", + "type": "MFVideoInterlaceMode" + }, + { + "name": "VideoFlags", + "type": "QWORD" + }, + { + "name": "dwFramesPerSecondNumerator", + "type": "DWORD" + }, + { + "name": "dwFramesPerSecondDenominator", + "type": "DWORD" + }, + { + "name": "dwMaxBitRate", + "type": "DWORD" + }, + { + "name": "ppIVideoMediaType", + "type": "IMFVideoMediaType" + } + ], + "MFCreateMediaTypeFromRepresentation": [ + { + "name": "guidRepresentation", + "type": "GUID" + }, + { + "name": "pvRepresentation", + "type": "LPVOID" + }, + { + "name": "ppIMediaType", + "type": "IMFMediaType" + } + ], + "MFCreateAudioMediaType": [ + { + "name": "pAudioFormat", + "type": "WAVEFORMATEX" + }, + { + "name": "ppIAudioMediaType", + "type": "IMFAudioMediaType" + } + ], + "MFGetUncompressedVideoFormat": [ + { + "name": "pVideoFormat", + "type": "MFVIDEOFORMAT" + } + ], + "MFInitVideoFormat": [ + { + "name": "pVideoFormat", + "type": "MFVIDEOFORMAT" + }, + { + "name": "type", + "type": "MFStandardVideoFormat" + } + ], + "MFInitVideoFormat_RGB": [ + { + "name": "pVideoFormat", + "type": "MFVIDEOFORMAT" + }, + { + "name": "dwWidth", + "type": "DWORD" + }, + { + "name": "dwHeight", + "type": "DWORD" + }, + { + "name": "D3Dfmt", + "type": "DWORD" + } + ], + "MFConvertColorInfoToDXVA": [ + { + "name": "pdwToDXVA", + "type": "DWORD" + }, + { + "name": "pFromFormat", + "type": "MFVIDEOFORMAT" + } + ], + "MFConvertColorInfoFromDXVA": [ + { + "name": "pToFormat", + "type": "MFVIDEOFORMAT" + }, + { + "name": "dwFromDXVA", + "type": "DWORD" + } + ], + "MFCopyImage": [ + { + "name": "pDest", + "type": "BYTE" + }, + { + "name": "lDestStride", + "type": "LONG" + }, + { + "name": "pSrc", + "type": "BYTE" + }, + { + "name": "lSrcStride", + "type": "LONG" + }, + { + "name": "dwWidthInBytes", + "type": "DWORD" + }, + { + "name": "dwLines", + "type": "DWORD" + } + ], + "MFConvertFromFP16Array": [ + { + "name": "pDest", + "type": "float" + }, + { + "name": "pSrc", + "type": "WORD" + }, + { + "name": "dwCount", + "type": "DWORD" + } + ], + "MFConvertToFP16Array": [ + { + "name": "pDest", + "type": "WORD" + }, + { + "name": "pSrc", + "type": "float" + }, + { + "name": "dwCount", + "type": "DWORD" + } + ], + "MFCreate2DMediaBuffer": [ + { + "name": "dwWidth", + "type": "DWORD" + }, + { + "name": "dwHeight", + "type": "DWORD" + }, + { + "name": "dwFourCC", + "type": "DWORD" + }, + { + "name": "fBottomUp", + "type": "BOOL" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateMediaBufferFromMediaType": [ + { + "name": "pMediaType", + "type": "IMFMediaType" + }, + { + "name": "llDuration", + "type": "LONGLONG" + }, + { + "name": "dwMinLength", + "type": "DWORD" + }, + { + "name": "dwMinAlignment", + "type": "DWORD" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFHeapFree": [ + { + "name": "pv", + "type": "void" + } + ], + "MFllMulDiv": [ + { + "name": "a", + "type": "LONGLONG" + }, + { + "name": "b", + "type": "LONGLONG" + }, + { + "name": "c", + "type": "LONGLONG" + }, + { + "name": "d", + "type": "LONGLONG" + } + ], + "MFGetContentProtectionSystemCLSID": [ + { + "name": "guidProtectionSystemID", + "type": "GUID" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "MFCombineSamples": [ + { + "name": "pSample", + "type": "IMFSample" + }, + { + "name": "pSampleToAdd", + "type": "IMFSample" + }, + { + "name": "dwMaxMergedDurationInMS", + "type": "DWORD" + }, + { + "name": "pMerged", + "type": "BOOL" + } + ], + "MFSplitSample": [ + { + "name": "pSample", + "type": "IMFSample" + }, + { + "name": "pOutputSamples", + "type": "IMFSample" + }, + { + "name": "dwOutputSampleMaxCount", + "type": "DWORD" + }, + { + "name": "pdwOutputSampleCount", + "type": "DWORD" + } + ], + "MFCreateTransformActivate": [ + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFSerializeAttributesToStream": [ + { + "name": "pAttr", + "type": "IMFAttributes" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "pStm", + "type": "IStream" + } + ], + "MFDeserializeAttributesFromStream": [ + { + "name": "pAttr", + "type": "IMFAttributes" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "pStm", + "type": "IStream" + } + ], + "MFCreateSourceResolver": [ + { + "name": "ppISourceResolver", + "type": "IMFSourceResolver" + } + ], + "CreatePropertyStore": [ + { + "name": "ppStore", + "type": "IPropertyStore" + } + ], + "MFCreateSystemTimeSource": [ + { + "name": "ppSystemTimeSource", + "type": "IMFPresentationTimeSource" + } + ], + "MFCreatePresentationDescriptor": [ + { + "name": "cStreamDescriptors", + "type": "DWORD" + }, + { + "name": "apStreamDescriptors", + "type": "IMFStreamDescriptor" + }, + { + "name": "ppPresentationDescriptor", + "type": "IMFPresentationDescriptor" + } + ], + "MFSerializePresentationDescriptor": [ + { + "name": "pPD", + "type": "IMFPresentationDescriptor" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "ppbData", + "type": "BYTE" + } + ], + "MFDeserializePresentationDescriptor": [ + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "ppPD", + "type": "IMFPresentationDescriptor" + } + ], + "MFCreateStreamDescriptor": [ + { + "name": "dwStreamIdentifier", + "type": "DWORD" + }, + { + "name": "cMediaTypes", + "type": "DWORD" + }, + { + "name": "apMediaTypes", + "type": "IMFMediaType" + }, + { + "name": "ppDescriptor", + "type": "IMFStreamDescriptor" + } + ], + "MFCreateTrackedSample": [ + { + "name": "ppMFSample", + "type": "IMFTrackedSample" + } + ], + "MFCreateMFByteStreamOnStream": [ + { + "name": "pStream", + "type": "IStream" + }, + { + "name": "ppByteStream", + "type": "IMFByteStream" + } + ], + "MFCreateStreamOnMFByteStream": [ + { + "name": "pByteStream", + "type": "IMFByteStream" + }, + { + "name": "ppStream", + "type": "IStream" + } + ], + "MFCreateMFByteStreamOnStreamEx": [ + { + "name": "punkStream", + "type": "IUnknown" + }, + { + "name": "ppByteStream", + "type": "IMFByteStream" + } + ], + "MFCreateStreamOnMFByteStreamEx": [ + { + "name": "pByteStream", + "type": "IMFByteStream" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "MFCreateMediaTypeFromProperties": [ + { + "name": "punkStream", + "type": "IUnknown" + }, + { + "name": "ppMediaType", + "type": "IMFMediaType" + } + ], + "MFCreatePropertiesFromMediaType": [ + { + "name": "pMediaType", + "type": "IMFMediaType" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "MFCreateContentProtectionDevice": [ + { + "name": "ProtectionSystemId", + "type": "GUID" + }, + { + "name": "ContentProtectionDevice", + "type": "IMFContentProtectionDevice" + } + ], + "MFIsContentProtectionDeviceSupported": [ + { + "name": "ProtectionSystemId", + "type": "GUID" + }, + { + "name": "isSupported", + "type": "BOOL" + } + ], + "MFCreateContentDecryptorContext": [ + { + "name": "guidMediaProtectionSystemId", + "type": "GUID" + }, + { + "name": "pD3DManager", + "type": "IMFDXGIDeviceManager" + }, + { + "name": "pContentProtectionDevice", + "type": "IMFContentProtectionDevice" + }, + { + "name": "ppContentDecryptorContext", + "type": "IMFContentDecryptorContext" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/mfplay_dll.json b/qiling/extensions/windows_sdk/defs/mfplay_dll.json new file mode 100644 index 000000000..f99ff35af --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/mfplay_dll.json @@ -0,0 +1,28 @@ +{ + "MFPCreateMediaPlayer": [ + { + "name": "pwszURL", + "type": "LPCWSTR" + }, + { + "name": "fStartPlayback", + "type": "BOOL" + }, + { + "name": "creationOptions", + "type": "MFP_CREATION_OPTIONS" + }, + { + "name": "pCallback", + "type": "IMFPMediaPlayerCallback" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "ppMediaPlayer", + "type": "IMFPMediaPlayer" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/mfsensorgroup_dll.json b/qiling/extensions/windows_sdk/defs/mfsensorgroup_dll.json new file mode 100644 index 000000000..c11c8edfc --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/mfsensorgroup_dll.json @@ -0,0 +1,26 @@ +{ + "MFCreateSensorProfile": [ + { + "name": "ProfileType", + "type": "GUID" + }, + { + "name": "ProfileIndex", + "type": "UINT32" + }, + { + "name": "Constraints", + "type": "LPCWSTR" + }, + { + "name": "ppProfile", + "type": "IMFSensorProfile" + } + ], + "MFCreateSensorProfileCollection": [ + { + "name": "ppSensorProfile", + "type": "IMFSensorProfileCollection" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/mfsensorgroup_lib.json b/qiling/extensions/windows_sdk/defs/mfsensorgroup_lib.json new file mode 100644 index 000000000..40aded6a1 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/mfsensorgroup_lib.json @@ -0,0 +1,12 @@ +{ + "MFCreateSensorActivityMonitor": [ + { + "name": "pCallback", + "type": "IMFSensorActivitiesReportCallback" + }, + { + "name": "ppActivityMonitor", + "type": "IMFSensorActivityMonitor" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/mgmtapi_dll.json b/qiling/extensions/windows_sdk/defs/mgmtapi_dll.json new file mode 100644 index 000000000..743235792 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/mgmtapi_dll.json @@ -0,0 +1,164 @@ +{ + "SnmpMgrOpen": [ + { + "name": "lpAgentAddress", + "type": "LPSTR" + }, + { + "name": "lpAgentCommunity", + "type": "LPSTR" + }, + { + "name": "nTimeOut", + "type": "INT" + }, + { + "name": "nRetries", + "type": "INT" + } + ], + "SnmpMgrCtl": [ + { + "name": "session", + "type": "LPSNMP_MGR_SESSION" + }, + { + "name": "dwCtlCode", + "type": "DWORD" + }, + { + "name": "lpvInBuffer", + "type": "LPVOID" + }, + { + "name": "cbInBuffer", + "type": "DWORD" + }, + { + "name": "lpvOUTBuffer", + "type": "LPVOID" + }, + { + "name": "cbOUTBuffer", + "type": "DWORD" + }, + { + "name": "lpcbBytesReturned", + "type": "LPDWORD" + } + ], + "SnmpMgrClose": [ + { + "name": "session", + "type": "LPSNMP_MGR_SESSION" + } + ], + "SnmpMgrRequest": [ + { + "name": "session", + "type": "LPSNMP_MGR_SESSION" + }, + { + "name": "requestType", + "type": "BYTE" + }, + { + "name": "variableBindings", + "type": "SnmpVarBindList" + }, + { + "name": "errorStatus", + "type": "AsnInteger32" + }, + { + "name": "errorIndex", + "type": "AsnInteger32" + } + ], + "SnmpMgrStrToOid": [ + { + "name": "string", + "type": "LPSTR" + }, + { + "name": "oid", + "type": "AsnObjectIdentifier" + } + ], + "SnmpMgrOidToStr": [ + { + "name": "oid", + "type": "AsnObjectIdentifier" + }, + { + "name": "string", + "type": "LPSTR" + } + ], + "SnmpMgrTrapListen": [ + { + "name": "phTrapAvailable", + "type": "HANDLE" + } + ], + "SnmpMgrGetTrap": [ + { + "name": "enterprise", + "type": "AsnObjectIdentifier" + }, + { + "name": "IPAddress", + "type": "AsnNetworkAddress" + }, + { + "name": "genericTrap", + "type": "AsnInteger32" + }, + { + "name": "specificTrap", + "type": "AsnInteger32" + }, + { + "name": "timeStamp", + "type": "AsnTimeticks" + }, + { + "name": "variableBindings", + "type": "SnmpVarBindList" + } + ], + "SnmpMgrGetTrapEx": [ + { + "name": "enterprise", + "type": "AsnObjectIdentifier" + }, + { + "name": "agentAddress", + "type": "AsnNetworkAddress" + }, + { + "name": "sourceAddress", + "type": "AsnNetworkAddress" + }, + { + "name": "genericTrap", + "type": "AsnInteger32" + }, + { + "name": "specificTrap", + "type": "AsnInteger32" + }, + { + "name": "community", + "type": "AsnOctetString" + }, + { + "name": "timeStamp", + "type": "AsnTimeticks" + }, + { + "name": "variableBindings", + "type": "SnmpVarBindList" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/mi_dll.json b/qiling/extensions/windows_sdk/defs/mi_dll.json new file mode 100644 index 000000000..e0b57759d --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/mi_dll.json @@ -0,0 +1,62 @@ +{ + "MI_Application_InitializeV1": [ + { + "name": "flags", + "type": "MI_Uint32" + }, + { + "name": "applicationID", + "type": "MI_Char" + }, + { + "name": "extendedError", + "type": "MI_Instance" + }, + { + "name": "application", + "type": "MI_Application" + } + ], + "MI_Application_NewClass": [ + { + "name": "application", + "type": "MI_Application" + }, + { + "name": "classDecl", + "type": "MI_ClassDecl" + }, + { + "name": "namespaceName", + "type": "MI_Char" + }, + { + "name": "serverName", + "type": "MI_Char" + }, + { + "name": "classObject", + "type": "MI_Class" + } + ], + "MI_OperationOptions_SetResourceUri": [ + { + "name": "options", + "type": "MI_OperationOptions" + }, + { + "name": "rUri", + "type": "MI_Char" + } + ], + "MI_OperationOptions_GetResourceUri": [ + { + "name": "options", + "type": "MI_OperationOptions" + }, + { + "name": "rUri", + "type": "MI_Char" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/mmdevapi_dll.json b/qiling/extensions/windows_sdk/defs/mmdevapi_dll.json new file mode 100644 index 000000000..3d0299ecf --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/mmdevapi_dll.json @@ -0,0 +1,24 @@ +{ + "ActivateAudioInterfaceAsync": [ + { + "name": "deviceInterfacePath", + "type": "LPCWSTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "activationParams", + "type": "PROPVARIANT" + }, + { + "name": "completionHandler", + "type": "IActivateAudioInterfaceCompletionHandler" + }, + { + "name": "activationOperation", + "type": "IActivateAudioInterfaceAsyncOperation" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/mmtasksignal_dll.json b/qiling/extensions/windows_sdk/defs/mmtasksignal_dll.json new file mode 100644 index 000000000..c88ffcc0e --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/mmtasksignal_dll.json @@ -0,0 +1,8 @@ +{ + "mmTaskSignal": [ + { + "name": "h", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/mpclient_dll.json b/qiling/extensions/windows_sdk/defs/mpclient_dll.json new file mode 100644 index 000000000..408d2886f --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/mpclient_dll.json @@ -0,0 +1,14 @@ +{ + "WDStatus": [ + { + "name": "pfEnabled", + "type": "BOOL" + } + ], + "WDEnable": [ + { + "name": "fEnable", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/mpr_dll.json b/qiling/extensions/windows_sdk/defs/mpr_dll.json new file mode 100644 index 000000000..ea382fc6b --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/mpr_dll.json @@ -0,0 +1,638 @@ +{ + "WNetAddConnectionA": [ + { + "name": "lpRemoteName", + "type": "LPCSTR" + }, + { + "name": "lpPassword", + "type": "LPCSTR" + }, + { + "name": "lpLocalName", + "type": "LPCSTR" + } + ], + "WNetAddConnectionW": [ + { + "name": "lpRemoteName", + "type": "LPCWSTR" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + }, + { + "name": "lpLocalName", + "type": "LPCWSTR" + } + ], + "WNetAddConnection2A": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lpPassword", + "type": "LPCSTR" + }, + { + "name": "lpUserName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WNetAddConnection2W": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + }, + { + "name": "lpUserName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WNetAddConnection3A": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lpPassword", + "type": "LPCSTR" + }, + { + "name": "lpUserName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WNetAddConnection3W": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + }, + { + "name": "lpUserName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WNetCancelConnectionA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "fForce", + "type": "BOOL" + } + ], + "WNetCancelConnectionW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "fForce", + "type": "BOOL" + } + ], + "WNetCancelConnection2A": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "fForce", + "type": "BOOL" + } + ], + "WNetCancelConnection2W": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "fForce", + "type": "BOOL" + } + ], + "WNetGetConnectionA": [ + { + "name": "lpLocalName", + "type": "LPCSTR" + }, + { + "name": "lpRemoteName", + "type": "LPSTR" + }, + { + "name": "lpnLength", + "type": "LPDWORD" + } + ], + "WNetGetConnectionW": [ + { + "name": "lpLocalName", + "type": "LPCWSTR" + }, + { + "name": "lpRemoteName", + "type": "LPWSTR" + }, + { + "name": "lpnLength", + "type": "LPDWORD" + } + ], + "WNetUseConnectionA": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lpPassword", + "type": "LPCSTR" + }, + { + "name": "lpUserId", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpAccessName", + "type": "LPSTR" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpResult", + "type": "LPDWORD" + } + ], + "WNetUseConnectionW": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + }, + { + "name": "lpUserId", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpAccessName", + "type": "LPWSTR" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpResult", + "type": "LPDWORD" + } + ], + "WNetConnectionDialog": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "WNetDisconnectDialog": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "WNetConnectionDialog1A": [ + { + "name": "lpConnDlgStruct", + "type": "LPCONNECTDLGSTRUCTA" + } + ], + "WNetConnectionDialog1W": [ + { + "name": "lpConnDlgStruct", + "type": "LPCONNECTDLGSTRUCTW" + } + ], + "WNetDisconnectDialog1A": [ + { + "name": "lpConnDlgStruct", + "type": "LPDISCDLGSTRUCTA" + } + ], + "WNetDisconnectDialog1W": [ + { + "name": "lpConnDlgStruct", + "type": "LPDISCDLGSTRUCTW" + } + ], + "WNetOpenEnumA": [ + { + "name": "dwScope", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwUsage", + "type": "DWORD" + }, + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lphEnum", + "type": "LPHANDLE" + } + ], + "WNetOpenEnumW": [ + { + "name": "dwScope", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwUsage", + "type": "DWORD" + }, + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lphEnum", + "type": "LPHANDLE" + } + ], + "WNetEnumResourceA": [ + { + "name": "hEnum", + "type": "HANDLE" + }, + { + "name": "lpcCount", + "type": "LPDWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + } + ], + "WNetEnumResourceW": [ + { + "name": "hEnum", + "type": "HANDLE" + }, + { + "name": "lpcCount", + "type": "LPDWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + } + ], + "WNetCloseEnum": [ + { + "name": "hEnum", + "type": "HANDLE" + } + ], + "WNetGetResourceParentA": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpcbBuffer", + "type": "LPDWORD" + } + ], + "WNetGetResourceParentW": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpcbBuffer", + "type": "LPDWORD" + } + ], + "WNetGetResourceInformationA": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpcbBuffer", + "type": "LPDWORD" + }, + { + "name": "lplpSystem", + "type": "LPSTR" + } + ], + "WNetGetResourceInformationW": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpcbBuffer", + "type": "LPDWORD" + }, + { + "name": "lplpSystem", + "type": "LPWSTR" + } + ], + "WNetGetUniversalNameA": [ + { + "name": "lpLocalPath", + "type": "LPCSTR" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + } + ], + "WNetGetUniversalNameW": [ + { + "name": "lpLocalPath", + "type": "LPCWSTR" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + } + ], + "WNetGetUserA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpUserName", + "type": "LPSTR" + }, + { + "name": "lpnLength", + "type": "LPDWORD" + } + ], + "WNetGetUserW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpUserName", + "type": "LPWSTR" + }, + { + "name": "lpnLength", + "type": "LPDWORD" + } + ], + "WNetGetProviderNameA": [ + { + "name": "dwNetType", + "type": "DWORD" + }, + { + "name": "lpProviderName", + "type": "LPSTR" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + } + ], + "WNetGetProviderNameW": [ + { + "name": "dwNetType", + "type": "DWORD" + }, + { + "name": "lpProviderName", + "type": "LPWSTR" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + } + ], + "WNetGetNetworkInformationA": [ + { + "name": "lpProvider", + "type": "LPCSTR" + }, + { + "name": "lpNetInfoStruct", + "type": "LPNETINFOSTRUCT" + } + ], + "WNetGetNetworkInformationW": [ + { + "name": "lpProvider", + "type": "LPCWSTR" + }, + { + "name": "lpNetInfoStruct", + "type": "LPNETINFOSTRUCT" + } + ], + "WNetGetLastErrorA": [ + { + "name": "lpError", + "type": "LPDWORD" + }, + { + "name": "lpErrorBuf", + "type": "LPSTR" + }, + { + "name": "nErrorBufSize", + "type": "DWORD" + }, + { + "name": "lpNameBuf", + "type": "LPSTR" + }, + { + "name": "nNameBufSize", + "type": "DWORD" + } + ], + "WNetGetLastErrorW": [ + { + "name": "lpError", + "type": "LPDWORD" + }, + { + "name": "lpErrorBuf", + "type": "LPWSTR" + }, + { + "name": "nErrorBufSize", + "type": "DWORD" + }, + { + "name": "lpNameBuf", + "type": "LPWSTR" + }, + { + "name": "nNameBufSize", + "type": "DWORD" + } + ], + "MultinetGetConnectionPerformanceA": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lpNetConnectInfoStruct", + "type": "LPNETCONNECTINFOSTRUCT" + } + ], + "MultinetGetConnectionPerformanceW": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lpNetConnectInfoStruct", + "type": "LPNETCONNECTINFOSTRUCT" + } + ], + "WNetSetLastErrorA": [ + { + "name": "err", + "type": "DWORD" + }, + { + "name": "lpError", + "type": "LPSTR" + }, + { + "name": "lpProviders", + "type": "LPSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/mprapi_dll.json b/qiling/extensions/windows_sdk/defs/mprapi_dll.json new file mode 100644 index 000000000..aa39cf989 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/mprapi_dll.json @@ -0,0 +1,1930 @@ +{ + "MprAdminConnectionEnumEx": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "pObjectHeader", + "type": "PMPRAPI_OBJECT_HEADER" + }, + { + "name": "dwPreferedMaxLen", + "type": "DWORD" + }, + { + "name": "lpdwEntriesRead", + "type": "LPDWORD" + }, + { + "name": "lpdwTotalEntries", + "type": "LPDWORD" + }, + { + "name": "ppRasConn", + "type": "PRAS_CONNECTION_EX" + }, + { + "name": "lpdwResumeHandle", + "type": "LPDWORD" + } + ], + "MprAdminConnectionGetInfoEx": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "hRasConnection", + "type": "HANDLE" + }, + { + "name": "pRasConnection", + "type": "PRAS_CONNECTION_EX" + } + ], + "MprAdminServerGetInfoEx": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "pServerInfo", + "type": "MPR_SERVER_EX1" + } + ], + "MprAdminServerSetInfoEx": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "pServerInfo", + "type": "MPR_SERVER_SET_CONFIG_EX1" + } + ], + "MprConfigServerGetInfoEx": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "pServerInfo", + "type": "MPR_SERVER_EX1" + } + ], + "MprConfigServerSetInfoEx": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "pSetServerConfig", + "type": "MPR_SERVER_SET_CONFIG_EX1" + } + ], + "MprAdminIsServiceInitialized": [ + { + "name": "lpwsServerName", + "type": "LPWSTR" + }, + { + "name": "fIsServiceInitialized", + "type": "BOOL" + } + ], + "MprAdminInterfaceSetCustomInfoEx": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "pCustomInfo", + "type": "PMPR_IF_CUSTOMINFOEX2" + } + ], + "MprAdminInterfaceGetCustomInfoEx": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "pCustomInfo", + "type": "PMPR_IF_CUSTOMINFOEX2" + } + ], + "MprConfigInterfaceGetCustomInfoEx": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "pCustomInfo", + "type": "PMPR_IF_CUSTOMINFOEX2" + } + ], + "MprConfigInterfaceSetCustomInfoEx": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "pCustomInfo", + "type": "PMPR_IF_CUSTOMINFOEX2" + } + ], + "MprAdminConnectionEnum": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + }, + { + "name": "dwPrefMaxLen", + "type": "DWORD" + }, + { + "name": "lpdwEntriesRead", + "type": "LPDWORD" + }, + { + "name": "lpdwTotalEntries", + "type": "LPDWORD" + }, + { + "name": "lpdwResumeHandle", + "type": "LPDWORD" + } + ], + "MprAdminPortEnum": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "hRasConnection", + "type": "HANDLE" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + }, + { + "name": "dwPrefMaxLen", + "type": "DWORD" + }, + { + "name": "lpdwEntriesRead", + "type": "LPDWORD" + }, + { + "name": "lpdwTotalEntries", + "type": "LPDWORD" + }, + { + "name": "lpdwResumeHandle", + "type": "LPDWORD" + } + ], + "MprAdminConnectionGetInfo": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "hRasConnection", + "type": "HANDLE" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminPortGetInfo": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "hPort", + "type": "HANDLE" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminConnectionClearStats": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "hRasConnection", + "type": "HANDLE" + } + ], + "MprAdminPortClearStats": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "hPort", + "type": "HANDLE" + } + ], + "MprAdminPortReset": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "hPort", + "type": "HANDLE" + } + ], + "MprAdminPortDisconnect": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "hPort", + "type": "HANDLE" + } + ], + "MprAdminConnectionRemoveQuarantine": [ + { + "name": "hRasServer", + "type": "HANDLE" + }, + { + "name": "hRasConnection", + "type": "HANDLE" + }, + { + "name": "fIsIpAddress", + "type": "BOOL" + } + ], + "MprAdminUserGetInfo": [ + { + "name": "lpszServer", + "type": "LPCWSTR" + }, + { + "name": "lpszUser", + "type": "LPCWSTR" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminUserSetInfo": [ + { + "name": "lpszServer", + "type": "LPCWSTR" + }, + { + "name": "lpszUser", + "type": "LPCWSTR" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminSendUserMessage": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hConnection", + "type": "HANDLE" + }, + { + "name": "lpwszMessage", + "type": "LPWSTR" + } + ], + "MprAdminGetPDCServer": [ + { + "name": "lpszDomain", + "type": "LPCWSTR" + }, + { + "name": "lpszServer", + "type": "LPCWSTR" + }, + { + "name": "lpszPDCServer", + "type": "LPWSTR" + } + ], + "MprAdminIsServiceRunning": [ + { + "name": "lpwsServerName", + "type": "LPWSTR" + } + ], + "MprAdminServerConnect": [ + { + "name": "lpwsServerName", + "type": "LPWSTR" + }, + { + "name": "phMprServer", + "type": "MPR_SERVER_HANDLE" + } + ], + "MprAdminServerDisconnect": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + } + ], + "MprAdminServerGetCredentials": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminServerSetCredentials": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminBufferFree": [ + { + "name": "pBuffer", + "type": "LPVOID" + } + ], + "MprAdminGetErrorString": [ + { + "name": "dwError", + "type": "DWORD" + }, + { + "name": "lplpwsErrorString", + "type": "LPWSTR" + } + ], + "MprAdminServerGetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminServerSetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminEstablishDomainRasServer": [ + { + "name": "pszDomain", + "type": "LPWSTR" + }, + { + "name": "pszMachine", + "type": "LPWSTR" + }, + { + "name": "bEnable", + "type": "BOOL" + } + ], + "MprAdminIsDomainRasServer": [ + { + "name": "pszDomain", + "type": "LPWSTR" + }, + { + "name": "pszMachine", + "type": "LPWSTR" + }, + { + "name": "pbIsRasServer", + "type": "PBOOL" + } + ], + "MprAdminTransportCreate": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "lpwsTransportName", + "type": "LPWSTR" + }, + { + "name": "pGlobalInfo", + "type": "LPBYTE" + }, + { + "name": "dwGlobalInfoSize", + "type": "DWORD" + }, + { + "name": "pClientInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "dwClientInterfaceInfoSize", + "type": "DWORD" + }, + { + "name": "lpwsDLLPath", + "type": "LPWSTR" + } + ], + "MprAdminTransportSetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "pGlobalInfo", + "type": "LPBYTE" + }, + { + "name": "dwGlobalInfoSize", + "type": "DWORD" + }, + { + "name": "pClientInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "dwClientInterfaceInfoSize", + "type": "DWORD" + } + ], + "MprAdminTransportGetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "ppGlobalInfo", + "type": "LPBYTE" + }, + { + "name": "lpdwGlobalInfoSize", + "type": "LPDWORD" + }, + { + "name": "ppClientInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "lpdwClientInterfaceInfoSize", + "type": "LPDWORD" + } + ], + "MprAdminDeviceEnum": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + }, + { + "name": "lpdwTotalEntries", + "type": "LPDWORD" + } + ], + "MprAdminInterfaceGetHandle": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "lpwsInterfaceName", + "type": "LPWSTR" + }, + { + "name": "phInterface", + "type": "HANDLE" + }, + { + "name": "fIncludeClientInterfaces", + "type": "BOOL" + } + ], + "MprAdminInterfaceCreate": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + }, + { + "name": "phInterface", + "type": "HANDLE" + } + ], + "MprAdminInterfaceGetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminInterfaceSetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminInterfaceDelete": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + } + ], + "MprAdminInterfaceDeviceGetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpBuffer", + "type": "LPBYTE" + } + ], + "MprAdminInterfaceDeviceSetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminInterfaceTransportRemove": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + } + ], + "MprAdminInterfaceTransportAdd": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "pInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "dwInterfaceInfoSize", + "type": "DWORD" + } + ], + "MprAdminInterfaceTransportGetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "ppInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "lpdwInterfaceInfoSize", + "type": "LPDWORD" + } + ], + "MprAdminInterfaceTransportSetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "pInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "dwInterfaceInfoSize", + "type": "DWORD" + } + ], + "MprAdminInterfaceEnum": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + }, + { + "name": "dwPrefMaxLen", + "type": "DWORD" + }, + { + "name": "lpdwEntriesRead", + "type": "LPDWORD" + }, + { + "name": "lpdwTotalEntries", + "type": "LPDWORD" + }, + { + "name": "lpdwResumeHandle", + "type": "LPDWORD" + } + ], + "MprAdminInterfaceSetCredentials": [ + { + "name": "lpwsServer", + "type": "LPWSTR" + }, + { + "name": "lpwsInterfaceName", + "type": "LPWSTR" + }, + { + "name": "lpwsUserName", + "type": "LPWSTR" + }, + { + "name": "lpwsDomainName", + "type": "LPWSTR" + }, + { + "name": "lpwsPassword", + "type": "LPWSTR" + } + ], + "MprAdminInterfaceGetCredentials": [ + { + "name": "lpwsServer", + "type": "LPWSTR" + }, + { + "name": "lpwsInterfaceName", + "type": "LPWSTR" + }, + { + "name": "lpwsUserName", + "type": "LPWSTR" + }, + { + "name": "lpwsPassword", + "type": "LPWSTR" + }, + { + "name": "lpwsDomainName", + "type": "LPWSTR" + } + ], + "MprAdminInterfaceSetCredentialsEx": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminInterfaceGetCredentialsEx": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminInterfaceConnect": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "fSynchronous", + "type": "BOOL" + } + ], + "MprAdminInterfaceDisconnect": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + } + ], + "MprAdminInterfaceUpdateRoutes": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwProtocolId", + "type": "DWORD" + }, + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "MprAdminInterfaceQueryUpdateResult": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwProtocolId", + "type": "DWORD" + }, + { + "name": "lpdwUpdateResult", + "type": "LPDWORD" + } + ], + "MprAdminInterfaceUpdatePhonebookInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + } + ], + "MprAdminRegisterConnectionNotification": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hEventNotification", + "type": "HANDLE" + } + ], + "MprAdminDeregisterConnectionNotification": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hEventNotification", + "type": "HANDLE" + } + ], + "MprAdminMIBServerConnect": [ + { + "name": "lpwsServerName", + "type": "LPWSTR" + }, + { + "name": "phMibServer", + "type": "MIB_SERVER_HANDLE" + } + ], + "MprAdminMIBServerDisconnect": [ + { + "name": "hMibServer", + "type": "MIB_SERVER_HANDLE" + } + ], + "MprAdminMIBEntryCreate": [ + { + "name": "hMibServer", + "type": "MIB_SERVER_HANDLE" + }, + { + "name": "dwPid", + "type": "DWORD" + }, + { + "name": "dwRoutingPid", + "type": "DWORD" + }, + { + "name": "lpEntry", + "type": "LPVOID" + }, + { + "name": "dwEntrySize", + "type": "DWORD" + } + ], + "MprAdminMIBEntryDelete": [ + { + "name": "hMibServer", + "type": "MIB_SERVER_HANDLE" + }, + { + "name": "dwProtocolId", + "type": "DWORD" + }, + { + "name": "dwRoutingPid", + "type": "DWORD" + }, + { + "name": "lpEntry", + "type": "LPVOID" + }, + { + "name": "dwEntrySize", + "type": "DWORD" + } + ], + "MprAdminMIBEntrySet": [ + { + "name": "hMibServer", + "type": "MIB_SERVER_HANDLE" + }, + { + "name": "dwProtocolId", + "type": "DWORD" + }, + { + "name": "dwRoutingPid", + "type": "DWORD" + }, + { + "name": "lpEntry", + "type": "LPVOID" + }, + { + "name": "dwEntrySize", + "type": "DWORD" + } + ], + "MprAdminMIBEntryGet": [ + { + "name": "hMibServer", + "type": "MIB_SERVER_HANDLE" + }, + { + "name": "dwProtocolId", + "type": "DWORD" + }, + { + "name": "dwRoutingPid", + "type": "DWORD" + }, + { + "name": "lpInEntry", + "type": "LPVOID" + }, + { + "name": "dwInEntrySize", + "type": "DWORD" + }, + { + "name": "lplpOutEntry", + "type": "LPVOID" + }, + { + "name": "lpOutEntrySize", + "type": "LPDWORD" + } + ], + "MprAdminMIBEntryGetFirst": [ + { + "name": "hMibServer", + "type": "MIB_SERVER_HANDLE" + }, + { + "name": "dwProtocolId", + "type": "DWORD" + }, + { + "name": "dwRoutingPid", + "type": "DWORD" + }, + { + "name": "lpInEntry", + "type": "LPVOID" + }, + { + "name": "dwInEntrySize", + "type": "DWORD" + }, + { + "name": "lplpOutEntry", + "type": "LPVOID" + }, + { + "name": "lpOutEntrySize", + "type": "LPDWORD" + } + ], + "MprAdminMIBEntryGetNext": [ + { + "name": "hMibServer", + "type": "MIB_SERVER_HANDLE" + }, + { + "name": "dwProtocolId", + "type": "DWORD" + }, + { + "name": "dwRoutingPid", + "type": "DWORD" + }, + { + "name": "lpInEntry", + "type": "LPVOID" + }, + { + "name": "dwInEntrySize", + "type": "DWORD" + }, + { + "name": "lplpOutEntry", + "type": "LPVOID" + }, + { + "name": "lpOutEntrySize", + "type": "LPDWORD" + } + ], + "MprAdminMIBGetTrapInfo": [ + { + "name": "hMibServer", + "type": "MIB_SERVER_HANDLE" + }, + { + "name": "dwProtocolId", + "type": "DWORD" + }, + { + "name": "dwRoutingPid", + "type": "DWORD" + }, + { + "name": "lpInData", + "type": "LPVOID" + }, + { + "name": "dwInDataSize", + "type": "DWORD" + }, + { + "name": "lplpOutData", + "type": "LPVOID" + }, + { + "name": "lpOutDataSize", + "type": "LPDWORD" + } + ], + "MprAdminMIBSetTrapInfo": [ + { + "name": "dwProtocolId", + "type": "DWORD" + }, + { + "name": "dwRoutingPid", + "type": "DWORD" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "lpInData", + "type": "LPVOID" + }, + { + "name": "dwInDataSize", + "type": "DWORD" + }, + { + "name": "lplpOutData", + "type": "LPVOID" + }, + { + "name": "lpOutDataSize", + "type": "LPDWORD" + } + ], + "MprAdminMIBBufferFree": [ + { + "name": "pBuffer", + "type": "LPVOID" + } + ], + "MprConfigServerInstall": [ + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "PVOID" + } + ], + "MprConfigServerConnect": [ + { + "name": "lpwsServerName", + "type": "LPWSTR" + }, + { + "name": "phMprConfig", + "type": "HANDLE" + } + ], + "MprConfigServerDisconnect": [ + { + "name": "hMprConfig", + "type": "HANDLE" + } + ], + "MprConfigBufferFree": [ + { + "name": "pBuffer", + "type": "LPVOID" + } + ], + "MprConfigServerGetInfo": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + } + ], + "MprConfigServerSetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + } + ], + "MprConfigServerBackup": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "lpwsPath", + "type": "LPWSTR" + } + ], + "MprConfigServerRestore": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "lpwsPath", + "type": "LPWSTR" + } + ], + "MprConfigTransportCreate": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "lpwsTransportName", + "type": "LPWSTR" + }, + { + "name": "pGlobalInfo", + "type": "LPBYTE" + }, + { + "name": "dwGlobalInfoSize", + "type": "DWORD" + }, + { + "name": "pClientInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "dwClientInterfaceInfoSize", + "type": "DWORD" + }, + { + "name": "lpwsDLLPath", + "type": "LPWSTR" + }, + { + "name": "phRouterTransport", + "type": "HANDLE" + } + ], + "MprConfigTransportDelete": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterTransport", + "type": "HANDLE" + } + ], + "MprConfigTransportGetHandle": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "phRouterTransport", + "type": "HANDLE" + } + ], + "MprConfigTransportSetInfo": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterTransport", + "type": "HANDLE" + }, + { + "name": "pGlobalInfo", + "type": "LPBYTE" + }, + { + "name": "dwGlobalInfoSize", + "type": "DWORD" + }, + { + "name": "pClientInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "dwClientInterfaceInfoSize", + "type": "DWORD" + }, + { + "name": "lpwsDLLPath", + "type": "LPWSTR" + } + ], + "MprConfigTransportGetInfo": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterTransport", + "type": "HANDLE" + }, + { + "name": "ppGlobalInfo", + "type": "LPBYTE" + }, + { + "name": "lpdwGlobalInfoSize", + "type": "LPDWORD" + }, + { + "name": "ppClientInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "lpdwClientInterfaceInfoSize", + "type": "LPDWORD" + }, + { + "name": "lplpwsDLLPath", + "type": "LPWSTR" + } + ], + "MprConfigTransportEnum": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpBuffer", + "type": "LPBYTE" + }, + { + "name": "dwPrefMaxLen", + "type": "DWORD" + }, + { + "name": "lpdwEntriesRead", + "type": "LPDWORD" + }, + { + "name": "lpdwTotalEntries", + "type": "LPDWORD" + }, + { + "name": "lpdwResumeHandle", + "type": "LPDWORD" + } + ], + "MprConfigInterfaceCreate": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + }, + { + "name": "phRouterInterface", + "type": "HANDLE" + } + ], + "MprConfigInterfaceDelete": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + } + ], + "MprConfigInterfaceGetHandle": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "lpwsInterfaceName", + "type": "LPWSTR" + }, + { + "name": "phRouterInterface", + "type": "HANDLE" + } + ], + "MprConfigInterfaceGetInfo": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpBuffer", + "type": "LPBYTE" + }, + { + "name": "lpdwBufferSize", + "type": "LPDWORD" + } + ], + "MprConfigInterfaceSetInfo": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + } + ], + "MprConfigInterfaceEnum": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpBuffer", + "type": "LPBYTE" + }, + { + "name": "dwPrefMaxLen", + "type": "DWORD" + }, + { + "name": "lpdwEntriesRead", + "type": "LPDWORD" + }, + { + "name": "lpdwTotalEntries", + "type": "LPDWORD" + }, + { + "name": "lpdwResumeHandle", + "type": "LPDWORD" + } + ], + "MprConfigInterfaceTransportAdd": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "lpwsTransportName", + "type": "LPWSTR" + }, + { + "name": "pInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "dwInterfaceInfoSize", + "type": "DWORD" + }, + { + "name": "phRouterIfTransport", + "type": "HANDLE" + } + ], + "MprConfigInterfaceTransportRemove": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "hRouterIfTransport", + "type": "HANDLE" + } + ], + "MprConfigInterfaceTransportGetHandle": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "phRouterIfTransport", + "type": "HANDLE" + } + ], + "MprConfigInterfaceTransportGetInfo": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "hRouterIfTransport", + "type": "HANDLE" + }, + { + "name": "ppInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "lpdwInterfaceInfoSize", + "type": "LPDWORD" + } + ], + "MprConfigInterfaceTransportSetInfo": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "hRouterIfTransport", + "type": "HANDLE" + }, + { + "name": "pInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "dwInterfaceInfoSize", + "type": "DWORD" + } + ], + "MprConfigInterfaceTransportEnum": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpBuffer", + "type": "LPBYTE" + }, + { + "name": "dwPrefMaxLen", + "type": "DWORD" + }, + { + "name": "lpdwEntriesRead", + "type": "LPDWORD" + }, + { + "name": "lpdwTotalEntries", + "type": "LPDWORD" + }, + { + "name": "lpdwResumeHandle", + "type": "LPDWORD" + } + ], + "MprConfigGetFriendlyName": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "pszGuidName", + "type": "PWSTR" + }, + { + "name": "pszBuffer", + "type": "PWCHAR" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + } + ], + "MprConfigGetGuidName": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "pszFriendlyName", + "type": "PWSTR" + }, + { + "name": "pszBuffer", + "type": "PWCHAR" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + } + ], + "MprConfigFilterGetInfo": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + } + ], + "MprConfigFilterSetInfo": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + } + ], + "MprInfoCreate": [ + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "lplpNewHeader", + "type": "LPVOID" + } + ], + "MprInfoDelete": [ + { + "name": "lpHeader", + "type": "LPVOID" + } + ], + "MprInfoRemoveAll": [ + { + "name": "lpHeader", + "type": "LPVOID" + }, + { + "name": "lplpNewHeader", + "type": "LPVOID" + } + ], + "MprInfoDuplicate": [ + { + "name": "lpHeader", + "type": "LPVOID" + }, + { + "name": "lplpNewHeader", + "type": "LPVOID" + } + ], + "MprInfoBlockAdd": [ + { + "name": "lpHeader", + "type": "LPVOID" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "dwItemSize", + "type": "DWORD" + }, + { + "name": "dwItemCount", + "type": "DWORD" + }, + { + "name": "lpItemData", + "type": "LPBYTE" + }, + { + "name": "lplpNewHeader", + "type": "LPVOID" + } + ], + "MprInfoBlockRemove": [ + { + "name": "lpHeader", + "type": "LPVOID" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "lplpNewHeader", + "type": "LPVOID" + } + ], + "MprInfoBlockSet": [ + { + "name": "lpHeader", + "type": "LPVOID" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "dwItemSize", + "type": "DWORD" + }, + { + "name": "dwItemCount", + "type": "DWORD" + }, + { + "name": "lpItemData", + "type": "LPBYTE" + }, + { + "name": "lplpNewHeader", + "type": "LPVOID" + } + ], + "MprInfoBlockFind": [ + { + "name": "lpHeader", + "type": "LPVOID" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "lpdwItemSize", + "type": "LPDWORD" + }, + { + "name": "lpdwItemCount", + "type": "LPDWORD" + }, + { + "name": "lplpItemData", + "type": "LPBYTE" + } + ], + "MprInfoBlockQuerySize": [ + { + "name": "lpHeader", + "type": "LPVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/mrmsupport_dll.json b/qiling/extensions/windows_sdk/defs/mrmsupport_dll.json new file mode 100644 index 000000000..37da7de14 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/mrmsupport_dll.json @@ -0,0 +1,58 @@ +{ + "CreateResourceIndexer": [ + { + "name": "projectRoot", + "type": "PCWSTR" + }, + { + "name": "extensionDllPath", + "type": "PCWSTR" + }, + { + "name": "ppResourceIndexer", + "type": "PVOID" + } + ], + "DestroyResourceIndexer": [ + { + "name": "resourceIndexer", + "type": "PVOID" + } + ], + "IndexFilePath": [ + { + "name": "resourceIndexer", + "type": "PVOID" + }, + { + "name": "filePath", + "type": "PCWSTR" + }, + { + "name": "ppResourceUri", + "type": "PWSTR" + }, + { + "name": "pQualifierCount", + "type": "ULONG" + }, + { + "name": "ppQualifiers", + "type": "IndexedResourceQualifier" + } + ], + "DestroyIndexedResults": [ + { + "name": "resourceUri", + "type": "PWSTR" + }, + { + "name": "qualifierCount", + "type": "ULONG" + }, + { + "name": "qualifiers", + "type": "IndexedResourceQualifier" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/msajapi_dll.json b/qiling/extensions/windows_sdk/defs/msajapi_dll.json new file mode 100644 index 000000000..74c0cdb1d --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/msajapi_dll.json @@ -0,0 +1,86 @@ +{ + "AllJoynConnectToBus": [ + { + "name": "connectionSpec", + "type": "PCWSTR" + } + ], + "AllJoynCloseBusHandle": [ + { + "name": "busHandle", + "type": "HANDLE" + } + ], + "AllJoynSendToBus": [ + { + "name": "connectedBusHandle", + "type": "HANDLE" + }, + { + "name": "buffer", + "type": "void" + }, + { + "name": "bytesToWrite", + "type": "DWORD" + }, + { + "name": "bytesTransferred", + "type": "PDWORD" + }, + { + "name": "reserved", + "type": "PVOID" + } + ], + "AllJoynReceiveFromBus": [ + { + "name": "connectedBusHandle", + "type": "HANDLE" + }, + { + "name": "buffer", + "type": "PVOID" + }, + { + "name": "bytesToRead", + "type": "DWORD" + }, + { + "name": "bytesTransferred", + "type": "PDWORD" + }, + { + "name": "reserved", + "type": "PVOID" + } + ], + "AllJoynEventSelect": [ + { + "name": "connectedBusHandle", + "type": "HANDLE" + }, + { + "name": "eventHandle", + "type": "HANDLE" + }, + { + "name": "eventTypes", + "type": "DWORD" + } + ], + "AllJoynEnumEvents": [ + { + "name": "connectedBusHandle", + "type": "HANDLE" + }, + { + "name": "eventToReset", + "type": "HANDLE" + }, + { + "name": "eventTypes", + "type": "PDWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/msctf_dll.json b/qiling/extensions/windows_sdk/defs/msctf_dll.json new file mode 100644 index 000000000..c9c8baeaa --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/msctf_dll.json @@ -0,0 +1,120 @@ +{ + "TF_CreateThreadMgr": [ + { + "name": "pptim", + "type": "ITfThreadMgr" + } + ], + "TF_GetThreadMgr": [ + { + "name": "pptim", + "type": "ITfThreadMgr" + } + ], + "TF_CreateInputProcessorProfiles": [ + { + "name": "ppipr", + "type": "ITfInputProcessorProfiles" + } + ], + "TF_CreateDisplayAttributeMgr": [ + { + "name": "ppdam", + "type": "ITfDisplayAttributeMgr" + } + ], + "TF_CreateLangBarMgr": [ + { + "name": "pppbm", + "type": "ITfLangBarMgr" + } + ], + "TF_CreateLangBarItemMgr": [ + { + "name": "pplbim", + "type": "ITfLangBarItemMgr" + } + ], + "TF_CreateCategoryMgr": [ + { + "name": "ppcat", + "type": "ITfCategoryMgr" + } + ], + "SetInputScope": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "inputscope", + "type": "InputScope" + } + ], + "SetInputScopes": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pInputScopes", + "type": "InputScope" + }, + { + "name": "cInputScopes", + "type": "UINT" + }, + { + "name": "ppszPhraseList", + "type": "PWSTR" + }, + { + "name": "cPhrases", + "type": "UINT" + }, + { + "name": "pszRegExp", + "type": "PWSTR" + }, + { + "name": "pszSRGS", + "type": "PWSTR" + } + ], + "SetInputScopeXML": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszXML", + "type": "PWSTR" + } + ], + "SetInputScopes2": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pInputScopes", + "type": "InputScope" + }, + { + "name": "cInputScopes", + "type": "UINT" + }, + { + "name": "pEnumString", + "type": "IEnumString" + }, + { + "name": "pszRegExp", + "type": "PWSTR" + }, + { + "name": "pszSRGS", + "type": "PWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/msdmo_dll.json b/qiling/extensions/windows_sdk/defs/msdmo_dll.json new file mode 100644 index 000000000..7041908b3 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/msdmo_dll.json @@ -0,0 +1,116 @@ +{ + "DMORegister": [ + { + "name": "szName", + "type": "LPCWSTR" + }, + { + "name": "clsidDMO", + "type": "IID" + }, + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "cInTypes", + "type": "DWORD" + }, + { + "name": "pInTypes", + "type": "DMO_PARTIAL_MEDIATYPE" + }, + { + "name": "cOutTypes", + "type": "DWORD" + }, + { + "name": "pOutTypes", + "type": "DMO_PARTIAL_MEDIATYPE" + } + ], + "DMOUnregister": [ + { + "name": "clsidDMO", + "type": "IID" + }, + { + "name": "guidCategory", + "type": "GUID" + } + ], + "DMOEnum": [ + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "cInTypes", + "type": "DWORD" + }, + { + "name": "pInTypes", + "type": "DMO_PARTIAL_MEDIATYPE" + }, + { + "name": "cOutTypes", + "type": "DWORD" + }, + { + "name": "pOutTypes", + "type": "DMO_PARTIAL_MEDIATYPE" + }, + { + "name": "ppEnum", + "type": "IEnumDMO" + } + ], + "DMOGetTypes": [ + { + "name": "clsidDMO", + "type": "IID" + }, + { + "name": "ulInputTypesRequested", + "type": "unsigned long" + }, + { + "name": "pulInputTypesSupplied", + "type": "unsigned long" + }, + { + "name": "pInputTypes", + "type": "DMO_PARTIAL_MEDIATYPE" + }, + { + "name": "ulOutputTypesRequested", + "type": "unsigned long" + }, + { + "name": "pulOutputTypesSupplied", + "type": "unsigned long" + }, + { + "name": "pOutputTypes", + "type": "DMO_PARTIAL_MEDIATYPE" + } + ], + "DMOGetName": [ + { + "name": "clsidDMO", + "type": "IID" + }, + { + "name": "szName", + "type": "WCHAR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/msdrm_dll.json b/qiling/extensions/windows_sdk/defs/msdrm_dll.json new file mode 100644 index 000000000..3af8c2556 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/msdrm_dll.json @@ -0,0 +1,1732 @@ +{ + "DRMSetGlobalOptions": [ + { + "name": "eGlobalOptions", + "type": "DRMGLOBALOPTIONS" + }, + { + "name": "pvdata", + "type": "LPVOID" + }, + { + "name": "dwlen", + "type": "DWORD" + } + ], + "DRMGetClientVersion": [ + { + "name": "pDRMClientVersionInfo", + "type": "DRM_CLIENT_VERSION_INFO" + } + ], + "DRMInitEnvironment": [ + { + "name": "eSecurityProviderType", + "type": "DRMSECURITYPROVIDERTYPE" + }, + { + "name": "eSpecification", + "type": "DRMSPECTYPE" + }, + { + "name": "wszSecurityProvider", + "type": "PWSTR" + }, + { + "name": "wszManifestCredentials", + "type": "PWSTR" + }, + { + "name": "wszMachineCredentials", + "type": "PWSTR" + }, + { + "name": "phEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "phDefaultLibrary", + "type": "DRMHANDLE" + } + ], + "DRMLoadLibrary": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "eSpecification", + "type": "DRMSPECTYPE" + }, + { + "name": "wszLibraryProvider", + "type": "PWSTR" + }, + { + "name": "wszCredentials", + "type": "PWSTR" + }, + { + "name": "phLibrary", + "type": "DRMHANDLE" + } + ], + "DRMCreateEnablingPrincipal": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "hLibrary", + "type": "DRMHANDLE" + }, + { + "name": "wszObject", + "type": "PWSTR" + }, + { + "name": "pidPrincipal", + "type": "DRMID" + }, + { + "name": "wszCredentials", + "type": "PWSTR" + }, + { + "name": "phEnablingPrincipal", + "type": "DRMHANDLE" + } + ], + "DRMCloseHandle": [ + { + "name": "handle", + "type": "DRMHANDLE" + } + ], + "DRMCloseEnvironmentHandle": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + } + ], + "DRMDuplicateHandle": [ + { + "name": "hToCopy", + "type": "DRMHANDLE" + }, + { + "name": "phCopy", + "type": "DRMHANDLE" + } + ], + "DRMDuplicateEnvironmentHandle": [ + { + "name": "hToCopy", + "type": "DRMENVHANDLE" + }, + { + "name": "phCopy", + "type": "DRMENVHANDLE" + } + ], + "DRMRegisterRevocationList": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "wszRevocationList", + "type": "PWSTR" + } + ], + "DRMCheckSecurity": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "cLevel", + "type": "UINT" + } + ], + "DRMRegisterContent": [ + { + "name": "fRegister", + "type": "BOOL" + } + ], + "DRMEncrypt": [ + { + "name": "hCryptoProvider", + "type": "DRMHANDLE" + }, + { + "name": "iPosition", + "type": "UINT" + }, + { + "name": "cNumInBytes", + "type": "UINT" + }, + { + "name": "pbInData", + "type": "BYTE" + }, + { + "name": "pcNumOutBytes", + "type": "UINT" + }, + { + "name": "pbOutData", + "type": "BYTE" + } + ], + "DRMDecrypt": [ + { + "name": "hCryptoProvider", + "type": "DRMHANDLE" + }, + { + "name": "iPosition", + "type": "UINT" + }, + { + "name": "cNumInBytes", + "type": "UINT" + }, + { + "name": "pbInData", + "type": "BYTE" + }, + { + "name": "pcNumOutBytes", + "type": "UINT" + }, + { + "name": "pbOutData", + "type": "BYTE" + } + ], + "DRMCreateBoundLicense": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "pParams", + "type": "DRMBOUNDLICENSEPARAMS" + }, + { + "name": "wszLicenseChain", + "type": "PWSTR" + }, + { + "name": "phBoundLicense", + "type": "DRMHANDLE" + }, + { + "name": "phErrorLog", + "type": "DRMHANDLE" + } + ], + "DRMCreateEnablingBitsDecryptor": [ + { + "name": "hBoundLicense", + "type": "DRMHANDLE" + }, + { + "name": "wszRight", + "type": "PWSTR" + }, + { + "name": "hAuxLib", + "type": "DRMHANDLE" + }, + { + "name": "wszAuxPlug", + "type": "PWSTR" + }, + { + "name": "phDecryptor", + "type": "DRMHANDLE" + } + ], + "DRMCreateEnablingBitsEncryptor": [ + { + "name": "hBoundLicense", + "type": "DRMHANDLE" + }, + { + "name": "wszRight", + "type": "PWSTR" + }, + { + "name": "hAuxLib", + "type": "DRMHANDLE" + }, + { + "name": "wszAuxPlug", + "type": "PWSTR" + }, + { + "name": "phEncryptor", + "type": "DRMHANDLE" + } + ], + "DRMAttest": [ + { + "name": "hEnablingPrincipal", + "type": "DRMHANDLE" + }, + { + "name": "wszData", + "type": "PWSTR" + }, + { + "name": "eType", + "type": "DRMATTESTTYPE" + }, + { + "name": "pcAttestedBlob", + "type": "UINT" + }, + { + "name": "wszAttestedBlob", + "type": "PWSTR" + } + ], + "DRMGetTime": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "eTimerIdType", + "type": "DRMTIMETYPE" + }, + { + "name": "poTimeObject", + "type": "SYSTEMTIME" + } + ], + "DRMGetInfo": [ + { + "name": "handle", + "type": "DRMHANDLE" + }, + { + "name": "wszAttribute", + "type": "PWSTR" + }, + { + "name": "peEncoding", + "type": "DRMENCODINGTYPE" + }, + { + "name": "pcBuffer", + "type": "UINT" + }, + { + "name": "pbBuffer", + "type": "BYTE" + } + ], + "DRMGetEnvironmentInfo": [ + { + "name": "handle", + "type": "DRMENVHANDLE" + }, + { + "name": "wszAttribute", + "type": "PWSTR" + }, + { + "name": "peEncoding", + "type": "DRMENCODINGTYPE" + }, + { + "name": "pcBuffer", + "type": "UINT" + }, + { + "name": "pbBuffer", + "type": "BYTE" + } + ], + "DRMGetProcAddress": [ + { + "name": "hLibrary", + "type": "DRMHANDLE" + }, + { + "name": "wszProcName", + "type": "PWSTR" + }, + { + "name": "ppfnProcAddress", + "type": "FARPROC" + } + ], + "DRMGetBoundLicenseObjectCount": [ + { + "name": "hQueryRoot", + "type": "DRMHANDLE" + }, + { + "name": "wszSubObjectType", + "type": "PWSTR" + }, + { + "name": "pcSubObjects", + "type": "UINT" + } + ], + "DRMGetBoundLicenseObject": [ + { + "name": "hQueryRoot", + "type": "DRMHANDLE" + }, + { + "name": "wszSubObjectType", + "type": "PWSTR" + }, + { + "name": "iWhich", + "type": "UINT" + }, + { + "name": "phSubObject", + "type": "DRMHANDLE" + } + ], + "DRMGetBoundLicenseAttributeCount": [ + { + "name": "hQueryRoot", + "type": "DRMHANDLE" + }, + { + "name": "wszAttribute", + "type": "PWSTR" + }, + { + "name": "pcAttributes", + "type": "UINT" + } + ], + "DRMGetBoundLicenseAttribute": [ + { + "name": "hQueryRoot", + "type": "DRMHANDLE" + }, + { + "name": "wszAttribute", + "type": "PWSTR" + }, + { + "name": "iWhich", + "type": "UINT" + }, + { + "name": "peEncoding", + "type": "DRMENCODINGTYPE" + }, + { + "name": "pcBuffer", + "type": "UINT" + }, + { + "name": "pbBuffer", + "type": "BYTE" + } + ], + "DRMCreateClientSession": [ + { + "name": "pfnCallback", + "type": "DRMCALLBACK" + }, + { + "name": "uCallbackVersion", + "type": "UINT" + }, + { + "name": "wszGroupIDProviderType", + "type": "PWSTR" + }, + { + "name": "wszGroupID", + "type": "PWSTR" + }, + { + "name": "phClient", + "type": "DRMHSESSION" + } + ], + "DRMIsActivated": [ + { + "name": "hClient", + "type": "DRMHSESSION" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "pActServInfo", + "type": "DRM_ACTSERV_INFO" + } + ], + "DRMActivate": [ + { + "name": "hClient", + "type": "DRMHSESSION" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uLangID", + "type": "UINT" + }, + { + "name": "pActServInfo", + "type": "DRM_ACTSERV_INFO" + }, + { + "name": "pvContext", + "type": "void" + }, + { + "name": "hParentWnd", + "type": "HWND" + } + ], + "DRMGetServiceLocation": [ + { + "name": "hClient", + "type": "DRMHSESSION" + }, + { + "name": "uServiceType", + "type": "UINT" + }, + { + "name": "uServiceLocation", + "type": "UINT" + }, + { + "name": "wszIssuanceLicense", + "type": "PWSTR" + }, + { + "name": "puServiceURLLength", + "type": "UINT" + }, + { + "name": "wszServiceURL", + "type": "PWSTR" + } + ], + "DRMCreateLicenseStorageSession": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "hDefaultLibrary", + "type": "DRMHANDLE" + }, + { + "name": "hClient", + "type": "DRMHSESSION" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "wszIssuanceLicense", + "type": "PWSTR" + }, + { + "name": "phLicenseStorage", + "type": "DRMHSESSION" + } + ], + "DRMAddLicense": [ + { + "name": "hLicenseStorage", + "type": "DRMHSESSION" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "wszLicense", + "type": "PWSTR" + } + ], + "DRMAcquireAdvisories": [ + { + "name": "hLicenseStorage", + "type": "DRMHSESSION" + }, + { + "name": "wszLicense", + "type": "PWSTR" + }, + { + "name": "wszURL", + "type": "PWSTR" + }, + { + "name": "pvContext", + "type": "void" + } + ], + "DRMEnumerateLicense": [ + { + "name": "hSession", + "type": "DRMHSESSION" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIndex", + "type": "UINT" + }, + { + "name": "pfSharedFlag", + "type": "BOOL" + }, + { + "name": "puCertificateDataLen", + "type": "UINT" + }, + { + "name": "wszCertificateData", + "type": "PWSTR" + } + ], + "DRMAcquireLicense": [ + { + "name": "hSession", + "type": "DRMHSESSION" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "wszGroupIdentityCredential", + "type": "PWSTR" + }, + { + "name": "wszRequestedRights", + "type": "PWSTR" + }, + { + "name": "wszCustomData", + "type": "PWSTR" + }, + { + "name": "wszURL", + "type": "PWSTR" + }, + { + "name": "pvContext", + "type": "void" + } + ], + "DRMDeleteLicense": [ + { + "name": "hSession", + "type": "DRMHSESSION" + }, + { + "name": "wszLicenseId", + "type": "PWSTR" + } + ], + "DRMCloseSession": [ + { + "name": "hSession", + "type": "DRMHSESSION" + } + ], + "DRMDuplicateSession": [ + { + "name": "hSessionIn", + "type": "DRMHSESSION" + }, + { + "name": "phSessionOut", + "type": "DRMHSESSION" + } + ], + "DRMGetSecurityProvider": [ + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "puTypeLen", + "type": "UINT" + }, + { + "name": "wszType", + "type": "PWSTR" + }, + { + "name": "puPathLen", + "type": "UINT" + }, + { + "name": "wszPath", + "type": "PWSTR" + } + ], + "DRMEncode": [ + { + "name": "wszAlgID", + "type": "PWSTR" + }, + { + "name": "uDataLen", + "type": "UINT" + }, + { + "name": "pbDecodedData", + "type": "BYTE" + }, + { + "name": "puEncodedStringLen", + "type": "UINT" + }, + { + "name": "wszEncodedString", + "type": "PWSTR" + } + ], + "DRMDecode": [ + { + "name": "wszAlgID", + "type": "PWSTR" + }, + { + "name": "wszEncodedString", + "type": "PWSTR" + }, + { + "name": "puDecodedDataLen", + "type": "UINT" + }, + { + "name": "pbDecodedData", + "type": "BYTE" + } + ], + "DRMConstructCertificateChain": [ + { + "name": "cCertificates", + "type": "UINT" + }, + { + "name": "rgwszCertificates", + "type": "PWSTR" + }, + { + "name": "pcChain", + "type": "UINT" + }, + { + "name": "wszChain", + "type": "PWSTR" + } + ], + "DRMParseUnboundLicense": [ + { + "name": "wszCertificate", + "type": "PWSTR" + }, + { + "name": "phQueryRoot", + "type": "DRMQUERYHANDLE" + } + ], + "DRMCloseQueryHandle": [ + { + "name": "hQuery", + "type": "DRMQUERYHANDLE" + } + ], + "DRMGetUnboundLicenseObjectCount": [ + { + "name": "hQueryRoot", + "type": "DRMQUERYHANDLE" + }, + { + "name": "wszSubObjectType", + "type": "PWSTR" + }, + { + "name": "pcSubObjects", + "type": "UINT" + } + ], + "DRMGetUnboundLicenseObject": [ + { + "name": "hQueryRoot", + "type": "DRMQUERYHANDLE" + }, + { + "name": "wszSubObjectType", + "type": "PWSTR" + }, + { + "name": "iIndex", + "type": "UINT" + }, + { + "name": "phSubQuery", + "type": "DRMQUERYHANDLE" + } + ], + "DRMGetUnboundLicenseAttributeCount": [ + { + "name": "hQueryRoot", + "type": "DRMQUERYHANDLE" + }, + { + "name": "wszAttributeType", + "type": "PWSTR" + }, + { + "name": "pcAttributes", + "type": "UINT" + } + ], + "DRMGetUnboundLicenseAttribute": [ + { + "name": "hQueryRoot", + "type": "DRMQUERYHANDLE" + }, + { + "name": "wszAttributeType", + "type": "PWSTR" + }, + { + "name": "iWhich", + "type": "UINT" + }, + { + "name": "peEncoding", + "type": "DRMENCODINGTYPE" + }, + { + "name": "pcBuffer", + "type": "UINT" + }, + { + "name": "pbBuffer", + "type": "BYTE" + } + ], + "DRMGetCertificateChainCount": [ + { + "name": "wszChain", + "type": "PWSTR" + }, + { + "name": "pcCertCount", + "type": "UINT" + } + ], + "DRMDeconstructCertificateChain": [ + { + "name": "wszChain", + "type": "PWSTR" + }, + { + "name": "iWhich", + "type": "UINT" + }, + { + "name": "pcCert", + "type": "UINT" + }, + { + "name": "wszCert", + "type": "PWSTR" + } + ], + "DRMVerify": [ + { + "name": "wszData", + "type": "PWSTR" + }, + { + "name": "pcAttestedData", + "type": "UINT" + }, + { + "name": "wszAttestedData", + "type": "PWSTR" + }, + { + "name": "peType", + "type": "DRMATTESTTYPE" + }, + { + "name": "pcPrincipal", + "type": "UINT" + }, + { + "name": "wszPrincipal", + "type": "PWSTR" + }, + { + "name": "pcManifest", + "type": "UINT" + }, + { + "name": "wszManifest", + "type": "PWSTR" + } + ], + "DRMCreateUser": [ + { + "name": "wszUserName", + "type": "PWSTR" + }, + { + "name": "wszUserId", + "type": "PWSTR" + }, + { + "name": "wszUserIdType", + "type": "PWSTR" + }, + { + "name": "phUser", + "type": "DRMPUBHANDLE" + } + ], + "DRMCreateRight": [ + { + "name": "wszRightName", + "type": "PWSTR" + }, + { + "name": "pstFrom", + "type": "SYSTEMTIME" + }, + { + "name": "pstUntil", + "type": "SYSTEMTIME" + }, + { + "name": "cExtendedInfo", + "type": "UINT" + }, + { + "name": "pwszExtendedInfoName", + "type": "PWSTR" + }, + { + "name": "pwszExtendedInfoValue", + "type": "PWSTR" + }, + { + "name": "phRight", + "type": "DRMPUBHANDLE" + } + ], + "DRMCreateIssuanceLicense": [ + { + "name": "pstTimeFrom", + "type": "SYSTEMTIME" + }, + { + "name": "pstTimeUntil", + "type": "SYSTEMTIME" + }, + { + "name": "wszReferralInfoName", + "type": "PWSTR" + }, + { + "name": "wszReferralInfoURL", + "type": "PWSTR" + }, + { + "name": "hOwner", + "type": "DRMPUBHANDLE" + }, + { + "name": "wszIssuanceLicense", + "type": "PWSTR" + }, + { + "name": "hBoundLicense", + "type": "DRMHANDLE" + }, + { + "name": "phIssuanceLicense", + "type": "DRMPUBHANDLE" + } + ], + "DRMAddRightWithUser": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "hRight", + "type": "DRMPUBHANDLE" + }, + { + "name": "hUser", + "type": "DRMPUBHANDLE" + } + ], + "DRMClearAllRights": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + } + ], + "DRMSetMetaData": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "wszContentId", + "type": "PWSTR" + }, + { + "name": "wszContentIdType", + "type": "PWSTR" + }, + { + "name": "wszSKUId", + "type": "PWSTR" + }, + { + "name": "wszSKUIdType", + "type": "PWSTR" + }, + { + "name": "wszContentType", + "type": "PWSTR" + }, + { + "name": "wszContentName", + "type": "PWSTR" + } + ], + "DRMSetUsagePolicy": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "eUsagePolicyType", + "type": "DRM_USAGEPOLICY_TYPE" + }, + { + "name": "fDelete", + "type": "BOOL" + }, + { + "name": "fExclusion", + "type": "BOOL" + }, + { + "name": "wszName", + "type": "PWSTR" + }, + { + "name": "wszMinVersion", + "type": "PWSTR" + }, + { + "name": "wszMaxVersion", + "type": "PWSTR" + }, + { + "name": "wszPublicKey", + "type": "PWSTR" + }, + { + "name": "wszDigestAlgorithm", + "type": "PWSTR" + }, + { + "name": "pbDigest", + "type": "BYTE" + }, + { + "name": "cbDigest", + "type": "UINT" + } + ], + "DRMSetRevocationPoint": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "fDelete", + "type": "BOOL" + }, + { + "name": "wszId", + "type": "PWSTR" + }, + { + "name": "wszIdType", + "type": "PWSTR" + }, + { + "name": "wszURL", + "type": "PWSTR" + }, + { + "name": "pstFrequency", + "type": "SYSTEMTIME" + }, + { + "name": "wszName", + "type": "PWSTR" + }, + { + "name": "wszPublicKey", + "type": "PWSTR" + } + ], + "DRMSetApplicationSpecificData": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "fDelete", + "type": "BOOL" + }, + { + "name": "wszName", + "type": "PWSTR" + }, + { + "name": "wszValue", + "type": "PWSTR" + } + ], + "DRMSetNameAndDescription": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "fDelete", + "type": "BOOL" + }, + { + "name": "lcid", + "type": "UINT" + }, + { + "name": "wszName", + "type": "PWSTR" + }, + { + "name": "wszDescription", + "type": "PWSTR" + } + ], + "DRMSetIntervalTime": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "cDays", + "type": "UINT" + } + ], + "DRMGetIssuanceLicenseTemplate": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "puIssuanceLicenseTemplateLength", + "type": "UINT" + }, + { + "name": "wszIssuanceLicenseTemplate", + "type": "PWSTR" + } + ], + "DRMGetSignedIssuanceLicense": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "pbSymKey", + "type": "BYTE" + }, + { + "name": "cbSymKey", + "type": "UINT" + }, + { + "name": "wszSymKeyType", + "type": "PWSTR" + }, + { + "name": "wszClientLicensorCertificate", + "type": "PWSTR" + }, + { + "name": "pfnCallback", + "type": "DRMCALLBACK" + }, + { + "name": "wszURL", + "type": "PWSTR" + }, + { + "name": "pvContext", + "type": "void" + } + ], + "DRMGetSignedIssuanceLicenseEx": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "pbSymKey", + "type": "BYTE" + }, + { + "name": "cbSymKey", + "type": "UINT" + }, + { + "name": "wszSymKeyType", + "type": "PWSTR" + }, + { + "name": "pvReserved", + "type": "PVOID" + }, + { + "name": "hEnablingPrincipal", + "type": "DRMHANDLE" + }, + { + "name": "hBoundLicenseCLC", + "type": "DRMHANDLE" + }, + { + "name": "pfnCallback", + "type": "DRMCALLBACK" + }, + { + "name": "pvContext", + "type": "PVOID" + } + ], + "DRMClosePubHandle": [ + { + "name": "hPub", + "type": "DRMPUBHANDLE" + } + ], + "DRMDuplicatePubHandle": [ + { + "name": "hPubIn", + "type": "DRMPUBHANDLE" + }, + { + "name": "phPubOut", + "type": "DRMPUBHANDLE" + } + ], + "DRMGetUserInfo": [ + { + "name": "hUser", + "type": "DRMPUBHANDLE" + }, + { + "name": "puUserNameLength", + "type": "UINT" + }, + { + "name": "wszUserName", + "type": "PWSTR" + }, + { + "name": "puUserIdLength", + "type": "UINT" + }, + { + "name": "wszUserId", + "type": "PWSTR" + }, + { + "name": "puUserIdTypeLength", + "type": "UINT" + }, + { + "name": "wszUserIdType", + "type": "PWSTR" + } + ], + "DRMGetRightInfo": [ + { + "name": "hRight", + "type": "DRMPUBHANDLE" + }, + { + "name": "puRightNameLength", + "type": "UINT" + }, + { + "name": "wszRightName", + "type": "PWSTR" + }, + { + "name": "pstFrom", + "type": "SYSTEMTIME" + }, + { + "name": "pstUntil", + "type": "SYSTEMTIME" + } + ], + "DRMGetRightExtendedInfo": [ + { + "name": "hRight", + "type": "DRMPUBHANDLE" + }, + { + "name": "uIndex", + "type": "UINT" + }, + { + "name": "puExtendedInfoNameLength", + "type": "UINT" + }, + { + "name": "wszExtendedInfoName", + "type": "PWSTR" + }, + { + "name": "puExtendedInfoValueLength", + "type": "UINT" + }, + { + "name": "wszExtendedInfoValue", + "type": "PWSTR" + } + ], + "DRMGetUsers": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "uIndex", + "type": "UINT" + }, + { + "name": "phUser", + "type": "DRMPUBHANDLE" + } + ], + "DRMGetUserRights": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "hUser", + "type": "DRMPUBHANDLE" + }, + { + "name": "uIndex", + "type": "UINT" + }, + { + "name": "phRight", + "type": "DRMPUBHANDLE" + } + ], + "DRMGetMetaData": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "puContentIdLength", + "type": "UINT" + }, + { + "name": "wszContentId", + "type": "PWSTR" + }, + { + "name": "puContentIdTypeLength", + "type": "UINT" + }, + { + "name": "wszContentIdType", + "type": "PWSTR" + }, + { + "name": "puSKUIdLength", + "type": "UINT" + }, + { + "name": "wszSKUId", + "type": "PWSTR" + }, + { + "name": "puSKUIdTypeLength", + "type": "UINT" + }, + { + "name": "wszSKUIdType", + "type": "PWSTR" + }, + { + "name": "puContentTypeLength", + "type": "UINT" + }, + { + "name": "wszContentType", + "type": "PWSTR" + }, + { + "name": "puContentNameLength", + "type": "UINT" + }, + { + "name": "wszContentName", + "type": "PWSTR" + } + ], + "DRMGetApplicationSpecificData": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "uIndex", + "type": "UINT" + }, + { + "name": "puNameLength", + "type": "UINT" + }, + { + "name": "wszName", + "type": "PWSTR" + }, + { + "name": "puValueLength", + "type": "UINT" + }, + { + "name": "wszValue", + "type": "PWSTR" + } + ], + "DRMGetIssuanceLicenseInfo": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "pstTimeFrom", + "type": "SYSTEMTIME" + }, + { + "name": "pstTimeUntil", + "type": "SYSTEMTIME" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "puDistributionPointNameLength", + "type": "UINT" + }, + { + "name": "wszDistributionPointName", + "type": "PWSTR" + }, + { + "name": "puDistributionPointURLLength", + "type": "UINT" + }, + { + "name": "wszDistributionPointURL", + "type": "PWSTR" + }, + { + "name": "phOwner", + "type": "DRMPUBHANDLE" + }, + { + "name": "pfOfficial", + "type": "BOOL" + } + ], + "DRMGetRevocationPoint": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "puIdLength", + "type": "UINT" + }, + { + "name": "wszId", + "type": "PWSTR" + }, + { + "name": "puIdTypeLength", + "type": "UINT" + }, + { + "name": "wszIdType", + "type": "PWSTR" + }, + { + "name": "puURLLength", + "type": "UINT" + }, + { + "name": "wszRL", + "type": "PWSTR" + }, + { + "name": "pstFrequency", + "type": "SYSTEMTIME" + }, + { + "name": "puNameLength", + "type": "UINT" + }, + { + "name": "wszName", + "type": "PWSTR" + }, + { + "name": "puPublicKeyLength", + "type": "UINT" + }, + { + "name": "wszPublicKey", + "type": "PWSTR" + } + ], + "DRMGetUsagePolicy": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "uIndex", + "type": "UINT" + }, + { + "name": "peUsagePolicyType", + "type": "DRM_USAGEPOLICY_TYPE" + }, + { + "name": "pfExclusion", + "type": "BOOL" + }, + { + "name": "puNameLength", + "type": "UINT" + }, + { + "name": "wszName", + "type": "PWSTR" + }, + { + "name": "puMinVersionLength", + "type": "UINT" + }, + { + "name": "wszMinVersion", + "type": "PWSTR" + }, + { + "name": "puMaxVersionLength", + "type": "UINT" + }, + { + "name": "wszMaxVersion", + "type": "PWSTR" + }, + { + "name": "puPublicKeyLength", + "type": "UINT" + }, + { + "name": "wszPublicKey", + "type": "PWSTR" + }, + { + "name": "puDigestAlgorithmLength", + "type": "UINT" + }, + { + "name": "wszDigestAlgorithm", + "type": "PWSTR" + }, + { + "name": "pcbDigest", + "type": "UINT" + }, + { + "name": "pbDigest", + "type": "BYTE" + } + ], + "DRMGetNameAndDescription": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "uIndex", + "type": "UINT" + }, + { + "name": "pulcid", + "type": "UINT" + }, + { + "name": "puNameLength", + "type": "UINT" + }, + { + "name": "wszName", + "type": "PWSTR" + }, + { + "name": "puDescriptionLength", + "type": "UINT" + }, + { + "name": "wszDescription", + "type": "PWSTR" + } + ], + "DRMGetOwnerLicense": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "puOwnerLicenseLength", + "type": "UINT" + }, + { + "name": "wszOwnerLicense", + "type": "PWSTR" + } + ], + "DRMGetIntervalTime": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "pcDays", + "type": "UINT" + } + ], + "DRMRegisterProtectedWindow": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "hwnd", + "type": "HWND" + } + ], + "DRMIsWindowProtected": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pfProtected", + "type": "BOOL" + } + ], + "DRMAcquireIssuanceLicenseTemplate": [ + { + "name": "hClient", + "type": "DRMHSESSION" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "cTemplates", + "type": "UINT" + }, + { + "name": "pwszTemplateIds", + "type": "PWSTR" + }, + { + "name": "wszUrl", + "type": "PWSTR" + }, + { + "name": "pvContext", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/msgina_dll.json b/qiling/extensions/windows_sdk/defs/msgina_dll.json new file mode 100644 index 000000000..354056461 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/msgina_dll.json @@ -0,0 +1,14 @@ +{ + "WlxReconnectNotify": [ + { + "name": "pWlxContext", + "type": "PVOID" + } + ], + "WlxDisconnectNotify": [ + { + "name": "pWlxContext", + "type": "PVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/msi_dll.json b/qiling/extensions/windows_sdk/defs/msi_dll.json new file mode 100644 index 000000000..5c4f299d5 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/msi_dll.json @@ -0,0 +1,4590 @@ +{ + "MsiCloseHandle": [ + { + "name": "hAny", + "type": "MSIHANDLE" + } + ], + "MsiSetInternalUI": [ + { + "name": "dwUILevel", + "type": "INSTALLUILEVEL" + }, + { + "name": "phWnd", + "type": "HWND" + } + ], + "MsiSetExternalUIA": [ + { + "name": "puiHandler", + "type": "INSTALLUI_HANDLERA" + }, + { + "name": "dwMessageFilter", + "type": "DWORD" + }, + { + "name": "pvContext", + "type": "LPVOID" + } + ], + "MsiSetExternalUIW": [ + { + "name": "puiHandler", + "type": "INSTALLUI_HANDLERW" + }, + { + "name": "dwMessageFilter", + "type": "DWORD" + }, + { + "name": "pvContext", + "type": "LPVOID" + } + ], + "MsiSetExternalUIRecord": [ + { + "name": "puiHandler", + "type": "INSTALLUI_HANDLER_RECORD" + }, + { + "name": "dwMessageFilter", + "type": "DWORD" + }, + { + "name": "pvContext", + "type": "LPVOID" + }, + { + "name": "ppuiPrevHandler", + "type": "PINSTALLUI_HANDLER_RECORD" + } + ], + "MsiEnableLogA": [ + { + "name": "dwLogMode", + "type": "DWORD" + }, + { + "name": "szLogFile", + "type": "LPCSTR" + }, + { + "name": "dwLogAttributes", + "type": "DWORD" + } + ], + "MsiEnableLogW": [ + { + "name": "dwLogMode", + "type": "DWORD" + }, + { + "name": "szLogFile", + "type": "LPCWSTR" + }, + { + "name": "dwLogAttributes", + "type": "DWORD" + } + ], + "MsiQueryProductStateA": [ + { + "name": "szProduct", + "type": "LPCSTR" + } + ], + "MsiQueryProductStateW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + } + ], + "MsiGetProductInfoA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szAttribute", + "type": "LPCSTR" + }, + { + "name": "lpValueBuf", + "type": "LPSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiGetProductInfoW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szAttribute", + "type": "LPCWSTR" + }, + { + "name": "lpValueBuf", + "type": "LPWSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiGetProductInfoExA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szProperty", + "type": "LPCSTR" + }, + { + "name": "szValue", + "type": "LPSTR" + }, + { + "name": "pcchValue", + "type": "LPDWORD" + } + ], + "MsiGetProductInfoExW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szProperty", + "type": "LPCWSTR" + }, + { + "name": "szValue", + "type": "LPWSTR" + }, + { + "name": "pcchValue", + "type": "LPDWORD" + } + ], + "MsiInstallProductA": [ + { + "name": "szPackagePath", + "type": "LPCSTR" + }, + { + "name": "szCommandLine", + "type": "LPCSTR" + } + ], + "MsiInstallProductW": [ + { + "name": "szPackagePath", + "type": "LPCWSTR" + }, + { + "name": "szCommandLine", + "type": "LPCWSTR" + } + ], + "MsiConfigureProductA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "iInstallLevel", + "type": "int" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + } + ], + "MsiConfigureProductW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "iInstallLevel", + "type": "int" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + } + ], + "MsiConfigureProductExA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "iInstallLevel", + "type": "int" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + }, + { + "name": "szCommandLine", + "type": "LPCSTR" + } + ], + "MsiConfigureProductExW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "iInstallLevel", + "type": "int" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + }, + { + "name": "szCommandLine", + "type": "LPCWSTR" + } + ], + "MsiReinstallProductA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szReinstallMode", + "type": "DWORD" + } + ], + "MsiReinstallProductW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szReinstallMode", + "type": "DWORD" + } + ], + "MsiAdvertiseProductExA": [ + { + "name": "szPackagePath", + "type": "LPCSTR" + }, + { + "name": "szScriptfilePath", + "type": "LPCSTR" + }, + { + "name": "szTransforms", + "type": "LPCSTR" + }, + { + "name": "lgidLanguage", + "type": "LANGID" + }, + { + "name": "dwPlatform", + "type": "DWORD" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "MsiAdvertiseProductExW": [ + { + "name": "szPackagePath", + "type": "LPCWSTR" + }, + { + "name": "szScriptfilePath", + "type": "LPCWSTR" + }, + { + "name": "szTransforms", + "type": "LPCWSTR" + }, + { + "name": "lgidLanguage", + "type": "LANGID" + }, + { + "name": "dwPlatform", + "type": "DWORD" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "MsiAdvertiseProductA": [ + { + "name": "szPackagePath", + "type": "LPCSTR" + }, + { + "name": "szScriptfilePath", + "type": "LPCSTR" + }, + { + "name": "szTransforms", + "type": "LPCSTR" + }, + { + "name": "lgidLanguage", + "type": "LANGID" + } + ], + "MsiAdvertiseProductW": [ + { + "name": "szPackagePath", + "type": "LPCWSTR" + }, + { + "name": "szScriptfilePath", + "type": "LPCWSTR" + }, + { + "name": "szTransforms", + "type": "LPCWSTR" + }, + { + "name": "lgidLanguage", + "type": "LANGID" + } + ], + "MsiProcessAdvertiseScriptA": [ + { + "name": "szScriptFile", + "type": "LPCSTR" + }, + { + "name": "szIconFolder", + "type": "LPCSTR" + }, + { + "name": "hRegData", + "type": "HKEY" + }, + { + "name": "fShortcuts", + "type": "BOOL" + }, + { + "name": "fRemoveItems", + "type": "BOOL" + } + ], + "MsiProcessAdvertiseScriptW": [ + { + "name": "szScriptFile", + "type": "LPCWSTR" + }, + { + "name": "szIconFolder", + "type": "LPCWSTR" + }, + { + "name": "hRegData", + "type": "HKEY" + }, + { + "name": "fShortcuts", + "type": "BOOL" + }, + { + "name": "fRemoveItems", + "type": "BOOL" + } + ], + "MsiAdvertiseScriptA": [ + { + "name": "szScriptFile", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phRegData", + "type": "PHKEY" + }, + { + "name": "fRemoveItems", + "type": "BOOL" + } + ], + "MsiAdvertiseScriptW": [ + { + "name": "szScriptFile", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phRegData", + "type": "PHKEY" + }, + { + "name": "fRemoveItems", + "type": "BOOL" + } + ], + "MsiGetProductInfoFromScriptA": [ + { + "name": "szScriptFile", + "type": "LPCSTR" + }, + { + "name": "lpProductBuf39", + "type": "LPSTR" + }, + { + "name": "plgidLanguage", + "type": "LANGID" + }, + { + "name": "pdwVersion", + "type": "LPDWORD" + }, + { + "name": "lpNameBuf", + "type": "LPSTR" + }, + { + "name": "pcchNameBuf", + "type": "LPDWORD" + }, + { + "name": "lpPackageBuf", + "type": "LPSTR" + }, + { + "name": "pcchPackageBuf", + "type": "LPDWORD" + } + ], + "MsiGetProductInfoFromScriptW": [ + { + "name": "szScriptFile", + "type": "LPCWSTR" + }, + { + "name": "lpProductBuf39", + "type": "LPWSTR" + }, + { + "name": "plgidLanguage", + "type": "LANGID" + }, + { + "name": "pdwVersion", + "type": "LPDWORD" + }, + { + "name": "lpNameBuf", + "type": "LPWSTR" + }, + { + "name": "pcchNameBuf", + "type": "LPDWORD" + }, + { + "name": "lpPackageBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPackageBuf", + "type": "LPDWORD" + } + ], + "MsiGetProductCodeA": [ + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "lpBuf39", + "type": "LPSTR" + } + ], + "MsiGetProductCodeW": [ + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "lpBuf39", + "type": "LPWSTR" + } + ], + "MsiGetUserInfoA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "lpUserNameBuf", + "type": "LPSTR" + }, + { + "name": "pcchUserNameBuf", + "type": "LPDWORD" + }, + { + "name": "lpOrgNameBuf", + "type": "LPSTR" + }, + { + "name": "pcchOrgNameBuf", + "type": "LPDWORD" + }, + { + "name": "lpSerialBuf", + "type": "LPSTR" + }, + { + "name": "pcchSerialBuf", + "type": "LPDWORD" + } + ], + "MsiGetUserInfoW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "lpUserNameBuf", + "type": "LPWSTR" + }, + { + "name": "pcchUserNameBuf", + "type": "LPDWORD" + }, + { + "name": "lpOrgNameBuf", + "type": "LPWSTR" + }, + { + "name": "pcchOrgNameBuf", + "type": "LPDWORD" + }, + { + "name": "lpSerialBuf", + "type": "LPWSTR" + }, + { + "name": "pcchSerialBuf", + "type": "LPDWORD" + } + ], + "MsiCollectUserInfoA": [ + { + "name": "szProduct", + "type": "LPCSTR" + } + ], + "MsiCollectUserInfoW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + } + ], + "MsiApplyPatchA": [ + { + "name": "szPatchPackage", + "type": "LPCSTR" + }, + { + "name": "szInstallPackage", + "type": "LPCSTR" + }, + { + "name": "eInstallType", + "type": "INSTALLTYPE" + }, + { + "name": "szCommandLine", + "type": "LPCSTR" + } + ], + "MsiApplyPatchW": [ + { + "name": "szPatchPackage", + "type": "LPCWSTR" + }, + { + "name": "szInstallPackage", + "type": "LPCWSTR" + }, + { + "name": "eInstallType", + "type": "INSTALLTYPE" + }, + { + "name": "szCommandLine", + "type": "LPCWSTR" + } + ], + "MsiGetPatchInfoA": [ + { + "name": "szPatch", + "type": "LPCSTR" + }, + { + "name": "szAttribute", + "type": "LPCSTR" + }, + { + "name": "lpValueBuf", + "type": "LPSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiGetPatchInfoW": [ + { + "name": "szPatch", + "type": "LPCWSTR" + }, + { + "name": "szAttribute", + "type": "LPCWSTR" + }, + { + "name": "lpValueBuf", + "type": "LPWSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiEnumPatchesA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "iPatchIndex", + "type": "DWORD" + }, + { + "name": "lpPatchBuf", + "type": "LPSTR" + }, + { + "name": "lpTransformsBuf", + "type": "LPSTR" + }, + { + "name": "pcchTransformsBuf", + "type": "LPDWORD" + } + ], + "MsiEnumPatchesW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "iPatchIndex", + "type": "DWORD" + }, + { + "name": "lpPatchBuf", + "type": "LPWSTR" + }, + { + "name": "lpTransformsBuf", + "type": "LPWSTR" + }, + { + "name": "pcchTransformsBuf", + "type": "LPDWORD" + } + ], + "MsiRemovePatchesA": [ + { + "name": "szPatchList", + "type": "LPCSTR" + }, + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "eUninstallType", + "type": "INSTALLTYPE" + }, + { + "name": "szPropertyList", + "type": "LPCSTR" + } + ], + "MsiRemovePatchesW": [ + { + "name": "szPatchList", + "type": "LPCWSTR" + }, + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "eUninstallType", + "type": "INSTALLTYPE" + }, + { + "name": "szPropertyList", + "type": "LPCWSTR" + } + ], + "MsiExtractPatchXMLDataA": [ + { + "name": "szPatchPath", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "szXMLData", + "type": "LPSTR" + }, + { + "name": "pcchXMLData", + "type": "LPDWORD" + } + ], + "MsiExtractPatchXMLDataW": [ + { + "name": "szPatchPath", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "szXMLData", + "type": "LPWSTR" + }, + { + "name": "pcchXMLData", + "type": "LPDWORD" + } + ], + "MsiGetPatchInfoExA": [ + { + "name": "szPatchCode", + "type": "LPCSTR" + }, + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szProperty", + "type": "LPCSTR" + }, + { + "name": "lpValue", + "type": "LPSTR" + }, + { + "name": "pcchValue", + "type": "LPDWORD" + } + ], + "MsiGetPatchInfoExW": [ + { + "name": "szPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szProperty", + "type": "LPCWSTR" + }, + { + "name": "lpValue", + "type": "LPWSTR" + }, + { + "name": "pcchValue", + "type": "LPDWORD" + } + ], + "MsiApplyMultiplePatchesA": [ + { + "name": "szPatchPackages", + "type": "LPCSTR" + }, + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szPropertiesList", + "type": "LPCSTR" + } + ], + "MsiApplyMultiplePatchesW": [ + { + "name": "szPatchPackages", + "type": "LPCWSTR" + }, + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szPropertiesList", + "type": "LPCWSTR" + } + ], + "MsiDeterminePatchSequenceA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "cPatchInfo", + "type": "DWORD" + }, + { + "name": "pPatchInfo", + "type": "PMSIPATCHSEQUENCEINFOA" + } + ], + "MsiDeterminePatchSequenceW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "cPatchInfo", + "type": "DWORD" + }, + { + "name": "pPatchInfo", + "type": "PMSIPATCHSEQUENCEINFOW" + } + ], + "MsiDetermineApplicablePatchesA": [ + { + "name": "szProductPackagePath", + "type": "LPCSTR" + }, + { + "name": "cPatchInfo", + "type": "DWORD" + }, + { + "name": "pPatchInfo", + "type": "PMSIPATCHSEQUENCEINFOA" + } + ], + "MsiDetermineApplicablePatchesW": [ + { + "name": "szProductPackagePath", + "type": "LPCWSTR" + }, + { + "name": "cPatchInfo", + "type": "DWORD" + }, + { + "name": "pPatchInfo", + "type": "PMSIPATCHSEQUENCEINFOW" + } + ], + "MsiEnumPatchesExA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwFilter", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szPatchCode", + "type": "CHAR" + }, + { + "name": "szTargetProductCode", + "type": "CHAR" + }, + { + "name": "pdwTargetProductContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szTargetUserSid", + "type": "LPSTR" + }, + { + "name": "pcchTargetUserSid", + "type": "LPDWORD" + } + ], + "MsiEnumPatchesExW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwFilter", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szPatchCode", + "type": "WCHAR" + }, + { + "name": "szTargetProductCode", + "type": "WCHAR" + }, + { + "name": "pdwTargetProductContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szTargetUserSid", + "type": "LPWSTR" + }, + { + "name": "pcchTargetUserSid", + "type": "LPDWORD" + } + ], + "MsiQueryFeatureStateA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + } + ], + "MsiQueryFeatureStateW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + } + ], + "MsiQueryFeatureStateExA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "pdwState", + "type": "INSTALLSTATE" + } + ], + "MsiQueryFeatureStateExW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "pdwState", + "type": "INSTALLSTATE" + } + ], + "MsiUseFeatureA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + } + ], + "MsiUseFeatureW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + } + ], + "MsiUseFeatureExA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "MsiUseFeatureExW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "MsiGetFeatureUsageA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "pdwUseCount", + "type": "LPDWORD" + }, + { + "name": "pwDateUsed", + "type": "LPWORD" + } + ], + "MsiGetFeatureUsageW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "pdwUseCount", + "type": "LPDWORD" + }, + { + "name": "pwDateUsed", + "type": "LPWORD" + } + ], + "MsiConfigureFeatureA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + } + ], + "MsiConfigureFeatureW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + } + ], + "MsiReinstallFeatureA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "dwReinstallMode", + "type": "DWORD" + } + ], + "MsiReinstallFeatureW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "dwReinstallMode", + "type": "DWORD" + } + ], + "MsiProvideComponentA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiProvideComponentW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiProvideQualifiedComponentA": [ + { + "name": "szCategory", + "type": "LPCSTR" + }, + { + "name": "szQualifier", + "type": "LPCSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiProvideQualifiedComponentW": [ + { + "name": "szCategory", + "type": "LPCWSTR" + }, + { + "name": "szQualifier", + "type": "LPCWSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiProvideQualifiedComponentExA": [ + { + "name": "szCategory", + "type": "LPCSTR" + }, + { + "name": "szQualifier", + "type": "LPCSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "dwUnused1", + "type": "DWORD" + }, + { + "name": "dwUnused2", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiProvideQualifiedComponentExW": [ + { + "name": "szCategory", + "type": "LPCWSTR" + }, + { + "name": "szQualifier", + "type": "LPCWSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "dwUnused1", + "type": "DWORD" + }, + { + "name": "dwUnused2", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiGetComponentPathA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "lpPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchBuf", + "type": "LPDWORD" + } + ], + "MsiGetComponentPathW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "lpPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchBuf", + "type": "LPDWORD" + } + ], + "MsiGetComponentPathExA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szComponentCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "lpOutPathBuffer", + "type": "LPSTR" + }, + { + "name": "pcchOutPathBuffer", + "type": "LPDWORD" + } + ], + "MsiGetComponentPathExW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szComponentCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "lpOutPathBuffer", + "type": "LPWSTR" + }, + { + "name": "pcchOutPathBuffer", + "type": "LPDWORD" + } + ], + "MsiProvideAssemblyA": [ + { + "name": "szAssemblyName", + "type": "LPCSTR" + }, + { + "name": "szAppContext", + "type": "LPCSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "dwAssemblyInfo", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiProvideAssemblyW": [ + { + "name": "szAssemblyName", + "type": "LPCWSTR" + }, + { + "name": "szAppContext", + "type": "LPCWSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "dwAssemblyInfo", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiQueryComponentStateA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szComponentCode", + "type": "LPCSTR" + }, + { + "name": "pdwState", + "type": "INSTALLSTATE" + } + ], + "MsiQueryComponentStateW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szComponentCode", + "type": "LPCWSTR" + }, + { + "name": "pdwState", + "type": "INSTALLSTATE" + } + ], + "MsiEnumProductsA": [ + { + "name": "iProductIndex", + "type": "DWORD" + }, + { + "name": "lpProductBuf", + "type": "LPSTR" + } + ], + "MsiEnumProductsW": [ + { + "name": "iProductIndex", + "type": "DWORD" + }, + { + "name": "lpProductBuf", + "type": "LPWSTR" + } + ], + "MsiEnumProductsExA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szInstalledProductCode", + "type": "CHAR" + }, + { + "name": "pdwInstalledContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szSid", + "type": "LPSTR" + }, + { + "name": "pcchSid", + "type": "LPDWORD" + } + ], + "MsiEnumProductsExW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szInstalledProductCode", + "type": "WCHAR" + }, + { + "name": "pdwInstalledContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szSid", + "type": "LPWSTR" + }, + { + "name": "pcchSid", + "type": "LPDWORD" + } + ], + "MsiEnumRelatedProductsA": [ + { + "name": "lpUpgradeCode", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "iProductIndex", + "type": "DWORD" + }, + { + "name": "lpProductBuf", + "type": "LPSTR" + } + ], + "MsiEnumRelatedProductsW": [ + { + "name": "lpUpgradeCode", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "iProductIndex", + "type": "DWORD" + }, + { + "name": "lpProductBuf", + "type": "LPWSTR" + } + ], + "MsiEnumFeaturesA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "iFeatureIndex", + "type": "DWORD" + }, + { + "name": "lpFeatureBuf", + "type": "LPSTR" + }, + { + "name": "lpParentBuf", + "type": "LPSTR" + } + ], + "MsiEnumFeaturesW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "iFeatureIndex", + "type": "DWORD" + }, + { + "name": "lpFeatureBuf", + "type": "LPWSTR" + }, + { + "name": "lpParentBuf", + "type": "LPWSTR" + } + ], + "MsiEnumComponentsA": [ + { + "name": "iComponentIndex", + "type": "DWORD" + }, + { + "name": "lpComponentBuf", + "type": "LPSTR" + } + ], + "MsiEnumComponentsW": [ + { + "name": "iComponentIndex", + "type": "DWORD" + }, + { + "name": "lpComponentBuf", + "type": "LPWSTR" + } + ], + "MsiEnumComponentsExA": [ + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szInstalledComponentCode", + "type": "CHAR" + }, + { + "name": "pdwInstalledContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szSid", + "type": "LPSTR" + }, + { + "name": "pcchSid", + "type": "LPDWORD" + } + ], + "MsiEnumComponentsExW": [ + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szInstalledComponentCode", + "type": "WCHAR" + }, + { + "name": "pdwInstalledContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szSid", + "type": "LPWSTR" + }, + { + "name": "pcchSid", + "type": "LPDWORD" + } + ], + "MsiEnumClientsA": [ + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "iProductIndex", + "type": "DWORD" + }, + { + "name": "lpProductBuf", + "type": "LPSTR" + } + ], + "MsiEnumClientsW": [ + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "iProductIndex", + "type": "DWORD" + }, + { + "name": "lpProductBuf", + "type": "LPWSTR" + } + ], + "MsiEnumClientsExA": [ + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwProductIndex", + "type": "DWORD" + }, + { + "name": "szProductBuf", + "type": "CHAR" + }, + { + "name": "pdwInstalledContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szSid", + "type": "LPSTR" + }, + { + "name": "pcchSid", + "type": "LPDWORD" + } + ], + "MsiEnumClientsExW": [ + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwProductIndex", + "type": "DWORD" + }, + { + "name": "szProductBuf", + "type": "WCHAR" + }, + { + "name": "pdwInstalledContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szSid", + "type": "LPWSTR" + }, + { + "name": "pcchSid", + "type": "LPDWORD" + } + ], + "MsiEnumComponentQualifiersA": [ + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "iIndex", + "type": "DWORD" + }, + { + "name": "lpQualifierBuf", + "type": "LPSTR" + }, + { + "name": "pcchQualifierBuf", + "type": "LPDWORD" + }, + { + "name": "lpApplicationDataBuf", + "type": "LPSTR" + }, + { + "name": "pcchApplicationDataBuf", + "type": "LPDWORD" + } + ], + "MsiEnumComponentQualifiersW": [ + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "iIndex", + "type": "DWORD" + }, + { + "name": "lpQualifierBuf", + "type": "LPWSTR" + }, + { + "name": "pcchQualifierBuf", + "type": "LPDWORD" + }, + { + "name": "lpApplicationDataBuf", + "type": "LPWSTR" + }, + { + "name": "pcchApplicationDataBuf", + "type": "LPDWORD" + } + ], + "MsiOpenProductA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "hProduct", + "type": "MSIHANDLE" + } + ], + "MsiOpenProductW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "hProduct", + "type": "MSIHANDLE" + } + ], + "MsiOpenPackageA": [ + { + "name": "szPackagePath", + "type": "LPCSTR" + }, + { + "name": "hProduct", + "type": "MSIHANDLE" + } + ], + "MsiOpenPackageW": [ + { + "name": "szPackagePath", + "type": "LPCWSTR" + }, + { + "name": "hProduct", + "type": "MSIHANDLE" + } + ], + "MsiOpenPackageExA": [ + { + "name": "szPackagePath", + "type": "LPCSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "hProduct", + "type": "MSIHANDLE" + } + ], + "MsiOpenPackageExW": [ + { + "name": "szPackagePath", + "type": "LPCWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "hProduct", + "type": "MSIHANDLE" + } + ], + "MsiGetPatchFileListA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szPatchPackages", + "type": "LPCSTR" + }, + { + "name": "pcFiles", + "type": "LPDWORD" + }, + { + "name": "pphFileRecords", + "type": "MSIHANDLE" + } + ], + "MsiGetPatchFileListW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szPatchPackages", + "type": "LPCWSTR" + }, + { + "name": "pcFiles", + "type": "LPDWORD" + }, + { + "name": "pphFileRecords", + "type": "MSIHANDLE" + } + ], + "MsiGetProductPropertyA": [ + { + "name": "hProduct", + "type": "MSIHANDLE" + }, + { + "name": "szProperty", + "type": "LPCSTR" + }, + { + "name": "lpValueBuf", + "type": "LPSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiGetProductPropertyW": [ + { + "name": "hProduct", + "type": "MSIHANDLE" + }, + { + "name": "szProperty", + "type": "LPCWSTR" + }, + { + "name": "lpValueBuf", + "type": "LPWSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiVerifyPackageA": [ + { + "name": "szPackagePath", + "type": "LPCSTR" + } + ], + "MsiVerifyPackageW": [ + { + "name": "szPackagePath", + "type": "LPCWSTR" + } + ], + "MsiGetFeatureInfoA": [ + { + "name": "hProduct", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "lpAttributes", + "type": "LPDWORD" + }, + { + "name": "lpTitleBuf", + "type": "LPSTR" + }, + { + "name": "pcchTitleBuf", + "type": "LPDWORD" + }, + { + "name": "lpHelpBuf", + "type": "LPSTR" + }, + { + "name": "pcchHelpBuf", + "type": "LPDWORD" + } + ], + "MsiGetFeatureInfoW": [ + { + "name": "hProduct", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "lpAttributes", + "type": "LPDWORD" + }, + { + "name": "lpTitleBuf", + "type": "LPWSTR" + }, + { + "name": "pcchTitleBuf", + "type": "LPDWORD" + }, + { + "name": "lpHelpBuf", + "type": "LPWSTR" + }, + { + "name": "pcchHelpBuf", + "type": "LPDWORD" + } + ], + "MsiInstallMissingComponentA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + } + ], + "MsiInstallMissingComponentW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + } + ], + "MsiInstallMissingFileA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFile", + "type": "LPCSTR" + } + ], + "MsiInstallMissingFileW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFile", + "type": "LPCWSTR" + } + ], + "MsiLocateComponentA": [ + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "lpPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchBuf", + "type": "LPDWORD" + } + ], + "MsiLocateComponentW": [ + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "lpPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchBuf", + "type": "LPDWORD" + } + ], + "MsiSourceListClearAllA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szUserName", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "MsiSourceListClearAllW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szUserName", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "MsiSourceListAddSourceA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szUserName", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPCSTR" + } + ], + "MsiSourceListAddSourceW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szUserName", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPCWSTR" + } + ], + "MsiSourceListForceResolutionA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szUserName", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "MsiSourceListForceResolutionW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szUserName", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "MsiSourceListAddSourceExA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPCSTR" + }, + { + "name": "dwIndex", + "type": "DWORD" + } + ], + "MsiSourceListAddSourceExW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPCWSTR" + }, + { + "name": "dwIndex", + "type": "DWORD" + } + ], + "MsiSourceListAddMediaDiskA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwDiskId", + "type": "DWORD" + }, + { + "name": "szVolumeLabel", + "type": "LPCSTR" + }, + { + "name": "szDiskPrompt", + "type": "LPCSTR" + } + ], + "MsiSourceListAddMediaDiskW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwDiskId", + "type": "DWORD" + }, + { + "name": "szVolumeLabel", + "type": "LPCWSTR" + }, + { + "name": "szDiskPrompt", + "type": "LPCWSTR" + } + ], + "MsiSourceListClearSourceA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPCSTR" + } + ], + "MsiSourceListClearSourceW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPCWSTR" + } + ], + "MsiSourceListClearMediaDiskA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwDiskId", + "type": "DWORD" + } + ], + "MsiSourceListClearMediaDiskW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwDiskId", + "type": "DWORD" + } + ], + "MsiSourceListClearAllExA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "MsiSourceListClearAllExW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "MsiSourceListForceResolutionExA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "MsiSourceListForceResolutionExW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "MsiSourceListSetInfoA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szProperty", + "type": "LPCSTR" + }, + { + "name": "szValue", + "type": "LPCSTR" + } + ], + "MsiSourceListSetInfoW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szProperty", + "type": "LPCWSTR" + }, + { + "name": "szValue", + "type": "LPCWSTR" + } + ], + "MsiSourceListGetInfoA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szProperty", + "type": "LPCSTR" + }, + { + "name": "szValue", + "type": "LPSTR" + }, + { + "name": "pcchValue", + "type": "LPDWORD" + } + ], + "MsiSourceListGetInfoW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szProperty", + "type": "LPCWSTR" + }, + { + "name": "szValue", + "type": "LPWSTR" + }, + { + "name": "pcchValue", + "type": "LPDWORD" + } + ], + "MsiSourceListEnumSourcesA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPSTR" + }, + { + "name": "pcchSource", + "type": "LPDWORD" + } + ], + "MsiSourceListEnumSourcesW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPWSTR" + }, + { + "name": "pcchSource", + "type": "LPDWORD" + } + ], + "MsiSourceListEnumMediaDisksA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwDiskId", + "type": "LPDWORD" + }, + { + "name": "szVolumeLabel", + "type": "LPSTR" + }, + { + "name": "pcchVolumeLabel", + "type": "LPDWORD" + }, + { + "name": "szDiskPrompt", + "type": "LPSTR" + }, + { + "name": "pcchDiskPrompt", + "type": "LPDWORD" + } + ], + "MsiSourceListEnumMediaDisksW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwDiskId", + "type": "LPDWORD" + }, + { + "name": "szVolumeLabel", + "type": "LPWSTR" + }, + { + "name": "pcchVolumeLabel", + "type": "LPDWORD" + }, + { + "name": "szDiskPrompt", + "type": "LPWSTR" + }, + { + "name": "pcchDiskPrompt", + "type": "LPDWORD" + } + ], + "MsiGetFileVersionA": [ + { + "name": "szFilePath", + "type": "LPCSTR" + }, + { + "name": "lpVersionBuf", + "type": "LPSTR" + }, + { + "name": "pcchVersionBuf", + "type": "LPDWORD" + }, + { + "name": "lpLangBuf", + "type": "LPSTR" + }, + { + "name": "pcchLangBuf", + "type": "LPDWORD" + } + ], + "MsiGetFileVersionW": [ + { + "name": "szFilePath", + "type": "LPCWSTR" + }, + { + "name": "lpVersionBuf", + "type": "LPWSTR" + }, + { + "name": "pcchVersionBuf", + "type": "LPDWORD" + }, + { + "name": "lpLangBuf", + "type": "LPWSTR" + }, + { + "name": "pcchLangBuf", + "type": "LPDWORD" + } + ], + "MsiGetFileHashA": [ + { + "name": "szFilePath", + "type": "LPCSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "pHash", + "type": "PMSIFILEHASHINFO" + } + ], + "MsiGetFileHashW": [ + { + "name": "szFilePath", + "type": "LPCWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "pHash", + "type": "PMSIFILEHASHINFO" + } + ], + "MsiGetFileSignatureInformationA": [ + { + "name": "szSignedObjectPath", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppcCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pbHashData", + "type": "LPBYTE" + }, + { + "name": "pcbHashData", + "type": "LPDWORD" + } + ], + "MsiGetFileSignatureInformationW": [ + { + "name": "szSignedObjectPath", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppcCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pbHashData", + "type": "LPBYTE" + }, + { + "name": "pcbHashData", + "type": "LPDWORD" + } + ], + "MsiGetShortcutTargetA": [ + { + "name": "szShortcutPath", + "type": "LPCSTR" + }, + { + "name": "szProductCode", + "type": "LPSTR" + }, + { + "name": "szFeatureId", + "type": "LPSTR" + }, + { + "name": "szComponentCode", + "type": "LPSTR" + } + ], + "MsiGetShortcutTargetW": [ + { + "name": "szShortcutPath", + "type": "LPCWSTR" + }, + { + "name": "szProductCode", + "type": "LPWSTR" + }, + { + "name": "szFeatureId", + "type": "LPWSTR" + }, + { + "name": "szComponentCode", + "type": "LPWSTR" + } + ], + "MsiIsProductElevatedA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "pfElevated", + "type": "BOOL" + } + ], + "MsiIsProductElevatedW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "pfElevated", + "type": "BOOL" + } + ], + "MsiNotifySidChangeA": [ + { + "name": "pOldSid", + "type": "LPCSTR" + }, + { + "name": "pNewSid", + "type": "LPCSTR" + } + ], + "MsiNotifySidChangeW": [ + { + "name": "pOldSid", + "type": "LPCWSTR" + }, + { + "name": "pNewSid", + "type": "LPCWSTR" + } + ], + "MsiBeginTransactionA": [ + { + "name": "szName", + "type": "LPCSTR" + }, + { + "name": "dwTransactionAttributes", + "type": "DWORD" + }, + { + "name": "phTransactionHandle", + "type": "MSIHANDLE" + }, + { + "name": "phChangeOfOwnerEvent", + "type": "HANDLE" + } + ], + "MsiBeginTransactionW": [ + { + "name": "szName", + "type": "LPCWSTR" + }, + { + "name": "dwTransactionAttributes", + "type": "DWORD" + }, + { + "name": "phTransactionHandle", + "type": "MSIHANDLE" + }, + { + "name": "phChangeOfOwnerEvent", + "type": "HANDLE" + } + ], + "MsiEndTransaction": [ + { + "name": "dwTransactionState", + "type": "DWORD" + } + ], + "MsiJoinTransaction": [ + { + "name": "hTransactionHandle", + "type": "MSIHANDLE" + }, + { + "name": "dwTransactionAttributes", + "type": "DWORD" + }, + { + "name": "phChangeOfOwnerEvent", + "type": "HANDLE" + } + ], + "MsiDatabaseOpenViewA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szQuery", + "type": "LPCSTR" + }, + { + "name": "phView", + "type": "MSIHANDLE" + } + ], + "MsiDatabaseOpenViewW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szQuery", + "type": "LPCWSTR" + }, + { + "name": "phView", + "type": "MSIHANDLE" + } + ], + "MsiViewGetErrorA": [ + { + "name": "hView", + "type": "MSIHANDLE" + }, + { + "name": "szColumnNameBuffer", + "type": "LPSTR" + }, + { + "name": "pcchBuf", + "type": "LPDWORD" + } + ], + "MsiViewGetErrorW": [ + { + "name": "hView", + "type": "MSIHANDLE" + }, + { + "name": "szColumnNameBuffer", + "type": "LPWSTR" + }, + { + "name": "pcchBuf", + "type": "LPDWORD" + } + ], + "MsiViewExecute": [ + { + "name": "hView", + "type": "MSIHANDLE" + }, + { + "name": "hRecord", + "type": "MSIHANDLE" + } + ], + "MsiViewFetch": [ + { + "name": "hView", + "type": "MSIHANDLE" + }, + { + "name": "phRecord", + "type": "MSIHANDLE" + } + ], + "MsiViewModify": [ + { + "name": "hView", + "type": "MSIHANDLE" + }, + { + "name": "eModifyMode", + "type": "MSIMODIFY" + }, + { + "name": "hRecord", + "type": "MSIHANDLE" + } + ], + "MsiViewGetColumnInfo": [ + { + "name": "hView", + "type": "MSIHANDLE" + }, + { + "name": "eColumnInfo", + "type": "MSICOLINFO" + }, + { + "name": "phRecord", + "type": "MSIHANDLE" + } + ], + "MsiViewClose": [ + { + "name": "hView", + "type": "MSIHANDLE" + } + ], + "MsiDatabaseGetPrimaryKeysA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCSTR" + }, + { + "name": "phRecord", + "type": "MSIHANDLE" + } + ], + "MsiDatabaseGetPrimaryKeysW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCWSTR" + }, + { + "name": "phRecord", + "type": "MSIHANDLE" + } + ], + "MsiDatabaseIsTablePersistentA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCSTR" + } + ], + "MsiDatabaseIsTablePersistentW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCWSTR" + } + ], + "MsiGetSummaryInformationA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szDatabasePath", + "type": "LPCSTR" + }, + { + "name": "uiUpdateCount", + "type": "UINT" + }, + { + "name": "phSummaryInfo", + "type": "MSIHANDLE" + } + ], + "MsiGetSummaryInformationW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szDatabasePath", + "type": "LPCWSTR" + }, + { + "name": "uiUpdateCount", + "type": "UINT" + }, + { + "name": "phSummaryInfo", + "type": "MSIHANDLE" + } + ], + "MsiSummaryInfoGetPropertyCount": [ + { + "name": "hSummaryInfo", + "type": "MSIHANDLE" + }, + { + "name": "puiPropertyCount", + "type": "PUINT" + } + ], + "MsiSummaryInfoSetPropertyA": [ + { + "name": "hSummaryInfo", + "type": "MSIHANDLE" + }, + { + "name": "uiProperty", + "type": "UINT" + }, + { + "name": "uiDataType", + "type": "UINT" + }, + { + "name": "iValue", + "type": "INT" + }, + { + "name": "pftValue", + "type": "FILETIME" + }, + { + "name": "szValue", + "type": "LPCSTR" + } + ], + "MsiSummaryInfoSetPropertyW": [ + { + "name": "hSummaryInfo", + "type": "MSIHANDLE" + }, + { + "name": "uiProperty", + "type": "UINT" + }, + { + "name": "uiDataType", + "type": "UINT" + }, + { + "name": "iValue", + "type": "INT" + }, + { + "name": "pftValue", + "type": "FILETIME" + }, + { + "name": "szValue", + "type": "LPCWSTR" + } + ], + "MsiSummaryInfoGetPropertyA": [ + { + "name": "hSummaryInfo", + "type": "MSIHANDLE" + }, + { + "name": "uiProperty", + "type": "UINT" + }, + { + "name": "puiDataType", + "type": "PUINT" + }, + { + "name": "piValue", + "type": "LPINT" + }, + { + "name": "pftValue", + "type": "FILETIME" + }, + { + "name": "szValueBuf", + "type": "LPSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiSummaryInfoGetPropertyW": [ + { + "name": "hSummaryInfo", + "type": "MSIHANDLE" + }, + { + "name": "uiProperty", + "type": "UINT" + }, + { + "name": "puiDataType", + "type": "PUINT" + }, + { + "name": "piValue", + "type": "LPINT" + }, + { + "name": "pftValue", + "type": "FILETIME" + }, + { + "name": "szValueBuf", + "type": "LPWSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiSummaryInfoPersist": [ + { + "name": "hSummaryInfo", + "type": "MSIHANDLE" + } + ], + "MsiOpenDatabaseA": [ + { + "name": "szDatabasePath", + "type": "LPCSTR" + }, + { + "name": "szPersist", + "type": "LPCSTR" + }, + { + "name": "phDatabase", + "type": "MSIHANDLE" + } + ], + "MsiOpenDatabaseW": [ + { + "name": "szDatabasePath", + "type": "LPCWSTR" + }, + { + "name": "szPersist", + "type": "LPCWSTR" + }, + { + "name": "phDatabase", + "type": "MSIHANDLE" + } + ], + "MsiDatabaseImportA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szFolderPath", + "type": "LPCSTR" + }, + { + "name": "szFileName", + "type": "LPCSTR" + } + ], + "MsiDatabaseImportW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szFolderPath", + "type": "LPCWSTR" + }, + { + "name": "szFileName", + "type": "LPCWSTR" + } + ], + "MsiDatabaseExportA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCSTR" + }, + { + "name": "szFolderPath", + "type": "LPCSTR" + }, + { + "name": "szFileName", + "type": "LPCSTR" + } + ], + "MsiDatabaseExportW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCWSTR" + }, + { + "name": "szFolderPath", + "type": "LPCWSTR" + }, + { + "name": "szFileName", + "type": "LPCWSTR" + } + ], + "MsiDatabaseMergeA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "hDatabaseMerge", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCSTR" + } + ], + "MsiDatabaseMergeW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "hDatabaseMerge", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCWSTR" + } + ], + "MsiDatabaseGenerateTransformA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "hDatabaseReference", + "type": "MSIHANDLE" + }, + { + "name": "szTransformFile", + "type": "LPCSTR" + }, + { + "name": "iReserved1", + "type": "int" + }, + { + "name": "iReserved2", + "type": "int" + } + ], + "MsiDatabaseGenerateTransformW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "hDatabaseReference", + "type": "MSIHANDLE" + }, + { + "name": "szTransformFile", + "type": "LPCWSTR" + }, + { + "name": "iReserved1", + "type": "int" + }, + { + "name": "iReserved2", + "type": "int" + } + ], + "MsiDatabaseApplyTransformA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTransformFile", + "type": "LPCSTR" + }, + { + "name": "iErrorConditions", + "type": "int" + } + ], + "MsiDatabaseApplyTransformW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTransformFile", + "type": "LPCWSTR" + }, + { + "name": "iErrorConditions", + "type": "int" + } + ], + "MsiCreateTransformSummaryInfoA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "hDatabaseReference", + "type": "MSIHANDLE" + }, + { + "name": "szTransformFile", + "type": "LPCSTR" + }, + { + "name": "iErrorConditions", + "type": "int" + }, + { + "name": "iValidation", + "type": "int" + } + ], + "MsiCreateTransformSummaryInfoW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "hDatabaseReference", + "type": "MSIHANDLE" + }, + { + "name": "szTransformFile", + "type": "LPCWSTR" + }, + { + "name": "iErrorConditions", + "type": "int" + }, + { + "name": "iValidation", + "type": "int" + } + ], + "MsiDatabaseCommit": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + } + ], + "MsiGetDatabaseState": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + } + ], + "MsiCreateRecord": [ + { + "name": "cParams", + "type": "UINT" + } + ], + "MsiRecordIsNull": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + } + ], + "MsiRecordDataSize": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + } + ], + "MsiRecordSetInteger": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "iValue", + "type": "int" + } + ], + "MsiRecordSetStringA": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szValue", + "type": "LPCSTR" + } + ], + "MsiRecordSetStringW": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szValue", + "type": "LPCWSTR" + } + ], + "MsiRecordGetInteger": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + } + ], + "MsiRecordGetStringA": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szValueBuf", + "type": "LPSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiRecordGetStringW": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szValueBuf", + "type": "LPWSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiRecordGetFieldCount": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + } + ], + "MsiRecordSetStreamA": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szFilePath", + "type": "LPCSTR" + } + ], + "MsiRecordSetStreamW": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szFilePath", + "type": "LPCWSTR" + } + ], + "MsiRecordReadStream": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szDataBuf", + "type": "char" + }, + { + "name": "pcbDataBuf", + "type": "LPDWORD" + } + ], + "MsiRecordClearData": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + } + ], + "MsiGetActiveDatabase": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + } + ], + "MsiSetPropertyA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szName", + "type": "LPCSTR" + }, + { + "name": "szValue", + "type": "LPCSTR" + } + ], + "MsiSetPropertyW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szName", + "type": "LPCWSTR" + }, + { + "name": "szValue", + "type": "LPCWSTR" + } + ], + "MsiGetPropertyA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szName", + "type": "LPCSTR" + }, + { + "name": "szValueBuf", + "type": "LPSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiGetPropertyW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szName", + "type": "LPCWSTR" + }, + { + "name": "szValueBuf", + "type": "LPWSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiGetLanguage": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + } + ], + "MsiGetMode": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "eRunMode", + "type": "MSIRUNMODE" + } + ], + "MsiSetMode": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "eRunMode", + "type": "MSIRUNMODE" + }, + { + "name": "fState", + "type": "BOOL" + } + ], + "MsiFormatRecordA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "szResultBuf", + "type": "LPSTR" + }, + { + "name": "pcchResultBuf", + "type": "LPDWORD" + } + ], + "MsiFormatRecordW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "szResultBuf", + "type": "LPWSTR" + }, + { + "name": "pcchResultBuf", + "type": "LPDWORD" + } + ], + "MsiDoActionA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szAction", + "type": "LPCSTR" + } + ], + "MsiDoActionW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szAction", + "type": "LPCWSTR" + } + ], + "MsiSequenceA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szTable", + "type": "LPCSTR" + }, + { + "name": "iSequenceMode", + "type": "INT" + } + ], + "MsiSequenceW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szTable", + "type": "LPCWSTR" + }, + { + "name": "iSequenceMode", + "type": "INT" + } + ], + "MsiProcessMessage": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "eMessageType", + "type": "INSTALLMESSAGE" + }, + { + "name": "hRecord", + "type": "MSIHANDLE" + } + ], + "MsiEvaluateConditionA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szCondition", + "type": "LPCSTR" + } + ], + "MsiEvaluateConditionW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szCondition", + "type": "LPCWSTR" + } + ], + "MsiGetFeatureStateA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "piInstalled", + "type": "INSTALLSTATE" + }, + { + "name": "piAction", + "type": "INSTALLSTATE" + } + ], + "MsiGetFeatureStateW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "piInstalled", + "type": "INSTALLSTATE" + }, + { + "name": "piAction", + "type": "INSTALLSTATE" + } + ], + "MsiSetFeatureStateA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + } + ], + "MsiSetFeatureStateW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + } + ], + "MsiSetFeatureAttributesA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "dwAttributes", + "type": "DWORD" + } + ], + "MsiSetFeatureAttributesW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "dwAttributes", + "type": "DWORD" + } + ], + "MsiGetComponentStateA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "piInstalled", + "type": "INSTALLSTATE" + }, + { + "name": "piAction", + "type": "INSTALLSTATE" + } + ], + "MsiGetComponentStateW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "piInstalled", + "type": "INSTALLSTATE" + }, + { + "name": "piAction", + "type": "INSTALLSTATE" + } + ], + "MsiSetComponentStateA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + } + ], + "MsiSetComponentStateW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + } + ], + "MsiGetFeatureCostA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "iCostTree", + "type": "MSICOSTTREE" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + }, + { + "name": "piCost", + "type": "LPINT" + } + ], + "MsiGetFeatureCostW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "iCostTree", + "type": "MSICOSTTREE" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + }, + { + "name": "piCost", + "type": "LPINT" + } + ], + "MsiEnumComponentCostsA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + }, + { + "name": "szDriveBuf", + "type": "LPSTR" + }, + { + "name": "pcchDriveBuf", + "type": "LPDWORD" + }, + { + "name": "piCost", + "type": "LPINT" + }, + { + "name": "piTempCost", + "type": "LPINT" + } + ], + "MsiEnumComponentCostsW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + }, + { + "name": "szDriveBuf", + "type": "LPWSTR" + }, + { + "name": "pcchDriveBuf", + "type": "LPDWORD" + }, + { + "name": "piCost", + "type": "LPINT" + }, + { + "name": "piTempCost", + "type": "LPINT" + } + ], + "MsiSetInstallLevel": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "iInstallLevel", + "type": "int" + } + ], + "MsiGetFeatureValidStatesA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "lpInstallStates", + "type": "LPDWORD" + } + ], + "MsiGetFeatureValidStatesW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "lpInstallStates", + "type": "LPDWORD" + } + ], + "MsiGetSourcePathA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFolder", + "type": "LPCSTR" + }, + { + "name": "szPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiGetSourcePathW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFolder", + "type": "LPCWSTR" + }, + { + "name": "szPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiGetTargetPathA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFolder", + "type": "LPCSTR" + }, + { + "name": "szPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiGetTargetPathW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFolder", + "type": "LPCWSTR" + }, + { + "name": "szPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiSetTargetPathA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFolder", + "type": "LPCSTR" + }, + { + "name": "szFolderPath", + "type": "LPCSTR" + } + ], + "MsiSetTargetPathW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFolder", + "type": "LPCWSTR" + }, + { + "name": "szFolderPath", + "type": "LPCWSTR" + } + ], + "MsiVerifyDiskSpace": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + } + ], + "MsiEnableUIPreview": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "phPreview", + "type": "MSIHANDLE" + } + ], + "MsiPreviewDialogA": [ + { + "name": "hPreview", + "type": "MSIHANDLE" + }, + { + "name": "szDialogName", + "type": "LPCSTR" + } + ], + "MsiPreviewDialogW": [ + { + "name": "hPreview", + "type": "MSIHANDLE" + }, + { + "name": "szDialogName", + "type": "LPCWSTR" + } + ], + "MsiPreviewBillboardA": [ + { + "name": "hPreview", + "type": "MSIHANDLE" + }, + { + "name": "szControlName", + "type": "LPCSTR" + }, + { + "name": "szBillboard", + "type": "LPCSTR" + } + ], + "MsiPreviewBillboardW": [ + { + "name": "hPreview", + "type": "MSIHANDLE" + }, + { + "name": "szControlName", + "type": "LPCWSTR" + }, + { + "name": "szBillboard", + "type": "LPCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/msimg32_dll.json b/qiling/extensions/windows_sdk/defs/msimg32_dll.json new file mode 100644 index 000000000..751fcdd3d --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/msimg32_dll.json @@ -0,0 +1,120 @@ +{ + "AlphaBlend": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "ftn", + "type": "BLENDFUNCTION" + } + ], + "TransparentBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "crTransparent", + "type": "UINT" + } + ], + "GradientFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pVertex", + "type": "PTRIVERTEX" + }, + { + "name": "nVertex", + "type": "ULONG" + }, + { + "name": "pMesh", + "type": "PVOID" + }, + { + "name": "nMesh", + "type": "ULONG" + }, + { + "name": "ulMode", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/msports_dll.json b/qiling/extensions/windows_sdk/defs/msports_dll.json new file mode 100644 index 000000000..1c1fb7e43 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/msports_dll.json @@ -0,0 +1,84 @@ +{ + "ComDBOpen": [ + { + "name": "PHComDB", + "type": "PHCOMDB" + } + ], + "ComDBClose": [ + { + "name": "HComDB", + "type": "HCOMDB" + } + ], + "ComDBGetCurrentPortUsage": [ + { + "name": "HComDB", + "type": "HCOMDB" + }, + { + "name": "Buffer", + "type": "PBYTE" + }, + { + "name": "BufferSize", + "type": "DWORD" + }, + { + "name": "ReportType", + "type": "ULONG" + }, + { + "name": "MaxPortsReported", + "type": "LPDWORD" + } + ], + "ComDBClaimNextFreePort": [ + { + "name": "HComDB", + "type": "HCOMDB" + }, + { + "name": "ComNumber", + "type": "LPDWORD" + } + ], + "ComDBClaimPort": [ + { + "name": "HComDB", + "type": "HCOMDB" + }, + { + "name": "ComNumber", + "type": "DWORD" + }, + { + "name": "ForceClaim", + "type": "BOOL" + }, + { + "name": "Forced", + "type": "PBOOL" + } + ], + "ComDBReleasePort": [ + { + "name": "HComDB", + "type": "HCOMDB" + }, + { + "name": "ComNumber", + "type": "DWORD" + } + ], + "ComDBResizeDatabase": [ + { + "name": "HComDB", + "type": "HCOMDB" + }, + { + "name": "NewSize", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/mstask_dll.json b/qiling/extensions/windows_sdk/defs/mstask_dll.json new file mode 100644 index 000000000..69a0e61ca --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/mstask_dll.json @@ -0,0 +1,30 @@ +{ + "GetNetScheduleAccountInformation": [ + { + "name": "pwszServerName", + "type": "LPCWSTR" + }, + { + "name": "ccAccount", + "type": "DWORD" + }, + { + "name": "wszAccount", + "type": "WCHAR" + } + ], + "SetNetScheduleAccountInformation": [ + { + "name": "pwszServerName", + "type": "LPCWSTR" + }, + { + "name": "pwszAccount", + "type": "LPCWSTR" + }, + { + "name": "pwszPassword", + "type": "LPCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/msvcrt_dll.json b/qiling/extensions/windows_sdk/defs/msvcrt_dll.json new file mode 100644 index 000000000..43d7a0242 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/msvcrt_dll.json @@ -0,0 +1,6030 @@ +{ + "_CrtCheckMemory": [ + { + "name": "param1", + "type": "" + } + ], + "_CrtDbgReport": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + }, + { + "name": "param4", + "type": "POINTER" + }, + { + "name": "param5", + "type": "POINTER" + } + ], + "_CrtDumpMemoryLeaks": [ + { + "name": "param1", + "type": "" + } + ], + "_CrtSetBreakAlloc": [ + { + "name": "param1", + "type": "INT" + } + ], + "_CrtSetDbgFlag": [ + { + "name": "param1", + "type": "INT" + } + ], + "_CrtSetDumpClient": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_CrtSetReportHook": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_CrtSetReportMode": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_CxxThrowException": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_EH_prolog": [ + { + "name": "param1", + "type": "" + } + ], + "_Getdays": [ + { + "name": "param1", + "type": "" + } + ], + "_Getmonths": [ + { + "name": "param1", + "type": "" + } + ], + "_Gettnames": [ + { + "name": "param1", + "type": "" + } + ], + "_Strftime": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "STRING" + }, + { + "name": "param4", + "type": "POINTER" + }, + { + "name": "param5", + "type": "POINTER" + } + ], + "_XcptFilter": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "__CxxFrameHandler": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "__CxxLongjmpUnwind": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "__RTCastToVoid": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "__RTDynamicCast": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + }, + { + "name": "param5", + "type": "INT" + } + ], + "__RTtypeid": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "__STRINGTOLD": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "STRING" + }, + { + "name": "param4", + "type": "INT" + } + ], + "___mb_cur_max_func": [ + { + "name": "param1", + "type": "" + } + ], + "__crtCompareStringA": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "STRING" + }, + { + "name": "param4", + "type": "INT" + }, + { + "name": "param5", + "type": "STRING" + }, + { + "name": "param6", + "type": "INT" + } + ], + "__crtGetLocaleInfoW": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "INT" + } + ], + "__crtLCMapStringA": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "STRING" + }, + { + "name": "param4", + "type": "INT" + }, + { + "name": "param5", + "type": "POINTER" + }, + { + "name": "param6", + "type": "INT" + }, + { + "name": "param7", + "type": "INT" + }, + { + "name": "param8", + "type": "INT" + } + ], + "__dllonexit": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "__doserrno": [ + { + "name": "param1", + "type": "" + } + ], + "__fpecode": [ + { + "name": "param1", + "type": "" + } + ], + "__getmainargs": [ + { + "name": "_Argc", + "type": "int" + }, + { + "name": "_Argv", + "type": "char" + }, + { + "name": "_Env", + "type": "char" + }, + { + "name": "_DoWildCard", + "type": "int" + }, + { + "name": "_StartInfo", + "type": "POINTER" + } + ], + "__isascii": [ + { + "name": "param1", + "type": "INT" + } + ], + "__iscsym": [ + { + "name": "param1", + "type": "INT" + } + ], + "__iscsymf": [ + { + "name": "param1", + "type": "INT" + } + ], + "__lconv_init": [ + { + "name": "param1", + "type": "" + } + ], + "__p___argc": [ + { + "name": "param1", + "type": "" + } + ], + "__p___argv": [ + { + "name": "param1", + "type": "" + } + ], + "__p___initenv": [ + { + "name": "param1", + "type": "" + } + ], + "__p___mb_cur_max": [ + { + "name": "param1", + "type": "" + } + ], + "__p___wargv": [ + { + "name": "param1", + "type": "" + } + ], + "__p___winitenv": [ + { + "name": "param1", + "type": "" + } + ], + "__p__acmdln": [ + { + "name": "param1", + "type": "" + } + ], + "__p__amblksiz": [ + { + "name": "param1", + "type": "" + } + ], + "__p__commode": [ + { + "name": "VOID", + "type": "" + } + ], + "__p__crtAssertBusy": [ + { + "name": "param1", + "type": "" + } + ], + "__p__crtBreakAlloc": [ + { + "name": "param1", + "type": "" + } + ], + "__p__crtDbgFlag": [ + { + "name": "param1", + "type": "" + } + ], + "__p__daylight": [ + { + "name": "param1", + "type": "" + } + ], + "__p__dstbias": [ + { + "name": "param1", + "type": "" + } + ], + "__p__environ": [ + { + "name": "param1", + "type": "" + } + ], + "__p__fmode": [ + { + "name": "VOID", + "type": "" + } + ], + "__p__iob": [ + { + "name": "param1", + "type": "" + } + ], + "__p__mbctype": [ + { + "name": "param1", + "type": "" + } + ], + "__p__osver": [ + { + "name": "param1", + "type": "" + } + ], + "__p__pctype": [ + { + "name": "param1", + "type": "" + } + ], + "__p__pgmptr": [ + { + "name": "param1", + "type": "" + } + ], + "__p__timezone": [ + { + "name": "param1", + "type": "" + } + ], + "__p__tzname": [ + { + "name": "param1", + "type": "" + } + ], + "__p__wcmdln": [ + { + "name": "param1", + "type": "" + } + ], + "__p__wenviron": [ + { + "name": "param1", + "type": "" + } + ], + "__p__winmajor": [ + { + "name": "param1", + "type": "" + } + ], + "__p__winminor": [ + { + "name": "param1", + "type": "" + } + ], + "__p__winver": [ + { + "name": "param1", + "type": "" + } + ], + "__p__wpgmptr": [ + { + "name": "param1", + "type": "" + } + ], + "__pctype_func": [ + { + "name": "param1", + "type": "" + } + ], + "__pxcptinfoptrs": [ + { + "name": "param1", + "type": "" + } + ], + "__set_app_type": [ + { + "name": "at", + "type": "int" + } + ], + "__setusermatherr": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "__threadhandle": [ + { + "name": "param1", + "type": "" + } + ], + "__threadid": [ + { + "name": "param1", + "type": "" + } + ], + "__toascii": [ + { + "name": "param1", + "type": "INT" + } + ], + "__unDName": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + }, + { + "name": "param4", + "type": "POINTER" + }, + { + "name": "param5", + "type": "POINTER" + }, + { + "name": "param6", + "type": "INT" + } + ], + "__unDNameEx": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + }, + { + "name": "param4", + "type": "POINTER" + }, + { + "name": "param5", + "type": "POINTER" + }, + { + "name": "param6", + "type": "POINTER" + }, + { + "name": "param7", + "type": "INT" + } + ], + "__wgetmainargs": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "INT" + }, + { + "name": "param5", + "type": "POINTER" + } + ], + "_abnormal_termination": [ + { + "name": "param1", + "type": "" + } + ], + "_access": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_adj_fdiv_m16i": [ + { + "name": "param1", + "type": "INT" + } + ], + "_adj_fdiv_m32": [ + { + "name": "param1", + "type": "INT" + } + ], + "_adj_fdiv_m32i": [ + { + "name": "param1", + "type": "INT" + } + ], + "_adj_fdiv_m64": [ + { + "name": "param1", + "type": "INT64" + } + ], + "_adj_fdiv_r": [ + { + "name": "param1", + "type": "" + } + ], + "_adj_fdivr_m16i": [ + { + "name": "param1", + "type": "INT" + } + ], + "_adj_fdivr_m32": [ + { + "name": "param1", + "type": "INT" + } + ], + "_adj_fdivr_m32i": [ + { + "name": "param1", + "type": "INT" + } + ], + "_adj_fdivr_m64": [ + { + "name": "param1", + "type": "INT64" + } + ], + "_adj_fpatan": [ + { + "name": "param1", + "type": "" + } + ], + "_adj_fprem": [ + { + "name": "param1", + "type": "" + } + ], + "_adj_fprem1": [ + { + "name": "param1", + "type": "" + } + ], + "_adj_fptan": [ + { + "name": "param1", + "type": "" + } + ], + "_amsg_exit": [ + { + "name": "param1", + "type": "INT" + } + ], + "_assert": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_atodbl": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_atoi64": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_atoldbl": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_beep": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_beginthread": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_beginthreadex": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + }, + { + "name": "param5", + "type": "INT" + }, + { + "name": "param6", + "type": "POINTER" + } + ], + "_c_exit": [ + { + "name": "param1", + "type": "" + } + ], + "_cabs": [ + { + "name": "param1", + "type": "INT" + } + ], + "_callnewh": [ + { + "name": "param1", + "type": "INT" + } + ], + "_calloc_dbg": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_cexit": [ + { + "name": "param1", + "type": "" + } + ], + "_cgets": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_chdir": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_chdrive": [ + { + "name": "param1", + "type": "INT" + } + ], + "_chgsign": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "_chkesp": [ + { + "name": "param1", + "type": "" + } + ], + "_chmod": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_chsize": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_clearfp": [ + { + "name": "param1", + "type": "" + } + ], + "_close": [ + { + "name": "param1", + "type": "INT" + } + ], + "_commit": [ + { + "name": "param1", + "type": "INT" + } + ], + "_control87": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_controlfp": [ + { + "name": "new", + "type": "unsigned int" + }, + { + "name": "mask", + "type": "unsigned int" + } + ], + "_copysign": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "DOUBLE" + } + ], + "_cprintf": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_cputs": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_creat": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_cscanf": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_cwait": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_dup": [ + { + "name": "param1", + "type": "INT" + } + ], + "_dup2": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_ecvt": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_endthread": [ + { + "name": "param1", + "type": "" + } + ], + "_endthreadex": [ + { + "name": "param1", + "type": "INT" + } + ], + "_eof": [ + { + "name": "param1", + "type": "INT" + } + ], + "_errno": [ + { + "name": "param1", + "type": "" + } + ], + "_except_handler2": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_except_handler3": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_execl": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_execle": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_execlp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_execlpe": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_execv": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_execve": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_execvp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_execvpe": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_exit": [ + { + "name": "param1", + "type": "INT" + } + ], + "_expand": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_expand_dbg": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_fcloseall": [ + { + "name": "param1", + "type": "" + } + ], + "_fcvt": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_fdopen": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_fgetchar": [ + { + "name": "param1", + "type": "" + } + ], + "_fgetwchar": [ + { + "name": "param1", + "type": "" + } + ], + "_filbuf": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_filelength": [ + { + "name": "param1", + "type": "INT" + } + ], + "_filelengthi64": [ + { + "name": "param1", + "type": "INT" + } + ], + "_fileno": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_findclose": [ + { + "name": "param1", + "type": "INT" + } + ], + "_findfirst": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_findfirsti64": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_findnext": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_findnexti64": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_finite": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "_flsbuf": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_flushall": [ + { + "name": "param1", + "type": "" + } + ], + "_fpclass": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "_fpieee_flt": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_fpreset": [ + { + "name": "param1", + "type": "" + } + ], + "_fputchar": [ + { + "name": "param1", + "type": "INT" + } + ], + "_fputwchar": [ + { + "name": "param1", + "type": "INT" + } + ], + "_free_dbg": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_fsopen": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_fstat": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_fstati64": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_ftime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_ftol": [ + { + "name": "param1", + "type": "" + } + ], + "_fullpath": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_futime": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_gcvt": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "STRING" + } + ], + "_get_osfhandle": [ + { + "name": "param1", + "type": "INT" + } + ], + "_get_sbh_threshold": [ + { + "name": "param1", + "type": "" + } + ], + "_getch": [ + { + "name": "param1", + "type": "" + } + ], + "_getche": [ + { + "name": "param1", + "type": "" + } + ], + "_getcwd": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_getdcwd": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_getdiskfree": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_getdllprocaddr": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_getdrive": [ + { + "name": "param1", + "type": "" + } + ], + "_getdrives": [ + { + "name": "param1", + "type": "" + } + ], + "_getmaxstdio": [ + { + "name": "param1", + "type": "" + } + ], + "_getmbcp": [ + { + "name": "param1", + "type": "" + } + ], + "_getpid": [ + { + "name": "param1", + "type": "" + } + ], + "_getw": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_getws": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_global_unwind2": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_heapadd": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_heapchk": [ + { + "name": "param1", + "type": "" + } + ], + "_heapmin": [ + { + "name": "param1", + "type": "" + } + ], + "_heapset": [ + { + "name": "param1", + "type": "INT" + } + ], + "_heapwalk": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_hypot": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "DOUBLE" + } + ], + "_i64toa": [ + { + "name": "param1", + "type": "INT64" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_i64tow": [ + { + "name": "param1", + "type": "INT64" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_initterm": [ + { + "name": "pfbegin", + "type": "POINTER" + }, + { + "name": "pfend", + "type": "POINTER" + } + ], + "_initterm_e": [ + { + "name": "pfbegin", + "type": "POINTER" + }, + { + "name": "pfend", + "type": "POINTER" + } + ], + "_isatty": [ + { + "name": "param1", + "type": "INT" + } + ], + "_isctype": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_ismbbkana": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbblead": [ + { + "name": "c", + "type": "unsigned int" + } + ], + "_ismbbtrail": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcalnum": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcalpha": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcdigit": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcgraph": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbchira": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbckata": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcl0": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcl1": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcl2": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbclegal": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbclower": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcprint": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcpunct": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcspace": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcsymbol": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcupper": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbslead": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_ismbstrail": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_isnan": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "_itoa": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_itow": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_j0": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "_j1": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "_jn": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "DOUBLE" + } + ], + "_kbhit": [ + { + "name": "param1", + "type": "" + } + ], + "_lfind": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "INT" + }, + { + "name": "param5", + "type": "POINTER" + } + ], + "_loaddll": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_local_unwind": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_local_unwind2": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_lock": [ + { + "name": "param1", + "type": "INT" + } + ], + "_locking": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_logb": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "_longjmpex": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_lrotl": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_lrotr": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_lsearch": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "INT" + }, + { + "name": "param5", + "type": "POINTER" + } + ], + "_lseek": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_lseeki64": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT64" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_ltoa": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_ltow": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_makepath": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "STRING" + }, + { + "name": "param4", + "type": "STRING" + }, + { + "name": "param5", + "type": "STRING" + } + ], + "_malloc_dbg": [ + { + "name": "size", + "type": "UINT" + } + ], + "_mbbtombc": [ + { + "name": "param1", + "type": "INT" + } + ], + "_mbbtype": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_mbccpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_mbcjistojms": [ + { + "name": "param1", + "type": "INT" + } + ], + "_mbcjmstojis": [ + { + "name": "param1", + "type": "INT" + } + ], + "_mbclen": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_mbctohira": [ + { + "name": "param1", + "type": "INT" + } + ], + "_mbctokata": [ + { + "name": "param1", + "type": "INT" + } + ], + "_mbctolower": [ + { + "name": "param1", + "type": "INT" + } + ], + "_mbctombb": [ + { + "name": "param1", + "type": "INT" + } + ], + "_mbctoupper": [ + { + "name": "param1", + "type": "INT" + } + ], + "_mbsbtype": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_mbscat": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbschr": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_mbscmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbscoll": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbscpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbscspn": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbsdec": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_mbsdup": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_mbsicmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbsicoll": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbsinc": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_mbslen": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_mbslwr": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_mbsnbcat": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsnbcmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsnbcnt": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_mbsnbcoll": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsnbcpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsnbicmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsnbicoll": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsnbset": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsncat": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsnccnt": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_mbsncmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsncpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsnextc": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_mbsnicmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsninc": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_mbsnset": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbspbrk": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbsrchr": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_mbsrev": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_mbsset": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_mbsspn": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbsspnp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbsstr": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbstok": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbstrlen": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_mbsupr": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_memccpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + }, + { + "name": "param4", + "type": "INT" + } + ], + "_memicmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mkdir": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_mktemp": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_msize": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_msize_dbg": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_nextafter": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "DOUBLE" + } + ], + "_onexit": [ + { + "name": "function", + "type": "POINTER" + } + ], + "_open": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_open_osfhandle": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_pclose": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_pipe": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_popen": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_purecall": [ + { + "name": "param1", + "type": "" + } + ], + "_putch": [ + { + "name": "param1", + "type": "INT" + } + ], + "_putenv": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_putw": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_putws": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_read": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_realloc_dbg": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_rmdir": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_rmtmp": [ + { + "name": "param1", + "type": "" + } + ], + "_rotl": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_rotr": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_safe_fdiv": [ + { + "name": "param1", + "type": "" + } + ], + "_safe_fdivr": [ + { + "name": "param1", + "type": "" + } + ], + "_safe_fprem": [ + { + "name": "param1", + "type": "" + } + ], + "_safe_fprem1": [ + { + "name": "param1", + "type": "" + } + ], + "_scalb": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_searchenv": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_seh_longjmp_unwind4": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_seh_longjmp_unwind": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_set_error_mode": [ + { + "name": "param1", + "type": "INT" + } + ], + "_set_sbh_threshold": [ + { + "name": "param1", + "type": "INT" + } + ], + "_seterrormode": [ + { + "name": "param1", + "type": "INT" + } + ], + "_setjmp": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_setjmp3": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_setmaxstdio": [ + { + "name": "param1", + "type": "INT" + } + ], + "_setmbcp": [ + { + "name": "param1", + "type": "INT" + } + ], + "_setmode": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_sleep": [ + { + "name": "param1", + "type": "INT" + } + ], + "_snprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "STRING" + } + ], + "_snwprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "WSTRING" + } + ], + "_sopen": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_spawnl": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "STRING" + } + ], + "_spawnle": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "STRING" + } + ], + "_spawnlp": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "STRING" + } + ], + "_spawnlpe": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "STRING" + } + ], + "_spawnv": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_spawnve": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_spawnvp": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_spawnvpe": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_splitpath": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + }, + { + "name": "param5", + "type": "POINTER" + } + ], + "_stat": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_stati64": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_statusfp": [ + { + "name": "param1", + "type": "" + } + ], + "_strcmpi": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_strdate": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_strdup": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_strerror": [ + { + "name": "param1", + "type": "INT" + } + ], + "_stricmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_stricoll": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_strlwr": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_strncoll": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_strnicmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_strnicoll": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_strnset": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_strrev": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_strset": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_strtime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_strupr": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_swab": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_tell": [ + { + "name": "param1", + "type": "INT" + } + ], + "_telli64": [ + { + "name": "param1", + "type": "INT" + } + ], + "_tempnam": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_tolower": [ + { + "name": "param1", + "type": "INT" + } + ], + "_toupper": [ + { + "name": "param1", + "type": "INT" + } + ], + "_tzset": [ + { + "name": "param1", + "type": "" + } + ], + "_ui64toa": [ + { + "name": "param1", + "type": "INT64" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_ui64tow": [ + { + "name": "param1", + "type": "INT64" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_ultoa": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_ultow": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_umask": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ungetch": [ + { + "name": "param1", + "type": "INT" + } + ], + "_unlink": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_unloaddll": [ + { + "name": "param1", + "type": "INT" + } + ], + "_unlock": [ + { + "name": "param1", + "type": "INT" + } + ], + "_utime": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_vsnprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "STRING" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_vsnwprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "WSTRING" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_waccess": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_wasctime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_wchdir": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wchmod": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_wcreat": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_wcsdup": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wcsicmp": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wcsicoll": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wcslwr": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wcsncoll": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_wcsnicmp": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_wcsnicoll": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_wcsnset": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_wcsrev": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wcsset": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_wcsupr": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wctime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_wexecl": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wexecle": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wexeclp": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wexeclpe": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wexecv": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_wexecve": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_wexecvp": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_wexecvpe": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_wfdopen": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wfindfirst": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_wfindfirsti64": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_wfindnext": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_wfindnexti64": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_wfopen": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wfopen_s": [ + { + "name": "pFile", + "type": "POINTER" + }, + { + "name": "filename", + "type": "WSTRING" + }, + { + "name": "mode", + "type": "WSTRING" + } + ], + "_wfreopen": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_wfsopen": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_wfullpath": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_wgetcwd": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_wgetdcwd": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_wgetenv": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wmakepath": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "WSTRING" + }, + { + "name": "param4", + "type": "WSTRING" + }, + { + "name": "param5", + "type": "WSTRING" + } + ], + "_wmkdir": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wmktemp": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wopen": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_wperror": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wpopen": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wputenv": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wremove": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wrename": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_write": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_wrmdir": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wsearchenv": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_wsetlocale": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wsopen": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_wspawnl": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "WSTRING" + } + ], + "_wspawnle": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "WSTRING" + } + ], + "_wspawnlp": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "WSTRING" + } + ], + "_wspawnlpe": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "WSTRING" + } + ], + "_wspawnv": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_wspawnve": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_wspawnvp": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_wspawnvpe": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_wsplitpath": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + }, + { + "name": "param5", + "type": "POINTER" + } + ], + "_wstat": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_wstati64": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_wstrdate": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_wstrtime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_wsystem": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wtempnam": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wtmpnam": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_wtoi": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wtoi64": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wtol": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wunlink": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wutime": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_y0": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "_y1": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "_yn": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "DOUBLE" + } + ], + "abort": [ + { + "name": "param1", + "type": "" + } + ], + "abs": [ + { + "name": "param1", + "type": "INT" + } + ], + "acos": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "asctime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "asin": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "atan": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "atan2": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "DOUBLE" + } + ], + "atexit": [ + { + "name": "func", + "type": "void" + } + ], + "atof": [ + { + "name": "param1", + "type": "STRING" + } + ], + "atoi": [ + { + "name": "param1", + "type": "STRING" + } + ], + "atol": [ + { + "name": "param1", + "type": "STRING" + } + ], + "bsearch": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + }, + { + "name": "param4", + "type": "INT" + }, + { + "name": "param5", + "type": "POINTER" + } + ], + "calloc": [ + { + "name": "num", + "type": "SIZE_T" + }, + { + "name": "size", + "type": "SIZE_T" + } + ], + "ceil": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "clearerr": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "clock": [ + { + "name": "param1", + "type": "" + } + ], + "cos": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "cosh": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "ctime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "difftime": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "div": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "exit": [ + { + "name": "status", + "type": "INT" + } + ], + "exp": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "fabs": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "fclose": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "feof": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "ferror": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "fflush": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "fgetc": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "fgetpos": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "fgets": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "fgetwc": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "fgetws": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "floor": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "fmod": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "DOUBLE" + } + ], + "fopen": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "fprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "fputc": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "fputs": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "fputwc": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "fputws": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "fread": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "free": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "freopen": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "frexp": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "fscanf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "fseek": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "fsetpos": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "ftell": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "fwprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "fwrite": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "fwscanf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "getc": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "getchar": [ + { + "name": "param1", + "type": "" + } + ], + "getenv": [ + { + "name": "param1", + "type": "STRING" + } + ], + "gets": [ + { + "name": "param1", + "type": "STRING" + } + ], + "getwc": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "getwchar": [ + { + "name": "param1", + "type": "" + } + ], + "gmtime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "is_wctype": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "isalnum": [ + { + "name": "param1", + "type": "INT" + } + ], + "isalpha": [ + { + "name": "param1", + "type": "INT" + } + ], + "iscntrl": [ + { + "name": "param1", + "type": "INT" + } + ], + "isdigit": [ + { + "name": "param1", + "type": "INT" + } + ], + "isgraph": [ + { + "name": "param1", + "type": "INT" + } + ], + "isleadbyte": [ + { + "name": "param1", + "type": "INT" + } + ], + "islower": [ + { + "name": "param1", + "type": "INT" + } + ], + "isprint": [ + { + "name": "param1", + "type": "INT" + } + ], + "ispunct": [ + { + "name": "param1", + "type": "INT" + } + ], + "isspace": [ + { + "name": "param1", + "type": "INT" + } + ], + "isupper": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswalnum": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswalpha": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswascii": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswcntrl": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswctype": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "iswdigit": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswgraph": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswlower": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswprint": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswpunct": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswspace": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswupper": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswxdigit": [ + { + "name": "param1", + "type": "INT" + } + ], + "isxdigit": [ + { + "name": "param1", + "type": "INT" + } + ], + "labs": [ + { + "name": "param1", + "type": "INT" + } + ], + "ldexp": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "INT" + } + ], + "ldiv": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "localeconv": [ + { + "name": "param1", + "type": "" + } + ], + "localtime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "log": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "log10": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "longjmp": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "lstrlenA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "lstrlenW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "malloc": [ + { + "name": "param1", + "type": "INT" + } + ], + "mblen": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "mbstowcs": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "mbtowc": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "memchr": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "memcmp": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "memcpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "memmove": [ + { + "name": "dest", + "type": "POINTER" + }, + { + "name": "src", + "type": "POINTER" + }, + { + "name": "num", + "type": "INT" + } + ], + "memset": [ + { + "name": "dest", + "type": "POINTER" + }, + { + "name": "c", + "type": "INT" + }, + { + "name": "count", + "type": "INT" + } + ], + "mktime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "modf": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "perror": [ + { + "name": "param1", + "type": "STRING" + } + ], + "pow": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "DOUBLE" + } + ], + "printf": [ + { + "name": "param1", + "type": "STRING" + } + ], + "putc": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "putchar": [ + { + "name": "param1", + "type": "INT" + } + ], + "puts": [ + { + "name": "str", + "type": "STRING" + } + ], + "putwc": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "putwchar": [ + { + "name": "param1", + "type": "INT" + } + ], + "qsort": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "raise": [ + { + "name": "param1", + "type": "INT" + } + ], + "rand": [ + { + "name": "param1", + "type": "" + } + ], + "realloc": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "remove": [ + { + "name": "param1", + "type": "STRING" + } + ], + "rename": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "rewind": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "scanf": [ + { + "name": "param1", + "type": "STRING" + } + ], + "setbuf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "setlocale": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "setvbuf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + }, + { + "name": "param4", + "type": "INT" + } + ], + "signal": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "sin": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "sinh": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "sprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "sqrt": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "srand": [ + { + "name": "param1", + "type": "INT" + } + ], + "sscanf": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strcat": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strchr": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "strcmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strcoll": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strcpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strcspn": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strerror": [ + { + "name": "param1", + "type": "INT" + } + ], + "strftime": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "STRING" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "strlen": [ + { + "name": "str", + "type": "STRING" + } + ], + "strncat": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "strncmp": [ + { + "name": "string1", + "type": "STRING" + }, + { + "name": "string2", + "type": "STRING" + }, + { + "name": "count", + "type": "INT" + } + ], + "strncpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "strpbrk": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strrchr": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "strspn": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strstr": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strtod": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "strtok": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strtol": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "strtoul": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "strxfrm": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "swprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "swscanf": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "system": [ + { + "name": "param1", + "type": "STRING" + } + ], + "tan": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "tanh": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "time": [ + { + "name": "destTime", + "type": "POINTER" + } + ], + "tmpfile": [ + { + "name": "param1", + "type": "" + } + ], + "tmpnam": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "tolower": [ + { + "name": "param1", + "type": "INT" + } + ], + "toupper": [ + { + "name": "param1", + "type": "INT" + } + ], + "towlower": [ + { + "name": "param1", + "type": "INT" + } + ], + "towupper": [ + { + "name": "param1", + "type": "INT" + } + ], + "ungetc": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "ungetwc": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "vfprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "vfwprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "vprintf": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "vsprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "vswprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "vwprintf": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "wcscat": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "wcschr": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "wcscmp": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "wcscoll": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "wcscpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "wcscspn": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "wcsftime": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "WSTRING" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "wcslen": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "wcsncat": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "wcsncmp": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "wcsncpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "wcspbrk": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "wcsrchr": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "wcsspn": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "wcsstr": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "wcstod": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "wcstok": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "wcstol": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "wcstombs": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "wcstoul": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "wcsxfrm": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "wctomb": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "wprintf": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "wscanf": [ + { + "name": "param1", + "type": "WSTRING" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/msvfw32_dll.json b/qiling/extensions/windows_sdk/defs/msvfw32_dll.json new file mode 100644 index 000000000..25d256dcf --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/msvfw32_dll.json @@ -0,0 +1,734 @@ +{ + "ICInfo": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "lpicinfo", + "type": "ICINFO" + } + ], + "ICInstall": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "szDesc", + "type": "LPSTR" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "ICRemove": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "ICGetInfo": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "picinfo", + "type": "ICINFO" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "ICOpen": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "wMode", + "type": "UINT" + } + ], + "ICOpenFunction": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "wMode", + "type": "UINT" + }, + { + "name": "lpfnHandler", + "type": "FARPROC" + } + ], + "ICClose": [ + { + "name": "hic", + "type": "HIC" + } + ], + "ICSendMessage": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "msg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "ICCompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpbiOutput", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "lpbiInput", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "lpckid", + "type": "LPDWORD" + }, + { + "name": "lpdwFlags", + "type": "LPDWORD" + }, + { + "name": "lFrameNum", + "type": "LONG" + }, + { + "name": "dwFrameSize", + "type": "DWORD" + }, + { + "name": "dwQuality", + "type": "DWORD" + }, + { + "name": "lpbiPrev", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpPrev", + "type": "LPVOID" + } + ], + "ICDecompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpbiFormat", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpBits", + "type": "LPVOID" + } + ], + "ICDrawBegin": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDst", + "type": "int" + }, + { + "name": "yDst", + "type": "int" + }, + { + "name": "dxDst", + "type": "int" + }, + { + "name": "dyDst", + "type": "int" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "dxSrc", + "type": "int" + }, + { + "name": "dySrc", + "type": "int" + }, + { + "name": "dwRate", + "type": "DWORD" + }, + { + "name": "dwScale", + "type": "DWORD" + } + ], + "ICDraw": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpFormat", + "type": "LPVOID" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "lTime", + "type": "LONG" + } + ], + "ICLocate": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "wFlags", + "type": "WORD" + } + ], + "ICGetDisplayFormat": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "BitDepth", + "type": "int" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + } + ], + "ICImageCompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFO" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFO" + }, + { + "name": "lQuality", + "type": "LONG" + }, + { + "name": "plSize", + "type": "LONG" + } + ], + "ICImageDecompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFO" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFO" + } + ], + "ICCompressorChoose": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "pvIn", + "type": "LPVOID" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "pc", + "type": "PCOMPVARS" + }, + { + "name": "lpszTitle", + "type": "LPSTR" + } + ], + "ICSeqCompressFrameStart": [ + { + "name": "pc", + "type": "PCOMPVARS" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFO" + } + ], + "ICSeqCompressFrameEnd": [ + { + "name": "pc", + "type": "PCOMPVARS" + } + ], + "ICSeqCompressFrame": [ + { + "name": "pc", + "type": "PCOMPVARS" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "pfKey", + "type": "BOOL" + }, + { + "name": "plSize", + "type": "LONG" + } + ], + "ICCompressorFree": [ + { + "name": "pc", + "type": "PCOMPVARS" + } + ], + "DrawDibOpen": [ + { + "name": "VOID", + "type": "void" + } + ], + "DrawDibClose": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibGetBuffer": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "dwSize", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "DrawDibGetPalette": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibSetPalette": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hpal", + "type": "HPALETTE" + } + ], + "DrawDibChangePalette": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "iStart", + "type": "int" + }, + { + "name": "iLen", + "type": "int" + }, + { + "name": "lppe", + "type": "LPPALETTEENTRY" + } + ], + "DrawDibRealize": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "fBackground", + "type": "BOOL" + } + ], + "DrawDibStart": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "rate", + "type": "DWORD" + } + ], + "DrawDibStop": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibBegin": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "dxDst", + "type": "int" + }, + { + "name": "dyDst", + "type": "int" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "dxSrc", + "type": "int" + }, + { + "name": "dySrc", + "type": "int" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "DrawDibDraw": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDst", + "type": "int" + }, + { + "name": "yDst", + "type": "int" + }, + { + "name": "dxDst", + "type": "int" + }, + { + "name": "dyDst", + "type": "int" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "dxSrc", + "type": "int" + }, + { + "name": "dySrc", + "type": "int" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "DrawDibEnd": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibTime": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "lpddtime", + "type": "LPDRAWDIBTIME" + } + ], + "DrawDibProfileDisplay": [ + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + } + ], + "MCIWndCreateA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "szFile", + "type": "LPCSTR" + } + ], + "MCIWndCreateW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "szFile", + "type": "LPCWSTR" + } + ], + "MCIWndRegisterClass": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetOpenFileNamePreviewA": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEA" + } + ], + "GetSaveFileNamePreviewA": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEA" + } + ], + "GetOpenFileNamePreviewW": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEW" + } + ], + "GetSaveFileNamePreviewW": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEW" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/mswsock_dll.json b/qiling/extensions/windows_sdk/defs/mswsock_dll.json new file mode 100644 index 000000000..dc39bb284 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/mswsock_dll.json @@ -0,0 +1,398 @@ +{ + "WSARecvEx": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "len", + "type": "int" + }, + { + "name": "flags", + "type": "int" + } + ], + "TransmitFile": [ + { + "name": "hSocket", + "type": "SOCKET" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "nNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesPerSend", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpTransmitBuffers", + "type": "LPTRANSMIT_FILE_BUFFERS" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "AcceptEx": [ + { + "name": "sListenSocket", + "type": "SOCKET" + }, + { + "name": "sAcceptSocket", + "type": "SOCKET" + }, + { + "name": "lpOutputBuffer", + "type": "PVOID" + }, + { + "name": "dwReceiveDataLength", + "type": "DWORD" + }, + { + "name": "dwLocalAddressLength", + "type": "DWORD" + }, + { + "name": "dwRemoteAddressLength", + "type": "DWORD" + }, + { + "name": "lpdwBytesReceived", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "GetAcceptExSockaddrs": [ + { + "name": "lpOutputBuffer", + "type": "PVOID" + }, + { + "name": "dwReceiveDataLength", + "type": "DWORD" + }, + { + "name": "dwLocalAddressLength", + "type": "DWORD" + }, + { + "name": "dwRemoteAddressLength", + "type": "DWORD" + }, + { + "name": "LocalSockaddr", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "LocalSockaddrLength", + "type": "LPINT" + }, + { + "name": "RemoteSockaddr", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "RemoteSockaddrLength", + "type": "LPINT" + } + ], + "EnumProtocolsA": [ + { + "name": "lpiProtocols", + "type": "LPINT" + }, + { + "name": "lpProtocolBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "EnumProtocolsW": [ + { + "name": "lpiProtocols", + "type": "LPINT" + }, + { + "name": "lpProtocolBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "GetAddressByNameA": [ + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpServiceType", + "type": "LPGUID" + }, + { + "name": "lpServiceName", + "type": "LPSTR" + }, + { + "name": "lpiProtocols", + "type": "LPINT" + }, + { + "name": "dwResolution", + "type": "DWORD" + }, + { + "name": "lpServiceAsyncInfo", + "type": "LPSERVICE_ASYNC_INFO" + }, + { + "name": "lpCsaddrBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpAliasBuffer", + "type": "LPSTR" + }, + { + "name": "lpdwAliasBufferLength", + "type": "LPDWORD" + } + ], + "GetAddressByNameW": [ + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpServiceType", + "type": "LPGUID" + }, + { + "name": "lpServiceName", + "type": "LPWSTR" + }, + { + "name": "lpiProtocols", + "type": "LPINT" + }, + { + "name": "dwResolution", + "type": "DWORD" + }, + { + "name": "lpServiceAsyncInfo", + "type": "LPSERVICE_ASYNC_INFO" + }, + { + "name": "lpCsaddrBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpAliasBuffer", + "type": "LPWSTR" + }, + { + "name": "lpdwAliasBufferLength", + "type": "LPDWORD" + } + ], + "GetTypeByNameA": [ + { + "name": "lpServiceName", + "type": "LPSTR" + }, + { + "name": "lpServiceType", + "type": "LPGUID" + } + ], + "GetTypeByNameW": [ + { + "name": "lpServiceName", + "type": "LPWSTR" + }, + { + "name": "lpServiceType", + "type": "LPGUID" + } + ], + "GetNameByTypeA": [ + { + "name": "lpServiceType", + "type": "LPGUID" + }, + { + "name": "lpServiceName", + "type": "LPSTR" + }, + { + "name": "dwNameLength", + "type": "DWORD" + } + ], + "GetNameByTypeW": [ + { + "name": "lpServiceType", + "type": "LPGUID" + }, + { + "name": "lpServiceName", + "type": "LPWSTR" + }, + { + "name": "dwNameLength", + "type": "DWORD" + } + ], + "SetServiceA": [ + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "dwOperation", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpServiceInfo", + "type": "LPSERVICE_INFOA" + }, + { + "name": "lpServiceAsyncInfo", + "type": "LPSERVICE_ASYNC_INFO" + }, + { + "name": "lpdwStatusFlags", + "type": "LPDWORD" + } + ], + "SetServiceW": [ + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "dwOperation", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpServiceInfo", + "type": "LPSERVICE_INFOW" + }, + { + "name": "lpServiceAsyncInfo", + "type": "LPSERVICE_ASYNC_INFO" + }, + { + "name": "lpdwStatusFlags", + "type": "LPDWORD" + } + ], + "GetServiceA": [ + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpGuid", + "type": "LPGUID" + }, + { + "name": "lpServiceName", + "type": "LPSTR" + }, + { + "name": "dwProperties", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpServiceAsyncInfo", + "type": "LPSERVICE_ASYNC_INFO" + } + ], + "GetServiceW": [ + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpGuid", + "type": "LPGUID" + }, + { + "name": "lpServiceName", + "type": "LPWSTR" + }, + { + "name": "dwProperties", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpServiceAsyncInfo", + "type": "LPSERVICE_ASYNC_INFO" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/mtxdm_dll.json b/qiling/extensions/windows_sdk/defs/mtxdm_dll.json new file mode 100644 index 000000000..b48740340 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/mtxdm_dll.json @@ -0,0 +1,8 @@ +{ + "GetDispenserManager": [ + { + "name": "VOID", + "type": "IDispenserManager" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/mydocs_dll.json b/qiling/extensions/windows_sdk/defs/mydocs_dll.json new file mode 100644 index 000000000..f07d952d3 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/mydocs_dll.json @@ -0,0 +1,8 @@ +{ + "PerUserInit": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/ncrypt_dll.json b/qiling/extensions/windows_sdk/defs/ncrypt_dll.json new file mode 100644 index 000000000..6a33cd3a0 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/ncrypt_dll.json @@ -0,0 +1,824 @@ +{ + "NCryptOpenStorageProvider": [ + { + "name": "phProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "pszProviderName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptEnumAlgorithms": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "dwAlgOperations", + "type": "DWORD" + }, + { + "name": "pdwAlgCount", + "type": "DWORD" + }, + { + "name": "ppAlgList", + "type": "NCryptAlgorithmName" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptIsAlgSupported": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "pszAlgId", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptEnumKeys": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "pszScope", + "type": "LPCWSTR" + }, + { + "name": "ppKeyName", + "type": "NCryptKeyName" + }, + { + "name": "ppEnumState", + "type": "PVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptEnumStorageProviders": [ + { + "name": "pdwProviderCount", + "type": "DWORD" + }, + { + "name": "ppProviderList", + "type": "NCryptProviderName" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptFreeBuffer": [ + { + "name": "pvInput", + "type": "PVOID" + } + ], + "NCryptOpenKey": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "phKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pszKeyName", + "type": "LPCWSTR" + }, + { + "name": "dwLegacyKeySpec", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptCreatePersistedKey": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "phKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pszAlgId", + "type": "LPCWSTR" + }, + { + "name": "pszKeyName", + "type": "LPCWSTR" + }, + { + "name": "dwLegacyKeySpec", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptGetProperty": [ + { + "name": "hObject", + "type": "NCRYPT_HANDLE" + }, + { + "name": "pszProperty", + "type": "LPCWSTR" + }, + { + "name": "pbOutput", + "type": "PBYTE" + }, + { + "name": "cbOutput", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptSetProperty": [ + { + "name": "hObject", + "type": "NCRYPT_HANDLE" + }, + { + "name": "pszProperty", + "type": "LPCWSTR" + }, + { + "name": "pbInput", + "type": "PBYTE" + }, + { + "name": "cbInput", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptFinalizeKey": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptEncrypt": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pbInput", + "type": "PBYTE" + }, + { + "name": "cbInput", + "type": "DWORD" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbOutput", + "type": "PBYTE" + }, + { + "name": "cbOutput", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptDecrypt": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pbInput", + "type": "PBYTE" + }, + { + "name": "cbInput", + "type": "DWORD" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbOutput", + "type": "PBYTE" + }, + { + "name": "cbOutput", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptImportKey": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "hImportKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pszBlobType", + "type": "LPCWSTR" + }, + { + "name": "pParameterList", + "type": "NCryptBufferDesc" + }, + { + "name": "phKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pbData", + "type": "PBYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptExportKey": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "hExportKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pszBlobType", + "type": "LPCWSTR" + }, + { + "name": "pParameterList", + "type": "NCryptBufferDesc" + }, + { + "name": "pbOutput", + "type": "PBYTE" + }, + { + "name": "cbOutput", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptSignHash": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbHashValue", + "type": "PBYTE" + }, + { + "name": "cbHashValue", + "type": "DWORD" + }, + { + "name": "pbSignature", + "type": "PBYTE" + }, + { + "name": "cbSignature", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptVerifySignature": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbHashValue", + "type": "PBYTE" + }, + { + "name": "cbHashValue", + "type": "DWORD" + }, + { + "name": "pbSignature", + "type": "PBYTE" + }, + { + "name": "cbSignature", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptDeleteKey": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptFreeObject": [ + { + "name": "hObject", + "type": "NCRYPT_HANDLE" + } + ], + "NCryptIsKeyHandle": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + } + ], + "NCryptTranslateHandle": [ + { + "name": "phProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "phKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "hLegacyProv", + "type": "HCRYPTPROV" + }, + { + "name": "hLegacyKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwLegacyKeySpec", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptNotifyChangeKey": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "phEvent", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptSecretAgreement": [ + { + "name": "hPrivKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "hPubKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "phAgreedSecret", + "type": "NCRYPT_SECRET_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptDeriveKey": [ + { + "name": "hSharedSecret", + "type": "NCRYPT_SECRET_HANDLE" + }, + { + "name": "pwszKDF", + "type": "LPCWSTR" + }, + { + "name": "pParameterList", + "type": "NCryptBufferDesc" + }, + { + "name": "pbDerivedKey", + "type": "PBYTE" + }, + { + "name": "cbDerivedKey", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "NCryptKeyDerivation": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pParameterList", + "type": "NCryptBufferDesc" + }, + { + "name": "pbDerivedKey", + "type": "PUCHAR" + }, + { + "name": "cbDerivedKey", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "NCryptCreateClaim": [ + { + "name": "hSubjectKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "hAuthorityKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "dwClaimType", + "type": "DWORD" + }, + { + "name": "pParameterList", + "type": "NCryptBufferDesc" + }, + { + "name": "pbClaimBlob", + "type": "PBYTE" + }, + { + "name": "cbClaimBlob", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptVerifyClaim": [ + { + "name": "hSubjectKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "hAuthorityKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "dwClaimType", + "type": "DWORD" + }, + { + "name": "pParameterList", + "type": "NCryptBufferDesc" + }, + { + "name": "pbClaimBlob", + "type": "PBYTE" + }, + { + "name": "cbClaimBlob", + "type": "DWORD" + }, + { + "name": "pOutput", + "type": "NCryptBufferDesc" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptRegisterProtectionDescriptorName": [ + { + "name": "pwszName", + "type": "LPCWSTR" + }, + { + "name": "pwszDescriptorString", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptQueryProtectionDescriptorName": [ + { + "name": "pwszName", + "type": "LPCWSTR" + }, + { + "name": "pwszDescriptorString", + "type": "LPWSTR" + }, + { + "name": "pcDescriptorString", + "type": "SIZE_T" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptCreateProtectionDescriptor": [ + { + "name": "pwszDescriptorString", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" + } + ], + "NCryptCloseProtectionDescriptor": [ + { + "name": "hDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" + } + ], + "NCryptGetProtectionDescriptorInfo": [ + { + "name": "hDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" + }, + { + "name": "pMemPara", + "type": "NCRYPT_ALLOC_PARA" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "ppvInfo", + "type": "void" + } + ], + "NCryptProtectSecret": [ + { + "name": "hDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "ULONG" + }, + { + "name": "pMemPara", + "type": "NCRYPT_ALLOC_PARA" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "ppbProtectedBlob", + "type": "BYTE" + }, + { + "name": "pcbProtectedBlob", + "type": "ULONG" + } + ], + "NCryptUnprotectSecret": [ + { + "name": "phDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbProtectedBlob", + "type": "BYTE" + }, + { + "name": "cbProtectedBlob", + "type": "ULONG" + }, + { + "name": "pMemPara", + "type": "NCRYPT_ALLOC_PARA" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "ppbData", + "type": "BYTE" + }, + { + "name": "pcbData", + "type": "ULONG" + } + ], + "NCryptStreamOpenToProtect": [ + { + "name": "hDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pStreamInfo", + "type": "NCRYPT_PROTECT_STREAM_INFO" + }, + { + "name": "phStream", + "type": "NCRYPT_STREAM_HANDLE" + } + ], + "NCryptStreamOpenToUnprotect": [ + { + "name": "pStreamInfo", + "type": "NCRYPT_PROTECT_STREAM_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "phStream", + "type": "NCRYPT_STREAM_HANDLE" + } + ], + "NCryptStreamOpenToUnprotectEx": [ + { + "name": "pStreamInfo", + "type": "NCRYPT_PROTECT_STREAM_INFO_EX" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "phStream", + "type": "NCRYPT_STREAM_HANDLE" + } + ], + "NCryptStreamUpdate": [ + { + "name": "hStream", + "type": "NCRYPT_STREAM_HANDLE" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "SIZE_T" + }, + { + "name": "fFinal", + "type": "BOOL" + } + ], + "NCryptStreamClose": [ + { + "name": "hStream", + "type": "NCRYPT_STREAM_HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/netapi32_dll.json b/qiling/extensions/windows_sdk/defs/netapi32_dll.json new file mode 100644 index 000000000..576363d14 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/netapi32_dll.json @@ -0,0 +1,2012 @@ +{ + "NetStatisticsGet": [ + { + "name": "ServerName", + "type": "LPTSTR" + }, + { + "name": "Service", + "type": "LPTSTR" + }, + { + "name": "Level", + "type": "DWORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "Buffer", + "type": "LPBYTE" + } + ], + "NetServerEnum": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "servertype", + "type": "DWORD" + }, + { + "name": "domain", + "type": "LPCWSTR" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetServerGetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetServerSetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "ParmError", + "type": "LPDWORD" + } + ], + "NetServerDiskEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetServerComputerNameAdd": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "EmulatedDomainName", + "type": "LPWSTR" + }, + { + "name": "EmulatedServerName", + "type": "LPWSTR" + } + ], + "NetServerComputerNameDel": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "EmulatedServerName", + "type": "LPWSTR" + } + ], + "NetServerTransportAdd": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetServerTransportAddEx": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetServerTransportDel": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetServerTransportEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "DsGetDcNameA": [ + { + "name": "ComputerName", + "type": "LPCSTR" + }, + { + "name": "DomainName", + "type": "LPCSTR" + }, + { + "name": "DomainGuid", + "type": "GUID" + }, + { + "name": "SiteName", + "type": "LPCSTR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "DomainControllerInfo", + "type": "PDOMAIN_CONTROLLER_INFOA" + } + ], + "DsGetDcNameW": [ + { + "name": "ComputerName", + "type": "LPCWSTR" + }, + { + "name": "DomainName", + "type": "LPCWSTR" + }, + { + "name": "DomainGuid", + "type": "GUID" + }, + { + "name": "SiteName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "DomainControllerInfo", + "type": "PDOMAIN_CONTROLLER_INFOW" + } + ], + "DsGetSiteNameA": [ + { + "name": "ComputerName", + "type": "LPCSTR" + }, + { + "name": "SiteName", + "type": "LPSTR" + } + ], + "DsGetSiteNameW": [ + { + "name": "ComputerName", + "type": "LPCWSTR" + }, + { + "name": "SiteName", + "type": "LPWSTR" + } + ], + "DsValidateSubnetNameW": [ + { + "name": "SubnetName", + "type": "LPCWSTR" + } + ], + "DsValidateSubnetNameA": [ + { + "name": "SubnetName", + "type": "LPCSTR" + } + ], + "DsEnumerateDomainTrustsW": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "Domains", + "type": "PDS_DOMAIN_TRUSTSW" + }, + { + "name": "DomainCount", + "type": "PULONG" + } + ], + "DsEnumerateDomainTrustsA": [ + { + "name": "ServerName", + "type": "LPSTR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "Domains", + "type": "PDS_DOMAIN_TRUSTSA" + }, + { + "name": "DomainCount", + "type": "PULONG" + } + ], + "DsGetDcSiteCoverageW": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "EntryCount", + "type": "PULONG" + }, + { + "name": "SiteNames", + "type": "LPWSTR" + } + ], + "DsGetDcSiteCoverageA": [ + { + "name": "ServerName", + "type": "LPCSTR" + }, + { + "name": "EntryCount", + "type": "PULONG" + }, + { + "name": "SiteNames", + "type": "LPSTR" + } + ], + "DsDeregisterDnsHostRecordsW": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "DnsDomainName", + "type": "LPWSTR" + }, + { + "name": "DomainGuid", + "type": "GUID" + }, + { + "name": "DsaGuid", + "type": "GUID" + }, + { + "name": "DnsHostName", + "type": "LPWSTR" + } + ], + "DsDeregisterDnsHostRecordsA": [ + { + "name": "ServerName", + "type": "LPSTR" + }, + { + "name": "DnsDomainName", + "type": "LPSTR" + }, + { + "name": "DomainGuid", + "type": "GUID" + }, + { + "name": "DsaGuid", + "type": "GUID" + }, + { + "name": "DnsHostName", + "type": "LPSTR" + } + ], + "Netbios": [ + { + "name": "pncb", + "type": "PNCB" + } + ], + "DavAddConnection": [ + { + "name": "ConnectionHandle", + "type": "HANDLE" + }, + { + "name": "RemoteName", + "type": "LPCWSTR" + }, + { + "name": "UserName", + "type": "LPCWSTR" + }, + { + "name": "Password", + "type": "LPCWSTR" + }, + { + "name": "ClientCert", + "type": "PBYTE" + }, + { + "name": "CertSize", + "type": "DWORD" + } + ], + "DavDeleteConnection": [ + { + "name": "ConnectionHandle", + "type": "HANDLE" + } + ], + "DavGetUNCFromHTTPPath": [ + { + "name": "Url", + "type": "LPCWSTR" + }, + { + "name": "UncPath", + "type": "LPWSTR" + }, + { + "name": "lpSize", + "type": "LPDWORD" + } + ], + "DavGetHTTPFromUNCPath": [ + { + "name": "UncPath", + "type": "LPCWSTR" + }, + { + "name": "Url", + "type": "LPWSTR" + }, + { + "name": "lpSize", + "type": "LPDWORD" + } + ], + "DavGetExtendedError": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "ExtError", + "type": "DWORD" + }, + { + "name": "ExtErrorString", + "type": "LPWSTR" + }, + { + "name": "cChSize", + "type": "DWORD" + } + ], + "DavFlushFile": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "NetUseAdd": [ + { + "name": "servername", + "type": "LPTSTR" + }, + { + "name": "LevelFlags", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetUseDel": [ + { + "name": "UncServerName", + "type": "LPWSTR" + }, + { + "name": "UseName", + "type": "LPWSTR" + }, + { + "name": "ForceLevelFlags", + "type": "DWORD" + } + ], + "NetUseEnum": [ + { + "name": "UncServerName", + "type": "LPWSTR" + }, + { + "name": "LevelFlags", + "type": "DWORD" + }, + { + "name": "BufPtr", + "type": "LPBYTE" + }, + { + "name": "PreferedMaximumSize", + "type": "DWORD" + }, + { + "name": "EntriesRead", + "type": "LPDWORD" + }, + { + "name": "TotalEntries", + "type": "LPDWORD" + }, + { + "name": "ResumeHandle", + "type": "LPDWORD" + } + ], + "NetUseGetInfo": [ + { + "name": "UncServerName", + "type": "LPWSTR" + }, + { + "name": "UseName", + "type": "LPWSTR" + }, + { + "name": "LevelFlags", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetUserAdd": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetUserEnum": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "filter", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "PDWORD" + } + ], + "NetUserGetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetUserSetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetUserDel": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + } + ], + "NetUserGetGroups": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + } + ], + "NetUserSetGroups": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "num_entries", + "type": "DWORD" + } + ], + "NetUserGetLocalGroups": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + } + ], + "NetUserModalsGet": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetUserModalsSet": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetUserChangePassword": [ + { + "name": "domainname", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + }, + { + "name": "oldpassword", + "type": "LPCWSTR" + }, + { + "name": "newpassword", + "type": "LPCWSTR" + } + ], + "NetGroupAdd": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetGroupAddUser": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "GroupName", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + } + ], + "NetGroupEnum": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "PDWORD_PTR" + } + ], + "NetGroupGetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetGroupSetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetGroupDel": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + } + ], + "NetGroupDelUser": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "GroupName", + "type": "LPCWSTR" + }, + { + "name": "Username", + "type": "LPCWSTR" + } + ], + "NetGroupGetUsers": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "ResumeHandle", + "type": "PDWORD_PTR" + } + ], + "NetGroupSetUsers": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "totalentries", + "type": "DWORD" + } + ], + "NetLocalGroupAdd": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetLocalGroupEnum": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resumehandle", + "type": "PDWORD_PTR" + } + ], + "NetLocalGroupGetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetLocalGroupSetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetLocalGroupDel": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + } + ], + "NetLocalGroupGetMembers": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "localgroupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resumehandle", + "type": "PDWORD_PTR" + } + ], + "NetLocalGroupSetMembers": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "totalentries", + "type": "DWORD" + } + ], + "NetLocalGroupAddMembers": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "totalentries", + "type": "DWORD" + } + ], + "NetLocalGroupDelMembers": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "totalentries", + "type": "DWORD" + } + ], + "NetQueryDisplayInformation": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "Level", + "type": "DWORD" + }, + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "EntriesRequested", + "type": "DWORD" + }, + { + "name": "PreferredMaximumLength", + "type": "DWORD" + }, + { + "name": "ReturnedEntryCount", + "type": "LPDWORD" + }, + { + "name": "SortedBuffer", + "type": "PVOID" + } + ], + "NetGetDisplayInformationIndex": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "Level", + "type": "DWORD" + }, + { + "name": "Prefix", + "type": "LPCWSTR" + }, + { + "name": "Index", + "type": "LPDWORD" + } + ], + "NetAccessAdd": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetAccessEnum": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "BasePath", + "type": "LPCWSTR" + }, + { + "name": "Recursive", + "type": "DWORD" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetAccessGetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "resource", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetAccessSetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "resource", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetAccessDel": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "resource", + "type": "LPCWSTR" + } + ], + "NetAccessGetUserPerms": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "UGname", + "type": "LPCWSTR" + }, + { + "name": "resource", + "type": "LPCWSTR" + }, + { + "name": "Perms", + "type": "LPDWORD" + } + ], + "NetValidatePasswordPolicy": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "Qualifier", + "type": "LPVOID" + }, + { + "name": "ValidationType", + "type": "NET_VALIDATE_PASSWORD_TYPE" + }, + { + "name": "InputArg", + "type": "LPVOID" + }, + { + "name": "OutputArg", + "type": "LPVOID" + } + ], + "NetValidatePasswordPolicyFree": [ + { + "name": "OutputArg", + "type": "LPVOID" + } + ], + "NetGetDCName": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "DomainName", + "type": "LPCWSTR" + }, + { + "name": "Buffer", + "type": "LPBYTE" + } + ], + "NetGetAnyDCName": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "DomainName", + "type": "LPCWSTR" + }, + { + "name": "Buffer", + "type": "LPBYTE" + } + ], + "I_NetLogonControl2": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "FunctionCode", + "type": "DWORD" + }, + { + "name": "QueryLevel", + "type": "DWORD" + }, + { + "name": "Data", + "type": "LPBYTE" + }, + { + "name": "Buffer", + "type": "LPBYTE" + } + ], + "NetAddServiceAccount": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "AccountName", + "type": "LPWSTR" + }, + { + "name": "Password", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "NetRemoveServiceAccount": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "AccountName", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "NetEnumerateServiceAccounts": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "AccountsCount", + "type": "DWORD" + }, + { + "name": "Accounts", + "type": "PZPWSTR" + } + ], + "NetIsServiceAccount": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "AccountName", + "type": "LPWSTR" + }, + { + "name": "IsService", + "type": "BOOL" + } + ], + "NetQueryServiceAccount": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "AccountName", + "type": "LPWSTR" + }, + { + "name": "InfoLevel", + "type": "DWORD" + }, + { + "name": "Buffer", + "type": "PBYTE" + } + ], + "NetWkstaGetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetWkstaSetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buffer", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetWkstaUserGetInfo": [ + { + "name": "reserved", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetWkstaUserSetInfo": [ + { + "name": "reserved", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetWkstaUserEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resumehandle", + "type": "LPDWORD" + } + ], + "NetWkstaTransportAdd": [ + { + "name": "servername", + "type": "LPTSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetWkstaTransportDel": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "transportname", + "type": "LPWSTR" + }, + { + "name": "ucond", + "type": "DWORD" + } + ], + "NetWkstaTransportEnum": [ + { + "name": "servername", + "type": "LPTSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetShareAdd": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetShareEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetShareGetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "netname", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetShareSetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "netname", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetShareDel": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "netname", + "type": "LPWSTR" + }, + { + "name": "reserved", + "type": "DWORD" + } + ], + "NetShareCheck": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "device", + "type": "LPWSTR" + }, + { + "name": "type", + "type": "LPDWORD" + } + ], + "NetShareDelEx": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + } + ], + "NetSessionEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "UncClientName", + "type": "LPWSTR" + }, + { + "name": "username", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetSessionDel": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "UncClientName", + "type": "LPWSTR" + }, + { + "name": "username", + "type": "LPWSTR" + } + ], + "NetSessionGetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "UncClientName", + "type": "LPWSTR" + }, + { + "name": "username", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetConnectionEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "qualifier", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetFileClose": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "fileid", + "type": "DWORD" + } + ], + "NetFileEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "basepath", + "type": "LPWSTR" + }, + { + "name": "username", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "PDWORD_PTR" + } + ], + "NetFileGetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "fileid", + "type": "DWORD" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "DsRoleGetPrimaryDomainInformation": [ + { + "name": "lpServer", + "type": "LPCWSTR" + }, + { + "name": "InfoLevel", + "type": "DSROLE_PRIMARY_DOMAIN_INFO_LEVEL" + }, + { + "name": "Buffer", + "type": "PBYTE" + } + ], + "DsRoleFreeMemory": [ + { + "name": "Buffer", + "type": "PVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/netsh_exe.json b/qiling/extensions/windows_sdk/defs/netsh_exe.json new file mode 100644 index 000000000..50297c7bd --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/netsh_exe.json @@ -0,0 +1,114 @@ +{ + "MatchEnumTag": [ + { + "name": "hModule", + "type": "HANDLE" + }, + { + "name": "pwcArg", + "type": "LPCWSTR" + }, + { + "name": "dwNumArg", + "type": "DWORD" + }, + { + "name": "pEnumTable", + "type": "TOKEN_VALUE" + }, + { + "name": "pdwValue", + "type": "PDWORD" + } + ], + "MatchToken": [ + { + "name": "pwszUserToken", + "type": "LPCWSTR" + }, + { + "name": "pwszCmdToken", + "type": "LPCWSTR" + } + ], + "PreprocessCommand": [ + { + "name": "hModule", + "type": "HANDLE" + }, + { + "name": "ppwcArguments", + "type": "LPWSTR" + }, + { + "name": "dwCurrentIndex", + "type": "DWORD" + }, + { + "name": "dwArgCount", + "type": "DWORD" + }, + { + "name": "pttTags", + "type": "TAG_TYPE" + }, + { + "name": "dwTagCount", + "type": "DWORD" + }, + { + "name": "dwMinArgs", + "type": "DWORD" + }, + { + "name": "dwMaxArgs", + "type": "DWORD" + }, + { + "name": "pdwTagType", + "type": "DWORD" + } + ], + "PrintError": [ + { + "name": "hModule", + "type": "HANDLE" + }, + { + "name": "dwErrId", + "type": "DWORD" + } + ], + "PrintMessageFromModule": [ + { + "name": "hModule", + "type": "HANDLE" + }, + { + "name": "dwMsgId", + "type": "DWORD" + } + ], + "PrintMessage": [ + { + "name": "pwszFormat", + "type": "LPCWSTR" + } + ], + "RegisterContext": [ + { + "name": "pChildContext", + "type": "NS_CONTEXT_ATTRIBUTES" + } + ], + "RegisterHelper": [ + { + "name": "pguidParentContext", + "type": "GUID" + }, + { + "name": "pfnRegisterSubContext", + "type": "NS_HELPER_ATTRIBUTES" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/netshell_dll.json b/qiling/extensions/windows_sdk/defs/netshell_dll.json new file mode 100644 index 000000000..e825469f7 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/netshell_dll.json @@ -0,0 +1,14 @@ +{ + "NcFreeNetconProperties": [ + { + "name": "pProps", + "type": "NETCON_PROPERTIES" + } + ], + "NcIsValidConnectionName": [ + { + "name": "pszwName", + "type": "PCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/newdev_dll.json b/qiling/extensions/windows_sdk/defs/newdev_dll.json new file mode 100644 index 000000000..0107b90f5 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/newdev_dll.json @@ -0,0 +1,94 @@ +{ + "DiInstallDevice": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "DriverInfoData", + "type": "PSP_DRVINFO_DATA" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "NeedReboot", + "type": "PBOOL" + } + ], + "DiUninstallDevice": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "NeedReboot", + "type": "PBOOL" + } + ], + "DiShowUpdateDevice": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "NeedReboot", + "type": "PBOOL" + } + ], + "DiRollbackDriver": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "NeedReboot", + "type": "PBOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/ninput_dll.json b/qiling/extensions/windows_sdk/defs/ninput_dll.json new file mode 100644 index 000000000..0c038fb29 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/ninput_dll.json @@ -0,0 +1,276 @@ +{ + "CreateInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + } + ], + "DestroyInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + } + ], + "RegisterOutputCallbackInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "outputCallback", + "type": "INTERACTION_CONTEXT_OUTPUT_CALLBACK" + }, + { + "name": "clientData", + "type": "void" + } + ], + "SetInteractionConfigurationInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "configurationCount", + "type": "UINT32" + }, + { + "name": "configuration", + "type": "INTERACTION_CONTEXT_CONFIGURATION" + } + ], + "GetInteractionConfigurationInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "configurationCount", + "type": "UINT32" + }, + { + "name": "configuration", + "type": "INTERACTION_CONTEXT_CONFIGURATION" + } + ], + "SetPropertyInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "contextProperty", + "type": "INTERACTION_CONTEXT_PROPERTY" + }, + { + "name": "value", + "type": "UINT32" + } + ], + "GetPropertyInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "contextProperty", + "type": "INTERACTION_CONTEXT_PROPERTY" + }, + { + "name": "value", + "type": "UINT32" + } + ], + "SetInertiaParameterInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "inertiaParameter", + "type": "INERTIA_PARAMETER" + }, + { + "name": "value", + "type": "float" + } + ], + "GetInertiaParameterInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "inertiaParameter", + "type": "INERTIA_PARAMETER" + }, + { + "name": "value", + "type": "float" + } + ], + "SetCrossSlideParametersInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "parameterCount", + "type": "UINT32" + }, + { + "name": "crossSlideParameters", + "type": "CROSS_SLIDE_PARAMETER" + } + ], + "GetCrossSlideParameterInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "threshold", + "type": "CROSS_SLIDE_THRESHOLD" + }, + { + "name": "distance", + "type": "float" + } + ], + "SetMouseWheelParameterInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "parameter", + "type": "MOUSE_WHEEL_PARAMETER" + }, + { + "name": "value", + "type": "float" + } + ], + "GetMouseWheelParameterInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "parameter", + "type": "MOUSE_WHEEL_PARAMETER" + }, + { + "name": "value", + "type": "float" + } + ], + "ResetInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + } + ], + "GetStateInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "pointerInfo", + "type": "POINTER_INFO" + }, + { + "name": "state", + "type": "INTERACTION_STATE" + } + ], + "AddPointerInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "pointerId", + "type": "UINT32" + } + ], + "RemovePointerInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "pointerId", + "type": "UINT32" + } + ], + "ProcessPointerFramesInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "pointerInfo", + "type": "POINTER_INFO" + } + ], + "BufferPointerPacketsInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "pointerInfo", + "type": "POINTER_INFO" + } + ], + "ProcessBufferedPacketsInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + } + ], + "ProcessInertiaInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + } + ], + "StopInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + } + ], + "SetPivotInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "x", + "type": "float" + }, + { + "name": "y", + "type": "float" + }, + { + "name": "radius", + "type": "float" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/none.json b/qiling/extensions/windows_sdk/defs/none.json new file mode 100644 index 000000000..83d4593b5 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/none.json @@ -0,0 +1,62 @@ +{ + "ScreenSaverProc": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "message", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DefScreenSaverProc": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "ScreenSaverConfigureDialog": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "message", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "RegisterDialogClasses": [ + { + "name": "hInst", + "type": "HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/normaliz_dll.json b/qiling/extensions/windows_sdk/defs/normaliz_dll.json new file mode 100644 index 000000000..efe433f85 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/normaliz_dll.json @@ -0,0 +1,104 @@ +{ + "IdnToAscii": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpUnicodeCharStr", + "type": "LPCWSTR" + }, + { + "name": "cchUnicodeChar", + "type": "int" + }, + { + "name": "lpASCIICharStr", + "type": "LPWSTR" + }, + { + "name": "cchASCIIChar", + "type": "int" + } + ], + "IdnToUnicode": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpASCIICharStr", + "type": "LPCWSTR" + }, + { + "name": "cchASCIIChar", + "type": "int" + }, + { + "name": "lpUnicodeCharStr", + "type": "LPWSTR" + }, + { + "name": "cchUnicodeChar", + "type": "int" + } + ], + "IdnToNameprepUnicode": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpUnicodeCharStr", + "type": "LPCWSTR" + }, + { + "name": "cchUnicodeChar", + "type": "int" + }, + { + "name": "lpNameprepCharStr", + "type": "LPWSTR" + }, + { + "name": "cchNameprepChar", + "type": "int" + } + ], + "NormalizeString": [ + { + "name": "NormForm", + "type": "NORM_FORM" + }, + { + "name": "lpSrcString", + "type": "LPCWSTR" + }, + { + "name": "cwSrcLength", + "type": "int" + }, + { + "name": "lpDstString", + "type": "LPWSTR" + }, + { + "name": "cwDstLength", + "type": "int" + } + ], + "IsNormalizedString": [ + { + "name": "NormForm", + "type": "NORM_FORM" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "cwLength", + "type": "int" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/ntdll_dll.json b/qiling/extensions/windows_sdk/defs/ntdll_dll.json new file mode 100644 index 000000000..d4b7ec457 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/ntdll_dll.json @@ -0,0 +1,792 @@ +{ + "RtlIpv4AddressToStringA": [ + { + "name": "Addr", + "type": { + "name": "in_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "S", + "type": "PSTR" + } + ], + "RtlIpv6AddressToStringA": [ + { + "name": "Addr", + "type": { + "name": "in6_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "S", + "type": "PSTR" + } + ], + "RtlEthernetAddressToStringA": [ + { + "name": "Addr", + "type": "DL_EUI48" + }, + { + "name": "S", + "type": "PSTR" + } + ], + "RtlIpv4AddressToStringW": [ + { + "name": "Addr", + "type": { + "name": "in_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "S", + "type": "PWSTR" + } + ], + "RtlIpv6AddressToStringW": [ + { + "name": "Addr", + "type": { + "name": "in6_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "S", + "type": "PWSTR" + } + ], + "RtlEthernetAddressToStringW": [ + { + "name": "Addr", + "type": "DL_EUI48" + }, + { + "name": "S", + "type": "PWSTR" + } + ], + "RtlIpv4AddressToStringExW": [ + { + "name": "Address", + "type": { + "name": "in_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "Port", + "type": "USHORT" + }, + { + "name": "AddressString", + "type": "PWSTR" + }, + { + "name": "AddressStringLength", + "type": "PULONG" + } + ], + "RtlIpv6AddressToStringExW": [ + { + "name": "Address", + "type": { + "name": "in6_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "ScopeId", + "type": "ULONG" + }, + { + "name": "Port", + "type": "USHORT" + }, + { + "name": "AddressString", + "type": "PWSTR" + }, + { + "name": "AddressStringLength", + "type": "PULONG" + } + ], + "RtlIpv4StringToAddressA": [ + { + "name": "S", + "type": "PCSTR" + }, + { + "name": "Strict", + "type": "BOOLEAN" + }, + { + "name": "Terminator", + "type": "PCSTR" + }, + { + "name": "Addr", + "type": { + "name": "in_addr", + "data_type": "Struct", + "elements": [] + } + } + ], + "RtlIpv6StringToAddressA": [ + { + "name": "S", + "type": "PCSTR" + }, + { + "name": "Terminator", + "type": "PCSTR" + }, + { + "name": "Addr", + "type": { + "name": "in6_addr", + "data_type": "Struct", + "elements": [] + } + } + ], + "RtlEthernetStringToAddressA": [ + { + "name": "S", + "type": "PCSTR" + }, + { + "name": "Terminator", + "type": "PCSTR" + }, + { + "name": "Addr", + "type": "DL_EUI48" + } + ], + "RtlIpv4StringToAddressW": [ + { + "name": "S", + "type": "PCWSTR" + }, + { + "name": "Strict", + "type": "BOOLEAN" + }, + { + "name": "Terminator", + "type": "LPCWSTR" + }, + { + "name": "Addr", + "type": { + "name": "in_addr", + "data_type": "Struct", + "elements": [] + } + } + ], + "RtlIpv6StringToAddressW": [ + { + "name": "S", + "type": "PCWSTR" + }, + { + "name": "Terminator", + "type": "PCWSTR" + }, + { + "name": "Addr", + "type": { + "name": "in6_addr", + "data_type": "Struct", + "elements": [] + } + } + ], + "RtlEthernetStringToAddressW": [ + { + "name": "S", + "type": "PCWSTR" + }, + { + "name": "Terminator", + "type": "LPCWSTR" + }, + { + "name": "Addr", + "type": "DL_EUI48" + } + ], + "RtlIpv4StringToAddressExW": [ + { + "name": "AddressString", + "type": "PCWSTR" + }, + { + "name": "Strict", + "type": "BOOLEAN" + }, + { + "name": "Address", + "type": { + "name": "in_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "Port", + "type": "PUSHORT" + } + ], + "RtlIpv6StringToAddressExW": [ + { + "name": "AddressString", + "type": "PCWSTR" + }, + { + "name": "Address", + "type": { + "name": "in6_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "ScopeId", + "type": "PULONG" + }, + { + "name": "Port", + "type": "PUSHORT" + } + ], + "IsProcessCritical": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Critical", + "type": "PBOOL" + } + ], + "NtClose": [ + { + "name": "Handle", + "type": "HANDLE" + } + ], + "NtCreateFile": [ + { + "name": "FileHandle", + "type": "PHANDLE" + }, + { + "name": "DesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "ObjectAttributes", + "type": "POBJECT_ATTRIBUTES" + }, + { + "name": "IoStatusBlock", + "type": "PIO_STATUS_BLOCK" + }, + { + "name": "AllocationSize", + "type": "PLARGE_INTEGER" + }, + { + "name": "FileAttributes", + "type": "ULONG" + }, + { + "name": "ShareAccess", + "type": "ULONG" + }, + { + "name": "CreateDisposition", + "type": "ULONG" + }, + { + "name": "CreateOptions", + "type": "ULONG" + }, + { + "name": "EaBuffer", + "type": "PVOID" + }, + { + "name": "EaLength", + "type": "ULONG" + } + ], + "NtOpenFile": [ + { + "name": "FileHandle", + "type": "PHANDLE" + }, + { + "name": "DesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "ObjectAttributes", + "type": "POBJECT_ATTRIBUTES" + }, + { + "name": "IoStatusBlock", + "type": "PIO_STATUS_BLOCK" + }, + { + "name": "ShareAccess", + "type": "ULONG" + }, + { + "name": "OpenOptions", + "type": "ULONG" + } + ], + "NtRenameKey": [ + { + "name": "KeyHandle", + "type": "HANDLE" + }, + { + "name": "NewName", + "type": "PUNICODE_STRING" + } + ], + "NtNotifyChangeMultipleKeys": [ + { + "name": "MasterKeyHandle", + "type": "HANDLE" + }, + { + "name": "Count", + "type": "ULONG" + }, + { + "name": "SubordinateObjects", + "type": "OBJECT_ATTRIBUTES" + }, + { + "name": "Event", + "type": "HANDLE" + }, + { + "name": "ApcRoutine", + "type": "PIO_APC_ROUTINE" + }, + { + "name": "ApcContext", + "type": "PVOID" + }, + { + "name": "IoStatusBlock", + "type": "PIO_STATUS_BLOCK" + }, + { + "name": "CompletionFilter", + "type": "ULONG" + }, + { + "name": "WatchTree", + "type": "BOOLEAN" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "BufferSize", + "type": "ULONG" + }, + { + "name": "Asynchronous", + "type": "BOOLEAN" + } + ], + "NtQueryMultipleValueKey": [ + { + "name": "KeyHandle", + "type": "HANDLE" + }, + { + "name": "ValueEntries", + "type": "PKEY_VALUE_ENTRY" + }, + { + "name": "EntryCount", + "type": "ULONG" + }, + { + "name": "ValueBuffer", + "type": "PVOID" + }, + { + "name": "BufferLength", + "type": "PULONG" + }, + { + "name": "RequiredBufferLength", + "type": "PULONG" + } + ], + "NtSetInformationKey": [ + { + "name": "KeyHandle", + "type": "HANDLE" + }, + { + "name": "KeySetInformationClass", + "type": "KEY_SET_INFORMATION_CLASS" + }, + { + "name": "KeySetInformation", + "type": "PVOID" + }, + { + "name": "KeySetInformationLength", + "type": "ULONG" + } + ], + "NtDeviceIoControlFile": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "Event", + "type": "HANDLE" + }, + { + "name": "ApcRoutine", + "type": "PIO_APC_ROUTINE" + }, + { + "name": "ApcContext", + "type": "PVOID" + }, + { + "name": "IoStatusBlock", + "type": "PIO_STATUS_BLOCK" + }, + { + "name": "IoControlCode", + "type": "ULONG" + }, + { + "name": "InputBuffer", + "type": "PVOID" + }, + { + "name": "InputBufferLength", + "type": "ULONG" + }, + { + "name": "OutputBuffer", + "type": "PVOID" + }, + { + "name": "OutputBufferLength", + "type": "ULONG" + } + ], + "RtlIsNameLegalDOS8Dot3": [ + { + "name": "Name", + "type": "PUNICODE_STRING" + }, + { + "name": "OemName", + "type": "POEM_STRING" + }, + { + "name": "NameContainsSpaces", + "type": "PBOOLEAN" + } + ], + "RtlNtStatusToDosError": [ + { + "name": "Status", + "type": "NTSTATUS" + } + ], + "NtQueryInformationProcess": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "ProcessInformationClass", + "type": "PROCESSINFOCLASS" + }, + { + "name": "ProcessInformation", + "type": "PVOID" + }, + { + "name": "ProcessInformationLength", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "NtQueryInformationThread": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + }, + { + "name": "ThreadInformationClass", + "type": "THREADINFOCLASS" + }, + { + "name": "ThreadInformation", + "type": "PVOID" + }, + { + "name": "ThreadInformationLength", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "NtQueryObject": [ + { + "name": "Handle", + "type": "HANDLE" + }, + { + "name": "ObjectInformationClass", + "type": "OBJECT_INFORMATION_CLASS" + }, + { + "name": "ObjectInformation", + "type": "PVOID" + }, + { + "name": "ObjectInformationLength", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "ZwQueryObject": [ + { + "name": "Handle", + "type": "HANDLE" + }, + { + "name": "ObjectInformationClass", + "type": "OBJECT_INFORMATION_CLASS" + }, + { + "name": "ObjectInformation", + "type": "PVOID" + }, + { + "name": "ObjectInformationLength", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "NtQuerySystemInformation": [ + { + "name": "SystemInformationClass", + "type": "SYSTEM_INFORMATION_CLASS" + }, + { + "name": "SystemInformation", + "type": "PVOID" + }, + { + "name": "SystemInformationLength", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "NtQuerySystemTime": [ + { + "name": "SystemTime", + "type": "PLARGE_INTEGER" + } + ], + "RtlLocalTimeToSystemTime": [ + { + "name": "LocalTime", + "type": "PLARGE_INTEGER" + }, + { + "name": "SystemTime", + "type": "PLARGE_INTEGER" + } + ], + "RtlTimeToSecondsSince1970": [ + { + "name": "Time", + "type": "PLARGE_INTEGER" + }, + { + "name": "ElapsedSeconds", + "type": "PULONG" + } + ], + "RtlFreeAnsiString": [ + { + "name": "AnsiString", + "type": "PANSI_STRING" + } + ], + "RtlFreeUnicodeString": [ + { + "name": "UnicodeString", + "type": "PUNICODE_STRING" + } + ], + "RtlFreeOemString": [ + { + "name": "OemString", + "type": "POEM_STRING" + } + ], + "RtlInitString": [ + { + "name": "DestinationString", + "type": "PSTRING" + }, + { + "name": "SourceString", + "type": "PCSZ" + } + ], + "RtlInitUnicodeString": [ + { + "name": "DestinationString", + "type": "PUNICODE_STRING" + }, + { + "name": "SourceString", + "type": "PCWSTR" + } + ], + "RtlAnsiStringToUnicodeString": [ + { + "name": "DestinationString", + "type": "PUNICODE_STRING" + }, + { + "name": "SourceString", + "type": "PCANSI_STRING" + }, + { + "name": "AllocateDestinationString", + "type": "BOOLEAN" + } + ], + "RtlUnicodeStringToAnsiString": [ + { + "name": "DestinationString", + "type": "PANSI_STRING" + }, + { + "name": "SourceString", + "type": "PCUNICODE_STRING" + }, + { + "name": "AllocateDestinationString", + "type": "BOOLEAN" + } + ], + "RtlUnicodeStringToOemString": [ + { + "name": "DestinationString", + "type": "POEM_STRING" + }, + { + "name": "SourceString", + "type": "PCUNICODE_STRING" + }, + { + "name": "AllocateDestinationString", + "type": "BOOLEAN" + } + ], + "RtlUnicodeToMultiByteSize": [ + { + "name": "BytesInMultiByteString", + "type": "PULONG" + }, + { + "name": "UnicodeString", + "type": "PWCH" + }, + { + "name": "BytesInUnicodeString", + "type": "ULONG" + } + ], + "RtlCharToInteger": [ + { + "name": "String", + "type": "PCSZ" + }, + { + "name": "Base", + "type": "ULONG" + }, + { + "name": "Value", + "type": "PULONG" + } + ], + "RtlConvertSidToUnicodeString": [ + { + "name": "UnicodeString", + "type": "PUNICODE_STRING" + }, + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "AllocateDestinationString", + "type": "BOOLEAN" + } + ], + "RtlUniform": [ + { + "name": "Seed", + "type": "PULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/ntdsapi_dll.json b/qiling/extensions/windows_sdk/defs/ntdsapi_dll.json new file mode 100644 index 000000000..ac75d287f --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/ntdsapi_dll.json @@ -0,0 +1,1830 @@ +{ + "DsBindW": [ + { + "name": "DomainControllerName", + "type": "LPCWSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCWSTR" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindA": [ + { + "name": "DomainControllerName", + "type": "LPCSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCSTR" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindWithCredW": [ + { + "name": "DomainControllerName", + "type": "LPCWSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCWSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindWithCredA": [ + { + "name": "DomainControllerName", + "type": "LPCSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindWithSpnW": [ + { + "name": "DomainControllerName", + "type": "LPCWSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCWSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "ServicePrincipalName", + "type": "LPCWSTR" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindWithSpnA": [ + { + "name": "DomainControllerName", + "type": "LPCSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "ServicePrincipalName", + "type": "LPCSTR" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindWithSpnExW": [ + { + "name": "DomainControllerName", + "type": "LPCWSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCWSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "ServicePrincipalName", + "type": "LPCWSTR" + }, + { + "name": "BindFlags", + "type": "DWORD" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindWithSpnExA": [ + { + "name": "DomainControllerName", + "type": "LPCSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "ServicePrincipalName", + "type": "LPCSTR" + }, + { + "name": "BindFlags", + "type": "DWORD" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindByInstanceW": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "Annotation", + "type": "LPCWSTR" + }, + { + "name": "InstanceGuid", + "type": "GUID" + }, + { + "name": "DnsDomainName", + "type": "LPCWSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "ServicePrincipalName", + "type": "LPCWSTR" + }, + { + "name": "BindFlags", + "type": "DWORD" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindByInstanceA": [ + { + "name": "ServerName", + "type": "LPCSTR" + }, + { + "name": "Annotation", + "type": "LPCSTR" + }, + { + "name": "InstanceGuid", + "type": "GUID" + }, + { + "name": "DnsDomainName", + "type": "LPCSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "ServicePrincipalName", + "type": "LPCSTR" + }, + { + "name": "BindFlags", + "type": "DWORD" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindToISTGW": [ + { + "name": "SiteName", + "type": "LPCWSTR" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindToISTGA": [ + { + "name": "SiteName", + "type": "LPCSTR" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindingSetTimeout": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "cTimeoutSecs", + "type": "ULONG" + } + ], + "DsUnBindW": [ + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsUnBindA": [ + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsMakePasswordCredentialsW": [ + { + "name": "User", + "type": "LPCWSTR" + }, + { + "name": "Domain", + "type": "LPCWSTR" + }, + { + "name": "Password", + "type": "LPCWSTR" + }, + { + "name": "pAuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + } + ], + "DsMakePasswordCredentialsA": [ + { + "name": "User", + "type": "LPCSTR" + }, + { + "name": "Domain", + "type": "LPCSTR" + }, + { + "name": "Password", + "type": "LPCSTR" + }, + { + "name": "pAuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + } + ], + "DsFreePasswordCredentials": [ + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + } + ], + "DsCrackNamesW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "flags", + "type": "DS_NAME_FLAGS" + }, + { + "name": "formatOffered", + "type": "DS_NAME_FORMAT" + }, + { + "name": "formatDesired", + "type": "DS_NAME_FORMAT" + }, + { + "name": "cNames", + "type": "DWORD" + }, + { + "name": "rpNames", + "type": "LPCWSTR" + }, + { + "name": "ppResult", + "type": "PDS_NAME_RESULTW" + } + ], + "DsCrackNamesA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "flags", + "type": "DS_NAME_FLAGS" + }, + { + "name": "formatOffered", + "type": "DS_NAME_FORMAT" + }, + { + "name": "formatDesired", + "type": "DS_NAME_FORMAT" + }, + { + "name": "cNames", + "type": "DWORD" + }, + { + "name": "rpNames", + "type": "LPCSTR" + }, + { + "name": "ppResult", + "type": "PDS_NAME_RESULTA" + } + ], + "DsFreeNameResultW": [ + { + "name": "pResult", + "type": "DS_NAME_RESULTW" + } + ], + "DsFreeNameResultA": [ + { + "name": "pResult", + "type": "DS_NAME_RESULTA" + } + ], + "DsGetSpnA": [ + { + "name": "ServiceType", + "type": "DS_SPN_NAME_TYPE" + }, + { + "name": "ServiceClass", + "type": "LPCSTR" + }, + { + "name": "ServiceName", + "type": "LPCSTR" + }, + { + "name": "InstancePort", + "type": "USHORT" + }, + { + "name": "cInstanceNames", + "type": "USHORT" + }, + { + "name": "pInstanceNames", + "type": "LPCSTR" + }, + { + "name": "pInstancePorts", + "type": "USHORT" + }, + { + "name": "pcSpn", + "type": "DWORD" + }, + { + "name": "prpszSpn", + "type": "LPSTR" + } + ], + "DsGetSpnW": [ + { + "name": "ServiceType", + "type": "DS_SPN_NAME_TYPE" + }, + { + "name": "ServiceClass", + "type": "LPCWSTR" + }, + { + "name": "ServiceName", + "type": "LPCWSTR" + }, + { + "name": "InstancePort", + "type": "USHORT" + }, + { + "name": "cInstanceNames", + "type": "USHORT" + }, + { + "name": "pInstanceNames", + "type": "LPCWSTR" + }, + { + "name": "pInstancePorts", + "type": "USHORT" + }, + { + "name": "pcSpn", + "type": "DWORD" + }, + { + "name": "prpszSpn", + "type": "LPWSTR" + } + ], + "DsFreeSpnArrayA": [ + { + "name": "cSpn", + "type": "DWORD" + }, + { + "name": "rpszSpn", + "type": "LPSTR" + } + ], + "DsFreeSpnArrayW": [ + { + "name": "cSpn", + "type": "DWORD" + }, + { + "name": "rpszSpn", + "type": "LPWSTR" + } + ], + "DsWriteAccountSpnA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "Operation", + "type": "DS_SPN_WRITE_OP" + }, + { + "name": "pszAccount", + "type": "LPCSTR" + }, + { + "name": "cSpn", + "type": "DWORD" + }, + { + "name": "rpszSpn", + "type": "LPCSTR" + } + ], + "DsWriteAccountSpnW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "Operation", + "type": "DS_SPN_WRITE_OP" + }, + { + "name": "pszAccount", + "type": "LPCWSTR" + }, + { + "name": "cSpn", + "type": "DWORD" + }, + { + "name": "rpszSpn", + "type": "LPCWSTR" + } + ], + "DsClientMakeSpnForTargetServerW": [ + { + "name": "ServiceClass", + "type": "LPCWSTR" + }, + { + "name": "ServiceName", + "type": "LPCWSTR" + }, + { + "name": "pcSpnLength", + "type": "DWORD" + }, + { + "name": "pszSpn", + "type": "LPWSTR" + } + ], + "DsClientMakeSpnForTargetServerA": [ + { + "name": "ServiceClass", + "type": "LPCSTR" + }, + { + "name": "ServiceName", + "type": "LPCSTR" + }, + { + "name": "pcSpnLength", + "type": "DWORD" + }, + { + "name": "pszSpn", + "type": "LPSTR" + } + ], + "DsServerRegisterSpnA": [ + { + "name": "Operation", + "type": "DS_SPN_WRITE_OP" + }, + { + "name": "ServiceClass", + "type": "LPCSTR" + }, + { + "name": "UserObjectDN", + "type": "LPCSTR" + } + ], + "DsServerRegisterSpnW": [ + { + "name": "Operation", + "type": "DS_SPN_WRITE_OP" + }, + { + "name": "ServiceClass", + "type": "LPCWSTR" + }, + { + "name": "UserObjectDN", + "type": "LPCWSTR" + } + ], + "DsReplicaSyncA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCSTR" + }, + { + "name": "pUuidDsaSrc", + "type": "UUID" + }, + { + "name": "Options", + "type": "ULONG" + } + ], + "DsReplicaSyncW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCWSTR" + }, + { + "name": "pUuidDsaSrc", + "type": "UUID" + }, + { + "name": "Options", + "type": "ULONG" + } + ], + "DsReplicaAddA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCSTR" + }, + { + "name": "SourceDsaDn", + "type": "LPCSTR" + }, + { + "name": "TransportDn", + "type": "LPCSTR" + }, + { + "name": "SourceDsaAddress", + "type": "LPCSTR" + }, + { + "name": "pSchedule", + "type": "PSCHEDULE" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "DsReplicaAddW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCWSTR" + }, + { + "name": "SourceDsaDn", + "type": "LPCWSTR" + }, + { + "name": "TransportDn", + "type": "LPCWSTR" + }, + { + "name": "SourceDsaAddress", + "type": "LPCWSTR" + }, + { + "name": "pSchedule", + "type": "PSCHEDULE" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "DsReplicaDelA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCSTR" + }, + { + "name": "DsaSrc", + "type": "LPCSTR" + }, + { + "name": "Options", + "type": "ULONG" + } + ], + "DsReplicaDelW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCWSTR" + }, + { + "name": "DsaSrc", + "type": "LPCWSTR" + }, + { + "name": "Options", + "type": "ULONG" + } + ], + "DsReplicaModifyA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCSTR" + }, + { + "name": "pUuidSourceDsa", + "type": "UUID" + }, + { + "name": "TransportDn", + "type": "LPCSTR" + }, + { + "name": "SourceDsaAddress", + "type": "LPCSTR" + }, + { + "name": "pSchedule", + "type": "PSCHEDULE" + }, + { + "name": "ReplicaFlags", + "type": "DWORD" + }, + { + "name": "ModifyFields", + "type": "DWORD" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "DsReplicaModifyW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCWSTR" + }, + { + "name": "pUuidSourceDsa", + "type": "UUID" + }, + { + "name": "TransportDn", + "type": "LPCWSTR" + }, + { + "name": "SourceDsaAddress", + "type": "LPCWSTR" + }, + { + "name": "pSchedule", + "type": "PSCHEDULE" + }, + { + "name": "ReplicaFlags", + "type": "DWORD" + }, + { + "name": "ModifyFields", + "type": "DWORD" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "DsReplicaUpdateRefsA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCSTR" + }, + { + "name": "DsaDest", + "type": "LPCSTR" + }, + { + "name": "pUuidDsaDest", + "type": "UUID" + }, + { + "name": "Options", + "type": "ULONG" + } + ], + "DsReplicaUpdateRefsW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCWSTR" + }, + { + "name": "DsaDest", + "type": "LPCWSTR" + }, + { + "name": "pUuidDsaDest", + "type": "UUID" + }, + { + "name": "Options", + "type": "ULONG" + } + ], + "DsReplicaSyncAllA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "pszNameContext", + "type": "LPCSTR" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "pFnCallBack", + "type": "BOOL" + }, + { + "name": "pCallbackData", + "type": "LPVOID" + }, + { + "name": "pErrors", + "type": "PDS_REPSYNCALL_ERRINFOA" + } + ], + "DsReplicaSyncAllW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "pszNameContext", + "type": "LPCWSTR" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "pFnCallBack", + "type": "BOOL" + }, + { + "name": "pCallbackData", + "type": "LPVOID" + }, + { + "name": "pErrors", + "type": "PDS_REPSYNCALL_ERRINFOW" + } + ], + "DsRemoveDsServerW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "ServerDN", + "type": "LPWSTR" + }, + { + "name": "DomainDN", + "type": "LPWSTR" + }, + { + "name": "fLastDcInDomain", + "type": "BOOL" + }, + { + "name": "fCommit", + "type": "BOOL" + } + ], + "DsRemoveDsServerA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "ServerDN", + "type": "LPSTR" + }, + { + "name": "DomainDN", + "type": "LPSTR" + }, + { + "name": "fLastDcInDomain", + "type": "BOOL" + }, + { + "name": "fCommit", + "type": "BOOL" + } + ], + "DsRemoveDsDomainW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "DomainDN", + "type": "LPWSTR" + } + ], + "DsRemoveDsDomainA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "DomainDN", + "type": "LPSTR" + } + ], + "DsListSitesA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "ppSites", + "type": "PDS_NAME_RESULTA" + } + ], + "DsListSitesW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "ppSites", + "type": "PDS_NAME_RESULTW" + } + ], + "DsListServersInSiteA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "site", + "type": "LPCSTR" + }, + { + "name": "ppServers", + "type": "PDS_NAME_RESULTA" + } + ], + "DsListServersInSiteW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "site", + "type": "LPCWSTR" + }, + { + "name": "ppServers", + "type": "PDS_NAME_RESULTW" + } + ], + "DsListDomainsInSiteA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "site", + "type": "LPCSTR" + }, + { + "name": "ppDomains", + "type": "PDS_NAME_RESULTA" + } + ], + "DsListDomainsInSiteW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "site", + "type": "LPCWSTR" + }, + { + "name": "ppDomains", + "type": "PDS_NAME_RESULTW" + } + ], + "DsListServersForDomainInSiteA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "domain", + "type": "LPCSTR" + }, + { + "name": "site", + "type": "LPCSTR" + }, + { + "name": "ppServers", + "type": "PDS_NAME_RESULTA" + } + ], + "DsListServersForDomainInSiteW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "domain", + "type": "LPCWSTR" + }, + { + "name": "site", + "type": "LPCWSTR" + }, + { + "name": "ppServers", + "type": "PDS_NAME_RESULTW" + } + ], + "DsListInfoForServerA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "server", + "type": "LPCSTR" + }, + { + "name": "ppInfo", + "type": "PDS_NAME_RESULTA" + } + ], + "DsListInfoForServerW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "server", + "type": "LPCWSTR" + }, + { + "name": "ppInfo", + "type": "PDS_NAME_RESULTW" + } + ], + "DsListRolesA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "ppRoles", + "type": "PDS_NAME_RESULTA" + } + ], + "DsListRolesW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "ppRoles", + "type": "PDS_NAME_RESULTW" + } + ], + "DsQuerySitesByCostW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "pwszFromSite", + "type": "LPWSTR" + }, + { + "name": "rgwszToSites", + "type": "LPWSTR" + }, + { + "name": "cToSites", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "prgSiteInfo", + "type": "PDS_SITE_COST_INFO" + } + ], + "DsQuerySitesByCostA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "pszFromSite", + "type": "LPSTR" + }, + { + "name": "rgszToSites", + "type": "LPSTR" + }, + { + "name": "cToSites", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "prgSiteInfo", + "type": "PDS_SITE_COST_INFO" + } + ], + "DsQuerySitesFree": [ + { + "name": "rgSiteInfo", + "type": "PDS_SITE_COST_INFO" + } + ], + "DsMapSchemaGuidsA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "cGuids", + "type": "DWORD" + }, + { + "name": "rGuids", + "type": "GUID" + }, + { + "name": "ppGuidMap", + "type": "DS_SCHEMA_GUID_MAPA" + } + ], + "DsFreeSchemaGuidMapA": [ + { + "name": "pGuidMap", + "type": "PDS_SCHEMA_GUID_MAPA" + } + ], + "DsMapSchemaGuidsW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "cGuids", + "type": "DWORD" + }, + { + "name": "rGuids", + "type": "GUID" + }, + { + "name": "ppGuidMap", + "type": "DS_SCHEMA_GUID_MAPW" + } + ], + "DsFreeSchemaGuidMapW": [ + { + "name": "pGuidMap", + "type": "PDS_SCHEMA_GUID_MAPW" + } + ], + "DsGetDomainControllerInfoA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "DomainName", + "type": "LPCSTR" + }, + { + "name": "InfoLevel", + "type": "DWORD" + }, + { + "name": "pcOut", + "type": "DWORD" + }, + { + "name": "ppInfo", + "type": "void" + } + ], + "DsGetDomainControllerInfoW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "DomainName", + "type": "LPCWSTR" + }, + { + "name": "InfoLevel", + "type": "DWORD" + }, + { + "name": "pcOut", + "type": "DWORD" + }, + { + "name": "ppInfo", + "type": "void" + } + ], + "DsFreeDomainControllerInfoA": [ + { + "name": "InfoLevel", + "type": "DWORD" + }, + { + "name": "cInfo", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "void" + } + ], + "DsFreeDomainControllerInfoW": [ + { + "name": "InfoLevel", + "type": "DWORD" + }, + { + "name": "cInfo", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "void" + } + ], + "DsReplicaConsistencyCheck": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "TaskID", + "type": "DS_KCC_TASKID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "DsReplicaVerifyObjectsW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCWSTR" + }, + { + "name": "pUuidDsaSrc", + "type": "UUID" + }, + { + "name": "ulOptions", + "type": "ULONG" + } + ], + "DsReplicaVerifyObjectsA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCSTR" + }, + { + "name": "pUuidDsaSrc", + "type": "UUID" + }, + { + "name": "ulOptions", + "type": "ULONG" + } + ], + "DsReplicaGetInfoW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "InfoType", + "type": "DS_REPL_INFO_TYPE" + }, + { + "name": "pszObject", + "type": "LPCWSTR" + }, + { + "name": "puuidForSourceDsaObjGuid", + "type": "UUID" + }, + { + "name": "ppInfo", + "type": "void" + } + ], + "DsReplicaGetInfo2W": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "InfoType", + "type": "DS_REPL_INFO_TYPE" + }, + { + "name": "pszObject", + "type": "LPCWSTR" + }, + { + "name": "puuidForSourceDsaObjGuid", + "type": "UUID" + }, + { + "name": "pszAttributeName", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwEnumerationContext", + "type": "DWORD" + }, + { + "name": "ppInfo", + "type": "void" + } + ], + "DsReplicaFreeInfo": [ + { + "name": "InfoType", + "type": "DS_REPL_INFO_TYPE" + }, + { + "name": "pInfo", + "type": "void" + } + ], + "DsAddSidHistoryW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "SrcDomain", + "type": "LPCWSTR" + }, + { + "name": "SrcPrincipal", + "type": "LPCWSTR" + }, + { + "name": "SrcDomainController", + "type": "LPCWSTR" + }, + { + "name": "SrcDomainCreds", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "DstDomain", + "type": "LPCWSTR" + }, + { + "name": "DstPrincipal", + "type": "LPCWSTR" + } + ], + "DsAddSidHistoryA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "SrcDomain", + "type": "LPCSTR" + }, + { + "name": "SrcPrincipal", + "type": "LPCSTR" + }, + { + "name": "SrcDomainController", + "type": "LPCSTR" + }, + { + "name": "SrcDomainCreds", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "DstDomain", + "type": "LPCSTR" + }, + { + "name": "DstPrincipal", + "type": "LPCSTR" + } + ], + "DsInheritSecurityIdentityW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "SrcPrincipal", + "type": "LPCWSTR" + }, + { + "name": "DstPrincipal", + "type": "LPCWSTR" + } + ], + "DsInheritSecurityIdentityA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "SrcPrincipal", + "type": "LPCSTR" + }, + { + "name": "DstPrincipal", + "type": "LPCSTR" + } + ], + "DsMakeSpnW": [ + { + "name": "ServiceClass", + "type": "LPCWSTR" + }, + { + "name": "ServiceName", + "type": "LPCWSTR" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "InstancePort", + "type": "USHORT" + }, + { + "name": "Referrer", + "type": "LPCWSTR" + }, + { + "name": "pcSpnLength", + "type": "DWORD" + }, + { + "name": "pszSpn", + "type": "LPWSTR" + } + ], + "DsMakeSpnA": [ + { + "name": "ServiceClass", + "type": "LPCSTR" + }, + { + "name": "ServiceName", + "type": "LPCSTR" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "InstancePort", + "type": "USHORT" + }, + { + "name": "Referrer", + "type": "LPCSTR" + }, + { + "name": "pcSpnLength", + "type": "DWORD" + }, + { + "name": "pszSpn", + "type": "LPSTR" + } + ], + "DsCrackSpnA": [ + { + "name": "pszSpn", + "type": "LPCSTR" + }, + { + "name": "pcServiceClass", + "type": "LPDWORD" + }, + { + "name": "ServiceClass", + "type": "LPSTR" + }, + { + "name": "pcServiceName", + "type": "LPDWORD" + }, + { + "name": "ServiceName", + "type": "LPSTR" + }, + { + "name": "pcInstanceName", + "type": "LPDWORD" + }, + { + "name": "InstanceName", + "type": "LPSTR" + }, + { + "name": "pInstancePort", + "type": "USHORT" + } + ], + "DsCrackSpnW": [ + { + "name": "pszSpn", + "type": "LPCWSTR" + }, + { + "name": "pcServiceClass", + "type": "DWORD" + }, + { + "name": "ServiceClass", + "type": "LPWSTR" + }, + { + "name": "pcServiceName", + "type": "DWORD" + }, + { + "name": "ServiceName", + "type": "LPWSTR" + }, + { + "name": "pcInstanceName", + "type": "DWORD" + }, + { + "name": "InstanceName", + "type": "LPWSTR" + }, + { + "name": "pInstancePort", + "type": "USHORT" + } + ], + "DsQuoteRdnValueW": [ + { + "name": "cUnquotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psUnquotedRdnValue", + "type": "LPCWCH" + }, + { + "name": "pcQuotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psQuotedRdnValue", + "type": "LPWCH" + } + ], + "DsQuoteRdnValueA": [ + { + "name": "cUnquotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psUnquotedRdnValue", + "type": "LPCCH" + }, + { + "name": "pcQuotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psQuotedRdnValue", + "type": "LPCH" + } + ], + "DsUnquoteRdnValueW": [ + { + "name": "cQuotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psQuotedRdnValue", + "type": "LPCWCH" + }, + { + "name": "pcUnquotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psUnquotedRdnValue", + "type": "LPWCH" + } + ], + "DsUnquoteRdnValueA": [ + { + "name": "cQuotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psQuotedRdnValue", + "type": "LPCCH" + }, + { + "name": "pcUnquotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psUnquotedRdnValue", + "type": "LPCH" + } + ], + "DsGetRdnW": [ + { + "name": "ppDN", + "type": "LPCWCH" + }, + { + "name": "pcDN", + "type": "DWORD" + }, + { + "name": "ppKey", + "type": "LPCWCH" + }, + { + "name": "pcKey", + "type": "DWORD" + }, + { + "name": "ppVal", + "type": "LPCWCH" + }, + { + "name": "pcVal", + "type": "DWORD" + } + ], + "DsCrackUnquotedMangledRdnW": [ + { + "name": "pszRDN", + "type": "LPCWSTR" + }, + { + "name": "cchRDN", + "type": "DWORD" + }, + { + "name": "pGuid", + "type": "GUID" + }, + { + "name": "peDsMangleFor", + "type": "DS_MANGLE_FOR" + } + ], + "DsCrackUnquotedMangledRdnA": [ + { + "name": "pszRDN", + "type": "LPCSTR" + }, + { + "name": "cchRDN", + "type": "DWORD" + }, + { + "name": "pGuid", + "type": "GUID" + }, + { + "name": "peDsMangleFor", + "type": "DS_MANGLE_FOR" + } + ], + "DsIsMangledRdnValueW": [ + { + "name": "pszRdn", + "type": "LPCWSTR" + }, + { + "name": "cRdn", + "type": "DWORD" + }, + { + "name": "eDsMangleForDesired", + "type": "DS_MANGLE_FOR" + } + ], + "DsIsMangledRdnValueA": [ + { + "name": "pszRdn", + "type": "LPCSTR" + }, + { + "name": "cRdn", + "type": "DWORD" + }, + { + "name": "eDsMangleForDesired", + "type": "DS_MANGLE_FOR" + } + ], + "DsIsMangledDnA": [ + { + "name": "pszDn", + "type": "LPCSTR" + }, + { + "name": "eDsMangleFor", + "type": "DS_MANGLE_FOR" + } + ], + "DsIsMangledDnW": [ + { + "name": "pszDn", + "type": "LPCWSTR" + }, + { + "name": "eDsMangleFor", + "type": "DS_MANGLE_FOR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/ntlanman_dll.json b/qiling/extensions/windows_sdk/defs/ntlanman_dll.json new file mode 100644 index 000000000..86226d72a --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/ntlanman_dll.json @@ -0,0 +1,30 @@ +{ + "RegisterAppInstance": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "AppInstanceId", + "type": "GUID" + }, + { + "name": "ChildrenInheritAppInstance", + "type": "BOOL" + } + ], + "SetAppInstanceCsvFlags": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "Mask", + "type": "ULONG" + }, + { + "name": "Flags", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/ntmsapi_dll.json b/qiling/extensions/windows_sdk/defs/ntmsapi_dll.json new file mode 100644 index 000000000..b305d4863 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/ntmsapi_dll.json @@ -0,0 +1,1238 @@ +{ + "OpenNtmsSessionW": [ + { + "name": "lpServer", + "type": "LPCWSTR" + }, + { + "name": "lpApplication", + "type": "LPCWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "OpenNtmsSessionA": [ + { + "name": "lpServer", + "type": "LPCSTR" + }, + { + "name": "lpApplication", + "type": "LPCSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "CloseNtmsSession": [ + { + "name": "hSession", + "type": "HANDLE" + } + ], + "MountNtmsMedia": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpDriveId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwPriority", + "type": "int" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "lpMountInformation", + "type": "LPNTMS_MOUNT_INFORMATION" + } + ], + "DismountNtmsMedia": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "AllocateNtmsMedia": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaPool", + "type": "LPNTMS_GUID" + }, + { + "name": "lpPartition", + "type": "LPNTMS_GUID" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "lpAllocateInformation", + "type": "LPNTMS_ALLOCATION_INFORMATION" + } + ], + "DeallocateNtmsMedia": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "SwapNtmsMedia": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId1", + "type": "LPNTMS_GUID" + }, + { + "name": "lpMediaId2", + "type": "LPNTMS_GUID" + } + ], + "AddNtmsMediaType": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaTypeId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpLibId", + "type": "LPNTMS_GUID" + } + ], + "DeleteNtmsMediaType": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaTypeId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpLibId", + "type": "LPNTMS_GUID" + } + ], + "ChangeNtmsMediaType": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpPoolId", + "type": "LPNTMS_GUID" + } + ], + "DecommissionNtmsMedia": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + } + ], + "SetNtmsMediaComplete": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + } + ], + "DeleteNtmsMedia": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + } + ], + "CreateNtmsMediaPoolA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpPoolName", + "type": "LPCSTR" + }, + { + "name": "lpMediaType", + "type": "LPNTMS_GUID" + }, + { + "name": "dwAction", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpPoolId", + "type": "LPNTMS_GUID" + } + ], + "CreateNtmsMediaPoolW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpPoolName", + "type": "LPCWSTR" + }, + { + "name": "lpMediaType", + "type": "LPNTMS_GUID" + }, + { + "name": "dwAction", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpPoolId", + "type": "LPNTMS_GUID" + } + ], + "GetNtmsMediaPoolNameA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpPoolId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpNameBuf", + "type": "LPSTR" + }, + { + "name": "lpdwBufSize", + "type": "LPDWORD" + } + ], + "GetNtmsMediaPoolNameW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpPoolId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpNameBuf", + "type": "LPWSTR" + }, + { + "name": "lpdwBufSize", + "type": "LPDWORD" + } + ], + "MoveToNtmsMediaPool": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpPoolId", + "type": "LPNTMS_GUID" + } + ], + "DeleteNtmsMediaPool": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpPoolId", + "type": "LPNTMS_GUID" + } + ], + "DeleteNtmsLibrary": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpLibraryId", + "type": "LPNTMS_GUID" + } + ], + "DeleteNtmsDrive": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpDriveId", + "type": "LPNTMS_GUID" + } + ], + "GetNtmsObjectInformationA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpInfo", + "type": "LPNTMS_OBJECTINFORMATIONA" + } + ], + "GetNtmsObjectInformationW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpInfo", + "type": "LPNTMS_OBJECTINFORMATIONW" + } + ], + "SetNtmsObjectInformationA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpInfo", + "type": "LPNTMS_OBJECTINFORMATIONA" + } + ], + "SetNtmsObjectInformationW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpInfo", + "type": "LPNTMS_OBJECTINFORMATIONW" + } + ], + "CreateNtmsMediaA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMedia", + "type": "LPNTMS_OBJECTINFORMATIONA" + }, + { + "name": "lpList", + "type": "LPNTMS_OBJECTINFORMATIONA" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "CreateNtmsMediaW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMedia", + "type": "LPNTMS_OBJECTINFORMATIONW" + }, + { + "name": "lpList", + "type": "LPNTMS_OBJECTINFORMATIONW" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "EnumerateNtmsObject": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpContainerId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpList", + "type": "LPNTMS_GUID" + }, + { + "name": "lpdwListSize", + "type": "LPDWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "DisableNtmsObject": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + } + ], + "EnableNtmsObject": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + } + ], + "EjectNtmsMedia": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpEjectOperation", + "type": "LPNTMS_GUID" + }, + { + "name": "dwAction", + "type": "DWORD" + } + ], + "InjectNtmsMedia": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpLibraryId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpInjectOperation", + "type": "LPNTMS_GUID" + }, + { + "name": "dwAction", + "type": "DWORD" + } + ], + "AccessNtmsLibraryDoor": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpLibraryId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwAction", + "type": "DWORD" + } + ], + "CleanNtmsDrive": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpDriveId", + "type": "LPNTMS_GUID" + } + ], + "DismountNtmsDrive": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpDriveId", + "type": "LPNTMS_GUID" + } + ], + "InventoryNtmsLibrary": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpLibraryId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwAction", + "type": "DWORD" + } + ], + "IdentifyNtmsSlot": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpSlotId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwOption", + "type": "DWORD" + } + ], + "UpdateNtmsOmidInfo": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + }, + { + "name": "labelType", + "type": "DWORD" + }, + { + "name": "numberOfBytes", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + } + ], + "CancelNtmsLibraryRequest": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + } + ], + "GetNtmsRequestOrder": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpdwOrderNumber", + "type": "LPDWORD" + } + ], + "SetNtmsRequestOrder": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwOrderNumber", + "type": "DWORD" + } + ], + "DeleteNtmsRequests": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwCount", + "type": "DWORD" + } + ], + "ReserveNtmsCleanerSlot": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpLibrary", + "type": "LPNTMS_GUID" + }, + { + "name": "lpSlot", + "type": "LPNTMS_GUID" + } + ], + "ReleaseNtmsCleanerSlot": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpLibrary", + "type": "LPNTMS_GUID" + } + ], + "InjectNtmsCleaner": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpLibrary", + "type": "LPNTMS_GUID" + }, + { + "name": "lpInjectOperation", + "type": "LPNTMS_GUID" + }, + { + "name": "dwNumberOfCleansLeft", + "type": "DWORD" + }, + { + "name": "dwAction", + "type": "DWORD" + } + ], + "EjectNtmsCleaner": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpLibrary", + "type": "LPNTMS_GUID" + }, + { + "name": "lpEjectOperation", + "type": "LPNTMS_GUID" + }, + { + "name": "dwAction", + "type": "DWORD" + } + ], + "BeginNtmsDeviceChangeDetection": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpDetectHandle", + "type": "LPHANDLE" + } + ], + "SetNtmsDeviceChangeDetection": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "DetectHandle", + "type": "HANDLE" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwCount", + "type": "DWORD" + } + ], + "EndNtmsDeviceChangeDetection": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "DetectHandle", + "type": "HANDLE" + } + ], + "GetNtmsObjectSecurity": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "RequestedInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "lpSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "SetNtmsObjectSecurity": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "lpSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "GetNtmsObjectAttributeA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpAttributeName", + "type": "LPCSTR" + }, + { + "name": "lpAttributeData", + "type": "LPVOID" + }, + { + "name": "lpAttributeSize", + "type": "LPDWORD" + } + ], + "GetNtmsObjectAttributeW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpAttributeName", + "type": "LPCWSTR" + }, + { + "name": "lpAttributeData", + "type": "LPVOID" + }, + { + "name": "lpAttributeSize", + "type": "LPDWORD" + } + ], + "SetNtmsObjectAttributeA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpAttributeName", + "type": "LPCSTR" + }, + { + "name": "lpAttributeData", + "type": "LPVOID" + }, + { + "name": "dwAttributeSize", + "type": "DWORD" + } + ], + "SetNtmsObjectAttributeW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpAttributeName", + "type": "LPCWSTR" + }, + { + "name": "lpAttributeData", + "type": "LPVOID" + }, + { + "name": "AttributeSize", + "type": "DWORD" + } + ], + "GetNtmsUIOptionsA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpszDestination", + "type": "LPSTR" + }, + { + "name": "lpdwBufSize", + "type": "LPDWORD" + } + ], + "GetNtmsUIOptionsW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpszDestination", + "type": "LPWSTR" + }, + { + "name": "lpdwBufSize", + "type": "LPDWORD" + } + ], + "SetNtmsUIOptionsA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwOperation", + "type": "DWORD" + }, + { + "name": "lpszDestination", + "type": "LPCSTR" + } + ], + "SetNtmsUIOptionsW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwOperation", + "type": "DWORD" + }, + { + "name": "lpszDestination", + "type": "LPCWSTR" + } + ], + "SubmitNtmsOperatorRequestW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "dwRequest", + "type": "DWORD" + }, + { + "name": "lpMessage", + "type": "LPCWSTR" + }, + { + "name": "lpArg1Id", + "type": "LPNTMS_GUID" + }, + { + "name": "lpArg2Id", + "type": "LPNTMS_GUID" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + } + ], + "SubmitNtmsOperatorRequestA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "dwRequest", + "type": "DWORD" + }, + { + "name": "lpMessage", + "type": "LPCSTR" + }, + { + "name": "lpArg1Id", + "type": "LPNTMS_GUID" + }, + { + "name": "lpArg2Id", + "type": "LPNTMS_GUID" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + } + ], + "WaitForNtmsOperatorRequest": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwTimeout", + "type": "DWORD" + } + ], + "CancelNtmsOperatorRequest": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + } + ], + "SatisfyNtmsOperatorRequest": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + } + ], + "ImportNtmsDatabase": [ + { + "name": "hSession", + "type": "HANDLE" + } + ], + "ExportNtmsDatabase": [ + { + "name": "hSession", + "type": "HANDLE" + } + ], + "OpenNtmsNotification": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "WaitForNtmsNotification": [ + { + "name": "hNotification", + "type": "HANDLE" + }, + { + "name": "lpNotificationInformation", + "type": "LPNTMS_NOTIFICATIONINFORMATION" + }, + { + "name": "dwTimeout", + "type": "DWORD" + } + ], + "CloseNtmsNotification": [ + { + "name": "hNotification", + "type": "HANDLE" + } + ], + "EjectDiskFromSADriveW": [ + { + "name": "lpComputerName", + "type": "LPCWSTR" + }, + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpDeviceName", + "type": "LPCWSTR" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpTitle", + "type": "LPCWSTR" + }, + { + "name": "lpMessage", + "type": "LPCWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "EjectDiskFromSADriveA": [ + { + "name": "lpComputerName", + "type": "LPCSTR" + }, + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpDeviceName", + "type": "LPCSTR" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpTitle", + "type": "LPCSTR" + }, + { + "name": "lpMessage", + "type": "LPCSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "GetVolumesFromDriveW": [ + { + "name": "pszDriveName", + "type": "LPWSTR" + }, + { + "name": "VolumeNameBufferPtr", + "type": "LPWSTR" + }, + { + "name": "DriveLetterBufferPtr", + "type": "LPWSTR" + } + ], + "GetVolumesFromDriveA": [ + { + "name": "pszDriveName", + "type": "LPSTR" + }, + { + "name": "VolumeNameBufferPtr", + "type": "LPSTR" + }, + { + "name": "DriveLetterBufferPtr", + "type": "LPSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/ntquery_dll.json b/qiling/extensions/windows_sdk/defs/ntquery_dll.json new file mode 100644 index 000000000..9d118186c --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/ntquery_dll.json @@ -0,0 +1,48 @@ +{ + "BindIFilterFromStorage": [ + { + "name": "pStg", + "type": "IStorage" + }, + { + "name": "pUnkOuter", + "type": "IUnknown" + }, + { + "name": "ppIUnk", + "type": "void" + } + ], + "BindIFilterFromStream": [ + { + "name": "pStm", + "type": "IStream" + }, + { + "name": "pUnkOuter", + "type": "IUnknown" + }, + { + "name": "ppIUnk", + "type": "void" + } + ], + "SetCatalogState": [ + { + "name": "pwcsCat", + "type": "WCHAR" + }, + { + "name": "pwcsMachine", + "type": "WCHAR" + }, + { + "name": "dwNewState", + "type": "DWORD" + }, + { + "name": "pdwOldState", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/ole32_dll.json b/qiling/extensions/windows_sdk/defs/ole32_dll.json new file mode 100644 index 000000000..7d66f284f --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/ole32_dll.json @@ -0,0 +1,3020 @@ +{ + "CoGetMalloc": [ + { + "name": "dwMemContext", + "type": "DWORD" + }, + { + "name": "ppMalloc", + "type": "LPMALLOC" + } + ], + "CreateStreamOnHGlobal": [ + { + "name": "hGlobal", + "type": "HGLOBAL" + }, + { + "name": "fDeleteOnRelease", + "type": "BOOL" + }, + { + "name": "ppstm", + "type": "LPSTREAM" + } + ], + "GetHGlobalFromStream": [ + { + "name": "pstm", + "type": "LPSTREAM" + }, + { + "name": "phglobal", + "type": "HGLOBAL" + } + ], + "CoUninitialize": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoGetCurrentProcess": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoInitializeEx": [ + { + "name": "pvReserved", + "type": "LPVOID" + }, + { + "name": "dwCoInit", + "type": "DWORD" + } + ], + "CoGetCallerTID": [ + { + "name": "lpdwTID", + "type": "LPDWORD" + } + ], + "CoGetCurrentLogicalThreadId": [ + { + "name": "pguid", + "type": "GUID" + } + ], + "CoGetContextToken": [ + { + "name": "pToken", + "type": "ULONG_PTR" + } + ], + "CoGetDefaultContext": [ + { + "name": "aptType", + "type": "APTTYPE" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CoGetApartmentType": [ + { + "name": "pAptType", + "type": "APTTYPE" + }, + { + "name": "pAptQualifier", + "type": "APTTYPEQUALIFIER" + } + ], + "CoIncrementMTAUsage": [ + { + "name": "pCookie", + "type": "CO_MTA_USAGE_COOKIE" + } + ], + "CoDecrementMTAUsage": [ + { + "name": "Cookie", + "type": "CO_MTA_USAGE_COOKIE" + } + ], + "CoAllowUnmarshalerCLSID": [ + { + "name": "clsid", + "type": "IID" + } + ], + "CoGetObjectContext": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ], + "CoGetClassObject": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "dwClsContext", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ], + "CoRegisterClassObject": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "dwClsContext", + "type": "DWORD" + }, + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "lpdwRegister", + "type": "LPDWORD" + } + ], + "CoRevokeClassObject": [ + { + "name": "dwRegister", + "type": "DWORD" + } + ], + "CoResumeClassObjects": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoSuspendClassObjects": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoAddRefServerProcess": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoReleaseServerProcess": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoGetPSClsid": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "pClsid", + "type": "CLSID" + } + ], + "CoRegisterPSClsid": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "rclsid", + "type": "IID" + } + ], + "CoRegisterSurrogate": [ + { + "name": "pSurrogate", + "type": "LPSURROGATE" + } + ], + "CoGetMarshalSizeMax": [ + { + "name": "pulSize", + "type": "ULONG" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "dwDestContext", + "type": "DWORD" + }, + { + "name": "pvDestContext", + "type": "LPVOID" + }, + { + "name": "mshlflags", + "type": "DWORD" + } + ], + "CoMarshalInterface": [ + { + "name": "pStm", + "type": "LPSTREAM" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "dwDestContext", + "type": "DWORD" + }, + { + "name": "pvDestContext", + "type": "LPVOID" + }, + { + "name": "mshlflags", + "type": "DWORD" + } + ], + "CoUnmarshalInterface": [ + { + "name": "pStm", + "type": "LPSTREAM" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ], + "CoMarshalHresult": [ + { + "name": "pstm", + "type": "LPSTREAM" + }, + { + "name": "hresult", + "type": "HRESULT" + } + ], + "CoUnmarshalHresult": [ + { + "name": "pstm", + "type": "LPSTREAM" + }, + { + "name": "phresult", + "type": "HRESULT" + } + ], + "CoReleaseMarshalData": [ + { + "name": "pStm", + "type": "LPSTREAM" + } + ], + "CoDisconnectObject": [ + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "CoLockObjectExternal": [ + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "fLock", + "type": "BOOL" + }, + { + "name": "fLastUnlockReleases", + "type": "BOOL" + } + ], + "CoGetStandardMarshal": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "dwDestContext", + "type": "DWORD" + }, + { + "name": "pvDestContext", + "type": "LPVOID" + }, + { + "name": "mshlflags", + "type": "DWORD" + }, + { + "name": "ppMarshal", + "type": "LPMARSHAL" + } + ], + "CoGetStdMarshalEx": [ + { + "name": "pUnkOuter", + "type": "LPUNKNOWN" + }, + { + "name": "smexflags", + "type": "DWORD" + }, + { + "name": "ppUnkInner", + "type": "LPUNKNOWN" + } + ], + "CoIsHandlerConnected": [ + { + "name": "pUnk", + "type": "LPUNKNOWN" + } + ], + "CoMarshalInterThreadInterfaceInStream": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "ppStm", + "type": "LPSTREAM" + } + ], + "CoGetInterfaceAndReleaseStream": [ + { + "name": "pStm", + "type": "LPSTREAM" + }, + { + "name": "iid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ], + "CoCreateFreeThreadedMarshaler": [ + { + "name": "punkOuter", + "type": "LPUNKNOWN" + }, + { + "name": "ppunkMarshal", + "type": "LPUNKNOWN" + } + ], + "CoFreeUnusedLibraries": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoDisconnectContext": [ + { + "name": "dwTimeout", + "type": "DWORD" + } + ], + "CoInitializeSecurity": [ + { + "name": "pSecDesc", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "cAuthSvc", + "type": "LONG" + }, + { + "name": "asAuthSvc", + "type": "SOLE_AUTHENTICATION_SERVICE" + }, + { + "name": "pReserved1", + "type": "void" + }, + { + "name": "dwAuthnLevel", + "type": "DWORD" + }, + { + "name": "dwImpLevel", + "type": "DWORD" + }, + { + "name": "pAuthList", + "type": "void" + }, + { + "name": "dwCapabilities", + "type": "DWORD" + }, + { + "name": "pReserved3", + "type": "void" + } + ], + "CoGetCallContext": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppInterface", + "type": "void" + } + ], + "CoQueryProxyBlanket": [ + { + "name": "pProxy", + "type": "IUnknown" + }, + { + "name": "pwAuthnSvc", + "type": "DWORD" + }, + { + "name": "pAuthzSvc", + "type": "DWORD" + }, + { + "name": "pServerPrincName", + "type": "LPOLESTR" + }, + { + "name": "pAuthnLevel", + "type": "DWORD" + }, + { + "name": "pImpLevel", + "type": "DWORD" + }, + { + "name": "pAuthInfo", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "pCapabilites", + "type": "DWORD" + } + ], + "CoSetProxyBlanket": [ + { + "name": "pProxy", + "type": "IUnknown" + }, + { + "name": "dwAuthnSvc", + "type": "DWORD" + }, + { + "name": "dwAuthzSvc", + "type": "DWORD" + }, + { + "name": "pServerPrincName", + "type": "OLECHAR" + }, + { + "name": "dwAuthnLevel", + "type": "DWORD" + }, + { + "name": "dwImpLevel", + "type": "DWORD" + }, + { + "name": "pAuthInfo", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "dwCapabilities", + "type": "DWORD" + } + ], + "CoCopyProxy": [ + { + "name": "pProxy", + "type": "IUnknown" + }, + { + "name": "ppCopy", + "type": "IUnknown" + } + ], + "CoQueryClientBlanket": [ + { + "name": "pAuthnSvc", + "type": "DWORD" + }, + { + "name": "pAuthzSvc", + "type": "DWORD" + }, + { + "name": "pServerPrincName", + "type": "LPOLESTR" + }, + { + "name": "pAuthnLevel", + "type": "DWORD" + }, + { + "name": "pImpLevel", + "type": "DWORD" + }, + { + "name": "pPrivs", + "type": "RPC_AUTHZ_HANDLE" + }, + { + "name": "pCapabilities", + "type": "DWORD" + } + ], + "CoImpersonateClient": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoRevertToSelf": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoQueryAuthenticationServices": [ + { + "name": "pcAuthSvc", + "type": "DWORD" + }, + { + "name": "asAuthSvc", + "type": "SOLE_AUTHENTICATION_SERVICE" + } + ], + "CoSwitchCallContext": [ + { + "name": "pNewObject", + "type": "IUnknown" + }, + { + "name": "ppOldObject", + "type": "IUnknown" + } + ], + "CoCreateInstance": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "pUnkOuter", + "type": "LPUNKNOWN" + }, + { + "name": "dwClsContext", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ], + "CoCreateInstanceEx": [ + { + "name": "Clsid", + "type": "IID" + }, + { + "name": "punkOuter", + "type": "IUnknown" + }, + { + "name": "dwClsCtx", + "type": "DWORD" + }, + { + "name": "pServerInfo", + "type": "COSERVERINFO" + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "pResults", + "type": "MULTI_QI" + } + ], + "CoRegisterActivationFilter": [ + { + "name": "pActivationFilter", + "type": "IActivationFilter" + } + ], + "CoGetCancelObject": [ + { + "name": "dwThreadId", + "type": "DWORD" + }, + { + "name": "iid", + "type": "IID" + }, + { + "name": "ppUnk", + "type": "void" + } + ], + "CoSetCancelObject": [ + { + "name": "pUnk", + "type": "IUnknown" + } + ], + "CoCancelCall": [ + { + "name": "dwThreadId", + "type": "DWORD" + }, + { + "name": "ulTimeout", + "type": "ULONG" + } + ], + "CoTestCancel": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoEnableCallCancellation": [ + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "CoDisableCallCancellation": [ + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "StringFromCLSID": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "lplpsz", + "type": "LPOLESTR" + } + ], + "CLSIDFromString": [ + { + "name": "lpsz", + "type": "LPCOLESTR" + }, + { + "name": "pclsid", + "type": "LPCLSID" + } + ], + "StringFromIID": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "lplpsz", + "type": "LPOLESTR" + } + ], + "IIDFromString": [ + { + "name": "lpsz", + "type": "LPCOLESTR" + }, + { + "name": "lpiid", + "type": "LPIID" + } + ], + "ProgIDFromCLSID": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "lplpszProgID", + "type": "LPOLESTR" + } + ], + "CLSIDFromProgID": [ + { + "name": "lpszProgID", + "type": "LPCOLESTR" + }, + { + "name": "lpclsid", + "type": "LPCLSID" + } + ], + "StringFromGUID2": [ + { + "name": "rguid", + "type": "GUID" + }, + { + "name": "lpsz", + "type": "LPOLESTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "CoCreateGuid": [ + { + "name": "pguid", + "type": "GUID" + } + ], + "PropVariantCopy": [ + { + "name": "pvarDest", + "type": "PROPVARIANT" + }, + { + "name": "pvarSrc", + "type": "PROPVARIANT" + } + ], + "PropVariantClear": [ + { + "name": "pvar", + "type": "PROPVARIANT" + } + ], + "FreePropVariantArray": [ + { + "name": "cVariants", + "type": "ULONG" + }, + { + "name": "rgvars", + "type": "PROPVARIANT" + } + ], + "CoWaitForMultipleHandles": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "cHandles", + "type": "ULONG" + }, + { + "name": "pHandles", + "type": "LPHANDLE" + }, + { + "name": "lpdwindex", + "type": "LPDWORD" + } + ], + "CoGetTreatAsClass": [ + { + "name": "clsidOld", + "type": "IID" + }, + { + "name": "pClsidNew", + "type": "LPCLSID" + } + ], + "CoInvalidateRemoteMachineBindings": [ + { + "name": "pszMachineName", + "type": "LPOLESTR" + } + ], + "RoGetAgileReference": [ + { + "name": "options", + "type": { + "name": "AgileReferenceOptions", + "data_type": "Enum", + "enumerators": [] + } + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "pUnk", + "type": "IUnknown" + }, + { + "name": "ppAgileReference", + "type": "IAgileReference" + } + ], + "CoTaskMemAlloc": [ + { + "name": "cb", + "type": "SIZE_T" + } + ], + "CoTaskMemRealloc": [ + { + "name": "pv", + "type": "LPVOID" + }, + { + "name": "cb", + "type": "SIZE_T" + } + ], + "CoTaskMemFree": [ + { + "name": "pv", + "type": "LPVOID" + } + ], + "CoFileTimeNow": [ + { + "name": "lpFileTime", + "type": "FILETIME" + } + ], + "CLSIDFromProgIDEx": [ + { + "name": "lpszProgID", + "type": "LPCOLESTR" + }, + { + "name": "lpclsid", + "type": "LPCLSID" + } + ], + "CreateDataAdviseHolder": [ + { + "name": "ppDAHolder", + "type": "LPDATAADVISEHOLDER" + } + ], + "OleBuildVersion": [ + { + "name": "VOID", + "type": "void" + } + ], + "WriteFmtUserTypeStg": [ + { + "name": "pstg", + "type": "LPSTORAGE" + }, + { + "name": "cf", + "type": "CLIPFORMAT" + }, + { + "name": "lpszUserType", + "type": "LPOLESTR" + } + ], + "ReadFmtUserTypeStg": [ + { + "name": "pstg", + "type": "LPSTORAGE" + }, + { + "name": "pcf", + "type": "CLIPFORMAT" + }, + { + "name": "lplpszUserType", + "type": "LPOLESTR" + } + ], + "OleInitialize": [ + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "OleUninitialize": [ + { + "name": "VOID", + "type": "void" + } + ], + "OleQueryLinkFromData": [ + { + "name": "pSrcDataObject", + "type": "LPDATAOBJECT" + } + ], + "OleQueryCreateFromData": [ + { + "name": "pSrcDataObject", + "type": "LPDATAOBJECT" + } + ], + "OleCreate": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPOLECLIENT" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LHCLIENTDOC" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPOLEOBJECT" + }, + { + "name": "VOID", + "type": "OLEOPT_RENDER" + }, + { + "name": "VOID", + "type": "OLECLIPFORMAT" + } + ], + "OleCreateEx": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "cFormats", + "type": "ULONG" + }, + { + "name": "rgAdvf", + "type": "DWORD" + }, + { + "name": "rgFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "lpAdviseSink", + "type": "IAdviseSink" + }, + { + "name": "rgdwConnection", + "type": "DWORD" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateFromData": [ + { + "name": "pSrcDataObj", + "type": "LPDATAOBJECT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "pFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateFromDataEx": [ + { + "name": "pSrcDataObj", + "type": "LPDATAOBJECT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "cFormats", + "type": "ULONG" + }, + { + "name": "rgAdvf", + "type": "DWORD" + }, + { + "name": "rgFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "lpAdviseSink", + "type": "IAdviseSink" + }, + { + "name": "rgdwConnection", + "type": "DWORD" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateLinkFromData": [ + { + "name": "pSrcDataObj", + "type": "LPDATAOBJECT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "pFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateLinkFromDataEx": [ + { + "name": "pSrcDataObj", + "type": "LPDATAOBJECT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "cFormats", + "type": "ULONG" + }, + { + "name": "rgAdvf", + "type": "DWORD" + }, + { + "name": "rgFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "lpAdviseSink", + "type": "IAdviseSink" + }, + { + "name": "rgdwConnection", + "type": "DWORD" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateStaticFromData": [ + { + "name": "pSrcDataObj", + "type": "LPDATAOBJECT" + }, + { + "name": "iid", + "type": "IID" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "pFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateLink": [ + { + "name": "pmkLinkSrc", + "type": "LPMONIKER" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "lpFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateLinkEx": [ + { + "name": "pmkLinkSrc", + "type": "LPMONIKER" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "cFormats", + "type": "ULONG" + }, + { + "name": "rgAdvf", + "type": "DWORD" + }, + { + "name": "rgFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "lpAdviseSink", + "type": "IAdviseSink" + }, + { + "name": "rgdwConnection", + "type": "DWORD" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateLinkToFile": [ + { + "name": "lpszFileName", + "type": "LPCOLESTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "lpFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateLinkToFileEx": [ + { + "name": "lpszFileName", + "type": "LPCOLESTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "cFormats", + "type": "ULONG" + }, + { + "name": "rgAdvf", + "type": "DWORD" + }, + { + "name": "rgFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "lpAdviseSink", + "type": "IAdviseSink" + }, + { + "name": "rgdwConnection", + "type": "DWORD" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateFromFile": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPOLECLIENT" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LHCLIENTDOC" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPOLEOBJECT" + }, + { + "name": "VOID", + "type": "OLEOPT_RENDER" + }, + { + "name": "VOID", + "type": "OLECLIPFORMAT" + } + ], + "OleCreateFromFileEx": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "lpszFileName", + "type": "LPCOLESTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "cFormats", + "type": "ULONG" + }, + { + "name": "rgAdvf", + "type": "DWORD" + }, + { + "name": "rgFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "lpAdviseSink", + "type": "IAdviseSink" + }, + { + "name": "rgdwConnection", + "type": "DWORD" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleLoad": [ + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleSave": [ + { + "name": "pPS", + "type": "LPPERSISTSTORAGE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "fSameAsLoad", + "type": "BOOL" + } + ], + "OleLoadFromStream": [ + { + "name": "VOID", + "type": "LPOLESTREAM" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPOLECLIENT" + }, + { + "name": "VOID", + "type": "LHCLIENTDOC" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPOLEOBJECT" + } + ], + "OleSaveToStream": [ + { + "name": "VOID", + "type": "LPOLEOBJECT" + }, + { + "name": "VOID", + "type": "LPOLESTREAM" + } + ], + "OleSetContainedObject": [ + { + "name": "pUnknown", + "type": "LPUNKNOWN" + }, + { + "name": "fContained", + "type": "BOOL" + } + ], + "OleNoteObjectVisible": [ + { + "name": "pUnknown", + "type": "LPUNKNOWN" + }, + { + "name": "fVisible", + "type": "BOOL" + } + ], + "RegisterDragDrop": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pDropTarget", + "type": "LPDROPTARGET" + } + ], + "RevokeDragDrop": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "DoDragDrop": [ + { + "name": "pDataObj", + "type": "LPDATAOBJECT" + }, + { + "name": "pDropSource", + "type": "LPDROPSOURCE" + }, + { + "name": "dwOKEffects", + "type": "DWORD" + }, + { + "name": "pdwEffect", + "type": "LPDWORD" + } + ], + "OleSetClipboard": [ + { + "name": "pDataObj", + "type": "LPDATAOBJECT" + } + ], + "OleGetClipboard": [ + { + "name": "ppDataObj", + "type": "LPDATAOBJECT" + } + ], + "OleGetClipboardWithEnterpriseInfo": [ + { + "name": "dataObject", + "type": "IDataObject" + }, + { + "name": "dataEnterpriseId", + "type": "PWSTR" + }, + { + "name": "sourceDescription", + "type": "PWSTR" + }, + { + "name": "targetDescription", + "type": "PWSTR" + }, + { + "name": "dataDescription", + "type": "PWSTR" + } + ], + "OleFlushClipboard": [ + { + "name": "VOID", + "type": "void" + } + ], + "OleIsCurrentClipboard": [ + { + "name": "pDataObj", + "type": "LPDATAOBJECT" + } + ], + "OleCreateMenuDescriptor": [ + { + "name": "hmenuCombined", + "type": "HMENU" + }, + { + "name": "lpMenuWidths", + "type": "LPOLEMENUGROUPWIDTHS" + } + ], + "OleSetMenuDescriptor": [ + { + "name": "holemenu", + "type": "HOLEMENU" + }, + { + "name": "hwndFrame", + "type": "HWND" + }, + { + "name": "hwndActiveObject", + "type": "HWND" + }, + { + "name": "lpFrame", + "type": "LPOLEINPLACEFRAME" + }, + { + "name": "lpActiveObj", + "type": "LPOLEINPLACEACTIVEOBJECT" + } + ], + "OleDestroyMenuDescriptor": [ + { + "name": "holemenu", + "type": "HOLEMENU" + } + ], + "OleTranslateAccelerator": [ + { + "name": "lpFrame", + "type": "LPOLEINPLACEFRAME" + }, + { + "name": "lpFrameInfo", + "type": "LPOLEINPLACEFRAMEINFO" + }, + { + "name": "lpmsg", + "type": "LPMSG" + } + ], + "OleDuplicateData": [ + { + "name": "hSrc", + "type": "HANDLE" + }, + { + "name": "cfFormat", + "type": "CLIPFORMAT" + }, + { + "name": "uiFlags", + "type": "UINT" + } + ], + "OleDraw": [ + { + "name": "VOID", + "type": "LPOLEOBJECT" + }, + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "RECT" + }, + { + "name": "VOID", + "type": "RECT" + }, + { + "name": "VOID", + "type": "HDC" + } + ], + "OleRun": [ + { + "name": "pUnknown", + "type": "LPUNKNOWN" + } + ], + "OleIsRunning": [ + { + "name": "pObject", + "type": "LPOLEOBJECT" + } + ], + "OleLockRunning": [ + { + "name": "pUnknown", + "type": "LPUNKNOWN" + }, + { + "name": "fLock", + "type": "BOOL" + }, + { + "name": "fLastUnlockCloses", + "type": "BOOL" + } + ], + "ReleaseStgMedium": [ + { + "name": "VOID", + "type": "LPSTGMEDIUM" + } + ], + "CreateOleAdviseHolder": [ + { + "name": "ppOAHolder", + "type": "LPOLEADVISEHOLDER" + } + ], + "OleCreateDefaultHandler": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "pUnkOuter", + "type": "LPUNKNOWN" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "lplpObj", + "type": "LPVOID" + } + ], + "OleCreateEmbeddingHelper": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "pUnkOuter", + "type": "LPUNKNOWN" + }, + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "pCF", + "type": "LPCLASSFACTORY" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "lplpObj", + "type": "LPVOID" + } + ], + "IsAccelerator": [ + { + "name": "hAccel", + "type": "HACCEL" + }, + { + "name": "cAccelEntries", + "type": "int" + }, + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "lpwCmd", + "type": "WORD" + } + ], + "OleGetIconOfFile": [ + { + "name": "lpszPath", + "type": "LPOLESTR" + }, + { + "name": "fUseFileAsLabel", + "type": "BOOL" + } + ], + "OleGetIconOfClass": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "lpszLabel", + "type": "LPOLESTR" + }, + { + "name": "fUseTypeAsLabel", + "type": "BOOL" + } + ], + "OleMetafilePictFromIconAndLabel": [ + { + "name": "hIcon", + "type": "HICON" + }, + { + "name": "lpszLabel", + "type": "LPOLESTR" + }, + { + "name": "lpszSourceFile", + "type": "LPOLESTR" + }, + { + "name": "iIconIndex", + "type": "UINT" + } + ], + "OleRegGetUserType": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "dwFormOfType", + "type": "DWORD" + }, + { + "name": "pszUserType", + "type": "LPOLESTR" + } + ], + "OleRegGetMiscStatus": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "dwAspect", + "type": "DWORD" + }, + { + "name": "pdwStatus", + "type": "DWORD" + } + ], + "OleRegEnumFormatEtc": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "dwDirection", + "type": "DWORD" + }, + { + "name": "ppenum", + "type": "LPENUMFORMATETC" + } + ], + "OleRegEnumVerbs": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "ppenum", + "type": "LPENUMOLEVERB" + } + ], + "OleConvertOLESTREAMToIStorage": [ + { + "name": "lpolestream", + "type": "LPOLESTREAM" + }, + { + "name": "pstg", + "type": "LPSTORAGE" + }, + { + "name": "ptd", + "type": "DVTARGETDEVICE" + } + ], + "OleConvertIStorageToOLESTREAM": [ + { + "name": "pstg", + "type": "LPSTORAGE" + }, + { + "name": "lpolestream", + "type": "LPOLESTREAM" + } + ], + "OleDoAutoConvert": [ + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "pClsidNew", + "type": "LPCLSID" + } + ], + "OleGetAutoConvert": [ + { + "name": "clsidOld", + "type": "IID" + }, + { + "name": "pClsidNew", + "type": "LPCLSID" + } + ], + "OleSetAutoConvert": [ + { + "name": "clsidOld", + "type": "IID" + }, + { + "name": "clsidNew", + "type": "IID" + } + ], + "SetConvertStg": [ + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "fConvert", + "type": "BOOL" + } + ], + "OleConvertIStorageToOLESTREAMEx": [ + { + "name": "pstg", + "type": "LPSTORAGE" + }, + { + "name": "cfFormat", + "type": "CLIPFORMAT" + }, + { + "name": "lWidth", + "type": "LONG" + }, + { + "name": "lHeight", + "type": "LONG" + }, + { + "name": "dwSize", + "type": "DWORD" + }, + { + "name": "pmedium", + "type": "LPSTGMEDIUM" + }, + { + "name": "polestm", + "type": "LPOLESTREAM" + } + ], + "OleConvertOLESTREAMToIStorageEx": [ + { + "name": "polestm", + "type": "LPOLESTREAM" + }, + { + "name": "pstg", + "type": "LPSTORAGE" + }, + { + "name": "pcfFormat", + "type": "CLIPFORMAT" + }, + { + "name": "plwWidth", + "type": "LONG" + }, + { + "name": "plHeight", + "type": "LONG" + }, + { + "name": "pdwSize", + "type": "DWORD" + }, + { + "name": "pmedium", + "type": "LPSTGMEDIUM" + } + ], + "CoGetInterceptor": [ + { + "name": "iidIntercepted", + "type": "IID" + }, + { + "name": "punkOuter", + "type": "IUnknown" + }, + { + "name": "iid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CStdStubBuffer2_QueryInterface": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "CStdStubBuffer2_Connect": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + }, + { + "name": "pUnkServer", + "type": "IUnknown" + } + ], + "CStdStubBuffer2_Disconnect": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "CStdStubBuffer2_CountRefs": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "CStdAsyncStubBuffer_QueryInterface": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "CStdAsyncStubBuffer_AddRef": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "CStdAsyncStubBuffer_Release": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "CStdAsyncStubBuffer_Connect": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + }, + { + "name": "pUnkServer", + "type": "IUnknown" + } + ], + "CStdAsyncStubBuffer_Disconnect": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "CStdAsyncStubBuffer_Invoke": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + }, + { + "name": "_prpcmsg", + "type": "RPCOLEMESSAGE" + }, + { + "name": "_pRpcChannelBuffer", + "type": "IRpcChannelBuffer" + } + ], + "CStdAsyncStubBuffer2_Release": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "CStdAsyncStubBuffer2_Connect": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + }, + { + "name": "pUnkServer", + "type": "IUnknown" + } + ], + "CStdAsyncStubBuffer2_Disconnect": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "DllRegisterServer": [ + { + "name": "VOID", + "type": "void" + } + ], + "DllUnregisterServer": [ + { + "name": "VOID", + "type": "void" + } + ], + "StgPropertyLengthAsVariant": [ + { + "name": "pProp", + "type": "SERIALIZEDPROPERTYVALUE" + }, + { + "name": "cbProp", + "type": "ULONG" + }, + { + "name": "CodePage", + "type": "USHORT" + }, + { + "name": "bReserved", + "type": "BYTE" + } + ], + "StgCreateDocfile": [ + { + "name": "pwcsName", + "type": "WCHAR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ], + "StgCreateDocfileOnILockBytes": [ + { + "name": "plkbyt", + "type": "ILockBytes" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ], + "StgOpenStorage": [ + { + "name": "pwcsName", + "type": "WCHAR" + }, + { + "name": "pstgPriority", + "type": "IStorage" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "snbExclude", + "type": "SNB" + }, + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ], + "StgOpenStorageOnILockBytes": [ + { + "name": "plkbyt", + "type": "ILockBytes" + }, + { + "name": "pstgPriority", + "type": "IStorage" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "snbExclude", + "type": "SNB" + }, + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ], + "StgIsStorageFile": [ + { + "name": "pwcsName", + "type": "WCHAR" + } + ], + "StgIsStorageILockBytes": [ + { + "name": "plkbyt", + "type": "ILockBytes" + } + ], + "StgSetTimes": [ + { + "name": "lpszName", + "type": "WCHAR" + }, + { + "name": "pctime", + "type": "FILETIME" + }, + { + "name": "patime", + "type": "FILETIME" + }, + { + "name": "pmtime", + "type": "FILETIME" + } + ], + "StgCreateStorageEx": [ + { + "name": "pwcsName", + "type": "WCHAR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "stgfmt", + "type": "DWORD" + }, + { + "name": "grfAttrs", + "type": "DWORD" + }, + { + "name": "pStgOptions", + "type": "STGOPTIONS" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppObjectOpen", + "type": "void" + } + ], + "StgOpenStorageEx": [ + { + "name": "pwcsName", + "type": "WCHAR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "stgfmt", + "type": "DWORD" + }, + { + "name": "grfAttrs", + "type": "DWORD" + }, + { + "name": "pStgOptions", + "type": "STGOPTIONS" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppObjectOpen", + "type": "void" + } + ], + "StgCreatePropStg": [ + { + "name": "pUnk", + "type": "IUnknown" + }, + { + "name": "fmtid", + "type": "IID" + }, + { + "name": "pclsid", + "type": "CLSID" + }, + { + "name": "grfFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "ppPropStg", + "type": "IPropertyStorage" + } + ], + "StgOpenPropStg": [ + { + "name": "pUnk", + "type": "IUnknown" + }, + { + "name": "fmtid", + "type": "IID" + }, + { + "name": "grfFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "ppPropStg", + "type": "IPropertyStorage" + } + ], + "StgCreatePropSetStg": [ + { + "name": "pStorage", + "type": "IStorage" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "ppPropSetStg", + "type": "IPropertySetStorage" + } + ], + "FmtIdToPropStgName": [ + { + "name": "pfmtid", + "type": "FMTID" + }, + { + "name": "oszName", + "type": "LPOLESTR" + } + ], + "PropStgNameToFmtId": [ + { + "name": "oszName", + "type": "LPOLESTR" + }, + { + "name": "pfmtid", + "type": "FMTID" + } + ], + "ReadClassStg": [ + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "WriteClassStg": [ + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "rclsid", + "type": "IID" + } + ], + "ReadClassStm": [ + { + "name": "pStm", + "type": "LPSTREAM" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "WriteClassStm": [ + { + "name": "pStm", + "type": "LPSTREAM" + }, + { + "name": "rclsid", + "type": "IID" + } + ], + "GetHGlobalFromILockBytes": [ + { + "name": "plkbyt", + "type": "LPLOCKBYTES" + }, + { + "name": "phglobal", + "type": "HGLOBAL" + } + ], + "CreateILockBytesOnHGlobal": [ + { + "name": "hGlobal", + "type": "HGLOBAL" + }, + { + "name": "fDeleteOnRelease", + "type": "BOOL" + }, + { + "name": "pplkbyt", + "type": "LPLOCKBYTES" + } + ], + "GetConvertStg": [ + { + "name": "pStg", + "type": "LPSTORAGE" + } + ], + "CoInitialize": [ + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "CoRegisterMallocSpy": [ + { + "name": "pMallocSpy", + "type": "LPMALLOCSPY" + } + ], + "CoRevokeMallocSpy": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoRegisterInitializeSpy": [ + { + "name": "pSpy", + "type": "IInitializeSpy" + }, + { + "name": "puliCookie", + "type": "ULARGE_INTEGER" + } + ], + "CoRevokeInitializeSpy": [ + { + "name": "uliCookie", + "type": "ULARGE_INTEGER" + } + ], + "CoLoadLibrary": [ + { + "name": "lpszLibName", + "type": "LPOLESTR" + }, + { + "name": "bAutoFree", + "type": "BOOL" + } + ], + "CoFreeLibrary": [ + { + "name": "hInst", + "type": "HINSTANCE" + } + ], + "CoFreeAllLibraries": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoGetInstanceFromIStorage": [ + { + "name": "pServerInfo", + "type": "COSERVERINFO" + }, + { + "name": "pClsid", + "type": "CLSID" + }, + { + "name": "punkOuter", + "type": "IUnknown" + }, + { + "name": "dwClsCtx", + "type": "DWORD" + }, + { + "name": "pstg", + "type": { + "name": "IStorage", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "pResults", + "type": "MULTI_QI" + } + ], + "CoAllowSetForegroundWindow": [ + { + "name": "pUnk", + "type": "IUnknown" + }, + { + "name": "lpvReserved", + "type": "LPVOID" + } + ], + "CoIsOle1Class": [ + { + "name": "rclsid", + "type": "IID" + } + ], + "CoFileTimeToDosDateTime": [ + { + "name": "lpFileTime", + "type": "FILETIME" + }, + { + "name": "lpDosDate", + "type": "LPWORD" + }, + { + "name": "lpDosTime", + "type": "LPWORD" + } + ], + "CoDosDateTimeToFileTime": [ + { + "name": "nDosDate", + "type": "WORD" + }, + { + "name": "nDosTime", + "type": "WORD" + }, + { + "name": "lpFileTime", + "type": "FILETIME" + } + ], + "CoRegisterMessageFilter": [ + { + "name": "lpMessageFilter", + "type": "LPMESSAGEFILTER" + }, + { + "name": "lplpMessageFilter", + "type": "LPMESSAGEFILTER" + } + ], + "CoTreatAsClass": [ + { + "name": "clsidOld", + "type": "IID" + }, + { + "name": "clsidNew", + "type": "IID" + } + ], + "CreateDataCache": [ + { + "name": "pUnkOuter", + "type": "LPUNKNOWN" + }, + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "iid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ], + "StgOpenAsyncDocfileOnIFillLockBytes": [ + { + "name": "pflb", + "type": "IFillLockBytes" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "asyncFlags", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ], + "StgGetIFillLockBytesOnILockBytes": [ + { + "name": "pilb", + "type": "ILockBytes" + }, + { + "name": "ppflb", + "type": "IFillLockBytes" + } + ], + "StgGetIFillLockBytesOnFile": [ + { + "name": "pwcsName", + "type": "OLECHAR" + }, + { + "name": "ppflb", + "type": "IFillLockBytes" + } + ], + "CoInstall": [ + { + "name": "pbc", + "type": "IBindCtx" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pClassSpec", + "type": "uCLSSPEC" + }, + { + "name": "pQuery", + "type": "QUERYCONTEXT" + }, + { + "name": "pszCodeBase", + "type": "LPWSTR" + } + ], + "BindMoniker": [ + { + "name": "pmk", + "type": "LPMONIKER" + }, + { + "name": "grfOpt", + "type": "DWORD" + }, + { + "name": "iidResult", + "type": "IID" + }, + { + "name": "ppvResult", + "type": "LPVOID" + } + ], + "CoGetObject": [ + { + "name": "pszName", + "type": "LPCWSTR" + }, + { + "name": "pBindOptions", + "type": "BIND_OPTS" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "MkParseDisplayName": [ + { + "name": "pbc", + "type": "LPBC" + }, + { + "name": "szUserName", + "type": "LPCOLESTR" + }, + { + "name": "pchEaten", + "type": "ULONG" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "MonikerRelativePathTo": [ + { + "name": "pmkSrc", + "type": "LPMONIKER" + }, + { + "name": "pmkDest", + "type": "LPMONIKER" + }, + { + "name": "ppmkRelPath", + "type": "LPMONIKER" + }, + { + "name": "dwReserved", + "type": "BOOL" + } + ], + "MonikerCommonPrefixWith": [ + { + "name": "pmkThis", + "type": "LPMONIKER" + }, + { + "name": "pmkOther", + "type": "LPMONIKER" + }, + { + "name": "ppmkCommon", + "type": "LPMONIKER" + } + ], + "CreateBindCtx": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppbc", + "type": "LPBC" + } + ], + "CreateGenericComposite": [ + { + "name": "pmkFirst", + "type": "LPMONIKER" + }, + { + "name": "pmkRest", + "type": "LPMONIKER" + }, + { + "name": "ppmkComposite", + "type": "LPMONIKER" + } + ], + "GetClassFile": [ + { + "name": "szFilename", + "type": "LPCOLESTR" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "CreateClassMoniker": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreateFileMoniker": [ + { + "name": "lpszPathName", + "type": "LPCOLESTR" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreateItemMoniker": [ + { + "name": "lpszDelim", + "type": "LPCOLESTR" + }, + { + "name": "lpszItem", + "type": "LPCOLESTR" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreateAntiMoniker": [ + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreatePointerMoniker": [ + { + "name": "punk", + "type": "LPUNKNOWN" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreateObjrefMoniker": [ + { + "name": "punk", + "type": "LPUNKNOWN" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "GetRunningObjectTable": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "pprot", + "type": "LPRUNNINGOBJECTTABLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/oleacc_dll.json b/qiling/extensions/windows_sdk/defs/oleacc_dll.json new file mode 100644 index 000000000..7478ce7a1 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/oleacc_dll.json @@ -0,0 +1,276 @@ +{ + "LresultFromObject": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "punk", + "type": "LPUNKNOWN" + } + ], + "ObjectFromLresult": [ + { + "name": "lResult", + "type": "LRESULT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "WindowFromAccessibleObject": [ + { + "name": "VOID", + "type": "IAccessible" + }, + { + "name": "phwnd", + "type": "HWND" + } + ], + "AccessibleObjectFromWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwId", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "AccessibleObjectFromEvent": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwId", + "type": "DWORD" + }, + { + "name": "dwChildId", + "type": "DWORD" + }, + { + "name": "ppacc", + "type": "IAccessible" + }, + { + "name": "pvarChild", + "type": "VARIANT" + } + ], + "AccessibleObjectFromPoint": [ + { + "name": "ptScreen", + "type": "POINT" + }, + { + "name": "ppacc", + "type": "IAccessible" + }, + { + "name": "pvarChild", + "type": "VARIANT" + } + ], + "AccessibleChildren": [ + { + "name": "paccContainer", + "type": "IAccessible" + }, + { + "name": "iChildStart", + "type": "LONG" + }, + { + "name": "cChildren", + "type": "LONG" + }, + { + "name": "rgvarChildren", + "type": "VARIANT" + }, + { + "name": "pcObtained", + "type": "LONG" + } + ], + "GetRoleTextA": [ + { + "name": "lRole", + "type": "DWORD" + }, + { + "name": "lpszRole", + "type": "LPSTR" + }, + { + "name": "cchRoleMax", + "type": "UINT" + } + ], + "GetRoleTextW": [ + { + "name": "lRole", + "type": "DWORD" + }, + { + "name": "lpszRole", + "type": "LPWSTR" + }, + { + "name": "cchRoleMax", + "type": "UINT" + } + ], + "GetStateTextA": [ + { + "name": "lStateBit", + "type": "DWORD" + }, + { + "name": "lpszState", + "type": "LPSTR" + }, + { + "name": "cchState", + "type": "UINT" + } + ], + "GetStateTextW": [ + { + "name": "lStateBit", + "type": "DWORD" + }, + { + "name": "lpszState", + "type": "LPWSTR" + }, + { + "name": "cchState", + "type": "UINT" + } + ], + "GetOleaccVersionInfo": [ + { + "name": "pVer", + "type": "DWORD" + }, + { + "name": "pBuild", + "type": "DWORD" + } + ], + "CreateStdAccessibleObject": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "idObject", + "type": "LONG" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "CreateStdAccessibleProxyA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pClassName", + "type": "LPCSTR" + }, + { + "name": "idObject", + "type": "LONG" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "CreateStdAccessibleProxyW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pClassName", + "type": "LPCWSTR" + }, + { + "name": "idObject", + "type": "LONG" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "AccSetRunningUtilityState": [ + { + "name": "hwndApp", + "type": "HWND" + }, + { + "name": "dwUtilityStateMask", + "type": "DWORD" + }, + { + "name": "dwUtilityState", + "type": "DWORD" + } + ], + "AccNotifyTouchInteraction": [ + { + "name": "hwndApp", + "type": "HWND" + }, + { + "name": "hwndTarget", + "type": "HWND" + }, + { + "name": "ptTarget", + "type": "POINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/oleaut32_dll.json b/qiling/extensions/windows_sdk/defs/oleaut32_dll.json new file mode 100644 index 000000000..0f2489954 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/oleaut32_dll.json @@ -0,0 +1,4768 @@ +{ + "LPSAFEARRAY_UserSize": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "LPSAFEARRAY" + } + ], + "LPSAFEARRAY_UserFree": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "LPSAFEARRAY" + } + ], + "LPSAFEARRAY_UserSize64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "LPSAFEARRAY" + } + ], + "LPSAFEARRAY_UserFree64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "LPSAFEARRAY" + } + ], + "OleCreatePropertyFrame": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "x", + "type": "UINT" + }, + { + "name": "y", + "type": "UINT" + }, + { + "name": "lpszCaption", + "type": "LPCOLESTR" + }, + { + "name": "cObjects", + "type": "ULONG" + }, + { + "name": "ppUnk", + "type": "LPUNKNOWN" + }, + { + "name": "cPages", + "type": "ULONG" + }, + { + "name": "pPageClsID", + "type": "LPCLSID" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "OleCreatePropertyFrameIndirect": [ + { + "name": "lpParams", + "type": "LPOCPFIPARAMS" + } + ], + "OleTranslateColor": [ + { + "name": "clr", + "type": "OLE_COLOR" + }, + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "lpcolorref", + "type": "COLORREF" + } + ], + "OleCreateFontIndirect": [ + { + "name": "lpFontDesc", + "type": "LPFONTDESC" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "lplpvObj", + "type": "LPVOID" + } + ], + "OleCreatePictureIndirect": [ + { + "name": "lpPictDesc", + "type": "LPPICTDESC" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "fOwn", + "type": "BOOL" + }, + { + "name": "lplpvObj", + "type": "LPVOID" + } + ], + "OleLoadPicture": [ + { + "name": "lpstream", + "type": "LPSTREAM" + }, + { + "name": "lSize", + "type": "LONG" + }, + { + "name": "fRunmode", + "type": "BOOL" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "lplpvObj", + "type": "LPVOID" + } + ], + "OleLoadPictureEx": [ + { + "name": "lpstream", + "type": "LPSTREAM" + }, + { + "name": "lSize", + "type": "LONG" + }, + { + "name": "fRunmode", + "type": "BOOL" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "xSizeDesired", + "type": "DWORD" + }, + { + "name": "ySizeDesired", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lplpvObj", + "type": "LPVOID" + } + ], + "OleLoadPicturePath": [ + { + "name": "szURLorPath", + "type": "LPOLESTR" + }, + { + "name": "punkCaller", + "type": "LPUNKNOWN" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "clrReserved", + "type": "OLE_COLOR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvRet", + "type": "LPVOID" + } + ], + "OleLoadPictureFile": [ + { + "name": "varFileName", + "type": "VARIANT" + }, + { + "name": "lplpdispPicture", + "type": "LPDISPATCH" + } + ], + "OleLoadPictureFileEx": [ + { + "name": "varFileName", + "type": "VARIANT" + }, + { + "name": "xSizeDesired", + "type": "DWORD" + }, + { + "name": "ySizeDesired", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lplpdispPicture", + "type": "LPDISPATCH" + } + ], + "OleSavePictureFile": [ + { + "name": "lpdispPicture", + "type": "LPDISPATCH" + }, + { + "name": "bstrFileName", + "type": "BSTR" + } + ], + "OleIconToCursor": [ + { + "name": "hinstExe", + "type": "HINSTANCE" + }, + { + "name": "hIcon", + "type": "HICON" + } + ], + "SysAllocString": [ + { + "name": "psz", + "type": "OLECHAR" + } + ], + "SysReAllocString": [ + { + "name": "pbstr", + "type": "BSTR" + }, + { + "name": "psz", + "type": "OLECHAR" + } + ], + "SysAllocStringLen": [ + { + "name": "strIn", + "type": "OLECHAR" + }, + { + "name": "ui", + "type": "UINT" + } + ], + "SysReAllocStringLen": [ + { + "name": "pbstr", + "type": "BSTR" + }, + { + "name": "psz", + "type": "OLECHAR" + }, + { + "name": "len", + "type": "unsigned int" + } + ], + "SysAddRefString": [ + { + "name": "bstrString", + "type": "BSTR" + } + ], + "SysReleaseString": [ + { + "name": "bstrString", + "type": "BSTR" + } + ], + "SysFreeString": [ + { + "name": "bstrString", + "type": "BSTR" + } + ], + "SysStringLen": [ + { + "name": "pbstr", + "type": "BSTR" + } + ], + "SysStringByteLen": [ + { + "name": "bstr", + "type": "BSTR" + } + ], + "SysAllocStringByteLen": [ + { + "name": "psz", + "type": "LPCSTR" + }, + { + "name": "len", + "type": "UINT" + } + ], + "DosDateTimeToVariantTime": [ + { + "name": "wDosDate", + "type": "USHORT" + }, + { + "name": "wDosTime", + "type": "USHORT" + }, + { + "name": "pvtime", + "type": "DOUBLE" + } + ], + "VariantTimeToDosDateTime": [ + { + "name": "vtime", + "type": "DOUBLE" + }, + { + "name": "pwDosDate", + "type": "USHORT" + }, + { + "name": "pwDosTime", + "type": "USHORT" + } + ], + "SystemTimeToVariantTime": [ + { + "name": "lpSystemTime", + "type": "LPSYSTEMTIME" + }, + { + "name": "pvtime", + "type": "DOUBLE" + } + ], + "VariantTimeToSystemTime": [ + { + "name": "vtime", + "type": "DOUBLE" + }, + { + "name": "lpSystemTime", + "type": "LPSYSTEMTIME" + } + ], + "SafeArrayAllocDescriptor": [ + { + "name": "cDims", + "type": "UINT" + }, + { + "name": "ppsaOut", + "type": "SAFEARRAY" + } + ], + "SafeArrayAllocDescriptorEx": [ + { + "name": "vt", + "type": "VARTYPE" + }, + { + "name": "cDims", + "type": "UINT" + }, + { + "name": "ppsaOut", + "type": "SAFEARRAY" + } + ], + "SafeArrayAllocData": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayCopyData": [ + { + "name": "psaSource", + "type": "SAFEARRAY" + }, + { + "name": "psaTarget", + "type": "SAFEARRAY" + } + ], + "SafeArrayReleaseDescriptor": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayDestroyDescriptor": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayReleaseData": [ + { + "name": "pData", + "type": "PVOID" + } + ], + "SafeArrayDestroyData": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayAddRef": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "ppDataToRelease", + "type": "PVOID" + } + ], + "SafeArrayDestroy": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayRedim": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "psaboundNew", + "type": "SAFEARRAYBOUND" + } + ], + "SafeArrayGetDim": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayGetElemsize": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayGetUBound": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "nDim", + "type": "UINT" + }, + { + "name": "plUbound", + "type": "LONG" + } + ], + "SafeArrayGetLBound": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "nDim", + "type": "UINT" + }, + { + "name": "plLbound", + "type": "LONG" + } + ], + "SafeArrayLock": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayUnlock": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayAccessData": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "ppvData", + "type": "void" + } + ], + "SafeArrayUnaccessData": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayGetElement": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "rgIndices", + "type": "LONG" + }, + { + "name": "pv", + "type": "void" + } + ], + "SafeArrayPutElement": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "rgIndices", + "type": "LONG" + }, + { + "name": "pv", + "type": "void" + } + ], + "SafeArrayCopy": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "ppsaOut", + "type": "SAFEARRAY" + } + ], + "SafeArrayPtrOfIndex": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "rgIndices", + "type": "LONG" + }, + { + "name": "ppvData", + "type": "void" + } + ], + "SafeArraySetRecordInfo": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "prinfo", + "type": "IRecordInfo" + } + ], + "SafeArrayGetRecordInfo": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "prinfo", + "type": "IRecordInfo" + } + ], + "SafeArraySetIID": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "guid", + "type": "GUID" + } + ], + "SafeArrayGetIID": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "pguid", + "type": "GUID" + } + ], + "SafeArrayGetVartype": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "pvt", + "type": "VARTYPE" + } + ], + "VariantInit": [ + { + "name": "pvarg", + "type": "VARIANTARG" + } + ], + "VariantClear": [ + { + "name": "pvarg", + "type": "VARIANTARG" + } + ], + "VariantCopy": [ + { + "name": "pvargDest", + "type": "VARIANTARG" + }, + { + "name": "pvargSrc", + "type": "VARIANTARG" + } + ], + "VariantCopyInd": [ + { + "name": "pvarDest", + "type": "VARIANT" + }, + { + "name": "pvargSrc", + "type": "VARIANTARG" + } + ], + "VariantChangeType": [ + { + "name": "pvargDest", + "type": "VARIANTARG" + }, + { + "name": "pvarSrc", + "type": "VARIANTARG" + }, + { + "name": "wFlags", + "type": "USHORT" + }, + { + "name": "vt", + "type": "VARTYPE" + } + ], + "VariantChangeTypeEx": [ + { + "name": "pvargDest", + "type": "VARIANTARG" + }, + { + "name": "pvarSrc", + "type": "VARIANTARG" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "wFlags", + "type": "USHORT" + }, + { + "name": "vt", + "type": "VARTYPE" + } + ], + "VectorFromBstr": [ + { + "name": "bstr", + "type": "BSTR" + }, + { + "name": "ppsa", + "type": "SAFEARRAY" + } + ], + "BstrFromVector": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "pbstr", + "type": "BSTR" + } + ], + "VarUI1FromI2": [ + { + "name": "sIn", + "type": "SHORT" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarI2FromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI4FromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromI2": [ + { + "name": "sIn", + "type": "SHORT" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI8FromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromI2": [ + { + "name": "sIn", + "type": "SHORT" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarR4FromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromI2": [ + { + "name": "sIn", + "type": "SHORT" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR8FromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromI2": [ + { + "name": "sIn", + "type": "SHORT" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarDateFromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromI2": [ + { + "name": "sIn", + "type": "SHORT" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarCyFromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromI2": [ + { + "name": "sIn", + "type": "SHORT" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarBstrFromUI1": [ + { + "name": "bVal", + "type": "BYTE" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromI2": [ + { + "name": "iVal", + "type": "SHORT" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBoolFromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromI2": [ + { + "name": "sIn", + "type": "SHORT" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromUI8": [ + { + "name": "i64In", + "type": "ULONG64" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarI1FromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromI2": [ + { + "name": "uiIn", + "type": "SHORT" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromUI8": [ + { + "name": "i64In", + "type": "ULONG64" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarUI2FromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromI2": [ + { + "name": "uiIn", + "type": "SHORT" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromUI8": [ + { + "name": "i64In", + "type": "ULONG64" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI4FromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromI2": [ + { + "name": "uiIn", + "type": "SHORT" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "plOut", + "type": "ULONG" + } + ], + "VarUI4FromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "plOut", + "type": "ULONG" + } + ], + "VarUI4FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI8FromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromI2": [ + { + "name": "sIn", + "type": "SHORT" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromI8": [ + { + "name": "ui64In", + "type": "LONG64" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarDecFromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromI2": [ + { + "name": "uiIn", + "type": "SHORT" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarParseNumFromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pnumprs", + "type": "NUMPARSE" + }, + { + "name": "rgbDig", + "type": "BYTE" + } + ], + "VarNumFromParseNum": [ + { + "name": "pnumprs", + "type": "NUMPARSE" + }, + { + "name": "rgbDig", + "type": "BYTE" + }, + { + "name": "dwVtBits", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "VarAdd": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarAnd": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarCat": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarDiv": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarEqv": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarIdiv": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarImp": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarMod": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarMul": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarOr": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarPow": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarSub": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarXor": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarAbs": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarFix": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarInt": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarNeg": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarNot": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarRound": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "cDecimals", + "type": "int" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarCmp": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "VarDecAdd": [ + { + "name": "pdecLeft", + "type": "LPDECIMAL" + }, + { + "name": "pdecRight", + "type": "LPDECIMAL" + }, + { + "name": "pdecResult", + "type": "LPDECIMAL" + } + ], + "VarDecDiv": [ + { + "name": "pdecLeft", + "type": "LPDECIMAL" + }, + { + "name": "pdecRight", + "type": "LPDECIMAL" + }, + { + "name": "pdecResult", + "type": "LPDECIMAL" + } + ], + "VarDecMul": [ + { + "name": "pdecLeft", + "type": "LPDECIMAL" + }, + { + "name": "pdecRight", + "type": "LPDECIMAL" + }, + { + "name": "pdecResult", + "type": "LPDECIMAL" + } + ], + "VarDecSub": [ + { + "name": "pdecLeft", + "type": "LPDECIMAL" + }, + { + "name": "pdecRight", + "type": "LPDECIMAL" + }, + { + "name": "pdecResult", + "type": "LPDECIMAL" + } + ], + "VarDecAbs": [ + { + "name": "pdecIn", + "type": "LPDECIMAL" + }, + { + "name": "pdecResult", + "type": "LPDECIMAL" + } + ], + "VarDecFix": [ + { + "name": "pdecIn", + "type": "LPDECIMAL" + }, + { + "name": "pdecResult", + "type": "LPDECIMAL" + } + ], + "VarDecInt": [ + { + "name": "pdecIn", + "type": "LPDECIMAL" + }, + { + "name": "pdecResult", + "type": "LPDECIMAL" + } + ], + "VarDecNeg": [ + { + "name": "pdecIn", + "type": "LPDECIMAL" + }, + { + "name": "pdecResult", + "type": "LPDECIMAL" + } + ], + "VarDecRound": [ + { + "name": "pdecIn", + "type": "LPDECIMAL" + }, + { + "name": "cDecimals", + "type": "int" + }, + { + "name": "pdecResult", + "type": "LPDECIMAL" + } + ], + "VarDecCmp": [ + { + "name": "pdecLeft", + "type": "LPDECIMAL" + }, + { + "name": "pdecRight", + "type": "LPDECIMAL" + } + ], + "VarDecCmpR8": [ + { + "name": "pdecLeft", + "type": "LPDECIMAL" + }, + { + "name": "dblRight", + "type": "double" + } + ], + "VarCyAdd": [ + { + "name": "cyLeft", + "type": "CY" + }, + { + "name": "cyRight", + "type": "CY" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCyMul": [ + { + "name": "cyLeft", + "type": "CY" + }, + { + "name": "cyRight", + "type": "CY" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCyMulI4": [ + { + "name": "cyLeft", + "type": "CY" + }, + { + "name": "lRight", + "type": "LONG" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCyMulI8": [ + { + "name": "cyLeft", + "type": "CY" + }, + { + "name": "lRight", + "type": "LONG64" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCySub": [ + { + "name": "cyLeft", + "type": "CY" + }, + { + "name": "cyRight", + "type": "CY" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCyAbs": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCyFix": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCyInt": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCyNeg": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCyRound": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "cDecimals", + "type": "int" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCyCmp": [ + { + "name": "cyLeft", + "type": "CY" + }, + { + "name": "cyRight", + "type": "CY" + } + ], + "VarCyCmpR8": [ + { + "name": "cyLeft", + "type": "CY" + }, + { + "name": "dblRight", + "type": "double" + } + ], + "VarBstrCat": [ + { + "name": "bstrLeft", + "type": "BSTR" + }, + { + "name": "bstrRight", + "type": "BSTR" + }, + { + "name": "pbstrResult", + "type": "LPBSTR" + } + ], + "VarBstrCmp": [ + { + "name": "bstrLeft", + "type": "BSTR" + }, + { + "name": "bstrRight", + "type": "BSTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "VarR8Pow": [ + { + "name": "dblLeft", + "type": "double" + }, + { + "name": "dblRight", + "type": "double" + }, + { + "name": "pdblResult", + "type": "double" + } + ], + "VarR4CmpR8": [ + { + "name": "fltLeft", + "type": "float" + }, + { + "name": "dblRight", + "type": "double" + } + ], + "VarR8Round": [ + { + "name": "dblIn", + "type": "double" + }, + { + "name": "cDecimals", + "type": "int" + }, + { + "name": "pdblResult", + "type": "double" + } + ], + "VarDateFromUdate": [ + { + "name": "pudateIn", + "type": "UDATE" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromUdateEx": [ + { + "name": "pudateIn", + "type": "UDATE" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarUdateFromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pudateOut", + "type": "UDATE" + } + ], + "GetAltMonthNames": [ + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "prgp", + "type": "LPOLESTR" + } + ], + "VarFormat": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "pstrFormat", + "type": "LPOLESTR" + }, + { + "name": "iFirstDay", + "type": "int" + }, + { + "name": "iFirstWeek", + "type": "int" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarFormatDateTime": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "iNamedFormat", + "type": "int" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarFormatNumber": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "iNumDig", + "type": "int" + }, + { + "name": "iIncLead", + "type": "int" + }, + { + "name": "iUseParens", + "type": "int" + }, + { + "name": "iGroup", + "type": "int" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarFormatPercent": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "iNumDig", + "type": "int" + }, + { + "name": "iIncLead", + "type": "int" + }, + { + "name": "iUseParens", + "type": "int" + }, + { + "name": "iGroup", + "type": "int" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarFormatCurrency": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "iNumDig", + "type": "int" + }, + { + "name": "iIncLead", + "type": "int" + }, + { + "name": "iUseParens", + "type": "int" + }, + { + "name": "iGroup", + "type": "int" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarWeekdayName": [ + { + "name": "iWeekday", + "type": "int" + }, + { + "name": "fAbbrev", + "type": "int" + }, + { + "name": "iFirstDay", + "type": "int" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarMonthName": [ + { + "name": "iMonth", + "type": "int" + }, + { + "name": "fAbbrev", + "type": "int" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarFormatFromTokens": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "pstrFormat", + "type": "LPOLESTR" + }, + { + "name": "pbTokCur", + "type": "LPBYTE" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + }, + { + "name": "lcid", + "type": "LCID" + } + ], + "VarTokenizeFormatString": [ + { + "name": "pstrFormat", + "type": "LPOLESTR" + }, + { + "name": "rgbTok", + "type": "LPBYTE" + }, + { + "name": "cbTok", + "type": "int" + }, + { + "name": "iFirstDay", + "type": "int" + }, + { + "name": "iFirstWeek", + "type": "int" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pcbActual", + "type": "int" + } + ], + "LHashValOfNameSysA": [ + { + "name": "syskind", + "type": "SYSKIND" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "szName", + "type": "LPCSTR" + } + ], + "LHashValOfNameSys": [ + { + "name": "syskind", + "type": "SYSKIND" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "szName", + "type": "OLECHAR" + } + ], + "LoadTypeLib": [ + { + "name": "szFile", + "type": "LPCOLESTR" + }, + { + "name": "pptlib", + "type": "ITypeLib" + } + ], + "LoadTypeLibEx": [ + { + "name": "szFile", + "type": "LPCOLESTR" + }, + { + "name": "regkind", + "type": "REGKIND" + }, + { + "name": "pptlib", + "type": "ITypeLib" + } + ], + "LoadRegTypeLib": [ + { + "name": "rguid", + "type": "GUID" + }, + { + "name": "wVerMajor", + "type": "WORD" + }, + { + "name": "wVerMinor", + "type": "WORD" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pptlib", + "type": "ITypeLib" + } + ], + "QueryPathOfRegTypeLib": [ + { + "name": "guid", + "type": "GUID" + }, + { + "name": "wMaj", + "type": "USHORT" + }, + { + "name": "wMin", + "type": "USHORT" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "lpbstrPathName", + "type": "LPBSTR" + } + ], + "RegisterTypeLib": [ + { + "name": "ptlib", + "type": "ITypeLib" + }, + { + "name": "szFullPath", + "type": "LPCOLESTR" + }, + { + "name": "szHelpDir", + "type": "LPCOLESTR" + } + ], + "UnRegisterTypeLib": [ + { + "name": "libID", + "type": "GUID" + }, + { + "name": "wVerMajor", + "type": "WORD" + }, + { + "name": "wVerMinor", + "type": "WORD" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "syskind", + "type": "SYSKIND" + } + ], + "RegisterTypeLibForUser": [ + { + "name": "ptlib", + "type": "ITypeLib" + }, + { + "name": "szFullPath", + "type": "OLECHAR" + }, + { + "name": "szHelpDir", + "type": "OLECHAR" + } + ], + "UnRegisterTypeLibForUser": [ + { + "name": "libID", + "type": "GUID" + }, + { + "name": "wMajorVerNum", + "type": "WORD" + }, + { + "name": "wMinorVerNum", + "type": "WORD" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "syskind", + "type": "SYSKIND" + } + ], + "CreateTypeLib": [ + { + "name": "syskind", + "type": "SYSKIND" + }, + { + "name": "szFile", + "type": "LPCOLESTR" + }, + { + "name": "ppctlib", + "type": "ICreateTypeLib" + } + ], + "CreateTypeLib2": [ + { + "name": "syskind", + "type": "SYSKIND" + }, + { + "name": "szFile", + "type": "LPCOLESTR" + }, + { + "name": "ppctlib", + "type": "ICreateTypeLib2" + } + ], + "DispGetParam": [ + { + "name": "pdispparams", + "type": "DISPPARAMS" + }, + { + "name": "position", + "type": "UINT" + }, + { + "name": "vtTarg", + "type": "VARTYPE" + }, + { + "name": "pvarResult", + "type": "VARIANT" + }, + { + "name": "puArgErr", + "type": "UINT" + } + ], + "DispGetIDsOfNames": [ + { + "name": "ptinfo", + "type": "ITypeInfo" + }, + { + "name": "rgszNames", + "type": "LPOLESTR" + }, + { + "name": "cNames", + "type": "UINT" + }, + { + "name": "rgdispid", + "type": "DISPID" + } + ], + "DispInvoke": [ + { + "name": "_this", + "type": "void" + }, + { + "name": "ptinfo", + "type": "ITypeInfo" + }, + { + "name": "dispidMember", + "type": "DISPID" + }, + { + "name": "wFlags", + "type": "WORD" + }, + { + "name": "pparams", + "type": "DISPPARAMS" + }, + { + "name": "pvarResult", + "type": "VARIANT" + }, + { + "name": "pexcepinfo", + "type": "EXCEPINFO" + }, + { + "name": "puArgErr", + "type": "UINT" + } + ], + "CreateDispTypeInfo": [ + { + "name": "pidata", + "type": "INTERFACEDATA" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pptinfo", + "type": "ITypeInfo" + } + ], + "CreateStdDispatch": [ + { + "name": "punkOuter", + "type": "IUnknown" + }, + { + "name": "pvThis", + "type": "void" + }, + { + "name": "ptinfo", + "type": "ITypeInfo" + }, + { + "name": "ppunkStdDisp", + "type": "IUnknown" + } + ], + "DispCallFunc": [ + { + "name": "pvInstance", + "type": "void" + }, + { + "name": "oVft", + "type": "ULONG_PTR" + }, + { + "name": "cc", + "type": "CALLCONV" + }, + { + "name": "vtReturn", + "type": "VARTYPE" + }, + { + "name": "cActuals", + "type": "UINT" + }, + { + "name": "prgvt", + "type": "VARTYPE" + }, + { + "name": "prgpvarg", + "type": "VARIANTARG" + }, + { + "name": "pvargResult", + "type": "VARIANT" + } + ], + "RegisterActiveObject": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwRegister", + "type": "DWORD" + } + ], + "RevokeActiveObject": [ + { + "name": "dwRegister", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "GetActiveObject": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "ppunk", + "type": "IUnknown" + } + ], + "SetErrorInfo": [ + { + "name": "dwReserved", + "type": "ULONG" + }, + { + "name": "perrinfo", + "type": "IErrorInfo" + } + ], + "GetErrorInfo": [ + { + "name": "dwReserved", + "type": "ULONG" + }, + { + "name": "pperrinfo", + "type": "IErrorInfo" + } + ], + "CreateErrorInfo": [ + { + "name": "pperrinfo", + "type": "ICreateErrorInfo" + } + ], + "GetRecordInfoFromTypeInfo": [ + { + "name": "pTypeInfo", + "type": "ITypeInfo" + }, + { + "name": "ppRecInfo", + "type": "IRecordInfo" + } + ], + "GetRecordInfoFromGuids": [ + { + "name": "rGuidTypeLib", + "type": "GUID" + }, + { + "name": "uVerMajor", + "type": "ULONG" + }, + { + "name": "uVerMinor", + "type": "ULONG" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "rGuidTypeInfo", + "type": "GUID" + }, + { + "name": "ppRecInfo", + "type": "IRecordInfo" + } + ], + "OaBuildVersion": [ + { + "name": "VOID", + "type": "void" + } + ], + "ClearCustData": [ + { + "name": "pCustData", + "type": "LPCUSTDATA" + } + ], + "OaEnablePerUserTLibRegistration": [ + { + "name": "VOID", + "type": "void" + } + ], + "BSTR_UserSize": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "BSTR" + } + ], + "BSTR_UserFree": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "BSTR" + } + ], + "VARIANT_UserSize": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "VARIANT" + } + ], + "VARIANT_UserFree": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "VARIANT" + } + ], + "BSTR_UserSize64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "BSTR" + } + ], + "BSTR_UserFree64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "BSTR" + } + ], + "VARIANT_UserSize64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "VARIANT" + } + ], + "VARIANT_UserFree64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "VARIANT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/oledlg_dll.json b/qiling/extensions/windows_sdk/defs/oledlg_dll.json new file mode 100644 index 000000000..fbd760da7 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/oledlg_dll.json @@ -0,0 +1,244 @@ +{ + "OleUIAddVerbMenuW": [ + { + "name": "lpOleObj", + "type": "LPOLEOBJECT" + }, + { + "name": "lpszShortType", + "type": "LPCWSTR" + }, + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uPos", + "type": "UINT" + }, + { + "name": "uIDVerbMin", + "type": "UINT" + }, + { + "name": "uIDVerbMax", + "type": "UINT" + }, + { + "name": "bAddConvert", + "type": "BOOL" + }, + { + "name": "idConvert", + "type": "UINT" + }, + { + "name": "lphMenu", + "type": "HMENU" + } + ], + "OleUIAddVerbMenuA": [ + { + "name": "lpOleObj", + "type": "LPOLEOBJECT" + }, + { + "name": "lpszShortType", + "type": "LPCSTR" + }, + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uPos", + "type": "UINT" + }, + { + "name": "uIDVerbMin", + "type": "UINT" + }, + { + "name": "uIDVerbMax", + "type": "UINT" + }, + { + "name": "bAddConvert", + "type": "BOOL" + }, + { + "name": "idConvert", + "type": "UINT" + }, + { + "name": "lphMenu", + "type": "HMENU" + } + ], + "OleUIInsertObjectW": [ + { + "name": "VOID", + "type": "LPOLEUIINSERTOBJECTW" + } + ], + "OleUIInsertObjectA": [ + { + "name": "VOID", + "type": "LPOLEUIINSERTOBJECTA" + } + ], + "OleUIPasteSpecialW": [ + { + "name": "VOID", + "type": "LPOLEUIPASTESPECIALW" + } + ], + "OleUIPasteSpecialA": [ + { + "name": "VOID", + "type": "LPOLEUIPASTESPECIALA" + } + ], + "OleUIEditLinksW": [ + { + "name": "VOID", + "type": "LPOLEUIEDITLINKSW" + } + ], + "OleUIEditLinksA": [ + { + "name": "VOID", + "type": "LPOLEUIEDITLINKSA" + } + ], + "OleUIChangeIconW": [ + { + "name": "VOID", + "type": "LPOLEUICHANGEICONW" + } + ], + "OleUIChangeIconA": [ + { + "name": "VOID", + "type": "LPOLEUICHANGEICONA" + } + ], + "OleUIConvertW": [ + { + "name": "VOID", + "type": "LPOLEUICONVERTW" + } + ], + "OleUIConvertA": [ + { + "name": "VOID", + "type": "LPOLEUICONVERTA" + } + ], + "OleUICanConvertOrActivateAs": [ + { + "name": "rClsid", + "type": "IID" + }, + { + "name": "fIsLinkedObject", + "type": "BOOL" + }, + { + "name": "wFormat", + "type": "WORD" + } + ], + "OleUIBusyW": [ + { + "name": "VOID", + "type": "LPOLEUIBUSYW" + } + ], + "OleUIBusyA": [ + { + "name": "VOID", + "type": "LPOLEUIBUSYA" + } + ], + "OleUIChangeSourceW": [ + { + "name": "VOID", + "type": "LPOLEUICHANGESOURCEW" + } + ], + "OleUIChangeSourceA": [ + { + "name": "VOID", + "type": "LPOLEUICHANGESOURCEA" + } + ], + "OleUIObjectPropertiesW": [ + { + "name": "VOID", + "type": "LPOLEUIOBJECTPROPSW" + } + ], + "OleUIObjectPropertiesA": [ + { + "name": "VOID", + "type": "LPOLEUIOBJECTPROPSA" + } + ], + "OleUIPromptUserW": [ + { + "name": "nTemplate", + "type": "int" + }, + { + "name": "hwndParent", + "type": "HWND" + } + ], + "OleUIPromptUserA": [ + { + "name": "nTemplate", + "type": "int" + }, + { + "name": "hwndParent", + "type": "HWND" + } + ], + "OleUIUpdateLinksW": [ + { + "name": "lpOleUILinkCntr", + "type": "LPOLEUILINKCONTAINERW" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "lpszTitle", + "type": "LPWSTR" + }, + { + "name": "cLinks", + "type": "int" + } + ], + "OleUIUpdateLinksA": [ + { + "name": "lpOleUILinkCntr", + "type": "LPOLEUILINKCONTAINERA" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "lpszTitle", + "type": "LPSTR" + }, + { + "name": "cLinks", + "type": "int" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/ondemandconnroutehelper_dll.json b/qiling/extensions/windows_sdk/defs/ondemandconnroutehelper_dll.json new file mode 100644 index 000000000..8f8aaf47e --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/ondemandconnroutehelper_dll.json @@ -0,0 +1,58 @@ +{ + "OnDemandGetRoutingHint": [ + { + "name": "destinationHostName", + "type": "PCWSTR" + }, + { + "name": "interfaceIndex", + "type": "DWORD" + } + ], + "OnDemandRegisterNotification": [ + { + "name": "callback", + "type": "ONDEMAND_NOTIFICATION_CALLBACK" + }, + { + "name": "callbackContext", + "type": "void" + }, + { + "name": "registrationHandle", + "type": "HANDLE" + } + ], + "GetInterfaceContextTableForHostName": [ + { + "name": "HostName", + "type": "PCWSTR" + }, + { + "name": "ProxyName", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ConnectionProfileFilterRawData", + "type": "BYTE" + }, + { + "name": "ConnectionProfileFilterRawDataSize", + "type": "DWORD" + }, + { + "name": "InterfaceContextTable", + "type": "NET_INTERFACE_CONTEXT_TABLE" + } + ], + "FreeInterfaceContextTable": [ + { + "name": "InterfaceContextTable", + "type": "NET_INTERFACE_CONTEXT_TABLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/opengl32_dll.json b/qiling/extensions/windows_sdk/defs/opengl32_dll.json new file mode 100644 index 000000000..6f6e68e6e --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/opengl32_dll.json @@ -0,0 +1,270 @@ +{ + "wglCopyContext": [ + { + "name": "VOID", + "type": "HGLRC" + }, + { + "name": "VOID", + "type": "HGLRC" + }, + { + "name": "VOID", + "type": "UINT" + } + ], + "wglCreateContext": [ + { + "name": "VOID", + "type": "HDC" + } + ], + "wglCreateLayerContext": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + } + ], + "wglDeleteContext": [ + { + "name": "VOID", + "type": "HGLRC" + } + ], + "wglGetCurrentContext": [ + { + "name": "VOID", + "type": "void" + } + ], + "wglGetCurrentDC": [ + { + "name": "VOID", + "type": "void" + } + ], + "wglGetProcAddress": [ + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "wglMakeCurrent": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "HGLRC" + } + ], + "wglShareLists": [ + { + "name": "VOID", + "type": "HGLRC" + }, + { + "name": "VOID", + "type": "HGLRC" + } + ], + "wglUseFontBitmapsA": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "wglUseFontBitmapsW": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "wglUseFontOutlinesA": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "LPGLYPHMETRICSFLOAT" + } + ], + "wglUseFontOutlinesW": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "LPGLYPHMETRICSFLOAT" + } + ], + "wglDescribeLayerPlane": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "LPLAYERPLANEDESCRIPTOR" + } + ], + "wglSetLayerPaletteEntries": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "COLORREF" + } + ], + "wglGetLayerPaletteEntries": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "COLORREF" + } + ], + "wglRealizeLayerPalette": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "wglSwapLayerBuffers": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "UINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/p2p_dll.json b/qiling/extensions/windows_sdk/defs/p2p_dll.json new file mode 100644 index 000000000..e4cc4d441 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/p2p_dll.json @@ -0,0 +1,1162 @@ +{ + "PeerFreeData": [ + { + "name": "pvData", + "type": "LPCVOID" + } + ], + "PeerGetItemCount": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + }, + { + "name": "pCount", + "type": "ULONG" + } + ], + "PeerGetNextItem": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + }, + { + "name": "pCount", + "type": "ULONG" + }, + { + "name": "pppvItems", + "type": "PVOID" + } + ], + "PeerEndEnumeration": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGroupStartup": [ + { + "name": "wVersionRequested", + "type": "WORD" + }, + { + "name": "pVersionData", + "type": "PPEER_VERSION_DATA" + } + ], + "PeerGroupCreate": [ + { + "name": "pProperties", + "type": "PPEER_GROUP_PROPERTIES" + }, + { + "name": "phGroup", + "type": "HGROUP" + } + ], + "PeerGroupOpen": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzGroupPeerName", + "type": "PCWSTR" + }, + { + "name": "pwzCloud", + "type": "PCWSTR" + }, + { + "name": "phGroup", + "type": "HGROUP" + } + ], + "PeerGroupJoin": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzInvitation", + "type": "PCWSTR" + }, + { + "name": "pwzCloud", + "type": "PCWSTR" + }, + { + "name": "phGroup", + "type": "HGROUP" + } + ], + "PeerGroupPasswordJoin": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzInvitation", + "type": "PCWSTR" + }, + { + "name": "pwzPassword", + "type": "PCWSTR" + }, + { + "name": "pwzCloud", + "type": "PCWSTR" + }, + { + "name": "phGroup", + "type": "HGROUP" + } + ], + "PeerGroupConnect": [ + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "PeerGroupConnectByAddress": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "cAddresses", + "type": "ULONG" + }, + { + "name": "pAddresses", + "type": "PPEER_ADDRESS" + } + ], + "PeerGroupClose": [ + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "PeerGroupDelete": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzGroupPeerName", + "type": "PCWSTR" + } + ], + "PeerGroupCreateInvitation": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzIdentityInfo", + "type": "PCWSTR" + }, + { + "name": "pftExpiration", + "type": "FILETIME" + }, + { + "name": "cRoles", + "type": "ULONG" + }, + { + "name": "pRoles", + "type": "GUID" + }, + { + "name": "ppwzInvitation", + "type": "PWSTR" + } + ], + "PeerGroupCreatePasswordInvitation": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "ppwzInvitation", + "type": "PWSTR" + } + ], + "PeerGroupParseInvitation": [ + { + "name": "pwzInvitation", + "type": "PCWSTR" + }, + { + "name": "ppInvitationInfo", + "type": "PPEER_INVITATION_INFO" + } + ], + "PeerGroupGetStatus": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pdwStatus", + "type": "DWORD" + } + ], + "PeerGroupGetProperties": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "ppProperties", + "type": "PPEER_GROUP_PROPERTIES" + } + ], + "PeerGroupSetProperties": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pProperties", + "type": "PPEER_GROUP_PROPERTIES" + } + ], + "PeerGroupEnumMembers": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGroupOpenDirectConnection": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pAddress", + "type": "PPEER_ADDRESS" + }, + { + "name": "pullConnectionId", + "type": "ULONGLONG" + } + ], + "PeerGroupCloseDirectConnection": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "ullConnectionId", + "type": "ULONGLONG" + } + ], + "PeerGroupEnumConnections": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGroupSendData": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "ullConnectionId", + "type": "ULONGLONG" + }, + { + "name": "pType", + "type": "GUID" + }, + { + "name": "cbData", + "type": "ULONG" + }, + { + "name": "pvData", + "type": "PVOID" + } + ], + "PeerGroupRegisterEvent": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "cEventRegistration", + "type": "DWORD" + }, + { + "name": "pEventRegistrations", + "type": "PEER_GROUP_EVENT_REGISTRATION" + }, + { + "name": "phPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerGroupUnregisterEvent": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerGroupGetEventData": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + }, + { + "name": "ppEventData", + "type": "PPEER_GROUP_EVENT_DATA" + } + ], + "PeerGroupGetRecord": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pRecordId", + "type": "GUID" + }, + { + "name": "ppRecord", + "type": "PPEER_RECORD" + } + ], + "PeerGroupAddRecord": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pRecord", + "type": "PPEER_RECORD" + }, + { + "name": "pRecordId", + "type": "GUID" + } + ], + "PeerGroupUpdateRecord": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pRecord", + "type": "PPEER_RECORD" + } + ], + "PeerGroupDeleteRecord": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pRecordId", + "type": "GUID" + } + ], + "PeerGroupEnumRecords": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pRecordType", + "type": "GUID" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGroupSearchRecords": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzCriteria", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGroupExportDatabase": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzFilePath", + "type": "PCWSTR" + } + ], + "PeerGroupImportDatabase": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzFilePath", + "type": "PCWSTR" + } + ], + "PeerGroupIssueCredentials": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzSubjectIdentity", + "type": "PCWSTR" + }, + { + "name": "pCredentialInfo", + "type": "PEER_CREDENTIAL_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppwzInvitation", + "type": "PWSTR" + } + ], + "PeerGroupExportConfig": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzPassword", + "type": "PCWSTR" + }, + { + "name": "ppwzXML", + "type": "PWSTR" + } + ], + "PeerGroupImportConfig": [ + { + "name": "pwzXML", + "type": "PCWSTR" + }, + { + "name": "pwzPassword", + "type": "PCWSTR" + }, + { + "name": "fOverwrite", + "type": "BOOL" + }, + { + "name": "ppwzIdentity", + "type": "PWSTR" + }, + { + "name": "ppwzGroup", + "type": "PWSTR" + } + ], + "PeerGroupPeerTimeToUniversalTime": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pftPeerTime", + "type": "FILETIME" + }, + { + "name": "pftUniversalTime", + "type": "FILETIME" + } + ], + "PeerGroupUniversalTimeToPeerTime": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pftUniversalTime", + "type": "FILETIME" + }, + { + "name": "pftPeerTime", + "type": "FILETIME" + } + ], + "PeerIdentityCreate": [ + { + "name": "pwzClassifier", + "type": "PCWSTR" + }, + { + "name": "pwzFriendlyName", + "type": "PCWSTR" + }, + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "ppwzIdentity", + "type": "PWSTR" + } + ], + "PeerIdentityGetFriendlyName": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "ppwzFriendlyName", + "type": "PWSTR" + } + ], + "PeerIdentitySetFriendlyName": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzFriendlyName", + "type": "PCWSTR" + } + ], + "PeerIdentityGetCryptKey": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "phCryptProv", + "type": "HCRYPTPROV" + } + ], + "PeerIdentityDelete": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + } + ], + "PeerEnumIdentities": [ + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerEnumGroups": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCreatePeerName": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzClassifier", + "type": "PCWSTR" + }, + { + "name": "ppwzPeerName", + "type": "PWSTR" + } + ], + "PeerIdentityGetXML": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "ppwzIdentityXML", + "type": "PWSTR" + } + ], + "PeerIdentityExport": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzPassword", + "type": "PCWSTR" + }, + { + "name": "ppwzExportXML", + "type": "PWSTR" + } + ], + "PeerIdentityImport": [ + { + "name": "pwzImportXML", + "type": "PCWSTR" + }, + { + "name": "pwzPassword", + "type": "PCWSTR" + }, + { + "name": "ppwzIdentity", + "type": "PWSTR" + } + ], + "PeerIdentityGetDefault": [ + { + "name": "ppwzPeerName", + "type": "PWSTR" + } + ], + "PeerCollabStartup": [ + { + "name": "wVersionRequested", + "type": "WORD" + } + ], + "PeerCollabSignin": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwSigninOptions", + "type": "DWORD" + } + ], + "PeerCollabSignout": [ + { + "name": "dwSigninOptions", + "type": "DWORD" + } + ], + "PeerCollabGetSigninOptions": [ + { + "name": "pdwSigninOptions", + "type": "DWORD" + } + ], + "PeerCollabAsyncInviteContact": [ + { + "name": "pcContact", + "type": "PCPEER_CONTACT" + }, + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "pcInvitation", + "type": "PCPEER_INVITATION" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "phInvitation", + "type": "HANDLE" + } + ], + "PeerCollabGetInvitationResponse": [ + { + "name": "hInvitation", + "type": "HANDLE" + }, + { + "name": "ppInvitationResponse", + "type": "PPEER_INVITATION_RESPONSE" + } + ], + "PeerCollabCancelInvitation": [ + { + "name": "hInvitation", + "type": "HANDLE" + } + ], + "PeerCollabCloseHandle": [ + { + "name": "hInvitation", + "type": "HANDLE" + } + ], + "PeerCollabInviteContact": [ + { + "name": "pcContact", + "type": "PCPEER_CONTACT" + }, + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "pcInvitation", + "type": "PCPEER_INVITATION" + }, + { + "name": "ppResponse", + "type": "PPEER_INVITATION_RESPONSE" + } + ], + "PeerCollabAsyncInviteEndpoint": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "pcInvitation", + "type": "PCPEER_INVITATION" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "phInvitation", + "type": "HANDLE" + } + ], + "PeerCollabInviteEndpoint": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "pcInvitation", + "type": "PCPEER_INVITATION" + }, + { + "name": "ppResponse", + "type": "PPEER_INVITATION_RESPONSE" + } + ], + "PeerCollabGetAppLaunchInfo": [ + { + "name": "ppLaunchInfo", + "type": "PPEER_APP_LAUNCH_INFO" + } + ], + "PeerCollabRegisterApplication": [ + { + "name": "pcApplication", + "type": "PCPEER_APPLICATION_REGISTRATION_INFO" + }, + { + "name": "registrationType", + "type": "PEER_APPLICATION_REGISTRATION_TYPE" + } + ], + "PeerCollabUnregisterApplication": [ + { + "name": "pApplicationId", + "type": "GUID" + }, + { + "name": "registrationType", + "type": "PEER_APPLICATION_REGISTRATION_TYPE" + } + ], + "PeerCollabGetApplicationRegistrationInfo": [ + { + "name": "pApplicationId", + "type": "GUID" + }, + { + "name": "registrationType", + "type": "PEER_APPLICATION_REGISTRATION_TYPE" + }, + { + "name": "ppApplication", + "type": "PPEER_APPLICATION_REGISTRATION_INFO" + } + ], + "PeerCollabEnumApplicationRegistrationInfo": [ + { + "name": "registrationType", + "type": "PEER_APPLICATION_REGISTRATION_TYPE" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCollabGetPresenceInfo": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "ppPresenceInfo", + "type": "PPEER_PRESENCE_INFO" + } + ], + "PeerCollabEnumApplications": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "pApplicationId", + "type": "GUID" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCollabEnumObjects": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "pObjectId", + "type": "GUID" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCollabEnumEndpoints": [ + { + "name": "pcContact", + "type": "PCPEER_CONTACT" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCollabRefreshEndpointData": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + } + ], + "PeerCollabDeleteEndpointData": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + } + ], + "PeerCollabQueryContactData": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "ppwzContactData", + "type": "PWSTR" + } + ], + "PeerCollabSubscribeEndpointData": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + } + ], + "PeerCollabUnsubscribeEndpointData": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + } + ], + "PeerCollabSetPresenceInfo": [ + { + "name": "pcPresenceInfo", + "type": "PCPEER_PRESENCE_INFO" + } + ], + "PeerCollabGetEndpointName": [ + { + "name": "ppwzEndpointName", + "type": "PWSTR" + } + ], + "PeerCollabSetEndpointName": [ + { + "name": "pwzEndpointName", + "type": "PCWSTR" + } + ], + "PeerCollabSetObject": [ + { + "name": "pcObject", + "type": "PCPEER_OBJECT" + } + ], + "PeerCollabDeleteObject": [ + { + "name": "pObjectId", + "type": "GUID" + } + ], + "PeerCollabRegisterEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "cEventRegistration", + "type": "DWORD" + }, + { + "name": "pEventRegistrations", + "type": "PEER_COLLAB_EVENT_REGISTRATION" + }, + { + "name": "phPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerCollabGetEventData": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + }, + { + "name": "ppEventData", + "type": "PPEER_COLLAB_EVENT_DATA" + } + ], + "PeerCollabUnregisterEvent": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerCollabEnumPeopleNearMe": [ + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCollabAddContact": [ + { + "name": "pwzContactData", + "type": "PCWSTR" + }, + { + "name": "ppContact", + "type": "PPEER_CONTACT" + } + ], + "PeerCollabDeleteContact": [ + { + "name": "pwzPeerName", + "type": "PCWSTR" + } + ], + "PeerCollabGetContact": [ + { + "name": "pwzPeerName", + "type": "PCWSTR" + }, + { + "name": "ppContact", + "type": "PPEER_CONTACT" + } + ], + "PeerCollabUpdateContact": [ + { + "name": "pContact", + "type": "PCPEER_CONTACT" + } + ], + "PeerCollabEnumContacts": [ + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCollabExportContact": [ + { + "name": "pwzPeerName", + "type": "PCWSTR" + }, + { + "name": "ppwzContactData", + "type": "PWSTR" + } + ], + "PeerCollabParseContact": [ + { + "name": "pwzContactData", + "type": "PCWSTR" + }, + { + "name": "ppContact", + "type": "PPEER_CONTACT" + } + ], + "PeerNameToPeerHostName": [ + { + "name": "pwzPeerName", + "type": "PCWSTR" + }, + { + "name": "ppwzHostName", + "type": "PWSTR" + } + ], + "PeerHostNameToPeerName": [ + { + "name": "pwzHostName", + "type": "PCWSTR" + }, + { + "name": "ppwzPeerName", + "type": "PWSTR" + } + ], + "PeerPnrpStartup": [ + { + "name": "wVersionRequested", + "type": "WORD" + } + ], + "PeerPnrpRegister": [ + { + "name": "pcwzPeerName", + "type": "PCWSTR" + }, + { + "name": "pRegistrationInfo", + "type": "PPEER_PNRP_REGISTRATION_INFO" + }, + { + "name": "phRegistration", + "type": "HREGISTRATION" + } + ], + "PeerPnrpUpdateRegistration": [ + { + "name": "hRegistration", + "type": "HREGISTRATION" + }, + { + "name": "pRegistrationInfo", + "type": "PPEER_PNRP_REGISTRATION_INFO" + } + ], + "PeerPnrpUnregister": [ + { + "name": "hRegistration", + "type": "HREGISTRATION" + } + ], + "PeerPnrpResolve": [ + { + "name": "pcwzPeerName", + "type": "PCWSTR" + }, + { + "name": "pcwzCloudName", + "type": "PCWSTR" + }, + { + "name": "pcEndpoints", + "type": "ULONG" + }, + { + "name": "ppEndpoints", + "type": "PPEER_PNRP_ENDPOINT_INFO" + } + ], + "PeerPnrpStartResolve": [ + { + "name": "pcwzPeerName", + "type": "PCWSTR" + }, + { + "name": "pcwzCloudName", + "type": "PCWSTR" + }, + { + "name": "cMaxEndpoints", + "type": "ULONG" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "phResolve", + "type": "HRESOLUTION" + } + ], + "PeerPnrpGetCloudInfo": [ + { + "name": "pcNumClouds", + "type": "ULONG" + }, + { + "name": "ppCloudInfo", + "type": "PPEER_PNRP_CLOUD_INFO" + } + ], + "PeerPnrpGetEndpoint": [ + { + "name": "hResolve", + "type": "HRESOLUTION" + }, + { + "name": "ppEndpoint", + "type": "PPEER_PNRP_ENDPOINT_INFO" + } + ], + "PeerPnrpEndResolve": [ + { + "name": "hResolve", + "type": "HRESOLUTION" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/p2pgraph_dll.json b/qiling/extensions/windows_sdk/defs/p2pgraph_dll.json new file mode 100644 index 000000000..f2bc2e441 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/p2pgraph_dll.json @@ -0,0 +1,478 @@ +{ + "PeerGraphStartup": [ + { + "name": "wVersionRequested", + "type": "WORD" + }, + { + "name": "pVersionData", + "type": "PPEER_VERSION_DATA" + } + ], + "PeerGraphFreeData": [ + { + "name": "pvData", + "type": "PVOID" + } + ], + "PeerGraphGetItemCount": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + }, + { + "name": "pCount", + "type": "ULONG" + } + ], + "PeerGraphGetNextItem": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + }, + { + "name": "pCount", + "type": "ULONG" + }, + { + "name": "pppvItems", + "type": "PVOID" + } + ], + "PeerGraphEndEnumeration": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphCreate": [ + { + "name": "pGraphProperties", + "type": "PPEER_GRAPH_PROPERTIES" + }, + { + "name": "pwzDatabaseName", + "type": "PCWSTR" + }, + { + "name": "pSecurityInterface", + "type": "PPEER_SECURITY_INTERFACE" + }, + { + "name": "phGraph", + "type": "HGRAPH" + } + ], + "PeerGraphOpen": [ + { + "name": "pwzGraphId", + "type": "PCWSTR" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "pwzDatabaseName", + "type": "PCWSTR" + }, + { + "name": "pSecurityInterface", + "type": "PPEER_SECURITY_INTERFACE" + }, + { + "name": "cRecordTypeSyncPrecedence", + "type": "ULONG" + }, + { + "name": "pRecordTypeSyncPrecedence", + "type": "GUID" + }, + { + "name": "phGraph", + "type": "HGRAPH" + } + ], + "PeerGraphListen": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "dwScope", + "type": "DWORD" + }, + { + "name": "dwScopeId", + "type": "DWORD" + }, + { + "name": "wPort", + "type": "WORD" + } + ], + "PeerGraphConnect": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "pAddress", + "type": "PPEER_ADDRESS" + }, + { + "name": "pullConnectionId", + "type": "ULONGLONG" + } + ], + "PeerGraphClose": [ + { + "name": "hGraph", + "type": "HGRAPH" + } + ], + "PeerGraphDelete": [ + { + "name": "pwzGraphId", + "type": "PCWSTR" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "pwzDatabaseName", + "type": "PCWSTR" + } + ], + "PeerGraphGetStatus": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pdwStatus", + "type": "DWORD" + } + ], + "PeerGraphGetProperties": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "ppGraphProperties", + "type": "PPEER_GRAPH_PROPERTIES" + } + ], + "PeerGraphSetProperties": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pGraphProperties", + "type": "PPEER_GRAPH_PROPERTIES" + } + ], + "PeerGraphRegisterEvent": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "cEventRegistrations", + "type": "ULONG" + }, + { + "name": "pEventRegistrations", + "type": "PEER_GRAPH_EVENT_REGISTRATION" + }, + { + "name": "phPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerGraphUnregisterEvent": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerGraphGetEventData": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + }, + { + "name": "ppEventData", + "type": "PPEER_GRAPH_EVENT_DATA" + } + ], + "PeerGraphGetRecord": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecordId", + "type": "GUID" + }, + { + "name": "ppRecord", + "type": "PPEER_RECORD" + } + ], + "PeerGraphAddRecord": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecord", + "type": "PPEER_RECORD" + }, + { + "name": "pRecordId", + "type": "GUID" + } + ], + "PeerGraphUpdateRecord": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecord", + "type": "PPEER_RECORD" + } + ], + "PeerGraphDeleteRecord": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecordId", + "type": "GUID" + }, + { + "name": "fLocal", + "type": "BOOL" + } + ], + "PeerGraphEnumRecords": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecordType", + "type": "GUID" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphSearchRecords": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzCriteria", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphExportDatabase": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzFilePath", + "type": "PCWSTR" + } + ], + "PeerGraphImportDatabase": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzFilePath", + "type": "PCWSTR" + } + ], + "PeerGraphValidateDeferredRecords": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "cRecordIds", + "type": "ULONG" + }, + { + "name": "pRecordIds", + "type": "GUID" + } + ], + "PeerGraphOpenDirectConnection": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "pAddress", + "type": "PPEER_ADDRESS" + }, + { + "name": "pullConnectionId", + "type": "ULONGLONG" + } + ], + "PeerGraphSendData": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "ullConnectionId", + "type": "ULONGLONG" + }, + { + "name": "pType", + "type": "GUID" + }, + { + "name": "cbData", + "type": "ULONG" + }, + { + "name": "pvData", + "type": "PVOID" + } + ], + "PeerGraphCloseDirectConnection": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "ullConnectionId", + "type": "ULONGLONG" + } + ], + "PeerGraphEnumConnections": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphEnumNodes": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphSetPresence": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "fPresent", + "type": "BOOL" + } + ], + "PeerGraphGetNodeInfo": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "ullNodeId", + "type": "ULONGLONG" + }, + { + "name": "ppNodeInfo", + "type": "PPEER_NODE_INFO" + } + ], + "PeerGraphSetNodeAttributes": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzAttributes", + "type": "PCWSTR" + } + ], + "PeerGraphPeerTimeToUniversalTime": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pftPeerTime", + "type": "FILETIME" + }, + { + "name": "pftUniversalTime", + "type": "FILETIME" + } + ], + "PeerGraphUniversalTimeToPeerTime": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pftUniversalTime", + "type": "FILETIME" + }, + { + "name": "pftPeerTime", + "type": "FILETIME" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/pathcch_lib.json b/qiling/extensions/windows_sdk/defs/pathcch_lib.json new file mode 100644 index 000000000..94dfd061a --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/pathcch_lib.json @@ -0,0 +1,302 @@ +{ + "PathIsUNCEx": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "ppszServer", + "type": "PCWSTR" + } + ], + "PathCchIsRoot": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "PathCchAddBackslashEx": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + }, + { + "name": "ppszEnd", + "type": "PWSTR" + }, + { + "name": "pcchRemaining", + "type": "size_t" + } + ], + "PathCchAddBackslash": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + } + ], + "PathCchRemoveBackslashEx": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + }, + { + "name": "ppszEnd", + "type": "PWSTR" + }, + { + "name": "pcchRemaining", + "type": "size_t" + } + ], + "PathCchRemoveBackslash": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + } + ], + "PathCchSkipRoot": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "ppszRootEnd", + "type": "PCWSTR" + } + ], + "PathCchStripToRoot": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + } + ], + "PathCchRemoveFileSpec": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + } + ], + "PathCchFindExtension": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + }, + { + "name": "ppszExt", + "type": "PCWSTR" + } + ], + "PathCchAddExtension": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + }, + { + "name": "pszExt", + "type": "PCWSTR" + } + ], + "PathCchRenameExtension": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + }, + { + "name": "pszExt", + "type": "PCWSTR" + } + ], + "PathCchRemoveExtension": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + } + ], + "PathCchCanonicalizeEx": [ + { + "name": "pszPathOut", + "type": "PWSTR" + }, + { + "name": "cchPathOut", + "type": "size_t" + }, + { + "name": "pszPathIn", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "PathCchCanonicalize": [ + { + "name": "pszPathOut", + "type": "PWSTR" + }, + { + "name": "cchPathOut", + "type": "size_t" + }, + { + "name": "pszPathIn", + "type": "PCWSTR" + } + ], + "PathCchCombineEx": [ + { + "name": "pszPathOut", + "type": "PWSTR" + }, + { + "name": "cchPathOut", + "type": "size_t" + }, + { + "name": "pszPathIn", + "type": "PCWSTR" + }, + { + "name": "pszMore", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "PathCchCombine": [ + { + "name": "pszPathOut", + "type": "PWSTR" + }, + { + "name": "cchPathOut", + "type": "size_t" + }, + { + "name": "pszPathIn", + "type": "PCWSTR" + }, + { + "name": "pszMore", + "type": "PCWSTR" + } + ], + "PathCchAppendEx": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + }, + { + "name": "pszMore", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "PathCchAppend": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + }, + { + "name": "pszMore", + "type": "PCWSTR" + } + ], + "PathCchStripPrefix": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + } + ], + "PathAllocCombine": [ + { + "name": "pszPathIn", + "type": "PCWSTR" + }, + { + "name": "pszMore", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "ppszPathOut", + "type": "PWSTR" + } + ], + "PathAllocCanonicalize": [ + { + "name": "pszPathIn", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "ppszPathOut", + "type": "PWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/pdh_dll.json b/qiling/extensions/windows_sdk/defs/pdh_dll.json new file mode 100644 index 000000000..20919b186 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/pdh_dll.json @@ -0,0 +1,1534 @@ +{ + "PdhGetDllVersion": [ + { + "name": "lpdwVersion", + "type": "LPDWORD" + } + ], + "PdhOpenQueryW": [ + { + "name": "szDataSource", + "type": "LPCWSTR" + }, + { + "name": "dwUserData", + "type": "DWORD_PTR" + }, + { + "name": "phQuery", + "type": "PDH_HQUERY" + } + ], + "PdhOpenQueryA": [ + { + "name": "szDataSource", + "type": "LPCSTR" + }, + { + "name": "dwUserData", + "type": "DWORD_PTR" + }, + { + "name": "phQuery", + "type": "PDH_HQUERY" + } + ], + "PdhAddCounterW": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + }, + { + "name": "szFullCounterPath", + "type": "LPCWSTR" + }, + { + "name": "dwUserData", + "type": "DWORD_PTR" + }, + { + "name": "phCounter", + "type": "PDH_HCOUNTER" + } + ], + "PdhAddCounterA": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + }, + { + "name": "szFullCounterPath", + "type": "LPCSTR" + }, + { + "name": "dwUserData", + "type": "DWORD_PTR" + }, + { + "name": "phCounter", + "type": "PDH_HCOUNTER" + } + ], + "PdhAddEnglishCounterW": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + }, + { + "name": "szFullCounterPath", + "type": "LPCWSTR" + }, + { + "name": "dwUserData", + "type": "DWORD_PTR" + }, + { + "name": "phCounter", + "type": "PDH_HCOUNTER" + } + ], + "PdhAddEnglishCounterA": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + }, + { + "name": "szFullCounterPath", + "type": "LPCSTR" + }, + { + "name": "dwUserData", + "type": "DWORD_PTR" + }, + { + "name": "phCounter", + "type": "PDH_HCOUNTER" + } + ], + "PdhCollectQueryDataWithTime": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + }, + { + "name": "pllTimeStamp", + "type": "LONGLONG" + } + ], + "PdhValidatePathExW": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szFullPathBuffer", + "type": "LPCWSTR" + } + ], + "PdhValidatePathExA": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szFullPathBuffer", + "type": "LPCSTR" + } + ], + "PdhRemoveCounter": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + } + ], + "PdhCollectQueryData": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + } + ], + "PdhCloseQuery": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + } + ], + "PdhGetFormattedCounterValue": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "dwFormat", + "type": "DWORD" + }, + { + "name": "lpdwType", + "type": "LPDWORD" + }, + { + "name": "pValue", + "type": "PPDH_FMT_COUNTERVALUE" + } + ], + "PdhGetFormattedCounterArrayA": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "dwFormat", + "type": "DWORD" + }, + { + "name": "lpdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpdwItemCount", + "type": "LPDWORD" + }, + { + "name": "ItemBuffer", + "type": "PPDH_FMT_COUNTERVALUE_ITEM_A" + } + ], + "PdhGetFormattedCounterArrayW": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "dwFormat", + "type": "DWORD" + }, + { + "name": "lpdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpdwItemCount", + "type": "LPDWORD" + }, + { + "name": "ItemBuffer", + "type": "PPDH_FMT_COUNTERVALUE_ITEM_W" + } + ], + "PdhGetRawCounterValue": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "lpdwType", + "type": "LPDWORD" + }, + { + "name": "pValue", + "type": "PPDH_RAW_COUNTER" + } + ], + "PdhGetRawCounterArrayA": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "lpdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpdwItemCount", + "type": "LPDWORD" + }, + { + "name": "ItemBuffer", + "type": "PPDH_RAW_COUNTER_ITEM_A" + } + ], + "PdhGetRawCounterArrayW": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "lpdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpdwItemCount", + "type": "LPDWORD" + }, + { + "name": "ItemBuffer", + "type": "PPDH_RAW_COUNTER_ITEM_W" + } + ], + "PdhCalculateCounterFromRawValue": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "dwFormat", + "type": "DWORD" + }, + { + "name": "rawValue1", + "type": "PPDH_RAW_COUNTER" + }, + { + "name": "rawValue2", + "type": "PPDH_RAW_COUNTER" + }, + { + "name": "fmtValue", + "type": "PPDH_FMT_COUNTERVALUE" + } + ], + "PdhComputeCounterStatistics": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "dwFormat", + "type": "DWORD" + }, + { + "name": "dwFirstEntry", + "type": "DWORD" + }, + { + "name": "dwNumEntries", + "type": "DWORD" + }, + { + "name": "lpRawValueArray", + "type": "PPDH_RAW_COUNTER" + }, + { + "name": "data", + "type": "PPDH_STATISTICS" + } + ], + "PdhGetCounterInfoW": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "bRetrieveExplainText", + "type": "BOOLEAN" + }, + { + "name": "pdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpBuffer", + "type": "PPDH_COUNTER_INFO_W" + } + ], + "PdhGetCounterInfoA": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "bRetrieveExplainText", + "type": "BOOLEAN" + }, + { + "name": "pdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpBuffer", + "type": "PPDH_COUNTER_INFO_A" + } + ], + "PdhSetCounterScaleFactor": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "lFactor", + "type": "LONG" + } + ], + "PdhConnectMachineW": [ + { + "name": "szMachineName", + "type": "LPCWSTR" + } + ], + "PdhConnectMachineA": [ + { + "name": "szMachineName", + "type": "LPCSTR" + } + ], + "PdhEnumMachinesW": [ + { + "name": "szDataSource", + "type": "LPCWSTR" + }, + { + "name": "mszMachineList", + "type": "PZZWSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhEnumMachinesA": [ + { + "name": "szDataSource", + "type": "LPCSTR" + }, + { + "name": "mszMachineList", + "type": "PZZSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhEnumObjectsW": [ + { + "name": "szDataSource", + "type": "LPCWSTR" + }, + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "mszObjectList", + "type": "PZZWSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + }, + { + "name": "dwDetailLevel", + "type": "DWORD" + }, + { + "name": "bRefresh", + "type": "BOOL" + } + ], + "PdhEnumObjectsA": [ + { + "name": "szDataSource", + "type": "LPCSTR" + }, + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "mszObjectList", + "type": "PZZSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + }, + { + "name": "dwDetailLevel", + "type": "DWORD" + }, + { + "name": "bRefresh", + "type": "BOOL" + } + ], + "PdhEnumObjectItemsW": [ + { + "name": "szDataSource", + "type": "LPCWSTR" + }, + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "szObjectName", + "type": "LPCWSTR" + }, + { + "name": "mszCounterList", + "type": "PZZWSTR" + }, + { + "name": "pcchCounterListLength", + "type": "LPDWORD" + }, + { + "name": "mszInstanceList", + "type": "PZZWSTR" + }, + { + "name": "pcchInstanceListLength", + "type": "LPDWORD" + }, + { + "name": "dwDetailLevel", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhEnumObjectItemsA": [ + { + "name": "szDataSource", + "type": "LPCSTR" + }, + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "szObjectName", + "type": "LPCSTR" + }, + { + "name": "mszCounterList", + "type": "PZZSTR" + }, + { + "name": "pcchCounterListLength", + "type": "LPDWORD" + }, + { + "name": "mszInstanceList", + "type": "PZZSTR" + }, + { + "name": "pcchInstanceListLength", + "type": "LPDWORD" + }, + { + "name": "dwDetailLevel", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhMakeCounterPathW": [ + { + "name": "pCounterPathElements", + "type": "PPDH_COUNTER_PATH_ELEMENTS_W" + }, + { + "name": "szFullPathBuffer", + "type": "LPWSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhMakeCounterPathA": [ + { + "name": "pCounterPathElements", + "type": "PPDH_COUNTER_PATH_ELEMENTS_A" + }, + { + "name": "szFullPathBuffer", + "type": "LPSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhParseCounterPathW": [ + { + "name": "szFullPathBuffer", + "type": "LPCWSTR" + }, + { + "name": "pCounterPathElements", + "type": "PPDH_COUNTER_PATH_ELEMENTS_W" + }, + { + "name": "pdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhParseCounterPathA": [ + { + "name": "szFullPathBuffer", + "type": "LPCSTR" + }, + { + "name": "pCounterPathElements", + "type": "PPDH_COUNTER_PATH_ELEMENTS_A" + }, + { + "name": "pdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhParseInstanceNameW": [ + { + "name": "szInstanceString", + "type": "LPCWSTR" + }, + { + "name": "szInstanceName", + "type": "LPWSTR" + }, + { + "name": "pcchInstanceNameLength", + "type": "LPDWORD" + }, + { + "name": "szParentName", + "type": "LPWSTR" + }, + { + "name": "pcchParentNameLength", + "type": "LPDWORD" + }, + { + "name": "lpIndex", + "type": "LPDWORD" + } + ], + "PdhParseInstanceNameA": [ + { + "name": "szInstanceString", + "type": "LPCSTR" + }, + { + "name": "szInstanceName", + "type": "LPSTR" + }, + { + "name": "pcchInstanceNameLength", + "type": "LPDWORD" + }, + { + "name": "szParentName", + "type": "LPSTR" + }, + { + "name": "pcchParentNameLength", + "type": "LPDWORD" + }, + { + "name": "lpIndex", + "type": "LPDWORD" + } + ], + "PdhValidatePathW": [ + { + "name": "szFullPathBuffer", + "type": "LPCWSTR" + } + ], + "PdhValidatePathA": [ + { + "name": "szFullPathBuffer", + "type": "LPCSTR" + } + ], + "PdhGetDefaultPerfObjectW": [ + { + "name": "szDataSource", + "type": "LPCWSTR" + }, + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "szDefaultObjectName", + "type": "LPWSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhGetDefaultPerfObjectA": [ + { + "name": "szDataSource", + "type": "LPCSTR" + }, + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "szDefaultObjectName", + "type": "LPSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhGetDefaultPerfCounterW": [ + { + "name": "szDataSource", + "type": "LPCWSTR" + }, + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "szObjectName", + "type": "LPCWSTR" + }, + { + "name": "szDefaultCounterName", + "type": "LPWSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhGetDefaultPerfCounterA": [ + { + "name": "szDataSource", + "type": "LPCSTR" + }, + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "szObjectName", + "type": "LPCSTR" + }, + { + "name": "szDefaultCounterName", + "type": "LPSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhBrowseCountersW": [ + { + "name": "pBrowseDlgData", + "type": "PPDH_BROWSE_DLG_CONFIG_W" + } + ], + "PdhBrowseCountersA": [ + { + "name": "pBrowseDlgData", + "type": "PPDH_BROWSE_DLG_CONFIG_A" + } + ], + "PdhExpandCounterPathW": [ + { + "name": "szWildCardPath", + "type": "LPCWSTR" + }, + { + "name": "mszExpandedPathList", + "type": "PZZWSTR" + }, + { + "name": "pcchPathListLength", + "type": "LPDWORD" + } + ], + "PdhExpandCounterPathA": [ + { + "name": "szWildCardPath", + "type": "LPCSTR" + }, + { + "name": "mszExpandedPathList", + "type": "PZZSTR" + }, + { + "name": "pcchPathListLength", + "type": "LPDWORD" + } + ], + "PdhLookupPerfNameByIndexW": [ + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "dwNameIndex", + "type": "DWORD" + }, + { + "name": "szNameBuffer", + "type": "LPWSTR" + }, + { + "name": "pcchNameBufferSize", + "type": "LPDWORD" + } + ], + "PdhLookupPerfNameByIndexA": [ + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "dwNameIndex", + "type": "DWORD" + }, + { + "name": "szNameBuffer", + "type": "LPSTR" + }, + { + "name": "pcchNameBufferSize", + "type": "LPDWORD" + } + ], + "PdhLookupPerfIndexByNameW": [ + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "szNameBuffer", + "type": "LPCWSTR" + }, + { + "name": "pdwIndex", + "type": "LPDWORD" + } + ], + "PdhLookupPerfIndexByNameA": [ + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "szNameBuffer", + "type": "LPCSTR" + }, + { + "name": "pdwIndex", + "type": "LPDWORD" + } + ], + "PdhExpandWildCardPathA": [ + { + "name": "szDataSource", + "type": "LPCSTR" + }, + { + "name": "szWildCardPath", + "type": "LPCSTR" + }, + { + "name": "mszExpandedPathList", + "type": "PZZSTR" + }, + { + "name": "pcchPathListLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhExpandWildCardPathW": [ + { + "name": "szDataSource", + "type": "LPCWSTR" + }, + { + "name": "szWildCardPath", + "type": "LPCWSTR" + }, + { + "name": "mszExpandedPathList", + "type": "PZZWSTR" + }, + { + "name": "pcchPathListLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhOpenLogW": [ + { + "name": "szLogFileName", + "type": "LPCWSTR" + }, + { + "name": "dwAccessFlags", + "type": "DWORD" + }, + { + "name": "lpdwLogType", + "type": "LPDWORD" + }, + { + "name": "hQuery", + "type": "PDH_HQUERY" + }, + { + "name": "dwMaxSize", + "type": "DWORD" + }, + { + "name": "szUserCaption", + "type": "LPCWSTR" + }, + { + "name": "phLog", + "type": "PDH_HLOG" + } + ], + "PdhOpenLogA": [ + { + "name": "szLogFileName", + "type": "LPCSTR" + }, + { + "name": "dwAccessFlags", + "type": "DWORD" + }, + { + "name": "lpdwLogType", + "type": "LPDWORD" + }, + { + "name": "hQuery", + "type": "PDH_HQUERY" + }, + { + "name": "dwMaxSize", + "type": "DWORD" + }, + { + "name": "szUserCaption", + "type": "LPCSTR" + }, + { + "name": "phLog", + "type": "PDH_HLOG" + } + ], + "PdhUpdateLogW": [ + { + "name": "hLog", + "type": "PDH_HLOG" + }, + { + "name": "szUserString", + "type": "LPCWSTR" + } + ], + "PdhUpdateLogA": [ + { + "name": "hLog", + "type": "PDH_HLOG" + }, + { + "name": "szUserString", + "type": "LPCSTR" + } + ], + "PdhUpdateLogFileCatalog": [ + { + "name": "hLog", + "type": "PDH_HLOG" + } + ], + "PdhGetLogFileSize": [ + { + "name": "hLog", + "type": "PDH_HLOG" + }, + { + "name": "llSize", + "type": "LONGLONG" + } + ], + "PdhCloseLog": [ + { + "name": "hLog", + "type": "PDH_HLOG" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhSelectDataSourceW": [ + { + "name": "hWndOwner", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "szDataSource", + "type": "LPWSTR" + }, + { + "name": "pcchBufferLength", + "type": "LPDWORD" + } + ], + "PdhSelectDataSourceA": [ + { + "name": "hWndOwner", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "szDataSource", + "type": "LPSTR" + }, + { + "name": "pcchBufferLength", + "type": "LPDWORD" + } + ], + "PdhIsRealTimeQuery": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + } + ], + "PdhSetQueryTimeRange": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + }, + { + "name": "pInfo", + "type": "PPDH_TIME_INFO" + } + ], + "PdhGetDataSourceTimeRangeW": [ + { + "name": "szDataSource", + "type": "LPCWSTR" + }, + { + "name": "pdwNumEntries", + "type": "LPDWORD" + }, + { + "name": "pInfo", + "type": "PPDH_TIME_INFO" + }, + { + "name": "pdwBufferSize", + "type": "LPDWORD" + } + ], + "PdhGetDataSourceTimeRangeA": [ + { + "name": "szDataSource", + "type": "LPCSTR" + }, + { + "name": "pdwNumEntries", + "type": "LPDWORD" + }, + { + "name": "pInfo", + "type": "PPDH_TIME_INFO" + }, + { + "name": "pdwBufferSize", + "type": "LPDWORD" + } + ], + "PdhCollectQueryDataEx": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + }, + { + "name": "dwIntervalTime", + "type": "DWORD" + }, + { + "name": "hNewDataEvent", + "type": "HANDLE" + } + ], + "PdhFormatFromRawValue": [ + { + "name": "dwCounterType", + "type": "DWORD" + }, + { + "name": "dwFormat", + "type": "DWORD" + }, + { + "name": "pTimeBase", + "type": "LONGLONG" + }, + { + "name": "pRawValue1", + "type": "PPDH_RAW_COUNTER" + }, + { + "name": "pRawValue2", + "type": "PPDH_RAW_COUNTER" + }, + { + "name": "pFmtValue", + "type": "PPDH_FMT_COUNTERVALUE" + } + ], + "PdhGetCounterTimeBase": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "pTimeBase", + "type": "LONGLONG" + } + ], + "PdhReadRawLogRecord": [ + { + "name": "hLog", + "type": "PDH_HLOG" + }, + { + "name": "ftRecord", + "type": "FILETIME" + }, + { + "name": "pRawLogRecord", + "type": "PPDH_RAW_LOG_RECORD" + }, + { + "name": "pdwBufferLength", + "type": "LPDWORD" + } + ], + "PdhSetDefaultRealTimeDataSource": [ + { + "name": "dwDataSourceId", + "type": "DWORD" + } + ], + "PdhBindInputDataSourceW": [ + { + "name": "phDataSource", + "type": "PDH_HLOG" + }, + { + "name": "LogFileNameList", + "type": "LPCWSTR" + } + ], + "PdhBindInputDataSourceA": [ + { + "name": "phDataSource", + "type": "PDH_HLOG" + }, + { + "name": "LogFileNameList", + "type": "LPCSTR" + } + ], + "PdhOpenQueryH": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "dwUserData", + "type": "DWORD_PTR" + }, + { + "name": "phQuery", + "type": "PDH_HQUERY" + } + ], + "PdhEnumMachinesHW": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "mszMachineList", + "type": "PZZWSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhEnumMachinesHA": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "mszMachineList", + "type": "PZZSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhEnumObjectsHW": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "mszObjectList", + "type": "PZZWSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + }, + { + "name": "dwDetailLevel", + "type": "DWORD" + }, + { + "name": "bRefresh", + "type": "BOOL" + } + ], + "PdhEnumObjectsHA": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "mszObjectList", + "type": "PZZSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + }, + { + "name": "dwDetailLevel", + "type": "DWORD" + }, + { + "name": "bRefresh", + "type": "BOOL" + } + ], + "PdhEnumObjectItemsHW": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "szObjectName", + "type": "LPCWSTR" + }, + { + "name": "mszCounterList", + "type": "PZZWSTR" + }, + { + "name": "pcchCounterListLength", + "type": "LPDWORD" + }, + { + "name": "mszInstanceList", + "type": "PZZWSTR" + }, + { + "name": "pcchInstanceListLength", + "type": "LPDWORD" + }, + { + "name": "dwDetailLevel", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhEnumObjectItemsHA": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "szObjectName", + "type": "LPCSTR" + }, + { + "name": "mszCounterList", + "type": "PZZSTR" + }, + { + "name": "pcchCounterListLength", + "type": "LPDWORD" + }, + { + "name": "mszInstanceList", + "type": "PZZSTR" + }, + { + "name": "pcchInstanceListLength", + "type": "LPDWORD" + }, + { + "name": "dwDetailLevel", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhExpandWildCardPathHW": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szWildCardPath", + "type": "LPCWSTR" + }, + { + "name": "mszExpandedPathList", + "type": "PZZWSTR" + }, + { + "name": "pcchPathListLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhExpandWildCardPathHA": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szWildCardPath", + "type": "LPCSTR" + }, + { + "name": "mszExpandedPathList", + "type": "PZZSTR" + }, + { + "name": "pcchPathListLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhGetDataSourceTimeRangeH": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "pdwNumEntries", + "type": "LPDWORD" + }, + { + "name": "pInfo", + "type": "PPDH_TIME_INFO" + }, + { + "name": "pdwBufferSize", + "type": "LPDWORD" + } + ], + "PdhGetDefaultPerfObjectHW": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "szDefaultObjectName", + "type": "LPWSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhGetDefaultPerfObjectHA": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "szDefaultObjectName", + "type": "LPSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhGetDefaultPerfCounterHW": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "szObjectName", + "type": "LPCWSTR" + }, + { + "name": "szDefaultCounterName", + "type": "LPWSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhGetDefaultPerfCounterHA": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "szObjectName", + "type": "LPCSTR" + }, + { + "name": "szDefaultCounterName", + "type": "LPSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhBrowseCountersHW": [ + { + "name": "pBrowseDlgData", + "type": "PPDH_BROWSE_DLG_CONFIG_HW" + } + ], + "PdhBrowseCountersHA": [ + { + "name": "pBrowseDlgData", + "type": "PPDH_BROWSE_DLG_CONFIG_HA" + } + ], + "PdhEnumLogSetNamesW": [ + { + "name": "szDataSource", + "type": "LPCWSTR" + }, + { + "name": "mszDataSetNameList", + "type": "PZZWSTR" + }, + { + "name": "pcchBufferLength", + "type": "LPDWORD" + } + ], + "PdhEnumLogSetNamesA": [ + { + "name": "szDataSource", + "type": "LPCSTR" + }, + { + "name": "mszDataSetNameList", + "type": "PZZSTR" + }, + { + "name": "pcchBufferLength", + "type": "LPDWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/peerdist_dll.json b/qiling/extensions/windows_sdk/defs/peerdist_dll.json new file mode 100644 index 000000000..ce2d642bd --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/peerdist_dll.json @@ -0,0 +1,438 @@ +{ + "PeerDistStartup": [ + { + "name": "dwVersionRequested", + "type": "DWORD" + }, + { + "name": "phPeerDist", + "type": "PPEERDIST_INSTANCE_HANDLE" + }, + { + "name": "pdwSupportedVersion", + "type": "PDWORD" + } + ], + "PeerDistShutdown": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + } + ], + "PeerDistGetStatus": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "pPeerDistStatus", + "type": "PEERDIST_STATUS" + } + ], + "PeerDistRegisterForStatusChangeNotification": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hCompletionPort", + "type": "HANDLE" + }, + { + "name": "ulCompletionKey", + "type": "ULONG_PTR" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "pPeerDistStatus", + "type": "PEERDIST_STATUS" + } + ], + "PeerDistUnregisterForStatusChangeNotification": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + } + ], + "PeerDistServerPublishStream": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "cbContentIdentifier", + "type": "DWORD" + }, + { + "name": "pContentIdentifier", + "type": "PBYTE" + }, + { + "name": "cbContentLength", + "type": "ULONGLONG" + }, + { + "name": "pPublishOptions", + "type": "PCPEERDIST_PUBLICATION_OPTIONS" + }, + { + "name": "hCompletionPort", + "type": "HANDLE" + }, + { + "name": "ulCompletionKey", + "type": "ULONG_PTR" + }, + { + "name": "phStream", + "type": "PPEERDIST_STREAM_HANDLE" + } + ], + "PeerDistServerPublishAddToStream": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hStream", + "type": "PEERDIST_STREAM_HANDLE" + }, + { + "name": "cbNumberOfBytes", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "PBYTE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistServerPublishCompleteStream": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hStream", + "type": "PEERDIST_STREAM_HANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistServerCloseStreamHandle": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hStream", + "type": "PEERDIST_STREAM_HANDLE" + } + ], + "PeerDistServerUnpublish": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "cbContentIdentifier", + "type": "DWORD" + }, + { + "name": "pContentIdentifier", + "type": "PBYTE" + } + ], + "PeerDistServerOpenContentInformation": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "cbContentIdentifier", + "type": "DWORD" + }, + { + "name": "pContentIdentifier", + "type": "PBYTE" + }, + { + "name": "ullContentOffset", + "type": "ULONGLONG" + }, + { + "name": "cbContentLength", + "type": "ULONGLONG" + }, + { + "name": "hCompletionPort", + "type": "HANDLE" + }, + { + "name": "ulCompletionKey", + "type": "ULONG_PTR" + }, + { + "name": "phContentInfo", + "type": "PPEERDIST_CONTENTINFO_HANDLE" + } + ], + "PeerDistServerRetrieveContentInformation": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentInfo", + "type": "PEERDIST_CONTENTINFO_HANDLE" + }, + { + "name": "cbMaxNumberOfBytes", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "PBYTE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistServerCloseContentInformation": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentInfo", + "type": "PEERDIST_CONTENTINFO_HANDLE" + } + ], + "PeerDistServerCancelAsyncOperation": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "cbContentIdentifier", + "type": "DWORD" + }, + { + "name": "pContentIdentifier", + "type": "PBYTE" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistClientOpenContent": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "pContentTag", + "type": "PCPEERDIST_CONTENT_TAG" + }, + { + "name": "hCompletionPort", + "type": "HANDLE" + }, + { + "name": "ulCompletionKey", + "type": "ULONG_PTR" + }, + { + "name": "phContentHandle", + "type": "PPEERDIST_CONTENT_HANDLE" + } + ], + "PeerDistClientCloseContent": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentHandle", + "type": "PEERDIST_CONTENT_HANDLE" + } + ], + "PeerDistClientAddContentInformation": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentHandle", + "type": "PEERDIST_CONTENT_HANDLE" + }, + { + "name": "cbNumberOfBytes", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "PBYTE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistClientCompleteContentInformation": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentHandle", + "type": "PEERDIST_CONTENT_HANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistClientAddData": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentHandle", + "type": "PEERDIST_CONTENT_HANDLE" + }, + { + "name": "cbNumberOfBytes", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "PBYTE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistClientBlockRead": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentHandle", + "type": "PEERDIST_CONTENT_HANDLE" + }, + { + "name": "cbMaxNumberOfBytes", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "PBYTE" + }, + { + "name": "dwTimeoutInMilliseconds", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistClientStreamRead": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentHandle", + "type": "PEERDIST_CONTENT_HANDLE" + }, + { + "name": "cbMaxNumberOfBytes", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "PBYTE" + }, + { + "name": "dwTimeoutInMilliseconds", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistClientFlushContent": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "pContentTag", + "type": "PCPEERDIST_CONTENT_TAG" + }, + { + "name": "hCompletionPort", + "type": "HANDLE" + }, + { + "name": "ulCompletionKey", + "type": "ULONG_PTR" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistClientCancelAsyncOperation": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentHandle", + "type": "PEERDIST_CONTENT_HANDLE" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistClientGetInformationByHandle": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentHandle", + "type": "PEERDIST_CONTENT_HANDLE" + }, + { + "name": "PeerDistClientInfoClass", + "type": "PEERDIST_CLIENT_INFO_BY_HANDLE_CLASS" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpInformation", + "type": "LPVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/powrprof_dll.json b/qiling/extensions/windows_sdk/defs/powrprof_dll.json new file mode 100644 index 000000000..40b3e9dac --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/powrprof_dll.json @@ -0,0 +1,1238 @@ +{ + "GetPwrDiskSpindownRange": [ + { + "name": "puiMax", + "type": "PUINT" + }, + { + "name": "puiMin", + "type": "PUINT" + } + ], + "EnumPwrSchemes": [ + { + "name": "lpfn", + "type": "PWRSCHEMESENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "ReadGlobalPwrPolicy": [ + { + "name": "pGlobalPowerPolicy", + "type": "PGLOBAL_POWER_POLICY" + } + ], + "ReadPwrScheme": [ + { + "name": "uiID", + "type": "UINT" + }, + { + "name": "pPowerPolicy", + "type": "PPOWER_POLICY" + } + ], + "WritePwrScheme": [ + { + "name": "puiID", + "type": "PUINT" + }, + { + "name": "lpszSchemeName", + "type": "LPCWSTR" + }, + { + "name": "lpszDescription", + "type": "LPCWSTR" + }, + { + "name": "lpScheme", + "type": "PPOWER_POLICY" + } + ], + "WriteGlobalPwrPolicy": [ + { + "name": "pGlobalPowerPolicy", + "type": "PGLOBAL_POWER_POLICY" + } + ], + "DeletePwrScheme": [ + { + "name": "uiID", + "type": "UINT" + } + ], + "GetActivePwrScheme": [ + { + "name": "puiID", + "type": "PUINT" + } + ], + "SetActivePwrScheme": [ + { + "name": "uiID", + "type": "UINT" + }, + { + "name": "pGlobalPowerPolicy", + "type": "PGLOBAL_POWER_POLICY" + }, + { + "name": "pPowerPolicy", + "type": "PPOWER_POLICY" + } + ], + "IsPwrSuspendAllowed": [ + { + "name": "VOID", + "type": "void" + } + ], + "IsPwrHibernateAllowed": [ + { + "name": "VOID", + "type": "void" + } + ], + "IsPwrShutdownAllowed": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetSuspendState": [ + { + "name": "bHibernate", + "type": "BOOLEAN" + }, + { + "name": "bForce", + "type": "BOOLEAN" + }, + { + "name": "bWakeupEventsDisabled", + "type": "BOOLEAN" + } + ], + "GetCurrentPowerPolicies": [ + { + "name": "pGlobalPowerPolicy", + "type": "PGLOBAL_POWER_POLICY" + }, + { + "name": "pPowerPolicy", + "type": "PPOWER_POLICY" + } + ], + "CanUserWritePwrScheme": [ + { + "name": "VOID", + "type": "void" + } + ], + "ReadProcessorPwrScheme": [ + { + "name": "uiID", + "type": "UINT" + }, + { + "name": "pMachineProcessorPowerPolicy", + "type": "PMACHINE_PROCESSOR_POWER_POLICY" + } + ], + "WriteProcessorPwrScheme": [ + { + "name": "uiID", + "type": "UINT" + }, + { + "name": "pMachineProcessorPowerPolicy", + "type": "PMACHINE_PROCESSOR_POWER_POLICY" + } + ], + "PowerIsSettingRangeDefined": [ + { + "name": "SubKeyGuid", + "type": "GUID" + }, + { + "name": "SettingGuid", + "type": "GUID" + } + ], + "PowerSettingAccessCheckEx": [ + { + "name": "AccessFlags", + "type": "POWER_DATA_ACCESSOR" + }, + { + "name": "PowerGuid", + "type": "GUID" + }, + { + "name": "AccessType", + "type": "REGSAM" + } + ], + "PowerSettingAccessCheck": [ + { + "name": "AccessFlags", + "type": "POWER_DATA_ACCESSOR" + }, + { + "name": "PowerGuid", + "type": "GUID" + } + ], + "PowerReadACValueIndex": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "AcValueIndex", + "type": "LPDWORD" + } + ], + "PowerReadDCValueIndex": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "DcValueIndex", + "type": "LPDWORD" + } + ], + "PowerReadFriendlyName": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadDescription": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadPossibleValue": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Type", + "type": "PULONG" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadPossibleFriendlyName": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadPossibleDescription": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadValueMin": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "ValueMinimum", + "type": "LPDWORD" + } + ], + "PowerReadValueMax": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "ValueMaximum", + "type": "LPDWORD" + } + ], + "PowerReadValueIncrement": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "ValueIncrement", + "type": "LPDWORD" + } + ], + "PowerReadValueUnitsSpecifier": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadACDefaultIndex": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemePersonalityGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "AcDefaultIndex", + "type": "LPDWORD" + } + ], + "PowerReadDCDefaultIndex": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemePersonalityGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "DcDefaultIndex", + "type": "LPDWORD" + } + ], + "PowerReadIconResourceSpecifier": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadSettingAttributes": [ + { + "name": "SubGroupGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + } + ], + "PowerWriteFriendlyName": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWriteDescription": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWritePossibleValue": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Type", + "type": "ULONG" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWritePossibleFriendlyName": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWritePossibleDescription": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWriteValueMin": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "ValueMinimum", + "type": "DWORD" + } + ], + "PowerWriteValueMax": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "ValueMaximum", + "type": "DWORD" + } + ], + "PowerWriteValueIncrement": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "ValueIncrement", + "type": "DWORD" + } + ], + "PowerWriteValueUnitsSpecifier": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWriteACDefaultIndex": [ + { + "name": "RootSystemPowerKey", + "type": "HKEY" + }, + { + "name": "SchemePersonalityGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "DefaultAcIndex", + "type": "DWORD" + } + ], + "PowerWriteDCDefaultIndex": [ + { + "name": "RootSystemPowerKey", + "type": "HKEY" + }, + { + "name": "SchemePersonalityGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "DefaultDcIndex", + "type": "DWORD" + } + ], + "PowerWriteIconResourceSpecifier": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWriteSettingAttributes": [ + { + "name": "SubGroupGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Attributes", + "type": "DWORD" + } + ], + "PowerDuplicateScheme": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SourceSchemeGuid", + "type": "GUID" + }, + { + "name": "DestinationSchemeGuid", + "type": "GUID" + } + ], + "PowerImportPowerScheme": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "ImportFileNamePath", + "type": "LPCWSTR" + }, + { + "name": "DestinationSchemeGuid", + "type": "GUID" + } + ], + "PowerDeleteScheme": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + } + ], + "PowerRemovePowerSetting": [ + { + "name": "PowerSettingSubKeyGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + } + ], + "PowerCreateSetting": [ + { + "name": "RootSystemPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + } + ], + "PowerCreatePossibleSetting": [ + { + "name": "RootSystemPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + } + ], + "PowerEnumerate": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "AccessFlags", + "type": "POWER_DATA_ACCESSOR" + }, + { + "name": "Index", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerCanRestoreIndividualDefaultPowerScheme": [ + { + "name": "SchemeGuid", + "type": "GUID" + } + ], + "PowerRestoreIndividualDefaultPowerScheme": [ + { + "name": "SchemeGuid", + "type": "GUID" + } + ], + "PowerRestoreDefaultPowerSchemes": [ + { + "name": "VOID", + "type": "void" + } + ], + "PowerReplaceDefaultPowerSchemes": [ + { + "name": "VOID", + "type": "void" + } + ], + "PowerDeterminePlatformRole": [ + { + "name": "VOID", + "type": "void" + } + ], + "DevicePowerEnumDevices": [ + { + "name": "QueryIndex", + "type": "ULONG" + }, + { + "name": "QueryInterpretationFlags", + "type": "ULONG" + }, + { + "name": "QueryFlags", + "type": "ULONG" + }, + { + "name": "pReturnBuffer", + "type": "PBYTE" + }, + { + "name": "pBufferSize", + "type": "PULONG" + } + ], + "DevicePowerSetDeviceState": [ + { + "name": "DeviceDescription", + "type": "LPCWSTR" + }, + { + "name": "SetFlags", + "type": "ULONG" + }, + { + "name": "SetData", + "type": "PVOID" + } + ], + "DevicePowerOpen": [ + { + "name": "DebugMask", + "type": "ULONG" + } + ], + "DevicePowerClose": [ + { + "name": "VOID", + "type": "void" + } + ], + "PowerReportThermalEvent": [ + { + "name": "Event", + "type": "PTHERMAL_EVENT" + } + ], + "CallNtPowerInformation": [ + { + "name": "InformationLevel", + "type": "POWER_INFORMATION_LEVEL" + }, + { + "name": "InputBuffer", + "type": "PVOID" + }, + { + "name": "InputBufferLength", + "type": "ULONG" + }, + { + "name": "OutputBuffer", + "type": "PVOID" + }, + { + "name": "OutputBufferLength", + "type": "ULONG" + } + ], + "GetPwrCapabilities": [ + { + "name": "lpspc", + "type": "PSYSTEM_POWER_CAPABILITIES" + } + ], + "PowerDeterminePlatformRoleEx": [ + { + "name": "Version", + "type": "ULONG" + } + ], + "PowerRegisterSuspendResumeNotification": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Recipient", + "type": "HANDLE" + }, + { + "name": "RegistrationHandle", + "type": "PHPOWERNOTIFY" + } + ], + "PowerUnregisterSuspendResumeNotification": [ + { + "name": "RegistrationHandle", + "type": "HPOWERNOTIFY" + } + ], + "PowerReadACValue": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Type", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "LPBYTE" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadDCValue": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Type", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerWriteACValueIndex": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "AcValueIndex", + "type": "DWORD" + } + ], + "PowerWriteDCValueIndex": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "DcValueIndex", + "type": "DWORD" + } + ], + "PowerGetActiveScheme": [ + { + "name": "UserRootPowerKey", + "type": "HKEY" + }, + { + "name": "ActivePolicyGuid", + "type": "GUID" + } + ], + "PowerSetActiveScheme": [ + { + "name": "UserRootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + } + ], + "PowerSettingRegisterNotification": [ + { + "name": "SettingGuid", + "type": "LPCGUID" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Recipient", + "type": "HANDLE" + }, + { + "name": "RegistrationHandle", + "type": "PHPOWERNOTIFY" + } + ], + "PowerSettingUnregisterNotification": [ + { + "name": "RegistrationHandle", + "type": "HPOWERNOTIFY" + } + ], + "PowerRegisterForEffectivePowerModeNotifications": [ + { + "name": "Version", + "type": "ULONG" + }, + { + "name": "Callback", + "type": "EFFECTIVE_POWER_MODE_CALLBACK" + }, + { + "name": "Context", + "type": "void" + }, + { + "name": "RegistrationHandle", + "type": "void" + } + ], + "PowerUnregisterFromEffectivePowerModeNotifications": [ + { + "name": "RegistrationHandle", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/prntvpt_dll.json b/qiling/extensions/windows_sdk/defs/prntvpt_dll.json new file mode 100644 index 000000000..12411298a --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/prntvpt_dll.json @@ -0,0 +1,196 @@ +{ + "PTQuerySchemaVersionSupport": [ + { + "name": "pszPrinterName", + "type": "PCWSTR" + }, + { + "name": "pMaxVersion", + "type": "DWORD" + } + ], + "PTOpenProvider": [ + { + "name": "pszPrinterName", + "type": "PCWSTR" + }, + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "phProvider", + "type": "HPTPROVIDER" + } + ], + "PTOpenProviderEx": [ + { + "name": "pszPrinterName", + "type": "PCWSTR" + }, + { + "name": "dwMaxVersion", + "type": "DWORD" + }, + { + "name": "dwPrefVersion", + "type": "DWORD" + }, + { + "name": "phProvider", + "type": "HPTPROVIDER" + }, + { + "name": "pUsedVersion", + "type": "DWORD" + } + ], + "PTCloseProvider": [ + { + "name": "hProvider", + "type": "HPTPROVIDER" + } + ], + "PTReleaseMemory": [ + { + "name": "pBuffer", + "type": "PVOID" + } + ], + "PTGetPrintCapabilities": [ + { + "name": "hProvider", + "type": "HPTPROVIDER" + }, + { + "name": "pPrintTicket", + "type": "IStream" + }, + { + "name": "pCapabilities", + "type": "IStream" + }, + { + "name": "pbstrErrorMessage", + "type": "BSTR" + } + ], + "PTGetPrintDeviceCapabilities": [ + { + "name": "hProvider", + "type": "HPTPROVIDER" + }, + { + "name": "pPrintTicket", + "type": "IStream" + }, + { + "name": "pDeviceCapabilities", + "type": "IStream" + }, + { + "name": "pbstrErrorMessage", + "type": "BSTR" + } + ], + "PTGetPrintDeviceResources": [ + { + "name": "hProvider", + "type": "HPTPROVIDER" + }, + { + "name": "pszLocaleName", + "type": "LPCWSTR" + }, + { + "name": "pPrintTicket", + "type": "IStream" + }, + { + "name": "pDeviceResources", + "type": "IStream" + }, + { + "name": "pbstrErrorMessage", + "type": "BSTR" + } + ], + "PTMergeAndValidatePrintTicket": [ + { + "name": "hProvider", + "type": "HPTPROVIDER" + }, + { + "name": "pBaseTicket", + "type": "IStream" + }, + { + "name": "pDeltaTicket", + "type": "IStream" + }, + { + "name": "scope", + "type": "EPrintTicketScope" + }, + { + "name": "pResultTicket", + "type": "IStream" + }, + { + "name": "pbstrErrorMessage", + "type": "BSTR" + } + ], + "PTConvertPrintTicketToDevMode": [ + { + "name": "hProvider", + "type": "HPTPROVIDER" + }, + { + "name": "pPrintTicket", + "type": "IStream" + }, + { + "name": "baseDevmodeType", + "type": "EDefaultDevmodeType" + }, + { + "name": "scope", + "type": "EPrintTicketScope" + }, + { + "name": "pcbDevmode", + "type": "ULONG" + }, + { + "name": "ppDevmode", + "type": "PDEVMODE" + }, + { + "name": "pbstrErrorMessage", + "type": "BSTR" + } + ], + "PTConvertDevModeToPrintTicket": [ + { + "name": "hProvider", + "type": "HPTPROVIDER" + }, + { + "name": "cbDevmode", + "type": "ULONG" + }, + { + "name": "pDevmode", + "type": "PDEVMODE" + }, + { + "name": "scope", + "type": "EPrintTicketScope" + }, + { + "name": "pPrintTicket", + "type": "IStream" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/propsys_dll.json b/qiling/extensions/windows_sdk/defs/propsys_dll.json new file mode 100644 index 000000000..d6b2d087b --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/propsys_dll.json @@ -0,0 +1,2942 @@ +{ + "PropVariantToWinRTPropertyValue": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "WinRTPropertyValueToPropVariant": [ + { + "name": "punkPropertyValue", + "type": "IUnknown" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "PSFormatForDisplay": [ + { + "name": "propkey", + "type": "PROPERTYKEY" + }, + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pdfFlags", + "type": "PROPDESC_FORMAT_FLAGS" + }, + { + "name": "pwszText", + "type": "LPWSTR" + }, + { + "name": "cchText", + "type": "DWORD" + } + ], + "PSFormatForDisplayAlloc": [ + { + "name": "key", + "type": "PROPERTYKEY" + }, + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pdff", + "type": "PROPDESC_FORMAT_FLAGS" + }, + { + "name": "ppszDisplay", + "type": "PWSTR" + } + ], + "PSFormatPropertyValue": [ + { + "name": "pps", + "type": "IPropertyStore" + }, + { + "name": "ppd", + "type": "IPropertyDescription" + }, + { + "name": "pdff", + "type": "PROPDESC_FORMAT_FLAGS" + }, + { + "name": "ppszDisplay", + "type": "LPWSTR" + } + ], + "PSGetImageReferenceForValue": [ + { + "name": "propkey", + "type": "PROPERTYKEY" + }, + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "ppszImageRes", + "type": "PWSTR" + } + ], + "PSStringFromPropertyKey": [ + { + "name": "pkey", + "type": "PROPERTYKEY" + }, + { + "name": "psz", + "type": "LPWSTR" + }, + { + "name": "cch", + "type": "UINT" + } + ], + "PSPropertyKeyFromString": [ + { + "name": "pszString", + "type": "LPCWSTR" + }, + { + "name": "pkey", + "type": "PROPERTYKEY" + } + ], + "PSCreateMemoryPropertyStore": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreateDelayedMultiplexPropertyStore": [ + { + "name": "flags", + "type": "GETPROPERTYSTOREFLAGS" + }, + { + "name": "pdpsf", + "type": "IDelayedPropertyStoreFactory" + }, + { + "name": "rgStoreIds", + "type": "DWORD" + }, + { + "name": "cStores", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreateMultiplexPropertyStore": [ + { + "name": "prgpunkStores", + "type": "IUnknown" + }, + { + "name": "cStores", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreatePropertyChangeArray": [ + { + "name": "rgpropkey", + "type": "PROPERTYKEY" + }, + { + "name": "rgflags", + "type": "PKA_FLAGS" + }, + { + "name": "rgpropvar", + "type": "PROPVARIANT" + }, + { + "name": "cChanges", + "type": "UINT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreateSimplePropertyChange": [ + { + "name": "flags", + "type": "PKA_FLAGS" + }, + { + "name": "key", + "type": "PROPERTYKEY" + }, + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetPropertyDescription": [ + { + "name": "propkey", + "type": "PROPERTYKEY" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetPropertyDescriptionByName": [ + { + "name": "pszCanonicalName", + "type": "LPCWSTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSLookupPropertyHandlerCLSID": [ + { + "name": "pszFilePath", + "type": "PCWSTR" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "PSGetItemPropertyHandler": [ + { + "name": "punkItem", + "type": "IUnknown" + }, + { + "name": "fReadWrite", + "type": "BOOL" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetItemPropertyHandlerWithCreateObject": [ + { + "name": "punkItem", + "type": "IUnknown" + }, + { + "name": "fReadWrite", + "type": "BOOL" + }, + { + "name": "punkCreateObject", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetPropertyValue": [ + { + "name": "pps", + "type": "IPropertyStore" + }, + { + "name": "ppd", + "type": "IPropertyDescription" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "PSSetPropertyValue": [ + { + "name": "pps", + "type": "IPropertyStore" + }, + { + "name": "ppd", + "type": "IPropertyDescription" + }, + { + "name": "propvar", + "type": "PROPVARIANT" + } + ], + "PSRegisterPropertySchema": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "PSUnregisterPropertySchema": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "PSRefreshPropertySchema": [ + { + "name": "VOID", + "type": "void" + } + ], + "PSEnumeratePropertyDescriptions": [ + { + "name": "filterOn", + "type": "PROPDESC_ENUMFILTER" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetPropertyKeyFromName": [ + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "ppropkey", + "type": "PROPERTYKEY" + } + ], + "PSGetNameFromPropertyKey": [ + { + "name": "propkey", + "type": "PROPERTYKEY" + }, + { + "name": "ppszCanonicalName", + "type": "PWSTR" + } + ], + "PSCoerceToCanonicalValue": [ + { + "name": "key", + "type": "PROPERTYKEY" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "PSGetPropertyDescriptionListFromString": [ + { + "name": "pszPropList", + "type": "LPCWSTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreatePropertyStoreFromPropertySetStorage": [ + { + "name": "ppss", + "type": "IPropertySetStorage" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreatePropertyStoreFromObject": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreateAdapterFromPropertyStore": [ + { + "name": "pps", + "type": "IPropertyStore" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetPropertySystem": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetPropertyFromPropertyStorage": [ + { + "name": "psps", + "type": "PCUSERIALIZEDPROPSTORAGE" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "rpkey", + "type": "PROPERTYKEY" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "PSGetNamedPropertyFromPropertyStorage": [ + { + "name": "psps", + "type": "PCUSERIALIZEDPROPSTORAGE" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "pszName", + "type": "LPCWSTR" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "PSPropertyBag_ReadType": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "type", + "type": "VARTYPE" + } + ], + "PSPropertyBag_ReadStr": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "LPWSTR" + }, + { + "name": "characterCount", + "type": "int" + } + ], + "PSPropertyBag_ReadStrAlloc": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "PWSTR" + } + ], + "PSPropertyBag_ReadBSTR": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "BSTR" + } + ], + "PSPropertyBag_WriteStr": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "LPCWSTR" + } + ], + "PSPropertyBag_WriteBSTR": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "BSTR" + } + ], + "PSPropertyBag_ReadInt": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "INT" + } + ], + "PSPropertyBag_WriteInt": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "INT" + } + ], + "PSPropertyBag_ReadSHORT": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "SHORT" + } + ], + "PSPropertyBag_WriteSHORT": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "SHORT" + } + ], + "PSPropertyBag_ReadLONG": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "LONG" + } + ], + "PSPropertyBag_WriteLONG": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "LONG" + } + ], + "PSPropertyBag_ReadDWORD": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "DWORD" + } + ], + "PSPropertyBag_WriteDWORD": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "DWORD" + } + ], + "PSPropertyBag_ReadBOOL": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "BOOL" + } + ], + "PSPropertyBag_WriteBOOL": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "BOOL" + } + ], + "PSPropertyBag_ReadPOINTL": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "POINTL" + } + ], + "PSPropertyBag_WritePOINTL": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "POINTL" + } + ], + "PSPropertyBag_ReadPOINTS": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "POINTS" + } + ], + "PSPropertyBag_WritePOINTS": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "POINTS" + } + ], + "PSPropertyBag_ReadRECTL": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "RECTL" + } + ], + "PSPropertyBag_WriteRECTL": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "RECTL" + } + ], + "PSPropertyBag_ReadStream": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "IStream" + } + ], + "PSPropertyBag_WriteStream": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "IStream" + } + ], + "PSPropertyBag_Delete": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + } + ], + "PSPropertyBag_ReadULONGLONG": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "ULONGLONG" + } + ], + "PSPropertyBag_WriteULONGLONG": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "ULONGLONG" + } + ], + "PSPropertyBag_ReadUnknown": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSPropertyBag_WriteUnknown": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "punk", + "type": "IUnknown" + } + ], + "PSPropertyBag_ReadGUID": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "GUID" + } + ], + "PSPropertyBag_WriteGUID": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "GUID" + } + ], + "PSPropertyBag_ReadPropertyKey": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "PROPERTYKEY" + } + ], + "PSPropertyBag_WritePropertyKey": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "PROPERTYKEY" + } + ], + "InitPropVariantFromResource": [ + { + "name": "hinst", + "type": "HINSTANCE" + }, + { + "name": "id", + "type": "UINT" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromBuffer": [ + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "UINT" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromCLSID": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromGUIDAsString": [ + { + "name": "guid", + "type": "GUID" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromFileTime": [ + { + "name": "pftIn", + "type": "FILETIME" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromPropVariantVectorElem": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantVectorFromPropVariant": [ + { + "name": "propvarSingle", + "type": "PROPVARIANT" + }, + { + "name": "ppropvarVector", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromStrRet": [ + { + "name": "pstrret", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromBooleanVector": [ + { + "name": "prgf", + "type": "BOOL" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromInt16Vector": [ + { + "name": "prgn", + "type": "SHORT" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromUInt16Vector": [ + { + "name": "prgn", + "type": "USHORT" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromInt32Vector": [ + { + "name": "prgn", + "type": "LONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromUInt32Vector": [ + { + "name": "prgn", + "type": "ULONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromInt64Vector": [ + { + "name": "prgn", + "type": "LONGLONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromUInt64Vector": [ + { + "name": "prgn", + "type": "ULONGLONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromDoubleVector": [ + { + "name": "prgn", + "type": "DOUBLE" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromFileTimeVector": [ + { + "name": "prgft", + "type": "FILETIME" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromStringVector": [ + { + "name": "prgsz", + "type": "PCWSTR" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromStringAsVector": [ + { + "name": "psz", + "type": "PCWSTR" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "PropVariantToBooleanWithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "fDefault", + "type": "BOOL" + } + ], + "PropVariantToInt16WithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "iDefault", + "type": "SHORT" + } + ], + "PropVariantToUInt16WithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "uiDefault", + "type": "USHORT" + } + ], + "PropVariantToInt32WithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "lDefault", + "type": "LONG" + } + ], + "PropVariantToUInt32WithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "ulDefault", + "type": "ULONG" + } + ], + "PropVariantToInt64WithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "llDefault", + "type": "LONGLONG" + } + ], + "PropVariantToUInt64WithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "ullDefault", + "type": "ULONGLONG" + } + ], + "PropVariantToDoubleWithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "dblDefault", + "type": "DOUBLE" + } + ], + "PropVariantToStringWithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "pszDefault", + "type": "LPCWSTR" + } + ], + "PropVariantToBoolean": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "pfRet", + "type": "BOOL" + } + ], + "PropVariantToInt16": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "piRet", + "type": "SHORT" + } + ], + "PropVariantToUInt16": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "puiRet", + "type": "USHORT" + } + ], + "PropVariantToInt32": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "plRet", + "type": "LONG" + } + ], + "PropVariantToUInt32": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "pulRet", + "type": "ULONG" + } + ], + "PropVariantToInt64": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "pllRet", + "type": "LONGLONG" + } + ], + "PropVariantToUInt64": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "pullRet", + "type": "ULONGLONG" + } + ], + "PropVariantToDouble": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "pdblRet", + "type": "DOUBLE" + } + ], + "PropVariantToBuffer": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "UINT" + } + ], + "PropVariantToString": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "psz", + "type": "PWSTR" + }, + { + "name": "cch", + "type": "UINT" + } + ], + "PropVariantToGUID": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pguid", + "type": "GUID" + } + ], + "PropVariantToStringAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "ppszOut", + "type": "PWSTR" + } + ], + "PropVariantToBSTR": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "PropVariantToStrRet": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pstrret", + "type": "STRRET" + } + ], + "PropVariantToFileTime": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pstfOut", + "type": "PSTIME_FLAGS" + }, + { + "name": "pftOut", + "type": "FILETIME" + } + ], + "PropVariantGetElementCount": [ + { + "name": "propvar", + "type": "PROPVARIANT" + } + ], + "PropVariantToBooleanVector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgf", + "type": "BOOL" + }, + { + "name": "crgf", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToInt16Vector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "SHORT" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToUInt16Vector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "USHORT" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToInt32Vector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "LONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToUInt32Vector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "ULONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToInt64Vector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "LONGLONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToUInt64Vector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "ULONGLONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToDoubleVector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "DOUBLE" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToFileTimeVector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgft", + "type": "FILETIME" + }, + { + "name": "crgft", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToStringVector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgsz", + "type": "PWSTR" + }, + { + "name": "crgsz", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToBooleanVectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgf", + "type": "BOOL" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToInt16VectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgn", + "type": "SHORT" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToUInt16VectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgn", + "type": "USHORT" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToInt32VectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgn", + "type": "LONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToUInt32VectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToInt64VectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgn", + "type": "LONGLONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToUInt64VectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgn", + "type": "ULONGLONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToDoubleVectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgn", + "type": "DOUBLE" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToFileTimeVectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgft", + "type": "FILETIME" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToStringVectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgsz", + "type": "PWSTR" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantGetBooleanElem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pfVal", + "type": "BOOL" + } + ], + "PropVariantGetInt16Elem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "SHORT" + } + ], + "PropVariantGetUInt16Elem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "USHORT" + } + ], + "PropVariantGetInt32Elem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "LONG" + } + ], + "PropVariantGetUInt32Elem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "ULONG" + } + ], + "PropVariantGetInt64Elem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "LONGLONG" + } + ], + "PropVariantGetUInt64Elem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "ULONGLONG" + } + ], + "PropVariantGetDoubleElem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "DOUBLE" + } + ], + "PropVariantGetFileTimeElem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pftVal", + "type": "FILETIME" + } + ], + "PropVariantGetStringElem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "ppszVal", + "type": "PWSTR" + } + ], + "ClearPropVariantArray": [ + { + "name": "rgPropVar", + "type": "PROPVARIANT" + }, + { + "name": "cVars", + "type": "UINT" + } + ], + "PropVariantCompareEx": [ + { + "name": "propvar1", + "type": "PROPVARIANT" + }, + { + "name": "propvar2", + "type": "PROPVARIANT" + }, + { + "name": "unit", + "type": "PROPVAR_COMPARE_UNIT" + }, + { + "name": "flags", + "type": "PROPVAR_COMPARE_FLAGS" + } + ], + "PropVariantChangeType": [ + { + "name": "ppropvarDest", + "type": "PROPVARIANT" + }, + { + "name": "propvarSrc", + "type": "PROPVARIANT" + }, + { + "name": "flags", + "type": "PROPVAR_CHANGE_FLAGS" + }, + { + "name": "vt", + "type": "VARTYPE" + } + ], + "PropVariantToVariant": [ + { + "name": "pPropVar", + "type": "PROPVARIANT" + }, + { + "name": "pVar", + "type": "VARIANT" + } + ], + "VariantToPropVariant": [ + { + "name": "pVar", + "type": "VARIANT" + }, + { + "name": "pPropVar", + "type": "PROPVARIANT" + } + ], + "StgSerializePropVariant": [ + { + "name": "ppropvar", + "type": "PROPVARIANT" + }, + { + "name": "ppProp", + "type": "SERIALIZEDPROPERTYVALUE" + }, + { + "name": "pcb", + "type": "ULONG" + } + ], + "StgDeserializePropVariant": [ + { + "name": "pprop", + "type": "SERIALIZEDPROPERTYVALUE" + }, + { + "name": "cbMax", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitVariantFromResource": [ + { + "name": "hinst", + "type": "HINSTANCE" + }, + { + "name": "id", + "type": "UINT" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromBuffer": [ + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "UINT" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromGUIDAsString": [ + { + "name": "guid", + "type": "GUID" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromFileTime": [ + { + "name": "pft", + "type": "FILETIME" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromFileTimeArray": [ + { + "name": "prgft", + "type": "FILETIME" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromStrRet": [ + { + "name": "pstrret", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromVariantArrayElem": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromBooleanArray": [ + { + "name": "prgf", + "type": "BOOL" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromInt16Array": [ + { + "name": "prgn", + "type": "SHORT" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromUInt16Array": [ + { + "name": "prgn", + "type": "USHORT" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromInt32Array": [ + { + "name": "prgn", + "type": "LONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromUInt32Array": [ + { + "name": "prgn", + "type": "ULONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromInt64Array": [ + { + "name": "prgn", + "type": "LONGLONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromUInt64Array": [ + { + "name": "prgn", + "type": "ULONGLONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromDoubleArray": [ + { + "name": "prgn", + "type": "DOUBLE" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromStringArray": [ + { + "name": "prgsz", + "type": "PCWSTR" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "VariantToBooleanWithDefault": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "fDefault", + "type": "BOOL" + } + ], + "VariantToInt16WithDefault": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "iDefault", + "type": "SHORT" + } + ], + "VariantToUInt16WithDefault": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "uiDefault", + "type": "USHORT" + } + ], + "VariantToInt32WithDefault": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "lDefault", + "type": "LONG" + } + ], + "VariantToUInt32WithDefault": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "ulDefault", + "type": "ULONG" + } + ], + "VariantToInt64WithDefault": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "llDefault", + "type": "LONGLONG" + } + ], + "VariantToUInt64WithDefault": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "ullDefault", + "type": "ULONGLONG" + } + ], + "VariantToDoubleWithDefault": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "dblDefault", + "type": "DOUBLE" + } + ], + "VariantToStringWithDefault": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pszDefault", + "type": "LPCWSTR" + } + ], + "VariantToBoolean": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pfRet", + "type": "BOOL" + } + ], + "VariantToInt16": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "piRet", + "type": "SHORT" + } + ], + "VariantToUInt16": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "puiRet", + "type": "USHORT" + } + ], + "VariantToInt32": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "plRet", + "type": "LONG" + } + ], + "VariantToUInt32": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pulRet", + "type": "ULONG" + } + ], + "VariantToInt64": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pllRet", + "type": "LONGLONG" + } + ], + "VariantToUInt64": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pullRet", + "type": "ULONGLONG" + } + ], + "VariantToDouble": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pdblRet", + "type": "DOUBLE" + } + ], + "VariantToBuffer": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "UINT" + } + ], + "VariantToGUID": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pguid", + "type": "GUID" + } + ], + "VariantToString": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pszBuf", + "type": "PWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "VariantToStringAlloc": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "ppszBuf", + "type": "PWSTR" + } + ], + "VariantToDosDateTime": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pwDate", + "type": "WORD" + }, + { + "name": "pwTime", + "type": "WORD" + } + ], + "VariantToStrRet": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pstrret", + "type": "STRRET" + } + ], + "VariantToFileTime": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "stfOut", + "type": "PSTIME_FLAGS" + }, + { + "name": "pftOut", + "type": "FILETIME" + } + ], + "VariantGetElementCount": [ + { + "name": "varIn", + "type": "VARIANT" + } + ], + "VariantToBooleanArray": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "prgf", + "type": "BOOL" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToInt16Array": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "prgn", + "type": "SHORT" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToUInt16Array": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "prgn", + "type": "USHORT" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToInt32Array": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "prgn", + "type": "LONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToUInt32Array": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "prgn", + "type": "ULONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToInt64Array": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "prgn", + "type": "LONGLONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToUInt64Array": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "prgn", + "type": "ULONGLONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToDoubleArray": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "prgn", + "type": "DOUBLE" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToStringArray": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "prgsz", + "type": "PWSTR" + }, + { + "name": "crgsz", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToBooleanArrayAlloc": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "pprgf", + "type": "BOOL" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToInt16ArrayAlloc": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "pprgn", + "type": "SHORT" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToUInt16ArrayAlloc": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "pprgn", + "type": "USHORT" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToInt32ArrayAlloc": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "pprgn", + "type": "LONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToUInt32ArrayAlloc": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "pprgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToInt64ArrayAlloc": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "pprgn", + "type": "LONGLONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToUInt64ArrayAlloc": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "pprgn", + "type": "ULONGLONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToDoubleArrayAlloc": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "pprgn", + "type": "DOUBLE" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToStringArrayAlloc": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "pprgsz", + "type": "PWSTR" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantGetBooleanElem": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pfVal", + "type": "BOOL" + } + ], + "VariantGetInt16Elem": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "SHORT" + } + ], + "VariantGetUInt16Elem": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "USHORT" + } + ], + "VariantGetInt32Elem": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "LONG" + } + ], + "VariantGetUInt32Elem": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "ULONG" + } + ], + "VariantGetInt64Elem": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "LONGLONG" + } + ], + "VariantGetUInt64Elem": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "ULONGLONG" + } + ], + "VariantGetDoubleElem": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "DOUBLE" + } + ], + "VariantGetStringElem": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "ppszVal", + "type": "PWSTR" + } + ], + "ClearVariantArray": [ + { + "name": "pvars", + "type": "VARIANT" + }, + { + "name": "cvars", + "type": "UINT" + } + ], + "VariantCompare": [ + { + "name": "var1", + "type": "VARIANT" + }, + { + "name": "var2", + "type": "VARIANT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/query_dll.json b/qiling/extensions/windows_sdk/defs/query_dll.json new file mode 100644 index 000000000..0e3cc4aa1 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/query_dll.json @@ -0,0 +1,16 @@ +{ + "LoadIFilter": [ + { + "name": "pwcsPath", + "type": "PCWSTR" + }, + { + "name": "pUnkOuter", + "type": "IUnknown" + }, + { + "name": "ppIUnk", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/rasapi32_dll.json b/qiling/extensions/windows_sdk/defs/rasapi32_dll.json new file mode 100644 index 000000000..b368acc66 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/rasapi32_dll.json @@ -0,0 +1,1492 @@ +{ + "RasDialA": [ + { + "name": "VOID", + "type": { + "name": "tagRASDIALEXTENSIONS", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASDIALPARAMSA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPVOID" + }, + { + "name": "VOID", + "type": "HRASCONN" + } + ], + "RasDialW": [ + { + "name": "VOID", + "type": { + "name": "tagRASDIALEXTENSIONS", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASDIALPARAMSW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPVOID" + }, + { + "name": "VOID", + "type": "HRASCONN" + } + ], + "RasEnumConnectionsA": [ + { + "name": "VOID", + "type": { + "name": "tagRASCONNA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasEnumConnectionsW": [ + { + "name": "VOID", + "type": { + "name": "tagRASCONNW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasEnumEntriesA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASENTRYNAMEA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasEnumEntriesW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASENTRYNAMEW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasGetConnectStatusA": [ + { + "name": "VOID", + "type": "HRASCONN" + }, + { + "name": "VOID", + "type": { + "name": "tagRASCONNSTATUSA", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasGetConnectStatusW": [ + { + "name": "VOID", + "type": "HRASCONN" + }, + { + "name": "VOID", + "type": { + "name": "tagRASCONNSTATUSW", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasGetErrorStringA": [ + { + "name": "ResourceId", + "type": "UINT" + }, + { + "name": "lpszString", + "type": "LPSTR" + }, + { + "name": "InBufSize", + "type": "DWORD" + } + ], + "RasGetErrorStringW": [ + { + "name": "ResourceId", + "type": "UINT" + }, + { + "name": "lpszString", + "type": "LPWSTR" + }, + { + "name": "InBufSize", + "type": "DWORD" + } + ], + "RasHangUpA": [ + { + "name": "VOID", + "type": "HRASCONN" + } + ], + "RasHangUpW": [ + { + "name": "VOID", + "type": "HRASCONN" + } + ], + "RasGetProjectionInfoA": [ + { + "name": "VOID", + "type": "HRASCONN" + }, + { + "name": "VOID", + "type": { + "name": "tagRASPROJECTION", + "data_type": "Enum", + "enumerators": [] + } + }, + { + "name": "VOID", + "type": "LPVOID" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasGetProjectionInfoW": [ + { + "name": "VOID", + "type": "HRASCONN" + }, + { + "name": "VOID", + "type": { + "name": "tagRASPROJECTION", + "data_type": "Enum", + "enumerators": [] + } + }, + { + "name": "VOID", + "type": "LPVOID" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasCreatePhonebookEntryA": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "RasCreatePhonebookEntryW": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "RasEditPhonebookEntryA": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "RasEditPhonebookEntryW": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "RasSetEntryDialParamsA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASDIALPARAMSA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "RasSetEntryDialParamsW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASDIALPARAMSW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "RasGetEntryDialParamsA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASDIALPARAMSA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPBOOL" + } + ], + "RasGetEntryDialParamsW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASDIALPARAMSW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPBOOL" + } + ], + "RasEnumDevicesA": [ + { + "name": "VOID", + "type": { + "name": "tagRASDEVINFOA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasEnumDevicesW": [ + { + "name": "VOID", + "type": { + "name": "tagRASDEVINFOW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasGetCountryInfoA": [ + { + "name": "VOID", + "type": { + "name": "RASCTRYINFO", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasGetCountryInfoW": [ + { + "name": "VOID", + "type": { + "name": "RASCTRYINFO", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasGetEntryPropertiesA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASENTRYA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPBYTE" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasGetEntryPropertiesW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASENTRYW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPBYTE" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasSetEntryPropertiesA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASENTRYA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPBYTE" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasSetEntryPropertiesW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASENTRYW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPBYTE" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasRenameEntryA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "RasRenameEntryW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "RasDeleteEntryA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "RasDeleteEntryW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "RasValidateEntryNameA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "RasValidateEntryNameW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "RasConnectionNotificationA": [ + { + "name": "VOID", + "type": "HRASCONN" + }, + { + "name": "VOID", + "type": "HANDLE" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasConnectionNotificationW": [ + { + "name": "VOID", + "type": "HRASCONN" + }, + { + "name": "VOID", + "type": "HANDLE" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasGetSubEntryHandleA": [ + { + "name": "VOID", + "type": "HRASCONN" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "HRASCONN" + } + ], + "RasGetSubEntryHandleW": [ + { + "name": "VOID", + "type": "HRASCONN" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "HRASCONN" + } + ], + "RasGetCredentialsA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASCREDENTIALSA", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasGetCredentialsW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASCREDENTIALSW", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasSetCredentialsA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASCREDENTIALSA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "RasSetCredentialsW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASCREDENTIALSW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "RasGetSubEntryPropertiesA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": { + "name": "tagRASSUBENTRYA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPBYTE" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasGetSubEntryPropertiesW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": { + "name": "tagRASSUBENTRYW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPBYTE" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasSetSubEntryPropertiesA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": { + "name": "tagRASSUBENTRYA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPBYTE" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasSetSubEntryPropertiesW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": { + "name": "tagRASSUBENTRYW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPBYTE" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasGetAutodialAddressA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": { + "name": "tagRASAUTODIALENTRYA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasGetAutodialAddressW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": { + "name": "tagRASAUTODIALENTRYW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasSetAutodialAddressA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": { + "name": "tagRASAUTODIALENTRYA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasSetAutodialAddressW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": { + "name": "tagRASAUTODIALENTRYW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasEnumAutodialAddressesA": [ + { + "name": "lppRasAutodialAddresses", + "type": "LPSTR" + }, + { + "name": "lpdwcbRasAutodialAddresses", + "type": "LPDWORD" + }, + { + "name": "lpdwcRasAutodialAddresses", + "type": "LPDWORD" + } + ], + "RasEnumAutodialAddressesW": [ + { + "name": "lppRasAutodialAddresses", + "type": "LPWSTR" + }, + { + "name": "lpdwcbRasAutodialAddresses", + "type": "LPDWORD" + }, + { + "name": "lpdwcRasAutodialAddresses", + "type": "LPDWORD" + } + ], + "RasGetAutodialEnableA": [ + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPBOOL" + } + ], + "RasGetAutodialEnableW": [ + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPBOOL" + } + ], + "RasSetAutodialEnableA": [ + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "RasSetAutodialEnableW": [ + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "RasGetAutodialParamA": [ + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPVOID" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasGetAutodialParamW": [ + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPVOID" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasSetAutodialParamA": [ + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPVOID" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasSetAutodialParamW": [ + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPVOID" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasInvokeEapUI": [ + { + "name": "VOID", + "type": "HRASCONN" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": { + "name": "tagRASDIALEXTENSIONS", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "HWND" + } + ], + "RasGetLinkStatistics": [ + { + "name": "hRasConn", + "type": "HRASCONN" + }, + { + "name": "dwSubEntry", + "type": "DWORD" + }, + { + "name": "lpStatistics", + "type": "RAS_STATS" + } + ], + "RasGetConnectionStatistics": [ + { + "name": "hRasConn", + "type": "HRASCONN" + }, + { + "name": "lpStatistics", + "type": "RAS_STATS" + } + ], + "RasClearLinkStatistics": [ + { + "name": "hRasConn", + "type": "HRASCONN" + }, + { + "name": "dwSubEntry", + "type": "DWORD" + } + ], + "RasClearConnectionStatistics": [ + { + "name": "hRasConn", + "type": "HRASCONN" + } + ], + "RasGetEapUserDataA": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "pszPhonebook", + "type": "LPCSTR" + }, + { + "name": "pszEntry", + "type": "LPCSTR" + }, + { + "name": "pbEapData", + "type": "BYTE" + }, + { + "name": "pdwSizeofEapData", + "type": "DWORD" + } + ], + "RasGetEapUserDataW": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "pszPhonebook", + "type": "LPCWSTR" + }, + { + "name": "pszEntry", + "type": "LPCWSTR" + }, + { + "name": "pbEapData", + "type": "BYTE" + }, + { + "name": "pdwSizeofEapData", + "type": "DWORD" + } + ], + "RasSetEapUserDataA": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "pszPhonebook", + "type": "LPCSTR" + }, + { + "name": "pszEntry", + "type": "LPCSTR" + }, + { + "name": "pbEapData", + "type": "BYTE" + }, + { + "name": "dwSizeofEapData", + "type": "DWORD" + } + ], + "RasSetEapUserDataW": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "pszPhonebook", + "type": "LPCWSTR" + }, + { + "name": "pszEntry", + "type": "LPCWSTR" + }, + { + "name": "pbEapData", + "type": "BYTE" + }, + { + "name": "dwSizeofEapData", + "type": "DWORD" + } + ], + "RasGetCustomAuthDataA": [ + { + "name": "pszPhonebook", + "type": "LPCSTR" + }, + { + "name": "pszEntry", + "type": "LPCSTR" + }, + { + "name": "pbCustomAuthData", + "type": "BYTE" + }, + { + "name": "pdwSizeofCustomAuthData", + "type": "DWORD" + } + ], + "RasGetCustomAuthDataW": [ + { + "name": "pszPhonebook", + "type": "LPCWSTR" + }, + { + "name": "pszEntry", + "type": "LPCWSTR" + }, + { + "name": "pbCustomAuthData", + "type": "BYTE" + }, + { + "name": "pdwSizeofCustomAuthData", + "type": "DWORD" + } + ], + "RasSetCustomAuthDataA": [ + { + "name": "pszPhonebook", + "type": "LPCSTR" + }, + { + "name": "pszEntry", + "type": "LPCSTR" + }, + { + "name": "pbCustomAuthData", + "type": "BYTE" + }, + { + "name": "dwSizeofCustomAuthData", + "type": "DWORD" + } + ], + "RasSetCustomAuthDataW": [ + { + "name": "pszPhonebook", + "type": "LPCWSTR" + }, + { + "name": "pszEntry", + "type": "LPCWSTR" + }, + { + "name": "pbCustomAuthData", + "type": "BYTE" + }, + { + "name": "dwSizeofCustomAuthData", + "type": "DWORD" + } + ], + "RasGetEapUserIdentityW": [ + { + "name": "pszPhonebook", + "type": "LPCWSTR" + }, + { + "name": "pszEntry", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "ppRasEapUserIdentity", + "type": { + "name": "tagRASEAPUSERIDENTITYW", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasGetEapUserIdentityA": [ + { + "name": "pszPhonebook", + "type": "LPCSTR" + }, + { + "name": "pszEntry", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "ppRasEapUserIdentity", + "type": { + "name": "tagRASEAPUSERIDENTITYA", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasFreeEapUserIdentityW": [ + { + "name": "pRasEapUserIdentity", + "type": { + "name": "tagRASEAPUSERIDENTITYW", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasFreeEapUserIdentityA": [ + { + "name": "pRasEapUserIdentity", + "type": { + "name": "tagRASEAPUSERIDENTITYA", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasDeleteSubEntryA": [ + { + "name": "pszPhonebook", + "type": "LPCSTR" + }, + { + "name": "pszEntry", + "type": "LPCSTR" + }, + { + "name": "dwSubentryId", + "type": "DWORD" + } + ], + "RasDeleteSubEntryW": [ + { + "name": "pszPhonebook", + "type": "LPCWSTR" + }, + { + "name": "pszEntry", + "type": "LPCWSTR" + }, + { + "name": "dwSubEntryId", + "type": "DWORD" + } + ], + "RasUpdateConnection": [ + { + "name": "hrasconn", + "type": "HRASCONN" + }, + { + "name": "lprasupdateconn", + "type": { + "name": "tagRASUPDATECONN", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasGetProjectionInfoEx": [ + { + "name": "hrasconn", + "type": "HRASCONN" + }, + { + "name": "pRasProjection", + "type": "PRAS_PROJECTION_INFO" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/rasdlg_dll.json b/qiling/extensions/windows_sdk/defs/rasdlg_dll.json new file mode 100644 index 000000000..d6beb17c0 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/rasdlg_dll.json @@ -0,0 +1,118 @@ +{ + "RasPhonebookDlgA": [ + { + "name": "lpszPhonebook", + "type": "LPSTR" + }, + { + "name": "lpszEntry", + "type": "LPSTR" + }, + { + "name": "lpInfo", + "type": { + "name": "tagRASPBDLGA", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasPhonebookDlgW": [ + { + "name": "lpszPhonebook", + "type": "LPWSTR" + }, + { + "name": "lpszEntry", + "type": "LPWSTR" + }, + { + "name": "lpInfo", + "type": { + "name": "tagRASPBDLGW", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasEntryDlgA": [ + { + "name": "lpszPhonebook", + "type": "LPSTR" + }, + { + "name": "lpszEntry", + "type": "LPSTR" + }, + { + "name": "lpInfo", + "type": { + "name": "tagRASENTRYDLGA", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasEntryDlgW": [ + { + "name": "lpszPhonebook", + "type": "LPWSTR" + }, + { + "name": "lpszEntry", + "type": "LPWSTR" + }, + { + "name": "lpInfo", + "type": { + "name": "tagRASENTRYDLGW", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasDialDlgA": [ + { + "name": "lpszPhonebook", + "type": "LPSTR" + }, + { + "name": "lpszEntry", + "type": "LPSTR" + }, + { + "name": "lpszPhoneNumber", + "type": "LPSTR" + }, + { + "name": "lpInfo", + "type": { + "name": "tagRASDIALDLG", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasDialDlgW": [ + { + "name": "lpszPhonebook", + "type": "LPWSTR" + }, + { + "name": "lpszEntry", + "type": "LPWSTR" + }, + { + "name": "lpszPhoneNumber", + "type": "LPWSTR" + }, + { + "name": "lpInfo", + "type": { + "name": "tagRASDIALDLG", + "data_type": "Struct", + "elements": [] + } + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/rasman_dll.json b/qiling/extensions/windows_sdk/defs/rasman_dll.json new file mode 100644 index 000000000..63c83afc3 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/rasman_dll.json @@ -0,0 +1,54 @@ +{ + "RasSecurityDialogComplete": [ + { + "name": "pSecMsg", + "type": "SECURITY_MESSAGE" + } + ], + "RasSecurityDialogSend": [ + { + "name": "hPort", + "type": "HPORT" + }, + { + "name": "pBuffer", + "type": "PBYTE" + }, + { + "name": "BufferLength", + "type": "WORD" + } + ], + "RasSecurityDialogReceive": [ + { + "name": "hPort", + "type": "HPORT" + }, + { + "name": "pBuffer", + "type": "PBYTE" + }, + { + "name": "pBufferLength", + "type": "PWORD" + }, + { + "name": "Timeout", + "type": "DWORD" + }, + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "RasSecurityDialogGetInfo": [ + { + "name": "hPort", + "type": "HPORT" + }, + { + "name": "pBuffer", + "type": "RAS_SECURITY_INFO" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/roerrorapi_h.json b/qiling/extensions/windows_sdk/defs/roerrorapi_h.json new file mode 100644 index 000000000..5eb6bea3c --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/roerrorapi_h.json @@ -0,0 +1,46 @@ +{ + "RoGetErrorReportingFlags": [ + { + "name": "pflags", + "type": "UINT32" + } + ], + "RoSetErrorReportingFlags": [ + { + "name": "flags", + "type": "UINT32" + } + ], + "RoTransformErrorW": [ + { + "name": "oldError", + "type": "HRESULT" + }, + { + "name": "newError", + "type": "HRESULT" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "message", + "type": "PCWSTR" + } + ], + "RoTransformError": [ + { + "name": "oldError", + "type": "HRESULT" + }, + { + "name": "newError", + "type": "HRESULT" + }, + { + "name": "message", + "type": "HSTRING" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/rometadata_dll.json b/qiling/extensions/windows_sdk/defs/rometadata_dll.json new file mode 100644 index 000000000..1630d350d --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/rometadata_dll.json @@ -0,0 +1,16 @@ +{ + "MetaDataGetDispenser": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/rpcns4_dll.json b/qiling/extensions/windows_sdk/defs/rpcns4_dll.json new file mode 100644 index 000000000..d14bbf1e1 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/rpcns4_dll.json @@ -0,0 +1,894 @@ +{ + "RpcNsBindingExportA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "BindingVec", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "ObjectUuidVec", + "type": "UUID_VECTOR" + } + ], + "RpcNsBindingUnexportA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjectUuidVec", + "type": "UUID_VECTOR" + } + ], + "RpcNsBindingExportW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "BindingVec", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "ObjectUuidVec", + "type": "UUID_VECTOR" + } + ], + "RpcNsBindingUnexportW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjectUuidVec", + "type": "UUID_VECTOR" + } + ], + "RpcNsBindingExportPnPA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjectVector", + "type": "UUID_VECTOR" + } + ], + "RpcNsBindingUnexportPnPA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjectVector", + "type": "UUID_VECTOR" + } + ], + "RpcNsBindingExportPnPW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjectVector", + "type": "UUID_VECTOR" + } + ], + "RpcNsBindingUnexportPnPW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjectVector", + "type": "UUID_VECTOR" + } + ], + "RpcNsBindingLookupBeginA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjUuid", + "type": "UUID" + }, + { + "name": "BindingMaxCount", + "type": "unsigned long" + }, + { + "name": "LookupContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsBindingLookupBeginW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjUuid", + "type": "UUID" + }, + { + "name": "BindingMaxCount", + "type": "unsigned long" + }, + { + "name": "LookupContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsBindingLookupNext": [ + { + "name": "LookupContext", + "type": "RPC_NS_HANDLE" + }, + { + "name": "BindingVec", + "type": "RPC_BINDING_VECTOR" + } + ], + "RpcNsBindingLookupDone": [ + { + "name": "LookupContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsGroupDeleteA": [ + { + "name": "GroupNameSyntax", + "type": "unsigned long" + }, + { + "name": "GroupName", + "type": "RPC_CSTR" + } + ], + "RpcNsGroupMbrAddA": [ + { + "name": "GroupNameSyntax", + "type": "unsigned long" + }, + { + "name": "GroupName", + "type": "RPC_CSTR" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_CSTR" + } + ], + "RpcNsGroupMbrRemoveA": [ + { + "name": "GroupNameSyntax", + "type": "unsigned long" + }, + { + "name": "GroupName", + "type": "RPC_CSTR" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_CSTR" + } + ], + "RpcNsGroupMbrInqBeginA": [ + { + "name": "GroupNameSyntax", + "type": "unsigned long" + }, + { + "name": "GroupName", + "type": "RPC_CSTR" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsGroupMbrInqNextA": [ + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + }, + { + "name": "MemberName", + "type": "RPC_CSTR" + } + ], + "RpcNsGroupDeleteW": [ + { + "name": "GroupNameSyntax", + "type": "unsigned long" + }, + { + "name": "GroupName", + "type": "RPC_WSTR" + } + ], + "RpcNsGroupMbrAddW": [ + { + "name": "GroupNameSyntax", + "type": "unsigned long" + }, + { + "name": "GroupName", + "type": "RPC_WSTR" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_WSTR" + } + ], + "RpcNsGroupMbrRemoveW": [ + { + "name": "GroupNameSyntax", + "type": "unsigned long" + }, + { + "name": "GroupName", + "type": "RPC_WSTR" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_WSTR" + } + ], + "RpcNsGroupMbrInqBeginW": [ + { + "name": "GroupNameSyntax", + "type": "unsigned long" + }, + { + "name": "GroupName", + "type": "RPC_WSTR" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsGroupMbrInqNextW": [ + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + }, + { + "name": "MemberName", + "type": "RPC_WSTR" + } + ], + "RpcNsGroupMbrInqDone": [ + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsProfileDeleteA": [ + { + "name": "ProfileNameSyntax", + "type": "unsigned long" + }, + { + "name": "ProfileName", + "type": "RPC_CSTR" + } + ], + "RpcNsProfileEltAddA": [ + { + "name": "ProfileNameSyntax", + "type": "unsigned long" + }, + { + "name": "ProfileName", + "type": "RPC_CSTR" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_CSTR" + }, + { + "name": "Priority", + "type": "unsigned long" + }, + { + "name": "Annotation", + "type": "RPC_CSTR" + } + ], + "RpcNsProfileEltRemoveA": [ + { + "name": "ProfileNameSyntax", + "type": "unsigned long" + }, + { + "name": "ProfileName", + "type": "RPC_CSTR" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_CSTR" + } + ], + "RpcNsProfileEltInqBeginA": [ + { + "name": "ProfileNameSyntax", + "type": "unsigned long" + }, + { + "name": "ProfileName", + "type": "RPC_CSTR" + }, + { + "name": "InquiryType", + "type": "unsigned long" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "VersOption", + "type": "unsigned long" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_CSTR" + }, + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsProfileEltInqNextA": [ + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "MemberName", + "type": "RPC_CSTR" + }, + { + "name": "Priority", + "type": "unsigned long" + }, + { + "name": "Annotation", + "type": "RPC_CSTR" + } + ], + "RpcNsProfileDeleteW": [ + { + "name": "ProfileNameSyntax", + "type": "unsigned long" + }, + { + "name": "ProfileName", + "type": "RPC_WSTR" + } + ], + "RpcNsProfileEltAddW": [ + { + "name": "ProfileNameSyntax", + "type": "unsigned long" + }, + { + "name": "ProfileName", + "type": "RPC_WSTR" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_WSTR" + }, + { + "name": "Priority", + "type": "unsigned long" + }, + { + "name": "Annotation", + "type": "RPC_WSTR" + } + ], + "RpcNsProfileEltRemoveW": [ + { + "name": "ProfileNameSyntax", + "type": "unsigned long" + }, + { + "name": "ProfileName", + "type": "RPC_WSTR" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_WSTR" + } + ], + "RpcNsProfileEltInqBeginW": [ + { + "name": "ProfileNameSyntax", + "type": "unsigned long" + }, + { + "name": "ProfileName", + "type": "RPC_WSTR" + }, + { + "name": "InquiryType", + "type": "unsigned long" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "VersOption", + "type": "unsigned long" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_WSTR" + }, + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsProfileEltInqNextW": [ + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "MemberName", + "type": "RPC_WSTR" + }, + { + "name": "Priority", + "type": "unsigned long" + }, + { + "name": "Annotation", + "type": "RPC_WSTR" + } + ], + "RpcNsProfileEltInqDone": [ + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsEntryObjectInqBeginA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsEntryObjectInqBeginW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsEntryObjectInqNext": [ + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + }, + { + "name": "ObjUuid", + "type": "UUID" + } + ], + "RpcNsEntryObjectInqDone": [ + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsEntryExpandNameA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "ExpandedName", + "type": "RPC_CSTR" + } + ], + "RpcNsMgmtBindingUnexportA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "VersOption", + "type": "unsigned long" + }, + { + "name": "ObjectUuidVec", + "type": "UUID_VECTOR" + } + ], + "RpcNsMgmtEntryCreateA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + } + ], + "RpcNsMgmtEntryDeleteA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + } + ], + "RpcNsMgmtEntryInqIfIdsA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "IfIdVec", + "type": "RPC_IF_ID_VECTOR" + } + ], + "RpcNsMgmtHandleSetExpAge": [ + { + "name": "NsHandle", + "type": "RPC_NS_HANDLE" + }, + { + "name": "ExpirationAge", + "type": "unsigned long" + } + ], + "RpcNsMgmtInqExpAge": [ + { + "name": "ExpirationAge", + "type": "unsigned long" + } + ], + "RpcNsMgmtSetExpAge": [ + { + "name": "ExpirationAge", + "type": "unsigned long" + } + ], + "RpcNsEntryExpandNameW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "ExpandedName", + "type": "RPC_WSTR" + } + ], + "RpcNsMgmtBindingUnexportW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "VersOption", + "type": "unsigned long" + }, + { + "name": "ObjectUuidVec", + "type": "UUID_VECTOR" + } + ], + "RpcNsMgmtEntryCreateW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + } + ], + "RpcNsMgmtEntryDeleteW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + } + ], + "RpcNsMgmtEntryInqIfIdsW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "IfIdVec", + "type": "RPC_IF_ID_VECTOR" + } + ], + "RpcNsBindingImportBeginA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjUuid", + "type": "UUID" + }, + { + "name": "ImportContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsBindingImportBeginW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjUuid", + "type": "UUID" + }, + { + "name": "ImportContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsBindingImportNext": [ + { + "name": "ImportContext", + "type": "RPC_NS_HANDLE" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcNsBindingImportDone": [ + { + "name": "ImportContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsBindingSelect": [ + { + "name": "BindingVec", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/rpcrt4_dll.json b/qiling/extensions/windows_sdk/defs/rpcrt4_dll.json new file mode 100644 index 000000000..75b3eeb05 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/rpcrt4_dll.json @@ -0,0 +1,3162 @@ +{ + "RpcBindingCopy": [ + { + "name": "SourceBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "DestinationBinding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcBindingFree": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcBindingSetOption": [ + { + "name": "hBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "option", + "type": "unsigned long" + }, + { + "name": "optionValue", + "type": "ULONG_PTR" + } + ], + "RpcBindingInqOption": [ + { + "name": "hBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "option", + "type": "unsigned long" + }, + { + "name": "pOptionValue", + "type": "ULONG_PTR" + } + ], + "RpcBindingFromStringBindingA": [ + { + "name": "StringBinding", + "type": "RPC_CSTR" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcBindingFromStringBindingW": [ + { + "name": "StringBinding", + "type": "RPC_WSTR" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcBindingInqObject": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ObjectUuid", + "type": "UUID" + } + ], + "RpcBindingReset": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcBindingSetObject": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ObjectUuid", + "type": "UUID" + } + ], + "RpcMgmtInqDefaultProtectLevel": [ + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + } + ], + "RpcBindingToStringBindingA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "StringBinding", + "type": "RPC_CSTR" + } + ], + "RpcBindingToStringBindingW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "StringBinding", + "type": "RPC_WSTR" + } + ], + "RpcBindingVectorFree": [ + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + } + ], + "RpcStringBindingComposeA": [ + { + "name": "ObjUuid", + "type": "RPC_CSTR" + }, + { + "name": "ProtSeq", + "type": "RPC_CSTR" + }, + { + "name": "NetworkAddr", + "type": "RPC_CSTR" + }, + { + "name": "Endpoint", + "type": "RPC_CSTR" + }, + { + "name": "Options", + "type": "RPC_CSTR" + }, + { + "name": "StringBinding", + "type": "RPC_CSTR" + } + ], + "RpcStringBindingComposeW": [ + { + "name": "ObjUuid", + "type": "RPC_WSTR" + }, + { + "name": "ProtSeq", + "type": "RPC_WSTR" + }, + { + "name": "NetworkAddr", + "type": "RPC_WSTR" + }, + { + "name": "Endpoint", + "type": "RPC_WSTR" + }, + { + "name": "Options", + "type": "RPC_WSTR" + }, + { + "name": "StringBinding", + "type": "RPC_WSTR" + } + ], + "RpcStringBindingParseA": [ + { + "name": "StringBinding", + "type": "RPC_CSTR" + }, + { + "name": "ObjUuid", + "type": "RPC_CSTR" + }, + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "NetworkAddr", + "type": "RPC_CSTR" + }, + { + "name": "Endpoint", + "type": "RPC_CSTR" + }, + { + "name": "NetworkOptions", + "type": "RPC_CSTR" + } + ], + "RpcStringBindingParseW": [ + { + "name": "StringBinding", + "type": "RPC_WSTR" + }, + { + "name": "ObjUuid", + "type": "RPC_WSTR" + }, + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "NetworkAddr", + "type": "RPC_WSTR" + }, + { + "name": "Endpoint", + "type": "RPC_WSTR" + }, + { + "name": "NetworkOptions", + "type": "RPC_WSTR" + } + ], + "RpcStringFreeA": [ + { + "name": "String", + "type": "RPC_CSTR" + } + ], + "RpcStringFreeW": [ + { + "name": "String", + "type": "RPC_WSTR" + } + ], + "RpcIfInqId": [ + { + "name": "RpcIfHandle", + "type": "RPC_IF_HANDLE" + }, + { + "name": "RpcIfId", + "type": "RPC_IF_ID" + } + ], + "RpcNetworkIsProtseqValidA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + } + ], + "RpcNetworkIsProtseqValidW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + } + ], + "RpcMgmtInqComTimeout": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Timeout", + "type": "unsigned int" + } + ], + "RpcMgmtSetComTimeout": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Timeout", + "type": "unsigned int" + } + ], + "RpcMgmtSetCancelTimeout": [ + { + "name": "Timeout", + "type": "long" + } + ], + "RpcNetworkInqProtseqsA": [ + { + "name": "ProtseqVector", + "type": "RPC_PROTSEQ_VECTORA" + } + ], + "RpcNetworkInqProtseqsW": [ + { + "name": "ProtseqVector", + "type": "RPC_PROTSEQ_VECTORW" + } + ], + "RpcObjectInqType": [ + { + "name": "ObjUuid", + "type": "UUID" + }, + { + "name": "TypeUuid", + "type": "UUID" + } + ], + "RpcObjectSetInqFn": [ + { + "name": "InquiryFn", + "type": "RPC_OBJECT_INQ_FN" + } + ], + "RpcObjectSetType": [ + { + "name": "ObjUuid", + "type": "UUID" + }, + { + "name": "TypeUuid", + "type": "UUID" + } + ], + "RpcProtseqVectorFreeA": [ + { + "name": "ProtseqVector", + "type": "RPC_PROTSEQ_VECTORA" + } + ], + "RpcProtseqVectorFreeW": [ + { + "name": "ProtseqVector", + "type": "RPC_PROTSEQ_VECTORW" + } + ], + "RpcServerInqBindings": [ + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + } + ], + "RpcServerInqIf": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "MgrEpv", + "type": "void" + } + ], + "RpcServerListen": [ + { + "name": "MinimumCallThreads", + "type": "unsigned int" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "DontWait", + "type": "unsigned int" + } + ], + "RpcServerRegisterIf": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "MgrEpv", + "type": "void" + } + ], + "RpcServerRegisterIfEx": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "MgrEpv", + "type": "void" + }, + { + "name": "Flags", + "type": "unsigned int" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfCallback", + "type": "RPC_IF_CALLBACK_FN" + } + ], + "RpcServerRegisterIf2": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "MgrEpv", + "type": "void" + }, + { + "name": "Flags", + "type": "unsigned int" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "MaxRpcSize", + "type": "unsigned int" + }, + { + "name": "IfCallbackFn", + "type": "RPC_IF_CALLBACK_FN" + } + ], + "RpcServerRegisterIf3": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "MgrEpv", + "type": "void" + }, + { + "name": "Flags", + "type": "unsigned int" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "MaxRpcSize", + "type": "unsigned int" + }, + { + "name": "IfCallback", + "type": "RPC_IF_CALLBACK_FN" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUnregisterIf": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "WaitForCallsToComplete", + "type": "unsigned int" + } + ], + "RpcServerUnregisterIfEx": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "RundownContextHandles", + "type": "int" + } + ], + "RpcServerUseAllProtseqs": [ + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseAllProtseqsEx": [ + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseAllProtseqsIf": [ + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseAllProtseqsIfEx": [ + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseProtseqA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseProtseqExA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseProtseqW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseProtseqExW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseProtseqEpA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "Endpoint", + "type": "RPC_CSTR" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseProtseqEpExA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "Endpoint", + "type": "RPC_CSTR" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseProtseqEpW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "Endpoint", + "type": "RPC_WSTR" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseProtseqEpExW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "Endpoint", + "type": "RPC_WSTR" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseProtseqIfA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseProtseqIfExA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseProtseqIfW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseProtseqIfExW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcMgmtStatsVectorFree": [ + { + "name": "StatsVector", + "type": "RPC_STATS_VECTOR" + } + ], + "RpcMgmtInqStats": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Statistics", + "type": "RPC_STATS_VECTOR" + } + ], + "RpcMgmtIsServerListening": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcMgmtStopServerListening": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcMgmtWaitServerListen": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcMgmtSetServerStackSize": [ + { + "name": "ThreadStackSize", + "type": "unsigned long" + } + ], + "RpcSsDontSerializeContext": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcMgmtEnableIdleCleanup": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcMgmtInqIfIds": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "IfIdVector", + "type": "RPC_IF_ID_VECTOR" + } + ], + "RpcIfIdVectorFree": [ + { + "name": "IfIdVector", + "type": "RPC_IF_ID_VECTOR" + } + ], + "RpcMgmtInqServerPrincNameA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + } + ], + "RpcMgmtInqServerPrincNameW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + } + ], + "RpcServerInqDefaultPrincNameA": [ + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "PrincName", + "type": "RPC_CSTR" + } + ], + "RpcServerInqDefaultPrincNameW": [ + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "PrincName", + "type": "RPC_WSTR" + } + ], + "RpcEpResolveBinding": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + } + ], + "RpcNsBindingInqEntryNameA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + } + ], + "RpcNsBindingInqEntryNameW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + } + ], + "RpcBindingCreateA": [ + { + "name": "Template", + "type": "RPC_BINDING_HANDLE_TEMPLATE_V1_A" + }, + { + "name": "Security", + "type": "RPC_BINDING_HANDLE_SECURITY_V1_A" + }, + { + "name": "Options", + "type": "RPC_BINDING_HANDLE_OPTIONS_V1" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcBindingCreateW": [ + { + "name": "Template", + "type": "RPC_BINDING_HANDLE_TEMPLATE_V1_W" + }, + { + "name": "Security", + "type": "RPC_BINDING_HANDLE_SECURITY_V1_W" + }, + { + "name": "Options", + "type": "RPC_BINDING_HANDLE_OPTIONS_V1" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcServerInqBindingHandle": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcImpersonateClient": [ + { + "name": "BindingHandle", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcRevertToSelfEx": [ + { + "name": "BindingHandle", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcRevertToSelf": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcImpersonateClientContainer": [ + { + "name": "BindingHandle", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcRevertContainerImpersonation": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcBindingInqAuthClientA": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Privs", + "type": "RPC_AUTHZ_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + } + ], + "RpcBindingInqAuthClientW": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Privs", + "type": "RPC_AUTHZ_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + } + ], + "RpcBindingInqAuthClientExA": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Privs", + "type": "RPC_AUTHZ_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + }, + { + "name": "Flags", + "type": "unsigned long" + } + ], + "RpcBindingInqAuthClientExW": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Privs", + "type": "RPC_AUTHZ_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + }, + { + "name": "Flags", + "type": "unsigned long" + } + ], + "RpcBindingInqAuthInfoA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + } + ], + "RpcBindingInqAuthInfoW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + } + ], + "RpcBindingSetAuthInfoA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + } + ], + "RpcBindingSetAuthInfoExA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + }, + { + "name": "SecurityQos", + "type": "RPC_SECURITY_QOS" + } + ], + "RpcBindingSetAuthInfoW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + } + ], + "RpcBindingSetAuthInfoExW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + }, + { + "name": "SecurityQOS", + "type": "RPC_SECURITY_QOS" + } + ], + "RpcBindingInqAuthInfoExA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + }, + { + "name": "RpcQosVersion", + "type": "unsigned long" + }, + { + "name": "SecurityQOS", + "type": "RPC_SECURITY_QOS" + } + ], + "RpcBindingInqAuthInfoExW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + }, + { + "name": "RpcQosVersion", + "type": "unsigned long" + }, + { + "name": "SecurityQOS", + "type": "RPC_SECURITY_QOS" + } + ], + "RpcServerCompleteSecurityCallback": [ + { + "name": "BindingHandle", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Status", + "type": "RPC_STATUS" + } + ], + "RpcServerRegisterAuthInfoA": [ + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "GetKeyFn", + "type": "RPC_AUTH_KEY_RETRIEVAL_FN" + }, + { + "name": "Arg", + "type": "void" + } + ], + "RpcServerRegisterAuthInfoW": [ + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "GetKeyFn", + "type": "RPC_AUTH_KEY_RETRIEVAL_FN" + }, + { + "name": "Arg", + "type": "void" + } + ], + "RpcBindingServerFromClient": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerBinding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcRaiseException": [ + { + "name": "exception", + "type": "RPC_STATUS" + } + ], + "RpcTestCancel": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcServerTestCancel": [ + { + "name": "BindingHandle", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcCancelThread": [ + { + "name": "Thread", + "type": "void" + } + ], + "RpcCancelThreadEx": [ + { + "name": "Thread", + "type": "void" + }, + { + "name": "Timeout", + "type": "long" + } + ], + "UuidCreate": [ + { + "name": "Uuid", + "type": "UUID" + } + ], + "UuidCreateSequential": [ + { + "name": "Uuid", + "type": "UUID" + } + ], + "UuidToStringA": [ + { + "name": "Uuid", + "type": "UUID" + }, + { + "name": "StringUuid", + "type": "RPC_CSTR" + } + ], + "UuidFromStringA": [ + { + "name": "StringUuid", + "type": "RPC_CSTR" + }, + { + "name": "Uuid", + "type": "UUID" + } + ], + "UuidToStringW": [ + { + "name": "Uuid", + "type": "UUID" + }, + { + "name": "StringUuid", + "type": "RPC_WSTR" + } + ], + "UuidFromStringW": [ + { + "name": "StringUuid", + "type": "RPC_WSTR" + }, + { + "name": "Uuid", + "type": "UUID" + } + ], + "UuidCompare": [ + { + "name": "Uuid1", + "type": "UUID" + }, + { + "name": "Uuid2", + "type": "UUID" + }, + { + "name": "Status", + "type": "RPC_STATUS" + } + ], + "UuidCreateNil": [ + { + "name": "NilUuid", + "type": "UUID" + } + ], + "UuidEqual": [ + { + "name": "Uuid1", + "type": "UUID" + }, + { + "name": "Uuid2", + "type": "UUID" + }, + { + "name": "Status", + "type": "RPC_STATUS" + } + ], + "UuidHash": [ + { + "name": "Uuid", + "type": "UUID" + }, + { + "name": "Status", + "type": "RPC_STATUS" + } + ], + "UuidIsNil": [ + { + "name": "Uuid", + "type": "UUID" + }, + { + "name": "Status", + "type": "RPC_STATUS" + } + ], + "RpcEpRegisterNoReplaceA": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "UuidVector", + "type": "UUID_VECTOR" + }, + { + "name": "Annotation", + "type": "RPC_CSTR" + } + ], + "RpcEpRegisterNoReplaceW": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "UuidVector", + "type": "UUID_VECTOR" + }, + { + "name": "Annotation", + "type": "RPC_WSTR" + } + ], + "RpcEpRegisterA": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "UuidVector", + "type": "UUID_VECTOR" + }, + { + "name": "Annotation", + "type": "RPC_CSTR" + } + ], + "RpcEpRegisterW": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "UuidVector", + "type": "UUID_VECTOR" + }, + { + "name": "Annotation", + "type": "RPC_WSTR" + } + ], + "RpcEpUnregister": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "UuidVector", + "type": "UUID_VECTOR" + } + ], + "DceErrorInqTextA": [ + { + "name": "RpcStatus", + "type": "RPC_STATUS" + }, + { + "name": "ErrorText", + "type": "RPC_CSTR" + } + ], + "DceErrorInqTextW": [ + { + "name": "RpcStatus", + "type": "RPC_STATUS" + }, + { + "name": "ErrorText", + "type": "RPC_WSTR" + } + ], + "RpcMgmtEpEltInqBegin": [ + { + "name": "EpBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "InquiryType", + "type": "unsigned long" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "VersOption", + "type": "unsigned long" + }, + { + "name": "ObjectUuid", + "type": "UUID" + }, + { + "name": "InquiryContext", + "type": "RPC_EP_INQ_HANDLE" + } + ], + "RpcMgmtEpEltInqDone": [ + { + "name": "InquiryContext", + "type": "RPC_EP_INQ_HANDLE" + } + ], + "RpcMgmtEpEltInqNextA": [ + { + "name": "InquiryContext", + "type": "RPC_EP_INQ_HANDLE" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ObjectUuid", + "type": "UUID" + }, + { + "name": "Annotation", + "type": "RPC_CSTR" + } + ], + "RpcMgmtEpEltInqNextW": [ + { + "name": "InquiryContext", + "type": "RPC_EP_INQ_HANDLE" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ObjectUuid", + "type": "UUID" + }, + { + "name": "Annotation", + "type": "RPC_WSTR" + } + ], + "RpcMgmtEpUnregister": [ + { + "name": "EpBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ObjectUuid", + "type": "UUID" + } + ], + "RpcMgmtSetAuthorizationFn": [ + { + "name": "AuthorizationFn", + "type": "RPC_MGMT_AUTHORIZATION_FN" + } + ], + "RpcExceptionFilter": [ + { + "name": "ExceptionCode", + "type": "unsigned long" + } + ], + "RpcServerInterfaceGroupCreateW": [ + { + "name": "Interfaces", + "type": "RPC_INTERFACE_TEMPLATEW" + }, + { + "name": "NumIfs", + "type": "unsigned long" + }, + { + "name": "Endpoints", + "type": "RPC_ENDPOINT_TEMPLATEW" + }, + { + "name": "NumEndpoints", + "type": "unsigned long" + }, + { + "name": "IdlePeriod", + "type": "unsigned long" + }, + { + "name": "IdleCallbackFn", + "type": "RPC_INTERFACE_GROUP_IDLE_CALLBACK_FN" + }, + { + "name": "IdleCallbackContext", + "type": "void" + }, + { + "name": "IfGroup", + "type": "PRPC_INTERFACE_GROUP" + } + ], + "RpcServerInterfaceGroupCreateA": [ + { + "name": "Interfaces", + "type": "RPC_INTERFACE_TEMPLATEA" + }, + { + "name": "NumIfs", + "type": "unsigned long" + }, + { + "name": "Endpoints", + "type": "RPC_ENDPOINT_TEMPLATEA" + }, + { + "name": "NumEndpoints", + "type": "unsigned long" + }, + { + "name": "IdlePeriod", + "type": "unsigned long" + }, + { + "name": "IdleCallbackFn", + "type": "RPC_INTERFACE_GROUP_IDLE_CALLBACK_FN" + }, + { + "name": "IdleCallbackContext", + "type": "void" + }, + { + "name": "IfGroup", + "type": "PRPC_INTERFACE_GROUP" + } + ], + "RpcServerInterfaceGroupClose": [ + { + "name": "IfGroup", + "type": "RPC_INTERFACE_GROUP" + } + ], + "RpcServerInterfaceGroupActivate": [ + { + "name": "IfGroup", + "type": "RPC_INTERFACE_GROUP" + } + ], + "RpcServerInterfaceGroupDeactivate": [ + { + "name": "IfGroup", + "type": "RPC_INTERFACE_GROUP" + }, + { + "name": "ForceDeactivation", + "type": "unsigned long" + } + ], + "RpcServerInterfaceGroupInqBindings": [ + { + "name": "IfGroup", + "type": "RPC_INTERFACE_GROUP" + }, + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + } + ], + "MesEncodeIncrementalHandleCreate": [ + { + "name": "UserState", + "type": "void" + }, + { + "name": "AllocFn", + "type": "MIDL_ES_ALLOC" + }, + { + "name": "WriteFn", + "type": "MIDL_ES_WRITE" + }, + { + "name": "pHandle", + "type": "handle_t" + } + ], + "MesDecodeIncrementalHandleCreate": [ + { + "name": "UserState", + "type": "void" + }, + { + "name": "ReadFn", + "type": "MIDL_ES_READ" + }, + { + "name": "pHandle", + "type": "handle_t" + } + ], + "MesIncrementalHandleReset": [ + { + "name": "Handle", + "type": "handle_t" + }, + { + "name": "UserState", + "type": "void" + }, + { + "name": "AllocFn", + "type": "MIDL_ES_ALLOC" + }, + { + "name": "WriteFn", + "type": "MIDL_ES_WRITE" + }, + { + "name": "ReadFn", + "type": "MIDL_ES_READ" + }, + { + "name": "Operation", + "type": "MIDL_ES_CODE" + } + ], + "MesEncodeFixedBufferHandleCreate": [ + { + "name": "pBuffer", + "type": "char" + }, + { + "name": "BufferSize", + "type": "unsigned long" + }, + { + "name": "pEncodedSize", + "type": "unsigned long" + }, + { + "name": "pHandle", + "type": "handle_t" + } + ], + "MesEncodeDynBufferHandleCreate": [ + { + "name": "pBuffer", + "type": "char" + }, + { + "name": "pEncodedSize", + "type": "unsigned long" + }, + { + "name": "pHandle", + "type": "handle_t" + } + ], + "MesDecodeBufferHandleCreate": [ + { + "name": "Buffer", + "type": "char" + }, + { + "name": "BufferSize", + "type": "unsigned long" + }, + { + "name": "pHandle", + "type": "handle_t" + } + ], + "MesBufferHandleReset": [ + { + "name": "Handle", + "type": "handle_t" + }, + { + "name": "HandleStyle", + "type": "unsigned long" + }, + { + "name": "Operation", + "type": "MIDL_ES_CODE" + }, + { + "name": "pBuffer", + "type": "char" + }, + { + "name": "BufferSize", + "type": "unsigned long" + }, + { + "name": "pEncodedSize", + "type": "unsigned long" + } + ], + "MesHandleFree": [ + { + "name": "Handle", + "type": "handle_t" + } + ], + "MesInqProcEncodingId": [ + { + "name": "Handle", + "type": "handle_t" + }, + { + "name": "pInterfaceId", + "type": "PRPC_SYNTAX_IDENTIFIER" + }, + { + "name": "pProcNum", + "type": "unsigned long" + } + ], + "NdrMesProcEncodeDecode2": [ + { + "name": "Handle", + "type": "handle_t" + }, + { + "name": "pStubDesc", + "type": "MIDL_STUB_DESC" + }, + { + "name": "pFormatString", + "type": "PFORMAT_STRING" + } + ], + "IUnknown_QueryInterface_Proxy": [ + { + "name": "This", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "IUnknown_AddRef_Proxy": [ + { + "name": "This", + "type": "IUnknown" + } + ], + "IUnknown_Release_Proxy": [ + { + "name": "This", + "type": "IUnknown" + } + ], + "NdrProxyInitialize": [ + { + "name": "This", + "type": "void" + }, + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + }, + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pStubDescriptor", + "type": "PMIDL_STUB_DESC" + }, + { + "name": "ProcNum", + "type": "unsigned int" + } + ], + "NdrProxyGetBuffer": [ + { + "name": "This", + "type": "void" + }, + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + } + ], + "NdrProxySendReceive": [ + { + "name": "This", + "type": "void" + }, + { + "name": "pStubMsg", + "type": "MIDL_STUB_MESSAGE" + } + ], + "NdrProxyFreeBuffer": [ + { + "name": "This", + "type": "void" + }, + { + "name": "pStubMsg", + "type": "MIDL_STUB_MESSAGE" + } + ], + "NdrProxyErrorHandler": [ + { + "name": "dwExceptionCode", + "type": "DWORD" + } + ], + "NdrStubInitialize": [ + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + }, + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pStubDescriptor", + "type": "PMIDL_STUB_DESC" + }, + { + "name": "pRpcChannelBuffer", + "type": "IRpcChannelBuffer" + } + ], + "NdrStubForwardingFunction": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pChannel", + "type": "IRpcChannelBuffer" + }, + { + "name": "pmsg", + "type": "PRPC_MESSAGE" + }, + { + "name": "pdwStubPhase", + "type": "DWORD" + } + ], + "NdrStubGetBuffer": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pRpcChannelBuffer", + "type": "IRpcChannelBuffer" + }, + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + } + ], + "CStdStubBuffer_QueryInterface": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "CStdStubBuffer_AddRef": [ + { + "name": "This", + "type": "IRpcStubBuffer" + } + ], + "NdrCStdStubBuffer_Release": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pPSF", + "type": "IPSFactoryBuffer" + } + ], + "CStdStubBuffer_Connect": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pUnkServer", + "type": "IUnknown" + } + ], + "CStdStubBuffer_Disconnect": [ + { + "name": "This", + "type": "IRpcStubBuffer" + } + ], + "CStdStubBuffer_Invoke": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pRpcMsg", + "type": "RPCOLEMESSAGE" + }, + { + "name": "pRpcChannelBuffer", + "type": "IRpcChannelBuffer" + } + ], + "CStdStubBuffer_CountRefs": [ + { + "name": "This", + "type": "IRpcStubBuffer" + } + ], + "CStdStubBuffer_DebugServerQueryInterface": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CStdStubBuffer_DebugServerRelease": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pv", + "type": "void" + } + ], + "NdrCStdStubBuffer2_Release": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pPSF", + "type": "IPSFactoryBuffer" + } + ], + "NdrDllGetClassObject": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + }, + { + "name": "pProxyFileList", + "type": "ProxyFileInfo" + }, + { + "name": "pclsid", + "type": "CLSID" + }, + { + "name": "pPSFactoryBuffer", + "type": "CStdPSFactoryBuffer" + } + ], + "NdrDllCanUnloadNow": [ + { + "name": "pPSFactoryBuffer", + "type": "CStdPSFactoryBuffer" + } + ], + "NdrDllRegisterProxy": [ + { + "name": "hDll", + "type": "HMODULE" + }, + { + "name": "pProxyFileList", + "type": "ProxyFileInfo" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "NdrDllUnregisterProxy": [ + { + "name": "hDll", + "type": "HMODULE" + }, + { + "name": "pProxyFileList", + "type": "ProxyFileInfo" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "RpcCertGeneratePrincipalNameW": [ + { + "name": "Context", + "type": "PCCERT_CONTEXT" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "RPC_WSTR" + } + ], + "RpcCertGeneratePrincipalNameA": [ + { + "name": "Context", + "type": "PCCERT_CONTEXT" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "RPC_CSTR" + } + ], + "RpcSsDestroyClientContext": [ + { + "name": "ContextHandle", + "type": "void" + } + ], + "NdrSimpleTypeMarshall": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "FormatChar", + "type": "unsigned char" + } + ], + "NdrSimpleTypeUnmarshall": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "FormatChar", + "type": "unsigned char" + } + ], + "NdrContextHandleInitialize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrPointerBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrSimpleStructBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrComplexStructBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrConformantArrayBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrComplexArrayBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrConformantStringBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrUserMarshalBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrInterfacePointerBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrContextHandleSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrContextHandleMemorySize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrPointerFree": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrUserMarshalFree": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrInterfacePointerFree": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrConvert": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrClientCall2": [ + { + "name": "pStubDescriptor", + "type": "PMIDL_STUB_DESC" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrClientCall": [ + { + "name": "pStubDescriptor", + "type": "PMIDL_STUB_DESC" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrAsyncClientCall": [ + { + "name": "pStubDescriptor", + "type": "PMIDL_STUB_DESC" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrDcomAsyncClientCall": [ + { + "name": "pStubDescriptor", + "type": "PMIDL_STUB_DESC" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrAsyncServerCall": [ + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + } + ], + "NdrStubCall2": [ + { + "name": "pThis", + "type": "void" + }, + { + "name": "pChannel", + "type": "void" + }, + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + }, + { + "name": "pdwStubPhase", + "type": "unsigned long" + } + ], + "NdrServerCall2": [ + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + } + ], + "RpcSsDisableAllocate": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcSsEnableAllocate": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcSsFree": [ + { + "name": "NodeToFree", + "type": "void" + } + ], + "RpcSsGetThreadHandle": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcSsSetClientAllocFree": [ + { + "name": "ClientAlloc", + "type": "RPC_CLIENT_ALLOC" + }, + { + "name": "ClientFree", + "type": "RPC_CLIENT_FREE" + } + ], + "RpcSsSetThreadHandle": [ + { + "name": "Id", + "type": "RPC_SS_THREAD_HANDLE" + } + ], + "RpcSsSwapClientAllocFree": [ + { + "name": "ClientAlloc", + "type": "RPC_CLIENT_ALLOC" + }, + { + "name": "ClientFree", + "type": "RPC_CLIENT_FREE" + }, + { + "name": "OldClientAlloc", + "type": "RPC_CLIENT_ALLOC" + }, + { + "name": "OldClientFree", + "type": "RPC_CLIENT_FREE" + } + ], + "RpcSmClientFree": [ + { + "name": "pNodeToFree", + "type": "void" + } + ], + "RpcSmDestroyClientContext": [ + { + "name": "ContextHandle", + "type": "void" + } + ], + "RpcSmDisableAllocate": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcSmEnableAllocate": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcSmFree": [ + { + "name": "NodeToFree", + "type": "void" + } + ], + "RpcSmGetThreadHandle": [ + { + "name": "pStatus", + "type": "RPC_STATUS" + } + ], + "RpcSmSetClientAllocFree": [ + { + "name": "ClientAlloc", + "type": "RPC_CLIENT_ALLOC" + }, + { + "name": "ClientFree", + "type": "RPC_CLIENT_FREE" + } + ], + "RpcSmSetThreadHandle": [ + { + "name": "Id", + "type": "RPC_SS_THREAD_HANDLE" + } + ], + "RpcSmSwapClientAllocFree": [ + { + "name": "ClientAlloc", + "type": "RPC_CLIENT_ALLOC" + }, + { + "name": "ClientFree", + "type": "RPC_CLIENT_FREE" + }, + { + "name": "OldClientAlloc", + "type": "RPC_CLIENT_ALLOC" + }, + { + "name": "OldClientFree", + "type": "RPC_CLIENT_FREE" + } + ], + "NdrClearOutParameters": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + }, + { + "name": "ArgAddr", + "type": "void" + } + ], + "NdrOleFree": [ + { + "name": "NodeToFree", + "type": "void" + } + ], + "NdrGetUserMarshalInfo": [ + { + "name": "pFlags", + "type": "unsigned long" + }, + { + "name": "InformationLevel", + "type": "unsigned long" + }, + { + "name": "pMarshalInfo", + "type": "NDR_USER_MARSHAL_INFO" + } + ], + "NdrClientCall3": [ + { + "name": "pProxyInfo", + "type": "MIDL_STUBLESS_PROXY_INFO" + }, + { + "name": "nProcNum", + "type": "unsigned long" + }, + { + "name": "pReturnValue", + "type": "void" + } + ], + "Ndr64AsyncClientCall": [ + { + "name": "pProxyInfo", + "type": "MIDL_STUBLESS_PROXY_INFO" + }, + { + "name": "nProcNum", + "type": "unsigned long" + }, + { + "name": "pReturnValue", + "type": "void" + } + ], + "Ndr64AsyncServerCallAll": [ + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + } + ], + "NdrStubCall3": [ + { + "name": "pThis", + "type": "void" + }, + { + "name": "pChannel", + "type": "void" + }, + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + }, + { + "name": "pdwStubPhase", + "type": "unsigned long" + } + ], + "NdrServerCallAll": [ + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + } + ], + "RpcUserFree": [ + { + "name": "AsyncHandle", + "type": "handle_t" + }, + { + "name": "pBuffer", + "type": "void" + } + ], + "RpcAsyncRegisterInfo": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + } + ], + "RpcAsyncInitializeHandle": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + }, + { + "name": "Size", + "type": "unsigned int" + } + ], + "RpcAsyncGetCallStatus": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + } + ], + "RpcAsyncCompleteCall": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + }, + { + "name": "Reply", + "type": "void" + } + ], + "RpcAsyncAbortCall": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + }, + { + "name": "ExceptionCode", + "type": "unsigned long" + } + ], + "RpcAsyncCancelCall": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + }, + { + "name": "fAbort", + "type": "BOOL" + } + ], + "RpcErrorStartEnumeration": [ + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + } + ], + "RpcErrorGetNextRecord": [ + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + }, + { + "name": "CopyStrings", + "type": "BOOL" + }, + { + "name": "ErrorInfo", + "type": "RPC_EXTENDED_ERROR_INFO" + } + ], + "RpcErrorEndEnumeration": [ + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + } + ], + "RpcErrorResetEnumeration": [ + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + } + ], + "RpcErrorGetNumberOfRecords": [ + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + }, + { + "name": "Records", + "type": "int" + } + ], + "RpcErrorSaveErrorInfo": [ + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + }, + { + "name": "ErrorBlob", + "type": "PVOID" + }, + { + "name": "BlobSize", + "type": "size_t" + } + ], + "RpcErrorLoadErrorInfo": [ + { + "name": "ErrorBlob", + "type": "PVOID" + }, + { + "name": "BlobSize", + "type": "size_t" + }, + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + } + ], + "RpcErrorAddRecord": [ + { + "name": "ErrorInfo", + "type": "RPC_EXTENDED_ERROR_INFO" + } + ], + "RpcErrorClearInformation": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcGetAuthorizationContextForClient": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ImpersonateOnReturn", + "type": "BOOL" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "pExpirationTime", + "type": "PLARGE_INTEGER" + }, + { + "name": "Reserved2", + "type": "LUID" + }, + { + "name": "Reserved3", + "type": "DWORD" + }, + { + "name": "Reserved4", + "type": "PVOID" + }, + { + "name": "pAuthzClientContext", + "type": "PVOID" + } + ], + "RpcFreeAuthorizationContext": [ + { + "name": "pAuthzClientContext", + "type": "PVOID" + } + ], + "RpcSsContextLockExclusive": [ + { + "name": "ServerBindingHandle", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "RpcSsContextLockShared": [ + { + "name": "ServerBindingHandle", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "RpcServerInqCallAttributesW": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "RpcCallAttributes", + "type": "void" + } + ], + "RpcServerInqCallAttributesA": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "RpcCallAttributes", + "type": "void" + } + ], + "RpcServerSubscribeForNotification": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Notification", + "type": "RPC_NOTIFICATIONS" + }, + { + "name": "NotificationType", + "type": "RPC_NOTIFICATION_TYPES" + }, + { + "name": "NotificationInfo", + "type": "RPC_ASYNC_NOTIFICATION_INFO" + } + ], + "RpcServerUnsubscribeForNotification": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Notification", + "type": "RPC_NOTIFICATIONS" + }, + { + "name": "NotificationsQueued", + "type": "unsigned long" + } + ], + "RpcBindingBind": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + } + ], + "RpcBindingUnbind": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "I_RpcExceptionFilter": [ + { + "name": "ExceptionCode", + "type": "unsigned long" + } + ], + "I_RpcBindingInqLocalClientPID": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Pid", + "type": "unsigned long" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/rstrtmgr_dll.json b/qiling/extensions/windows_sdk/defs/rstrtmgr_dll.json new file mode 100644 index 000000000..d93bc2c03 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/rstrtmgr_dll.json @@ -0,0 +1,176 @@ +{ + "RmStartSession": [ + { + "name": "pSessionHandle", + "type": "DWORD" + }, + { + "name": "dwSessionFlags", + "type": "DWORD" + }, + { + "name": "strSessionKey", + "type": "WCHAR" + } + ], + "RmJoinSession": [ + { + "name": "pSessionHandle", + "type": "DWORD" + }, + { + "name": "strSessionKey", + "type": "WCHAR" + } + ], + "RmEndSession": [ + { + "name": "dwSessionHandle", + "type": "DWORD" + } + ], + "RmRegisterResources": [ + { + "name": "dwSessionHandle", + "type": "DWORD" + }, + { + "name": "nFiles", + "type": "UINT" + }, + { + "name": "rgsFileNames", + "type": "LPCWSTR" + }, + { + "name": "nApplications", + "type": "UINT" + }, + { + "name": "rgApplications", + "type": "RM_UNIQUE_PROCESS" + }, + { + "name": "nServices", + "type": "UINT" + }, + { + "name": "rgsServiceNames", + "type": "LPCWSTR" + } + ], + "RmGetList": [ + { + "name": "dwSessionHandle", + "type": "DWORD" + }, + { + "name": "pnProcInfoNeeded", + "type": "UINT" + }, + { + "name": "pnProcInfo", + "type": "UINT" + }, + { + "name": "rgAffectedApps", + "type": "RM_PROCESS_INFO" + }, + { + "name": "lpdwRebootReasons", + "type": "LPDWORD" + } + ], + "RmShutdown": [ + { + "name": "dwSessionHandle", + "type": "DWORD" + }, + { + "name": "lActionFlags", + "type": "ULONG" + }, + { + "name": "fnStatus", + "type": "RM_WRITE_STATUS_CALLBACK" + } + ], + "RmRestart": [ + { + "name": "dwSessionHandle", + "type": "DWORD" + }, + { + "name": "dwRestartFlags", + "type": "DWORD" + }, + { + "name": "fnStatus", + "type": "RM_WRITE_STATUS_CALLBACK" + } + ], + "RmCancelCurrentTask": [ + { + "name": "dwSessionHandle", + "type": "DWORD" + } + ], + "RmAddFilter": [ + { + "name": "dwSessionHandle", + "type": "DWORD" + }, + { + "name": "strModuleName", + "type": "LPCWSTR" + }, + { + "name": "pProcess", + "type": "RM_UNIQUE_PROCESS" + }, + { + "name": "strServiceShortName", + "type": "LPCWSTR" + }, + { + "name": "FilterAction", + "type": "RM_FILTER_ACTION" + } + ], + "RmRemoveFilter": [ + { + "name": "dwSessionHandle", + "type": "DWORD" + }, + { + "name": "strModuleName", + "type": "LPCWSTR" + }, + { + "name": "pProcess", + "type": "RM_UNIQUE_PROCESS" + }, + { + "name": "strServiceShortName", + "type": "LPCWSTR" + } + ], + "RmGetFilterList": [ + { + "name": "dwSessionHandle", + "type": "DWORD" + }, + { + "name": "pbFilterBuf", + "type": "PBYTE" + }, + { + "name": "cbFilterBuf", + "type": "DWORD" + }, + { + "name": "cbFilterBufNeeded", + "type": "LPDWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/rtm_dll.json b/qiling/extensions/windows_sdk/defs/rtm_dll.json new file mode 100644 index 000000000..ff02edc95 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/rtm_dll.json @@ -0,0 +1,1008 @@ +{ + "RtmRegisterEntity": [ + { + "name": "RtmEntityInfo", + "type": "PRTM_ENTITY_INFO" + }, + { + "name": "ExportMethods", + "type": "PRTM_ENTITY_EXPORT_METHODS" + }, + { + "name": "EventCallback", + "type": "RTM_EVENT_CALLBACK" + }, + { + "name": "ReserveOpaquePointer", + "type": "BOOL" + }, + { + "name": "RtmRegProfile", + "type": "PRTM_REGN_PROFILE" + }, + { + "name": "RtmRegHandle", + "type": "PRTM_ENTITY_HANDLE" + } + ], + "RtmDeregisterEntity": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + } + ], + "RtmGetRegisteredEntities": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NumEntities", + "type": "PUINT" + }, + { + "name": "EntityHandles", + "type": "PRTM_ENTITY_HANDLE" + }, + { + "name": "EntityInfos", + "type": "PRTM_ENTITY_INFO" + } + ], + "RtmReleaseEntities": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NumEntities", + "type": "UINT" + }, + { + "name": "EntityHandles", + "type": "PRTM_ENTITY_HANDLE" + } + ], + "RtmLockDestination": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestHandle", + "type": "RTM_DEST_HANDLE" + }, + { + "name": "Exclusive", + "type": "BOOL" + }, + { + "name": "LockDest", + "type": "BOOL" + } + ], + "RtmGetOpaqueInformationPointer": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestHandle", + "type": "RTM_DEST_HANDLE" + }, + { + "name": "OpaqueInfoPointer", + "type": "PVOID" + } + ], + "RtmGetEntityMethods": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EntityHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NumMethods", + "type": "PUINT" + }, + { + "name": "ExptMethods", + "type": "PRTM_ENTITY_EXPORT_METHOD" + } + ], + "RtmInvokeMethod": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EntityHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "Input", + "type": "PRTM_ENTITY_METHOD_INPUT" + }, + { + "name": "OutputSize", + "type": "PUINT" + }, + { + "name": "Output", + "type": "PRTM_ENTITY_METHOD_OUTPUT" + } + ], + "RtmBlockMethods": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "TargetHandle", + "type": "HANDLE" + }, + { + "name": "TargetType", + "type": "UCHAR" + }, + { + "name": "BlockingFlag", + "type": "DWORD" + } + ], + "RtmGetEntityInfo": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EntityHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EntityInfo", + "type": "PRTM_ENTITY_INFO" + } + ], + "RtmGetDestInfo": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestHandle", + "type": "RTM_DEST_HANDLE" + }, + { + "name": "ProtocolId", + "type": "ULONG" + }, + { + "name": "TargetViews", + "type": "RTM_VIEW_SET" + }, + { + "name": "DestInfo", + "type": "PRTM_DEST_INFO" + } + ], + "RtmGetRouteInfo": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteHandle", + "type": "RTM_ROUTE_HANDLE" + }, + { + "name": "RouteInfo", + "type": "PRTM_ROUTE_INFO" + }, + { + "name": "DestAddress", + "type": "PRTM_NET_ADDRESS" + } + ], + "RtmGetNextHopInfo": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NextHopHandle", + "type": "RTM_NEXTHOP_HANDLE" + }, + { + "name": "NextHopInfo", + "type": "PRTM_NEXTHOP_INFO" + } + ], + "RtmReleaseEntityInfo": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EntityInfo", + "type": "PRTM_ENTITY_INFO" + } + ], + "RtmReleaseDestInfo": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestInfo", + "type": "PRTM_DEST_INFO" + } + ], + "RtmReleaseRouteInfo": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteInfo", + "type": "PRTM_ROUTE_INFO" + } + ], + "RtmReleaseNextHopInfo": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NextHopInfo", + "type": "PRTM_NEXTHOP_INFO" + } + ], + "RtmAddRouteToDest": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteHandle", + "type": "PRTM_ROUTE_HANDLE" + }, + { + "name": "DestAddress", + "type": "PRTM_NET_ADDRESS" + }, + { + "name": "RouteInfo", + "type": "PRTM_ROUTE_INFO" + }, + { + "name": "TimeToLive", + "type": "ULONG" + }, + { + "name": "RouteListHandle", + "type": "RTM_ROUTE_LIST_HANDLE" + }, + { + "name": "NotifyType", + "type": "RTM_NOTIFY_FLAGS" + }, + { + "name": "NotifyHandle", + "type": "RTM_NOTIFY_HANDLE" + }, + { + "name": "ChangeFlags", + "type": "PRTM_ROUTE_CHANGE_FLAGS" + } + ], + "RtmDeleteRouteToDest": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteHandle", + "type": "RTM_ROUTE_HANDLE" + }, + { + "name": "ChangeFlags", + "type": "PRTM_ROUTE_CHANGE_FLAGS" + } + ], + "RtmHoldDestination": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestHandle", + "type": "RTM_DEST_HANDLE" + }, + { + "name": "TargetViews", + "type": "RTM_VIEW_SET" + }, + { + "name": "HoldTime", + "type": "ULONG" + } + ], + "RtmGetRoutePointer": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteHandle", + "type": "RTM_ROUTE_HANDLE" + }, + { + "name": "RoutePointer", + "type": "PRTM_ROUTE_INFO" + } + ], + "RtmLockRoute": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteHandle", + "type": "RTM_ROUTE_HANDLE" + }, + { + "name": "Exclusive", + "type": "BOOL" + }, + { + "name": "LockRoute", + "type": "BOOL" + }, + { + "name": "RoutePointer", + "type": "PRTM_ROUTE_INFO" + } + ], + "RtmUpdateAndUnlockRoute": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteHandle", + "type": "RTM_ROUTE_HANDLE" + }, + { + "name": "TimeToLive", + "type": "ULONG" + }, + { + "name": "RouteListHandle", + "type": "RTM_ROUTE_LIST_HANDLE" + }, + { + "name": "NotifyType", + "type": "RTM_NOTIFY_FLAGS" + }, + { + "name": "NotifyHandle", + "type": "RTM_NOTIFY_HANDLE" + }, + { + "name": "ChangeFlags", + "type": "PRTM_ROUTE_CHANGE_FLAGS" + } + ], + "RtmGetExactMatchDestination": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestAddress", + "type": "PRTM_NET_ADDRESS" + }, + { + "name": "ProtocolId", + "type": "ULONG" + }, + { + "name": "TargetViews", + "type": "RTM_VIEW_SET" + }, + { + "name": "DestInfo", + "type": "PRTM_DEST_INFO" + } + ], + "RtmGetMostSpecificDestination": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestAddress", + "type": "PRTM_NET_ADDRESS" + }, + { + "name": "ProtocolId", + "type": "ULONG" + }, + { + "name": "TargetViews", + "type": "RTM_VIEW_SET" + }, + { + "name": "DestInfo", + "type": "PRTM_DEST_INFO" + } + ], + "RtmGetLessSpecificDestination": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestHandle", + "type": "RTM_DEST_HANDLE" + }, + { + "name": "ProtocolId", + "type": "ULONG" + }, + { + "name": "TargetViews", + "type": "RTM_VIEW_SET" + }, + { + "name": "DestInfo", + "type": "PRTM_DEST_INFO" + } + ], + "RtmGetExactMatchRoute": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestAddress", + "type": "PRTM_NET_ADDRESS" + }, + { + "name": "MatchingFlags", + "type": "RTM_MATCH_FLAGS" + }, + { + "name": "RouteInfo", + "type": "PRTM_ROUTE_INFO" + }, + { + "name": "InterfaceIndex", + "type": "ULONG" + }, + { + "name": "TargetViews", + "type": "RTM_VIEW_SET" + }, + { + "name": "RouteHandle", + "type": "PRTM_ROUTE_HANDLE" + } + ], + "RtmIsBestRoute": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteHandle", + "type": "RTM_ROUTE_HANDLE" + }, + { + "name": "BestInViews", + "type": "PRTM_VIEW_SET" + } + ], + "RtmAddNextHop": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NextHopInfo", + "type": "PRTM_NEXTHOP_INFO" + }, + { + "name": "NextHopHandle", + "type": "PRTM_NEXTHOP_HANDLE" + }, + { + "name": "ChangeFlags", + "type": "PRTM_NEXTHOP_CHANGE_FLAGS" + } + ], + "RtmFindNextHop": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NextHopInfo", + "type": "PRTM_NEXTHOP_INFO" + }, + { + "name": "NextHopHandle", + "type": "PRTM_NEXTHOP_HANDLE" + }, + { + "name": "NextHopPointer", + "type": "PRTM_NEXTHOP_INFO" + } + ], + "RtmDeleteNextHop": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NextHopHandle", + "type": "RTM_NEXTHOP_HANDLE" + }, + { + "name": "NextHopInfo", + "type": "PRTM_NEXTHOP_INFO" + } + ], + "RtmGetNextHopPointer": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NextHopHandle", + "type": "RTM_NEXTHOP_HANDLE" + }, + { + "name": "NextHopPointer", + "type": "PRTM_NEXTHOP_INFO" + } + ], + "RtmLockNextHop": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NextHopHandle", + "type": "RTM_NEXTHOP_HANDLE" + }, + { + "name": "Exclusive", + "type": "BOOL" + }, + { + "name": "LockNextHop", + "type": "BOOL" + }, + { + "name": "NextHopPointer", + "type": "PRTM_NEXTHOP_INFO" + } + ], + "RtmCreateDestEnum": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "TargetViews", + "type": "RTM_VIEW_SET" + }, + { + "name": "EnumFlags", + "type": "RTM_ENUM_FLAGS" + }, + { + "name": "NetAddress", + "type": "PRTM_NET_ADDRESS" + }, + { + "name": "ProtocolId", + "type": "ULONG" + }, + { + "name": "RtmEnumHandle", + "type": "PRTM_ENUM_HANDLE" + } + ], + "RtmGetEnumDests": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EnumHandle", + "type": "RTM_ENUM_HANDLE" + }, + { + "name": "NumDests", + "type": "PUINT" + }, + { + "name": "DestInfos", + "type": "PRTM_DEST_INFO" + } + ], + "RtmReleaseDests": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NumDests", + "type": "UINT" + }, + { + "name": "DestInfos", + "type": "PRTM_DEST_INFO" + } + ], + "RtmCreateRouteEnum": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestHandle", + "type": "RTM_DEST_HANDLE" + }, + { + "name": "TargetViews", + "type": "RTM_VIEW_SET" + }, + { + "name": "EnumFlags", + "type": "RTM_ENUM_FLAGS" + }, + { + "name": "StartDest", + "type": "PRTM_NET_ADDRESS" + }, + { + "name": "MatchingFlags", + "type": "RTM_MATCH_FLAGS" + }, + { + "name": "CriteriaRoute", + "type": "PRTM_ROUTE_INFO" + }, + { + "name": "CriteriaInterface", + "type": "ULONG" + }, + { + "name": "RtmEnumHandle", + "type": "PRTM_ENUM_HANDLE" + } + ], + "RtmGetEnumRoutes": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EnumHandle", + "type": "RTM_ENUM_HANDLE" + }, + { + "name": "NumRoutes", + "type": "PUINT" + }, + { + "name": "RouteHandles", + "type": "PRTM_ROUTE_HANDLE" + } + ], + "RtmReleaseRoutes": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NumRoutes", + "type": "UINT" + }, + { + "name": "RouteHandles", + "type": "PRTM_ROUTE_HANDLE" + } + ], + "RtmCreateNextHopEnum": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EnumFlags", + "type": "RTM_ENUM_FLAGS" + }, + { + "name": "NetAddress", + "type": "PRTM_NET_ADDRESS" + }, + { + "name": "RtmEnumHandle", + "type": "PRTM_ENUM_HANDLE" + } + ], + "RtmGetEnumNextHops": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EnumHandle", + "type": "RTM_ENUM_HANDLE" + }, + { + "name": "NumNextHops", + "type": "PUINT" + }, + { + "name": "NextHopHandles", + "type": "PRTM_NEXTHOP_HANDLE" + } + ], + "RtmReleaseNextHops": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NumNextHops", + "type": "UINT" + }, + { + "name": "NextHopHandles", + "type": "PRTM_NEXTHOP_HANDLE" + } + ], + "RtmDeleteEnumHandle": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EnumHandle", + "type": "RTM_ENUM_HANDLE" + } + ], + "RtmRegisterForChangeNotification": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "TargetViews", + "type": "RTM_VIEW_SET" + }, + { + "name": "NotifyFlags", + "type": "RTM_NOTIFY_FLAGS" + }, + { + "name": "NotifyContext", + "type": "PVOID" + }, + { + "name": "NotifyHandle", + "type": "PRTM_NOTIFY_HANDLE" + } + ], + "RtmGetChangedDests": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NotifyHandle", + "type": "RTM_NOTIFY_HANDLE" + }, + { + "name": "NumDests", + "type": "PUINT" + }, + { + "name": "ChangedDests", + "type": "PRTM_DEST_INFO" + } + ], + "RtmReleaseChangedDests": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NotifyHandle", + "type": "RTM_NOTIFY_HANDLE" + }, + { + "name": "NumDests", + "type": "UINT" + }, + { + "name": "ChangedDests", + "type": "PRTM_DEST_INFO" + } + ], + "RtmIgnoreChangedDests": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NotifyHandle", + "type": "RTM_NOTIFY_HANDLE" + }, + { + "name": "NumDests", + "type": "UINT" + }, + { + "name": "ChangedDests", + "type": "PRTM_DEST_HANDLE" + } + ], + "RtmGetChangeStatus": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NotifyHandle", + "type": "RTM_NOTIFY_HANDLE" + }, + { + "name": "DestHandle", + "type": "RTM_DEST_HANDLE" + }, + { + "name": "ChangeStatus", + "type": "PBOOL" + } + ], + "RtmMarkDestForChangeNotification": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NotifyHandle", + "type": "RTM_NOTIFY_HANDLE" + }, + { + "name": "DestHandle", + "type": "RTM_DEST_HANDLE" + }, + { + "name": "MarkDest", + "type": "BOOL" + } + ], + "RtmIsMarkedForChangeNotification": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NotifyHandle", + "type": "RTM_NOTIFY_HANDLE" + }, + { + "name": "DestHandle", + "type": "RTM_DEST_HANDLE" + }, + { + "name": "DestMarked", + "type": "PBOOL" + } + ], + "RtmDeregisterFromChangeNotification": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NotifyHandle", + "type": "RTM_NOTIFY_HANDLE" + } + ], + "RtmCreateRouteList": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteListHandle", + "type": "PRTM_ROUTE_LIST_HANDLE" + } + ], + "RtmInsertInRouteList": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteListHandle", + "type": "RTM_ROUTE_LIST_HANDLE" + }, + { + "name": "NumRoutes", + "type": "UINT" + }, + { + "name": "RouteHandles", + "type": "PRTM_ROUTE_HANDLE" + } + ], + "RtmCreateRouteListEnum": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteListHandle", + "type": "RTM_ROUTE_LIST_HANDLE" + }, + { + "name": "RtmEnumHandle", + "type": "PRTM_ENUM_HANDLE" + } + ], + "RtmGetListEnumRoutes": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EnumHandle", + "type": "RTM_ENUM_HANDLE" + }, + { + "name": "NumRoutes", + "type": "PUINT" + }, + { + "name": "RouteHandles", + "type": "PRTM_ROUTE_HANDLE" + } + ], + "RtmDeleteRouteList": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteListHandle", + "type": "RTM_ROUTE_LIST_HANDLE" + } + ], + "RtmReferenceHandles": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NumHandles", + "type": "UINT" + }, + { + "name": "RtmHandles", + "type": "HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/runtimeobject_lib.json b/qiling/extensions/windows_sdk/defs/runtimeobject_lib.json new file mode 100644 index 000000000..053d05f11 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/runtimeobject_lib.json @@ -0,0 +1,76 @@ +{ + "RoResolveRestrictedErrorInfoReference": [ + { + "name": "reference", + "type": "PCWSTR" + }, + { + "name": "ppRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "RoOriginateErrorW": [ + { + "name": "error", + "type": "HRESULT" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "message", + "type": "PCWSTR" + } + ], + "RoOriginateError": [ + { + "name": "error", + "type": "HRESULT" + }, + { + "name": "message", + "type": "HSTRING" + } + ], + "RoReportFailedDelegate": [ + { + "name": "punkDelegate", + "type": "IUnknown" + }, + { + "name": "pRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "IsErrorPropagationEnabled": [ + { + "name": "VOID", + "type": "void" + } + ], + "RoGetActivatableClassRegistration": [ + { + "name": "activatableClassId", + "type": "HSTRING" + }, + { + "name": "activatableClassRegistration", + "type": "PActivatableClassRegistration" + } + ], + "RoGetServerActivatableClasses": [ + { + "name": "serverName", + "type": "HSTRING" + }, + { + "name": "activatableClassIds", + "type": "HSTRING" + }, + { + "name": "count", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/sas_dll.json b/qiling/extensions/windows_sdk/defs/sas_dll.json new file mode 100644 index 000000000..32b0c98e1 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/sas_dll.json @@ -0,0 +1,8 @@ +{ + "SendSAS": [ + { + "name": "AsUser", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/scarddlg_dll.json b/qiling/extensions/windows_sdk/defs/scarddlg_dll.json new file mode 100644 index 000000000..bc4fbb459 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/scarddlg_dll.json @@ -0,0 +1,26 @@ +{ + "SCardUIDlgSelectCardA": [ + { + "name": "VOID", + "type": "LPOPENCARDNAME_EXA" + } + ], + "SCardUIDlgSelectCardW": [ + { + "name": "VOID", + "type": "LPOPENCARDNAME_EXW" + } + ], + "GetOpenCardNameA": [ + { + "name": "VOID", + "type": "LPOPENCARDNAMEA" + } + ], + "GetOpenCardNameW": [ + { + "name": "VOID", + "type": "LPOPENCARDNAMEW" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/schannel_dll.json b/qiling/extensions/windows_sdk/defs/schannel_dll.json new file mode 100644 index 000000000..975c933af --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/schannel_dll.json @@ -0,0 +1,68 @@ +{ + "SslEmptyCacheA": [ + { + "name": "pszTargetName", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SslEmptyCacheW": [ + { + "name": "pszTargetName", + "type": "LPWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SslCrackCertificate": [ + { + "name": "pbCertificate", + "type": "PUCHAR" + }, + { + "name": "cbCertificate", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppCertificate", + "type": "PX509Certificate" + } + ], + "SslFreeCertificate": [ + { + "name": "pCertificate", + "type": "PX509Certificate" + } + ], + "SslGetServerIdentity": [ + { + "name": "ClientHello", + "type": "PBYTE" + }, + { + "name": "ClientHelloSize", + "type": "DWORD" + }, + { + "name": "ServerIdentity", + "type": "PBYTE" + }, + { + "name": "ServerIdentitySize", + "type": "PDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/secforwarder_dll.json b/qiling/extensions/windows_sdk/defs/secforwarder_dll.json new file mode 100644 index 000000000..05f713906 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/secforwarder_dll.json @@ -0,0 +1,36 @@ +{ + "CryptCreateAsyncHandle": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phAsync", + "type": "PHCRYPTASYNC" + } + ], + "CryptGetAsyncParam": [ + { + "name": "hAsync", + "type": "HCRYPTASYNC" + }, + { + "name": "pszParamOid", + "type": "LPSTR" + }, + { + "name": "ppvParam", + "type": "LPVOID" + }, + { + "name": "ppfnFree", + "type": "PFN_CRYPT_ASYNC_PARAM_FREE_FUNC" + } + ], + "CryptCloseAsyncHandle": [ + { + "name": "hAsync", + "type": "HCRYPTASYNC" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/sechost_dll.json b/qiling/extensions/windows_sdk/defs/sechost_dll.json new file mode 100644 index 000000000..c17af9504 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/sechost_dll.json @@ -0,0 +1,384 @@ +{ + "GetServiceRegistryStateKey": [ + { + "name": "ServiceStatusHandle", + "type": "SERVICE_STATUS_HANDLE" + }, + { + "name": "StateType", + "type": "SERVICE_REGISTRY_STATE_TYPE" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "ServiceStateKey", + "type": "HKEY" + } + ], + "GetServiceDirectory": [ + { + "name": "hServiceStatus", + "type": "SERVICE_STATUS_HANDLE" + }, + { + "name": "eDirectoryType", + "type": "SERVICE_DIRECTORY_TYPE" + }, + { + "name": "lpPathBuffer", + "type": "PWCHAR" + }, + { + "name": "cchPathBufferLength", + "type": "DWORD" + }, + { + "name": "lpcchRequiredBufferLength", + "type": "DWORD" + } + ], + "StartTraceW": [ + { + "name": "TraceHandle", + "type": "PTRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "StartTraceA": [ + { + "name": "TraceHandle", + "type": "PTRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "StopTraceW": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "StopTraceA": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "ControlTraceW": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + }, + { + "name": "ControlCode", + "type": "ULONG" + } + ], + "ControlTraceA": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + }, + { + "name": "ControlCode", + "type": "ULONG" + } + ], + "QueryAllTracesW": [ + { + "name": "PropertyArray", + "type": "PEVENT_TRACE_PROPERTIES" + }, + { + "name": "PropertyArrayCount", + "type": "ULONG" + }, + { + "name": "LoggerCount", + "type": "PULONG" + } + ], + "QueryAllTracesA": [ + { + "name": "PropertyArray", + "type": "PEVENT_TRACE_PROPERTIES" + }, + { + "name": "PropertyArrayCount", + "type": "ULONG" + }, + { + "name": "LoggerCount", + "type": "PULONG" + } + ], + "EnableTraceEx2": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "ProviderId", + "type": "LPCGUID" + }, + { + "name": "ControlCode", + "type": "ULONG" + }, + { + "name": "Level", + "type": "UCHAR" + }, + { + "name": "MatchAnyKeyword", + "type": "ULONGLONG" + }, + { + "name": "MatchAllKeyword", + "type": "ULONGLONG" + }, + { + "name": "Timeout", + "type": "ULONG" + }, + { + "name": "EnableParameters", + "type": "PENABLE_TRACE_PARAMETERS" + } + ], + "TraceSetInformation": [ + { + "name": "SessionHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InformationClass", + "type": "TRACE_INFO_CLASS" + }, + { + "name": "TraceInformation", + "type": "PVOID" + }, + { + "name": "InformationLength", + "type": "ULONG" + } + ], + "TraceQueryInformation": [ + { + "name": "SessionHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InformationClass", + "type": "TRACE_INFO_CLASS" + }, + { + "name": "TraceInformation", + "type": "PVOID" + }, + { + "name": "InformationLength", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "RegisterTraceGuidsW": [ + { + "name": "RequestAddress", + "type": "WMIDPREQUEST" + }, + { + "name": "RequestContext", + "type": "PVOID" + }, + { + "name": "ControlGuid", + "type": "LPCGUID" + }, + { + "name": "GuidCount", + "type": "ULONG" + }, + { + "name": "TraceGuidReg", + "type": "PTRACE_GUID_REGISTRATION" + }, + { + "name": "MofImagePath", + "type": "LPCWSTR" + }, + { + "name": "MofResourceName", + "type": "LPCWSTR" + }, + { + "name": "RegistrationHandle", + "type": "PTRACEHANDLE" + } + ], + "RegisterTraceGuidsA": [ + { + "name": "RequestAddress", + "type": "WMIDPREQUEST" + }, + { + "name": "RequestContext", + "type": "PVOID" + }, + { + "name": "ControlGuid", + "type": "LPCGUID" + }, + { + "name": "GuidCount", + "type": "ULONG" + }, + { + "name": "TraceGuidReg", + "type": "PTRACE_GUID_REGISTRATION" + }, + { + "name": "MofImagePath", + "type": "LPCSTR" + }, + { + "name": "MofResourceName", + "type": "LPCSTR" + }, + { + "name": "RegistrationHandle", + "type": "PTRACEHANDLE" + } + ], + "OpenTraceW": [ + { + "name": "Logfile", + "type": "PEVENT_TRACE_LOGFILEW" + } + ], + "ProcessTrace": [ + { + "name": "HandleArray", + "type": "PTRACEHANDLE" + }, + { + "name": "HandleCount", + "type": "ULONG" + }, + { + "name": "StartTime", + "type": "LPFILETIME" + }, + { + "name": "EndTime", + "type": "LPFILETIME" + } + ], + "CloseTrace": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + } + ], + "OpenTraceA": [ + { + "name": "Logfile", + "type": "PEVENT_TRACE_LOGFILEA" + } + ], + "SetTraceCallback": [ + { + "name": "pGuid", + "type": "LPCGUID" + }, + { + "name": "EventCallback", + "type": "PEVENT_CALLBACK" + } + ], + "RemoveTraceCallback": [ + { + "name": "pGuid", + "type": "LPCGUID" + } + ], + "EventAccessControl": [ + { + "name": "Guid", + "type": "LPGUID" + }, + { + "name": "Operation", + "type": "ULONG" + }, + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "Rights", + "type": "ULONG" + }, + { + "name": "AllowOrDeny", + "type": "BOOLEAN" + } + ], + "EventAccessRemove": [ + { + "name": "Guid", + "type": "LPGUID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/secur32_dll.json b/qiling/extensions/windows_sdk/defs/secur32_dll.json new file mode 100644 index 000000000..a5e192b5a --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/secur32_dll.json @@ -0,0 +1,176 @@ +{ + "LsaRegisterLogonProcess": [ + { + "name": "LogonProcessName", + "type": "PLSA_STRING" + }, + { + "name": "LsaHandle", + "type": "PHANDLE" + }, + { + "name": "SecurityMode", + "type": "PLSA_OPERATIONAL_MODE" + } + ], + "LsaLogonUser": [ + { + "name": "LsaHandle", + "type": "HANDLE" + }, + { + "name": "OriginName", + "type": "PLSA_STRING" + }, + { + "name": "LogonType", + "type": "SECURITY_LOGON_TYPE" + }, + { + "name": "AuthenticationPackage", + "type": "ULONG" + }, + { + "name": "AuthenticationInformation", + "type": "PVOID" + }, + { + "name": "AuthenticationInformationLength", + "type": "ULONG" + }, + { + "name": "LocalGroups", + "type": "PTOKEN_GROUPS" + }, + { + "name": "SourceContext", + "type": "PTOKEN_SOURCE" + }, + { + "name": "ProfileBuffer", + "type": "PVOID" + }, + { + "name": "ProfileBufferLength", + "type": "PULONG" + }, + { + "name": "LogonId", + "type": "PLUID" + }, + { + "name": "Token", + "type": "PHANDLE" + }, + { + "name": "Quotas", + "type": "PQUOTA_LIMITS" + }, + { + "name": "SubStatus", + "type": "PNTSTATUS" + } + ], + "LsaLookupAuthenticationPackage": [ + { + "name": "LsaHandle", + "type": "HANDLE" + }, + { + "name": "PackageName", + "type": "PLSA_STRING" + }, + { + "name": "AuthenticationPackage", + "type": "PULONG" + } + ], + "LsaFreeReturnBuffer": [ + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaCallAuthenticationPackage": [ + { + "name": "LsaHandle", + "type": "HANDLE" + }, + { + "name": "AuthenticationPackage", + "type": "ULONG" + }, + { + "name": "ProtocolSubmitBuffer", + "type": "PVOID" + }, + { + "name": "SubmitBufferLength", + "type": "ULONG" + }, + { + "name": "ProtocolReturnBuffer", + "type": "PVOID" + }, + { + "name": "ReturnBufferLength", + "type": "PULONG" + }, + { + "name": "ProtocolStatus", + "type": "PNTSTATUS" + } + ], + "LsaDeregisterLogonProcess": [ + { + "name": "LsaHandle", + "type": "HANDLE" + } + ], + "LsaConnectUntrusted": [ + { + "name": "LsaHandle", + "type": "PHANDLE" + } + ], + "LsaEnumerateLogonSessions": [ + { + "name": "LogonSessionCount", + "type": "PULONG" + }, + { + "name": "LogonSessionList", + "type": "PLUID" + } + ], + "LsaGetLogonSessionData": [ + { + "name": "LogonId", + "type": "PLUID" + }, + { + "name": "ppLogonSessionData", + "type": "PSECURITY_LOGON_SESSION_DATA" + } + ], + "LsaRegisterPolicyChangeNotification": [ + { + "name": "InformationClass", + "type": "POLICY_NOTIFICATION_INFORMATION_CLASS" + }, + { + "name": "NotificationEventHandle", + "type": "HANDLE" + } + ], + "LsaUnregisterPolicyChangeNotification": [ + { + "name": "InformationClass", + "type": "POLICY_NOTIFICATION_INFORMATION_CLASS" + }, + { + "name": "NotificationEventHandle", + "type": "HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/sensapi_dll.json b/qiling/extensions/windows_sdk/defs/sensapi_dll.json new file mode 100644 index 000000000..e76b8788e --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/sensapi_dll.json @@ -0,0 +1,28 @@ +{ + "IsDestinationReachableA": [ + { + "name": "lpszDestination", + "type": "LPCSTR" + }, + { + "name": "lpQOCInfo", + "type": "LPQOCINFO" + } + ], + "IsDestinationReachableW": [ + { + "name": "lpszDestination", + "type": "LPCWSTR" + }, + { + "name": "lpQOCInfo", + "type": "LPQOCINFO" + } + ], + "IsNetworkAlive": [ + { + "name": "lpdwFlags", + "type": "LPDWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/setupapi_dll.json b/qiling/extensions/windows_sdk/defs/setupapi_dll.json new file mode 100644 index 000000000..2ebb3d3af --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/setupapi_dll.json @@ -0,0 +1,4292 @@ +{ + "SetupGetInfInformationA": [ + { + "name": "InfSpec", + "type": "LPCVOID" + }, + { + "name": "SearchControl", + "type": "DWORD" + }, + { + "name": "ReturnBuffer", + "type": "PSP_INF_INFORMATION" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetInfInformationW": [ + { + "name": "InfSpec", + "type": "LPCVOID" + }, + { + "name": "SearchControl", + "type": "DWORD" + }, + { + "name": "ReturnBuffer", + "type": "PSP_INF_INFORMATION" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupQueryInfFileInformationA": [ + { + "name": "InfInformation", + "type": "PSP_INF_INFORMATION" + }, + { + "name": "InfIndex", + "type": "UINT" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupQueryInfFileInformationW": [ + { + "name": "InfInformation", + "type": "PSP_INF_INFORMATION" + }, + { + "name": "InfIndex", + "type": "UINT" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupQueryInfOriginalFileInformationA": [ + { + "name": "InfInformation", + "type": "PSP_INF_INFORMATION" + }, + { + "name": "InfIndex", + "type": "UINT" + }, + { + "name": "AlternatePlatformInfo", + "type": "PSP_ALTPLATFORM_INFO" + }, + { + "name": "OriginalFileInfo", + "type": "PSP_ORIGINAL_FILE_INFO_A" + } + ], + "SetupQueryInfOriginalFileInformationW": [ + { + "name": "InfInformation", + "type": "PSP_INF_INFORMATION" + }, + { + "name": "InfIndex", + "type": "UINT" + }, + { + "name": "AlternatePlatformInfo", + "type": "PSP_ALTPLATFORM_INFO" + }, + { + "name": "OriginalFileInfo", + "type": "PSP_ORIGINAL_FILE_INFO_W" + } + ], + "SetupQueryInfVersionInformationA": [ + { + "name": "InfInformation", + "type": "PSP_INF_INFORMATION" + }, + { + "name": "InfIndex", + "type": "UINT" + }, + { + "name": "Key", + "type": "PCSTR" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupQueryInfVersionInformationW": [ + { + "name": "InfInformation", + "type": "PSP_INF_INFORMATION" + }, + { + "name": "InfIndex", + "type": "UINT" + }, + { + "name": "Key", + "type": "PCWSTR" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetInfFileListA": [ + { + "name": "DirectoryPath", + "type": "PCSTR" + }, + { + "name": "InfStyle", + "type": "DWORD" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetInfFileListW": [ + { + "name": "DirectoryPath", + "type": "PCWSTR" + }, + { + "name": "InfStyle", + "type": "DWORD" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupOpenInfFileW": [ + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "InfClass", + "type": "PCWSTR" + }, + { + "name": "InfStyle", + "type": "DWORD" + }, + { + "name": "ErrorLine", + "type": "PUINT" + } + ], + "SetupOpenInfFileA": [ + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "InfClass", + "type": "PCSTR" + }, + { + "name": "InfStyle", + "type": "DWORD" + }, + { + "name": "ErrorLine", + "type": "PUINT" + } + ], + "SetupOpenMasterInf": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetupOpenAppendInfFileW": [ + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ErrorLine", + "type": "PUINT" + } + ], + "SetupOpenAppendInfFileA": [ + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ErrorLine", + "type": "PUINT" + } + ], + "SetupCloseInfFile": [ + { + "name": "InfHandle", + "type": "HINF" + } + ], + "SetupFindFirstLineA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCSTR" + }, + { + "name": "Key", + "type": "PCSTR" + }, + { + "name": "Context", + "type": "PINFCONTEXT" + } + ], + "SetupFindFirstLineW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCWSTR" + }, + { + "name": "Key", + "type": "PCWSTR" + }, + { + "name": "Context", + "type": "PINFCONTEXT" + } + ], + "SetupFindNextLine": [ + { + "name": "ContextIn", + "type": "PINFCONTEXT" + }, + { + "name": "ContextOut", + "type": "PINFCONTEXT" + } + ], + "SetupFindNextMatchLineA": [ + { + "name": "ContextIn", + "type": "PINFCONTEXT" + }, + { + "name": "Key", + "type": "PCSTR" + }, + { + "name": "ContextOut", + "type": "PINFCONTEXT" + } + ], + "SetupFindNextMatchLineW": [ + { + "name": "ContextIn", + "type": "PINFCONTEXT" + }, + { + "name": "Key", + "type": "PCWSTR" + }, + { + "name": "ContextOut", + "type": "PINFCONTEXT" + } + ], + "SetupGetLineByIndexA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCSTR" + }, + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "Context", + "type": "PINFCONTEXT" + } + ], + "SetupGetLineByIndexW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCWSTR" + }, + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "Context", + "type": "PINFCONTEXT" + } + ], + "SetupGetLineCountA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCSTR" + } + ], + "SetupGetLineCountW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCWSTR" + } + ], + "SetupGetLineTextA": [ + { + "name": "Context", + "type": "PINFCONTEXT" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCSTR" + }, + { + "name": "Key", + "type": "PCSTR" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetLineTextW": [ + { + "name": "Context", + "type": "PINFCONTEXT" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCWSTR" + }, + { + "name": "Key", + "type": "PCWSTR" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetFieldCount": [ + { + "name": "Context", + "type": "PINFCONTEXT" + } + ], + "SetupGetStringFieldA": [ + { + "name": "Context", + "type": "PINFCONTEXT" + }, + { + "name": "FieldIndex", + "type": "DWORD" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetStringFieldW": [ + { + "name": "Context", + "type": "PINFCONTEXT" + }, + { + "name": "FieldIndex", + "type": "DWORD" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetIntField": [ + { + "name": "Context", + "type": "PINFCONTEXT" + }, + { + "name": "FieldIndex", + "type": "DWORD" + }, + { + "name": "IntegerValue", + "type": "PINT" + } + ], + "SetupGetMultiSzFieldA": [ + { + "name": "Context", + "type": "PINFCONTEXT" + }, + { + "name": "FieldIndex", + "type": "DWORD" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "LPDWORD" + } + ], + "SetupGetMultiSzFieldW": [ + { + "name": "Context", + "type": "PINFCONTEXT" + }, + { + "name": "FieldIndex", + "type": "DWORD" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "LPDWORD" + } + ], + "SetupGetBinaryField": [ + { + "name": "Context", + "type": "PINFCONTEXT" + }, + { + "name": "FieldIndex", + "type": "DWORD" + }, + { + "name": "ReturnBuffer", + "type": "PBYTE" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "LPDWORD" + } + ], + "SetupGetFileCompressionInfoA": [ + { + "name": "SourceFileName", + "type": "PCSTR" + }, + { + "name": "ActualSourceFileName", + "type": "PSTR" + }, + { + "name": "SourceFileSize", + "type": "PDWORD" + }, + { + "name": "TargetFileSize", + "type": "PDWORD" + }, + { + "name": "CompressionType", + "type": "PUINT" + } + ], + "SetupGetFileCompressionInfoW": [ + { + "name": "SourceFileName", + "type": "PCWSTR" + }, + { + "name": "ActualSourceFileName", + "type": "PWSTR" + }, + { + "name": "SourceFileSize", + "type": "PDWORD" + }, + { + "name": "TargetFileSize", + "type": "PDWORD" + }, + { + "name": "CompressionType", + "type": "PUINT" + } + ], + "SetupGetFileCompressionInfoExA": [ + { + "name": "SourceFileName", + "type": "PCSTR" + }, + { + "name": "ActualSourceFileNameBuffer", + "type": "PSTR" + }, + { + "name": "ActualSourceFileNameBufferLen", + "type": "DWORD" + }, + { + "name": "RequiredBufferLen", + "type": "PDWORD" + }, + { + "name": "SourceFileSize", + "type": "PDWORD" + }, + { + "name": "TargetFileSize", + "type": "PDWORD" + }, + { + "name": "CompressionType", + "type": "PUINT" + } + ], + "SetupGetFileCompressionInfoExW": [ + { + "name": "SourceFileName", + "type": "PCWSTR" + }, + { + "name": "ActualSourceFileNameBuffer", + "type": "PWSTR" + }, + { + "name": "ActualSourceFileNameBufferLen", + "type": "DWORD" + }, + { + "name": "RequiredBufferLen", + "type": "PDWORD" + }, + { + "name": "SourceFileSize", + "type": "PDWORD" + }, + { + "name": "TargetFileSize", + "type": "PDWORD" + }, + { + "name": "CompressionType", + "type": "PUINT" + } + ], + "SetupDecompressOrCopyFileA": [ + { + "name": "SourceFileName", + "type": "PCSTR" + }, + { + "name": "TargetFileName", + "type": "PCSTR" + }, + { + "name": "CompressionType", + "type": "PUINT" + } + ], + "SetupDecompressOrCopyFileW": [ + { + "name": "SourceFileName", + "type": "PCWSTR" + }, + { + "name": "TargetFileName", + "type": "PCWSTR" + }, + { + "name": "CompressionType", + "type": "PUINT" + } + ], + "SetupGetSourceFileLocationA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "SourceId", + "type": "PUINT" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetSourceFileLocationW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "SourceId", + "type": "PUINT" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetSourceFileSizeA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "Section", + "type": "PCSTR" + }, + { + "name": "FileSize", + "type": "PDWORD" + }, + { + "name": "RoundingFactor", + "type": "UINT" + } + ], + "SetupGetSourceFileSizeW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "Section", + "type": "PCWSTR" + }, + { + "name": "FileSize", + "type": "PDWORD" + }, + { + "name": "RoundingFactor", + "type": "UINT" + } + ], + "SetupGetTargetPathA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "Section", + "type": "PCSTR" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetTargetPathW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "Section", + "type": "PCWSTR" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupSetSourceListA": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "SourceList", + "type": "PCSTR" + }, + { + "name": "SourceCount", + "type": "UINT" + } + ], + "SetupSetSourceListW": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "SourceList", + "type": "PCWSTR" + }, + { + "name": "SourceCount", + "type": "UINT" + } + ], + "SetupCancelTemporarySourceList": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetupAddToSourceListA": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Source", + "type": "PCSTR" + } + ], + "SetupAddToSourceListW": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Source", + "type": "PCWSTR" + } + ], + "SetupRemoveFromSourceListA": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Source", + "type": "PCSTR" + } + ], + "SetupRemoveFromSourceListW": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Source", + "type": "PCWSTR" + } + ], + "SetupQuerySourceListA": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "List", + "type": "PCSTR" + }, + { + "name": "Count", + "type": "PUINT" + } + ], + "SetupQuerySourceListW": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "List", + "type": "PCWSTR" + }, + { + "name": "Count", + "type": "PUINT" + } + ], + "SetupFreeSourceListA": [ + { + "name": "List", + "type": "PCSTR" + }, + { + "name": "Count", + "type": "UINT" + } + ], + "SetupFreeSourceListW": [ + { + "name": "List", + "type": "PCWSTR" + }, + { + "name": "Count", + "type": "UINT" + } + ], + "SetupPromptForDiskA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCSTR" + }, + { + "name": "DiskName", + "type": "PCSTR" + }, + { + "name": "PathToSource", + "type": "PCSTR" + }, + { + "name": "FileSought", + "type": "PCSTR" + }, + { + "name": "TagFile", + "type": "PCSTR" + }, + { + "name": "DiskPromptStyle", + "type": "DWORD" + }, + { + "name": "PathBuffer", + "type": "PSTR" + }, + { + "name": "PathBufferSize", + "type": "DWORD" + }, + { + "name": "PathRequiredSize", + "type": "PDWORD" + } + ], + "SetupPromptForDiskW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCWSTR" + }, + { + "name": "DiskName", + "type": "PCWSTR" + }, + { + "name": "PathToSource", + "type": "PCWSTR" + }, + { + "name": "FileSought", + "type": "PCWSTR" + }, + { + "name": "TagFile", + "type": "PCWSTR" + }, + { + "name": "DiskPromptStyle", + "type": "DWORD" + }, + { + "name": "PathBuffer", + "type": "PWSTR" + }, + { + "name": "PathBufferSize", + "type": "DWORD" + }, + { + "name": "PathRequiredSize", + "type": "PDWORD" + } + ], + "SetupCopyErrorA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCSTR" + }, + { + "name": "DiskName", + "type": "PCSTR" + }, + { + "name": "PathToSource", + "type": "PCSTR" + }, + { + "name": "SourceFile", + "type": "PCSTR" + }, + { + "name": "TargetPathFile", + "type": "PCSTR" + }, + { + "name": "Win32ErrorCode", + "type": "UINT" + }, + { + "name": "Style", + "type": "DWORD" + }, + { + "name": "PathBuffer", + "type": "PSTR" + }, + { + "name": "PathBufferSize", + "type": "DWORD" + }, + { + "name": "PathRequiredSize", + "type": "PDWORD" + } + ], + "SetupCopyErrorW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCWSTR" + }, + { + "name": "DiskName", + "type": "PCWSTR" + }, + { + "name": "PathToSource", + "type": "PCWSTR" + }, + { + "name": "SourceFile", + "type": "PCWSTR" + }, + { + "name": "TargetPathFile", + "type": "PCWSTR" + }, + { + "name": "Win32ErrorCode", + "type": "UINT" + }, + { + "name": "Style", + "type": "DWORD" + }, + { + "name": "PathBuffer", + "type": "PWSTR" + }, + { + "name": "PathBufferSize", + "type": "DWORD" + }, + { + "name": "PathRequiredSize", + "type": "PDWORD" + } + ], + "SetupRenameErrorA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCSTR" + }, + { + "name": "SourceFile", + "type": "PCSTR" + }, + { + "name": "TargetFile", + "type": "PCSTR" + }, + { + "name": "Win32ErrorCode", + "type": "UINT" + }, + { + "name": "Style", + "type": "DWORD" + } + ], + "SetupRenameErrorW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCWSTR" + }, + { + "name": "SourceFile", + "type": "PCWSTR" + }, + { + "name": "TargetFile", + "type": "PCWSTR" + }, + { + "name": "Win32ErrorCode", + "type": "UINT" + }, + { + "name": "Style", + "type": "DWORD" + } + ], + "SetupDeleteErrorA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCSTR" + }, + { + "name": "File", + "type": "PCSTR" + }, + { + "name": "Win32ErrorCode", + "type": "UINT" + }, + { + "name": "Style", + "type": "DWORD" + } + ], + "SetupDeleteErrorW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCWSTR" + }, + { + "name": "File", + "type": "PCWSTR" + }, + { + "name": "Win32ErrorCode", + "type": "UINT" + }, + { + "name": "Style", + "type": "DWORD" + } + ], + "SetupBackupErrorA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCSTR" + }, + { + "name": "SourceFile", + "type": "PCSTR" + }, + { + "name": "TargetFile", + "type": "PCSTR" + }, + { + "name": "Win32ErrorCode", + "type": "UINT" + }, + { + "name": "Style", + "type": "DWORD" + } + ], + "SetupBackupErrorW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCWSTR" + }, + { + "name": "SourceFile", + "type": "PCWSTR" + }, + { + "name": "TargetFile", + "type": "PCWSTR" + }, + { + "name": "Win32ErrorCode", + "type": "UINT" + }, + { + "name": "Style", + "type": "DWORD" + } + ], + "SetupSetDirectoryIdA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Id", + "type": "DWORD" + }, + { + "name": "Directory", + "type": "PCSTR" + } + ], + "SetupSetDirectoryIdW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Id", + "type": "DWORD" + }, + { + "name": "Directory", + "type": "PCWSTR" + } + ], + "SetupSetDirectoryIdExA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Id", + "type": "DWORD" + }, + { + "name": "Directory", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved1", + "type": "DWORD" + }, + { + "name": "Reserved2", + "type": "PVOID" + } + ], + "SetupSetDirectoryIdExW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Id", + "type": "DWORD" + }, + { + "name": "Directory", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved1", + "type": "DWORD" + }, + { + "name": "Reserved2", + "type": "PVOID" + } + ], + "SetupGetSourceInfoA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SourceId", + "type": "UINT" + }, + { + "name": "InfoDesired", + "type": "UINT" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetSourceInfoW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SourceId", + "type": "UINT" + }, + { + "name": "InfoDesired", + "type": "UINT" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupInstallFileA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "SourceFile", + "type": "PCSTR" + }, + { + "name": "SourcePathRoot", + "type": "PCSTR" + }, + { + "name": "DestinationName", + "type": "PCSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + }, + { + "name": "CopyMsgHandler", + "type": "PSP_FILE_CALLBACK_A" + }, + { + "name": "Context", + "type": "PVOID" + } + ], + "SetupInstallFileW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "SourceFile", + "type": "PCWSTR" + }, + { + "name": "SourcePathRoot", + "type": "PCWSTR" + }, + { + "name": "DestinationName", + "type": "PCWSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + }, + { + "name": "CopyMsgHandler", + "type": "PSP_FILE_CALLBACK_W" + }, + { + "name": "Context", + "type": "PVOID" + } + ], + "SetupInstallFileExA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "SourceFile", + "type": "PCSTR" + }, + { + "name": "SourcePathRoot", + "type": "PCSTR" + }, + { + "name": "DestinationName", + "type": "PCSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + }, + { + "name": "CopyMsgHandler", + "type": "PSP_FILE_CALLBACK_A" + }, + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "FileWasInUse", + "type": "PBOOL" + } + ], + "SetupInstallFileExW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "SourceFile", + "type": "PCWSTR" + }, + { + "name": "SourcePathRoot", + "type": "PCWSTR" + }, + { + "name": "DestinationName", + "type": "PCWSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + }, + { + "name": "CopyMsgHandler", + "type": "PSP_FILE_CALLBACK_W" + }, + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "FileWasInUse", + "type": "PBOOL" + } + ], + "SetupOpenFileQueue": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetupCloseFileQueue": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + } + ], + "SetupSetFileQueueAlternatePlatformA": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "AlternatePlatformInfo", + "type": "PSP_ALTPLATFORM_INFO" + }, + { + "name": "AlternateDefaultCatalogFile", + "type": "PCSTR" + } + ], + "SetupSetFileQueueAlternatePlatformW": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "AlternatePlatformInfo", + "type": "PSP_ALTPLATFORM_INFO" + }, + { + "name": "AlternateDefaultCatalogFile", + "type": "PCWSTR" + } + ], + "SetupSetPlatformPathOverrideA": [ + { + "name": "Override", + "type": "PCSTR" + } + ], + "SetupSetPlatformPathOverrideW": [ + { + "name": "Override", + "type": "PCWSTR" + } + ], + "SetupQueueCopyA": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "SourceRootPath", + "type": "PCSTR" + }, + { + "name": "SourcePath", + "type": "PCSTR" + }, + { + "name": "SourceFilename", + "type": "PCSTR" + }, + { + "name": "SourceDescription", + "type": "PCSTR" + }, + { + "name": "SourceTagfile", + "type": "PCSTR" + }, + { + "name": "TargetDirectory", + "type": "PCSTR" + }, + { + "name": "TargetFilename", + "type": "PCSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + } + ], + "SetupQueueCopyW": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "SourceRootPath", + "type": "PCWSTR" + }, + { + "name": "SourcePath", + "type": "PCWSTR" + }, + { + "name": "SourceFilename", + "type": "PCWSTR" + }, + { + "name": "SourceDescription", + "type": "PCWSTR" + }, + { + "name": "SourceTagfile", + "type": "PCWSTR" + }, + { + "name": "TargetDirectory", + "type": "PCWSTR" + }, + { + "name": "TargetFilename", + "type": "PCWSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + } + ], + "SetupQueueCopyIndirectA": [ + { + "name": "CopyParams", + "type": "PSP_FILE_COPY_PARAMS_A" + } + ], + "SetupQueueCopyIndirectW": [ + { + "name": "CopyParams", + "type": "PSP_FILE_COPY_PARAMS_W" + } + ], + "SetupQueueDefaultCopyA": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SourceRootPath", + "type": "PCSTR" + }, + { + "name": "SourceFilename", + "type": "PCSTR" + }, + { + "name": "TargetFilename", + "type": "PCSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + } + ], + "SetupQueueDefaultCopyW": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SourceRootPath", + "type": "PCWSTR" + }, + { + "name": "SourceFilename", + "type": "PCWSTR" + }, + { + "name": "TargetFilename", + "type": "PCWSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + } + ], + "SetupQueueCopySectionA": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "SourceRootPath", + "type": "PCSTR" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + } + ], + "SetupQueueCopySectionW": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "SourceRootPath", + "type": "PCWSTR" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCWSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + } + ], + "SetupQueueDeleteA": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "PathPart1", + "type": "PCSTR" + }, + { + "name": "PathPart2", + "type": "PCSTR" + } + ], + "SetupQueueDeleteW": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "PathPart1", + "type": "PCWSTR" + }, + { + "name": "PathPart2", + "type": "PCWSTR" + } + ], + "SetupQueueDeleteSectionA": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCSTR" + } + ], + "SetupQueueDeleteSectionW": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCWSTR" + } + ], + "SetupQueueRenameA": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "SourcePath", + "type": "PCSTR" + }, + { + "name": "SourceFilename", + "type": "PCSTR" + }, + { + "name": "TargetPath", + "type": "PCSTR" + }, + { + "name": "TargetFilename", + "type": "PCSTR" + } + ], + "SetupQueueRenameW": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "SourcePath", + "type": "PCWSTR" + }, + { + "name": "SourceFilename", + "type": "PCWSTR" + }, + { + "name": "TargetPath", + "type": "PCWSTR" + }, + { + "name": "TargetFilename", + "type": "PCWSTR" + } + ], + "SetupQueueRenameSectionA": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCSTR" + } + ], + "SetupQueueRenameSectionW": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCWSTR" + } + ], + "SetupCommitFileQueueA": [ + { + "name": "Owner", + "type": "HWND" + }, + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "MsgHandler", + "type": "PSP_FILE_CALLBACK_A" + }, + { + "name": "Context", + "type": "PVOID" + } + ], + "SetupCommitFileQueueW": [ + { + "name": "Owner", + "type": "HWND" + }, + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "MsgHandler", + "type": "PSP_FILE_CALLBACK_W" + }, + { + "name": "Context", + "type": "PVOID" + } + ], + "SetupScanFileQueueA": [ + { + "name": "FileQueue", + "type": "HSPFILEQ" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Window", + "type": "HWND" + }, + { + "name": "CallbackRoutine", + "type": "PSP_FILE_CALLBACK_A" + }, + { + "name": "CallbackContext", + "type": "PVOID" + }, + { + "name": "Result", + "type": "PDWORD" + } + ], + "SetupScanFileQueueW": [ + { + "name": "FileQueue", + "type": "HSPFILEQ" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Window", + "type": "HWND" + }, + { + "name": "CallbackRoutine", + "type": "PSP_FILE_CALLBACK_W" + }, + { + "name": "CallbackContext", + "type": "PVOID" + }, + { + "name": "Result", + "type": "PDWORD" + } + ], + "SetupGetFileQueueCount": [ + { + "name": "FileQueue", + "type": "HSPFILEQ" + }, + { + "name": "SubQueueFileOp", + "type": "UINT" + }, + { + "name": "NumOperations", + "type": "PUINT" + } + ], + "SetupGetFileQueueFlags": [ + { + "name": "FileQueue", + "type": "HSPFILEQ" + }, + { + "name": "Flags", + "type": "PDWORD" + } + ], + "SetupSetFileQueueFlags": [ + { + "name": "FileQueue", + "type": "HSPFILEQ" + }, + { + "name": "FlagMask", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupCopyOEMInfA": [ + { + "name": "SourceInfFileName", + "type": "PCSTR" + }, + { + "name": "OEMSourceMediaLocation", + "type": "PCSTR" + }, + { + "name": "OEMSourceMediaType", + "type": "DWORD" + }, + { + "name": "CopyStyle", + "type": "DWORD" + }, + { + "name": "DestinationInfFileName", + "type": "PSTR" + }, + { + "name": "DestinationInfFileNameSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + }, + { + "name": "DestinationInfFileNameComponent", + "type": "PSTR" + } + ], + "SetupCopyOEMInfW": [ + { + "name": "SourceInfFileName", + "type": "PCWSTR" + }, + { + "name": "OEMSourceMediaLocation", + "type": "PCWSTR" + }, + { + "name": "OEMSourceMediaType", + "type": "DWORD" + }, + { + "name": "CopyStyle", + "type": "DWORD" + }, + { + "name": "DestinationInfFileName", + "type": "PWSTR" + }, + { + "name": "DestinationInfFileNameSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + }, + { + "name": "DestinationInfFileNameComponent", + "type": "PWSTR" + } + ], + "SetupUninstallOEMInfA": [ + { + "name": "InfFileName", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "PVOID" + } + ], + "SetupUninstallOEMInfW": [ + { + "name": "InfFileName", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "PVOID" + } + ], + "SetupUninstallNewlyCopiedInfs": [ + { + "name": "FileQueue", + "type": "HSPFILEQ" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "PVOID" + } + ], + "SetupCreateDiskSpaceListA": [ + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "SetupCreateDiskSpaceListW": [ + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "SetupDuplicateDiskSpaceListA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "SetupDuplicateDiskSpaceListW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "SetupDestroyDiskSpaceList": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + } + ], + "SetupQueryDrivesInDiskSpaceListA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupQueryDrivesInDiskSpaceListW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupQuerySpaceRequiredOnDriveA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "DriveSpec", + "type": "PCSTR" + }, + { + "name": "SpaceRequired", + "type": "LONGLONG" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupQuerySpaceRequiredOnDriveW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "DriveSpec", + "type": "PCWSTR" + }, + { + "name": "SpaceRequired", + "type": "LONGLONG" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupAdjustDiskSpaceListA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "DriveRoot", + "type": "LPCSTR" + }, + { + "name": "Amount", + "type": "LONGLONG" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupAdjustDiskSpaceListW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "DriveRoot", + "type": "LPCWSTR" + }, + { + "name": "Amount", + "type": "LONGLONG" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupAddToDiskSpaceListA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "TargetFilespec", + "type": "PCSTR" + }, + { + "name": "FileSize", + "type": "LONGLONG" + }, + { + "name": "Operation", + "type": "UINT" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupAddToDiskSpaceListW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "TargetFilespec", + "type": "PCWSTR" + }, + { + "name": "FileSize", + "type": "LONGLONG" + }, + { + "name": "Operation", + "type": "UINT" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupAddSectionToDiskSpaceListA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCSTR" + }, + { + "name": "Operation", + "type": "UINT" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupAddSectionToDiskSpaceListW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCWSTR" + }, + { + "name": "Operation", + "type": "UINT" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupAddInstallSectionToDiskSpaceListA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "LayoutInfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCSTR" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupAddInstallSectionToDiskSpaceListW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "LayoutInfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCWSTR" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupRemoveFromDiskSpaceListA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "TargetFilespec", + "type": "PCSTR" + }, + { + "name": "Operation", + "type": "UINT" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupRemoveFromDiskSpaceListW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "TargetFilespec", + "type": "PCWSTR" + }, + { + "name": "Operation", + "type": "UINT" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupRemoveSectionFromDiskSpaceListA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCSTR" + }, + { + "name": "Operation", + "type": "UINT" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupRemoveSectionFromDiskSpaceListW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCWSTR" + }, + { + "name": "Operation", + "type": "UINT" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupRemoveInstallSectionFromDiskSpaceListA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "LayoutInfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCSTR" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupRemoveInstallSectionFromDiskSpaceListW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "LayoutInfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCWSTR" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupIterateCabinetA": [ + { + "name": "CabinetFile", + "type": "PCSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "MsgHandler", + "type": "PSP_FILE_CALLBACK_A" + }, + { + "name": "Context", + "type": "PVOID" + } + ], + "SetupIterateCabinetW": [ + { + "name": "CabinetFile", + "type": "PCWSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "MsgHandler", + "type": "PSP_FILE_CALLBACK_W" + }, + { + "name": "Context", + "type": "PVOID" + } + ], + "SetupPromptReboot": [ + { + "name": "FileQueue", + "type": "HSPFILEQ" + }, + { + "name": "Owner", + "type": "HWND" + }, + { + "name": "ScanOnly", + "type": "BOOL" + } + ], + "SetupInitDefaultQueueCallback": [ + { + "name": "OwnerWindow", + "type": "HWND" + } + ], + "SetupInitDefaultQueueCallbackEx": [ + { + "name": "OwnerWindow", + "type": "HWND" + }, + { + "name": "AlternateProgressWindow", + "type": "HWND" + }, + { + "name": "ProgressMessage", + "type": "UINT" + }, + { + "name": "Reserved1", + "type": "DWORD" + }, + { + "name": "Reserved2", + "type": "PVOID" + } + ], + "SetupTermDefaultQueueCallback": [ + { + "name": "Context", + "type": "PVOID" + } + ], + "SetupDefaultQueueCallbackA": [ + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "Notification", + "type": "UINT" + }, + { + "name": "Param1", + "type": "UINT_PTR" + }, + { + "name": "Param2", + "type": "UINT_PTR" + } + ], + "SetupDefaultQueueCallbackW": [ + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "Notification", + "type": "UINT" + }, + { + "name": "Param1", + "type": "UINT_PTR" + }, + { + "name": "Param2", + "type": "UINT_PTR" + } + ], + "SetupInstallFromInfSectionA": [ + { + "name": "Owner", + "type": "HWND" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "RelativeKeyRoot", + "type": "HKEY" + }, + { + "name": "SourceRootPath", + "type": "PCSTR" + }, + { + "name": "CopyFlags", + "type": "UINT" + }, + { + "name": "MsgHandler", + "type": "PSP_FILE_CALLBACK_A" + }, + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupInstallFromInfSectionW": [ + { + "name": "Owner", + "type": "HWND" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "RelativeKeyRoot", + "type": "HKEY" + }, + { + "name": "SourceRootPath", + "type": "PCWSTR" + }, + { + "name": "CopyFlags", + "type": "UINT" + }, + { + "name": "MsgHandler", + "type": "PSP_FILE_CALLBACK_W" + }, + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupInstallFilesFromInfSectionA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "LayoutInfHandle", + "type": "HINF" + }, + { + "name": "FileQueue", + "type": "HSPFILEQ" + }, + { + "name": "SectionName", + "type": "PCSTR" + }, + { + "name": "SourceRootPath", + "type": "PCSTR" + }, + { + "name": "CopyFlags", + "type": "UINT" + } + ], + "SetupInstallFilesFromInfSectionW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "LayoutInfHandle", + "type": "HINF" + }, + { + "name": "FileQueue", + "type": "HSPFILEQ" + }, + { + "name": "SectionName", + "type": "PCWSTR" + }, + { + "name": "SourceRootPath", + "type": "PCWSTR" + }, + { + "name": "CopyFlags", + "type": "UINT" + } + ], + "SetupInstallServicesFromInfSectionA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupInstallServicesFromInfSectionW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupInstallServicesFromInfSectionExA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "PVOID" + } + ], + "SetupInstallServicesFromInfSectionExW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "PVOID" + } + ], + "InstallHinfSectionA": [ + { + "name": "Window", + "type": "HWND" + }, + { + "name": "ModuleHandle", + "type": "HINSTANCE" + }, + { + "name": "CommandLine", + "type": "PCSTR" + }, + { + "name": "ShowCommand", + "type": "INT" + } + ], + "InstallHinfSectionW": [ + { + "name": "Window", + "type": "HWND" + }, + { + "name": "ModuleHandle", + "type": "HINSTANCE" + }, + { + "name": "CommandLine", + "type": "PCWSTR" + }, + { + "name": "ShowCommand", + "type": "INT" + } + ], + "SetupInitializeFileLogA": [ + { + "name": "LogFileName", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupInitializeFileLogW": [ + { + "name": "LogFileName", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupTerminateFileLog": [ + { + "name": "FileLogHandle", + "type": "HSPFILELOG" + } + ], + "SetupLogFileA": [ + { + "name": "FileLogHandle", + "type": "HSPFILELOG" + }, + { + "name": "LogSectionName", + "type": "PCSTR" + }, + { + "name": "SourceFilename", + "type": "PCSTR" + }, + { + "name": "TargetFilename", + "type": "PCSTR" + }, + { + "name": "Checksum", + "type": "DWORD" + }, + { + "name": "DiskTagfile", + "type": "PCSTR" + }, + { + "name": "DiskDescription", + "type": "PCSTR" + }, + { + "name": "OtherInfo", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupLogFileW": [ + { + "name": "FileLogHandle", + "type": "HSPFILELOG" + }, + { + "name": "LogSectionName", + "type": "PCWSTR" + }, + { + "name": "SourceFilename", + "type": "PCWSTR" + }, + { + "name": "TargetFilename", + "type": "PCWSTR" + }, + { + "name": "Checksum", + "type": "DWORD" + }, + { + "name": "DiskTagfile", + "type": "PCWSTR" + }, + { + "name": "DiskDescription", + "type": "PCWSTR" + }, + { + "name": "OtherInfo", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupRemoveFileLogEntryA": [ + { + "name": "FileLogHandle", + "type": "HSPFILELOG" + }, + { + "name": "LogSectionName", + "type": "PCSTR" + }, + { + "name": "TargetFilename", + "type": "PCSTR" + } + ], + "SetupRemoveFileLogEntryW": [ + { + "name": "FileLogHandle", + "type": "HSPFILELOG" + }, + { + "name": "LogSectionName", + "type": "PCWSTR" + }, + { + "name": "TargetFilename", + "type": "PCWSTR" + } + ], + "SetupQueryFileLogA": [ + { + "name": "FileLogHandle", + "type": "HSPFILELOG" + }, + { + "name": "LogSectionName", + "type": "PCSTR" + }, + { + "name": "TargetFilename", + "type": "PCSTR" + }, + { + "name": "DesiredInfo", + "type": "SetupFileLogInfo" + }, + { + "name": "DataOut", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupQueryFileLogW": [ + { + "name": "FileLogHandle", + "type": "HSPFILELOG" + }, + { + "name": "LogSectionName", + "type": "PCWSTR" + }, + { + "name": "TargetFilename", + "type": "PCWSTR" + }, + { + "name": "DesiredInfo", + "type": "SetupFileLogInfo" + }, + { + "name": "DataOut", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupOpenLog": [ + { + "name": "Erase", + "type": "BOOL" + } + ], + "SetupLogErrorA": [ + { + "name": "MessageString", + "type": "LPCSTR" + }, + { + "name": "Severity", + "type": "DWORD" + } + ], + "SetupLogErrorW": [ + { + "name": "MessageString", + "type": "LPCWSTR" + }, + { + "name": "Severity", + "type": "DWORD" + } + ], + "SetupCloseLog": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetupWriteTextLogInfLine": [ + { + "name": "LogToken", + "type": "SP_LOG_TOKEN" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Context", + "type": "PINFCONTEXT" + } + ], + "SetupSetNonInteractiveMode": [ + { + "name": "NonInteractiveFlag", + "type": "BOOL" + } + ], + "SetupGetNonInteractiveMode": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetupDiCreateDeviceInfoList": [ + { + "name": "ClassGuid", + "type": "GUID" + }, + { + "name": "hwndParent", + "type": "HWND" + } + ], + "SetupDiGetDeviceInfoListClass": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "ClassGuid", + "type": "LPGUID" + } + ], + "SetupDiDeleteDeviceInfo": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiEnumDeviceInfo": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "MemberIndex", + "type": "DWORD" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiDestroyDeviceInfoList": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + } + ], + "SetupDiEnumDeviceInterfaces": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "InterfaceClassGuid", + "type": "GUID" + }, + { + "name": "MemberIndex", + "type": "DWORD" + }, + { + "name": "DeviceInterfaceData", + "type": "PSP_DEVICE_INTERFACE_DATA" + } + ], + "SetupDiGetDeviceInterfaceAlias": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInterfaceData", + "type": "PSP_DEVICE_INTERFACE_DATA" + }, + { + "name": "AliasInterfaceClassGuid", + "type": "GUID" + }, + { + "name": "AliasDeviceInterfaceData", + "type": "PSP_DEVICE_INTERFACE_DATA" + } + ], + "SetupDiDeleteDeviceInterfaceData": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInterfaceData", + "type": "PSP_DEVICE_INTERFACE_DATA" + } + ], + "SetupDiRemoveDeviceInterface": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInterfaceData", + "type": "PSP_DEVICE_INTERFACE_DATA" + } + ], + "SetupDiInstallDeviceInterfaces": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiSetDeviceInterfaceDefault": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInterfaceData", + "type": "PSP_DEVICE_INTERFACE_DATA" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "PVOID" + } + ], + "SetupDiRegisterDeviceInfo": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "CompareProc", + "type": "PSP_DETSIG_CMPPROC" + }, + { + "name": "CompareContext", + "type": "PVOID" + }, + { + "name": "DupDeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiBuildDriverInfoList": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "DriverType", + "type": "DWORD" + } + ], + "SetupDiCancelDriverInfoSearch": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + } + ], + "SetupDiDestroyDriverInfoList": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "DriverType", + "type": "DWORD" + } + ], + "SetupDiGetClassDevsA": [ + { + "name": "ClassGuid", + "type": "GUID" + }, + { + "name": "Enumerator", + "type": "PCSTR" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupDiGetClassDevsW": [ + { + "name": "ClassGuid", + "type": "GUID" + }, + { + "name": "Enumerator", + "type": "PCWSTR" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupDiBuildClassInfoList": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ClassGuidList", + "type": "LPGUID" + }, + { + "name": "ClassGuidListSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupDiCallClassInstaller": [ + { + "name": "InstallFunction", + "type": "DI_FUNCTION" + }, + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiSelectDevice": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiSelectBestCompatDrv": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiInstallDevice": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiInstallDriverFiles": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiRegisterCoDeviceInstallers": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiRemoveDevice": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiUnremoveDevice": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiRestartDevices": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiChangeState": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiOpenClassRegKey": [ + { + "name": "ClassGuid", + "type": "GUID" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "SetupDiOpenDeviceInterfaceRegKey": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInterfaceData", + "type": "PSP_DEVICE_INTERFACE_DATA" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "SetupDiDeleteDeviceInterfaceRegKey": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInterfaceData", + "type": "PSP_DEVICE_INTERFACE_DATA" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "SetupDiOpenDevRegKey": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "Scope", + "type": "DWORD" + }, + { + "name": "HwProfile", + "type": "DWORD" + }, + { + "name": "KeyType", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "SetupDiDeleteDevRegKey": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "Scope", + "type": "DWORD" + }, + { + "name": "HwProfile", + "type": "DWORD" + }, + { + "name": "KeyType", + "type": "DWORD" + } + ], + "SetupDiGetHwProfileList": [ + { + "name": "HwProfileList", + "type": "PDWORD" + }, + { + "name": "HwProfileListSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + }, + { + "name": "CurrentlyActiveIndex", + "type": "PDWORD" + } + ], + "SetupDiGetDevicePropertyKeys": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "PropertyKeyArray", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyKeyCount", + "type": "DWORD" + }, + { + "name": "RequiredPropertyKeyCount", + "type": "PDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupDiGetDevicePropertyW": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupDiGetDeviceInterfacePropertyKeys": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInterfaceData", + "type": "PSP_DEVICE_INTERFACE_DATA" + }, + { + "name": "PropertyKeyArray", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyKeyCount", + "type": "DWORD" + }, + { + "name": "RequiredPropertyKeyCount", + "type": "PDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupDiGetClassPropertyKeys": [ + { + "name": "ClassGuid", + "type": "GUID" + }, + { + "name": "PropertyKeyArray", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyKeyCount", + "type": "DWORD" + }, + { + "name": "RequiredPropertyKeyCount", + "type": "PDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupDiLoadClassIcon": [ + { + "name": "ClassGuid", + "type": "GUID" + }, + { + "name": "LargeIcon", + "type": "HICON" + }, + { + "name": "MiniIconIndex", + "type": "PINT" + } + ], + "SetupDiLoadDeviceIcon": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "cxIcon", + "type": "UINT" + }, + { + "name": "cyIcon", + "type": "UINT" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "hIcon", + "type": "HICON" + } + ], + "SetupDiDrawMiniIcon": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "rc", + "type": "RECT" + }, + { + "name": "MiniIconIndex", + "type": "INT" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupDiGetClassBitmapIndex": [ + { + "name": "ClassGuid", + "type": "GUID" + }, + { + "name": "MiniIconIndex", + "type": "PINT" + } + ], + "SetupDiGetClassImageList": [ + { + "name": "ClassImageListData", + "type": "PSP_CLASSIMAGELIST_DATA" + } + ], + "SetupDiGetClassImageIndex": [ + { + "name": "ClassImageListData", + "type": "PSP_CLASSIMAGELIST_DATA" + }, + { + "name": "ClassGuid", + "type": "GUID" + }, + { + "name": "ImageIndex", + "type": "PINT" + } + ], + "SetupDiDestroyClassImageList": [ + { + "name": "ClassImageListData", + "type": "PSP_CLASSIMAGELIST_DATA" + } + ], + "SetupDiAskForOEMDisk": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiSelectOEMDrv": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiGetSelectedDevice": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiSetSelectedDevice": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupEnumInfSectionsA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Index", + "type": "UINT" + }, + { + "name": "Buffer", + "type": "PSTR" + }, + { + "name": "Size", + "type": "UINT" + }, + { + "name": "SizeNeeded", + "type": "UINT" + } + ], + "SetupEnumInfSectionsW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Index", + "type": "UINT" + }, + { + "name": "Buffer", + "type": "PWSTR" + }, + { + "name": "Size", + "type": "UINT" + }, + { + "name": "SizeNeeded", + "type": "UINT" + } + ], + "SetupVerifyInfFileA": [ + { + "name": "InfName", + "type": "PCSTR" + }, + { + "name": "AltPlatformInfo", + "type": "PSP_ALTPLATFORM_INFO" + }, + { + "name": "InfSignerInfo", + "type": "PSP_INF_SIGNER_INFO_A" + } + ], + "SetupVerifyInfFileW": [ + { + "name": "InfName", + "type": "PCWSTR" + }, + { + "name": "AltPlatformInfo", + "type": "PSP_ALTPLATFORM_INFO" + }, + { + "name": "InfSignerInfo", + "type": "PSP_INF_SIGNER_INFO_W" + } + ], + "SetupDiGetCustomDevicePropertyA": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "CustomPropertyName", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PropertyRegDataType", + "type": "PDWORD" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupDiGetCustomDevicePropertyW": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "CustomPropertyName", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PropertyRegDataType", + "type": "PDWORD" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupConfigureWmiFromInfSectionA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupConfigureWmiFromInfSectionW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/setupapi_lib.json b/qiling/extensions/windows_sdk/defs/setupapi_lib.json new file mode 100644 index 000000000..389ab8827 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/setupapi_lib.json @@ -0,0 +1,26 @@ +{ + "SetupGetThreadLogToken": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetupWriteTextLog": [ + { + "name": "LogToken", + "type": "SP_LOG_TOKEN" + }, + { + "name": "Category", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "MessageStr", + "type": "PCSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/sfc_dll.json b/qiling/extensions/windows_sdk/defs/sfc_dll.json new file mode 100644 index 000000000..519220bfd --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/sfc_dll.json @@ -0,0 +1,36 @@ +{ + "SfcGetNextProtectedFile": [ + { + "name": "RpcHandle", + "type": "HANDLE" + }, + { + "name": "ProtFileData", + "type": "PPROTECTED_FILE_DATA" + } + ], + "SfcIsFileProtected": [ + { + "name": "RpcHandle", + "type": "HANDLE" + }, + { + "name": "ProtFileName", + "type": "LPCWSTR" + } + ], + "SfcIsKeyProtected": [ + { + "name": "KeyHandle", + "type": "HKEY" + }, + { + "name": "SubKeyName", + "type": "LPCWSTR" + }, + { + "name": "KeySam", + "type": "REGSAM" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/shcore_dll.json b/qiling/extensions/windows_sdk/defs/shcore_dll.json new file mode 100644 index 000000000..b7c75e55d --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/shcore_dll.json @@ -0,0 +1,146 @@ +{ + "CreateRandomAccessStreamOnFile": [ + { + "name": "filePath", + "type": "PCWSTR" + }, + { + "name": "accessMode", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CreateRandomAccessStreamOverStream": [ + { + "name": "stream", + "type": "IStream" + }, + { + "name": "options", + "type": "BSOS_OPTIONS" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CreateStreamOverRandomAccessStream": [ + { + "name": "randomAccessStream", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "GetScaleFactorForDevice": [ + { + "name": "deviceType", + "type": "DISPLAY_DEVICE_TYPE" + } + ], + "RegisterScaleChangeNotifications": [ + { + "name": "displayDevice", + "type": "DISPLAY_DEVICE_TYPE" + }, + { + "name": "hwndNotify", + "type": "HWND" + }, + { + "name": "uMsgNotify", + "type": "UINT" + }, + { + "name": "pdwCookie", + "type": "DWORD" + } + ], + "RevokeScaleChangeNotifications": [ + { + "name": "displayDevice", + "type": "DISPLAY_DEVICE_TYPE" + }, + { + "name": "dwCookie", + "type": "DWORD" + } + ], + "GetScaleFactorForMonitor": [ + { + "name": "hMon", + "type": "HMONITOR" + }, + { + "name": "pScale", + "type": "DEVICE_SCALE_FACTOR" + } + ], + "RegisterScaleChangeEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "pdwCookie", + "type": "DWORD_PTR" + } + ], + "UnregisterScaleChangeEvent": [ + { + "name": "dwCookie", + "type": "DWORD_PTR" + } + ], + "SetProcessDpiAwareness": [ + { + "name": "value", + "type": "PROCESS_DPI_AWARENESS" + } + ], + "GetProcessDpiAwareness": [ + { + "name": "hprocess", + "type": "HANDLE" + }, + { + "name": "value", + "type": "PROCESS_DPI_AWARENESS" + } + ], + "GetDpiForMonitor": [ + { + "name": "hmonitor", + "type": "HMONITOR" + }, + { + "name": "dpiType", + "type": "MONITOR_DPI_TYPE" + }, + { + "name": "dpiX", + "type": "UINT" + }, + { + "name": "dpiY", + "type": "UINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/shdocvw_dll.json b/qiling/extensions/windows_sdk/defs/shdocvw_dll.json new file mode 100644 index 000000000..a068cc86c --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/shdocvw_dll.json @@ -0,0 +1,20 @@ +{ + "SoftwareUpdateMessageBox": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pszDistUnit", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "psdi", + "type": "LPSOFTDISTINFO" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/shell32_dll.json b/qiling/extensions/windows_sdk/defs/shell32_dll.json new file mode 100644 index 000000000..4fd57ba1d --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/shell32_dll.json @@ -0,0 +1,3464 @@ +{ + "DragQueryFileA": [ + { + "name": "hDrop", + "type": "HDROP" + }, + { + "name": "iFile", + "type": "UINT" + }, + { + "name": "lpszFile", + "type": "LPSTR" + }, + { + "name": "cch", + "type": "UINT" + } + ], + "DragQueryFileW": [ + { + "name": "hDrop", + "type": "HDROP" + }, + { + "name": "iFile", + "type": "UINT" + }, + { + "name": "lpszFile", + "type": "LPWSTR" + }, + { + "name": "cch", + "type": "UINT" + } + ], + "DragQueryPoint": [ + { + "name": "hDrop", + "type": "HDROP" + }, + { + "name": "ppt", + "type": "POINT" + } + ], + "DragFinish": [ + { + "name": "hDrop", + "type": "HDROP" + } + ], + "DragAcceptFiles": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "fAccept", + "type": "BOOL" + } + ], + "ShellExecuteA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "lpOperation", + "type": "LPCSTR" + }, + { + "name": "lpFile", + "type": "LPCSTR" + }, + { + "name": "lpParameters", + "type": "LPCSTR" + }, + { + "name": "lpDirectory", + "type": "LPCSTR" + }, + { + "name": "nShowCmd", + "type": "INT" + } + ], + "ShellExecuteW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "lpOperation", + "type": "LPCWSTR" + }, + { + "name": "lpFile", + "type": "LPCWSTR" + }, + { + "name": "lpParameters", + "type": "LPCWSTR" + }, + { + "name": "lpDirectory", + "type": "LPCWSTR" + }, + { + "name": "nShowCmd", + "type": "INT" + } + ], + "FindExecutableA": [ + { + "name": "lpFile", + "type": "LPCSTR" + }, + { + "name": "lpDirectory", + "type": "LPCSTR" + }, + { + "name": "lpResult", + "type": "LPSTR" + } + ], + "FindExecutableW": [ + { + "name": "lpFile", + "type": "LPCWSTR" + }, + { + "name": "lpDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpResult", + "type": "LPWSTR" + } + ], + "ShellAboutA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "szApp", + "type": "LPCSTR" + }, + { + "name": "szOtherStuff", + "type": "LPCSTR" + }, + { + "name": "hIcon", + "type": "HICON" + } + ], + "ShellAboutW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "szApp", + "type": "LPCWSTR" + }, + { + "name": "szOtherStuff", + "type": "LPCWSTR" + }, + { + "name": "hIcon", + "type": "HICON" + } + ], + "DuplicateIcon": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "hIcon", + "type": "HICON" + } + ], + "ExtractAssociatedIconA": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "pszIconPath", + "type": "LPSTR" + }, + { + "name": "piIcon", + "type": "WORD" + } + ], + "ExtractAssociatedIconW": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "pszIconPath", + "type": "LPWSTR" + }, + { + "name": "piIcon", + "type": "WORD" + } + ], + "ExtractAssociatedIconExA": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "pszIconPath", + "type": "LPSTR" + }, + { + "name": "piIconIndex", + "type": "WORD" + }, + { + "name": "piIconId", + "type": "WORD" + } + ], + "ExtractAssociatedIconExW": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "pszIconPath", + "type": "LPWSTR" + }, + { + "name": "piIconIndex", + "type": "WORD" + }, + { + "name": "piIconId", + "type": "WORD" + } + ], + "ExtractIconA": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "pszExeFileName", + "type": "LPCSTR" + }, + { + "name": "nIconIndex", + "type": "UINT" + } + ], + "ExtractIconW": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "pszExeFileName", + "type": "LPCWSTR" + }, + { + "name": "nIconIndex", + "type": "UINT" + } + ], + "SHAppBarMessage": [ + { + "name": "dwMessage", + "type": "DWORD" + }, + { + "name": "pData", + "type": "PAPPBARDATA" + } + ], + "DoEnvironmentSubstA": [ + { + "name": "pszSrc", + "type": "LPSTR" + }, + { + "name": "cchSrc", + "type": "UINT" + } + ], + "DoEnvironmentSubstW": [ + { + "name": "pszSrc", + "type": "LPWSTR" + }, + { + "name": "cchSrc", + "type": "UINT" + } + ], + "ExtractIconExA": [ + { + "name": "lpszFile", + "type": "LPCSTR" + }, + { + "name": "nIconIndex", + "type": "int" + }, + { + "name": "phiconLarge", + "type": "HICON" + }, + { + "name": "phiconSmall", + "type": "HICON" + }, + { + "name": "nIcons", + "type": "UINT" + } + ], + "ExtractIconExW": [ + { + "name": "lpszFile", + "type": "LPCWSTR" + }, + { + "name": "nIconIndex", + "type": "int" + }, + { + "name": "phiconLarge", + "type": "HICON" + }, + { + "name": "phiconSmall", + "type": "HICON" + }, + { + "name": "nIcons", + "type": "UINT" + } + ], + "SHFileOperationA": [ + { + "name": "lpFileOp", + "type": "LPSHFILEOPSTRUCTA" + } + ], + "SHFileOperationW": [ + { + "name": "lpFileOp", + "type": "LPSHFILEOPSTRUCTW" + } + ], + "SHFreeNameMappings": [ + { + "name": "hNameMappings", + "type": "HANDLE" + } + ], + "ShellExecuteExA": [ + { + "name": "pExecInfo", + "type": "SHELLEXECUTEINFOA" + } + ], + "ShellExecuteExW": [ + { + "name": "pExecInfo", + "type": "SHELLEXECUTEINFOW" + } + ], + "SHCreateProcessAsUserW": [ + { + "name": "pscpi", + "type": "PSHCREATEPROCESSINFOW" + } + ], + "SHEvaluateSystemCommandTemplate": [ + { + "name": "pszCmdTemplate", + "type": "PCWSTR" + }, + { + "name": "ppszApplication", + "type": "PWSTR" + }, + { + "name": "ppszCommandLine", + "type": "PWSTR" + }, + { + "name": "ppszParameters", + "type": "PWSTR" + } + ], + "AssocCreateForClasses": [ + { + "name": "rgClasses", + "type": "ASSOCIATIONELEMENT" + }, + { + "name": "cClasses", + "type": "ULONG" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHQueryRecycleBinA": [ + { + "name": "pszRootPath", + "type": "LPCSTR" + }, + { + "name": "pSHQueryRBInfo", + "type": "LPSHQUERYRBINFO" + } + ], + "SHQueryRecycleBinW": [ + { + "name": "pszRootPath", + "type": "LPCWSTR" + }, + { + "name": "pSHQueryRBInfo", + "type": "LPSHQUERYRBINFO" + } + ], + "SHEmptyRecycleBinA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszRootPath", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHEmptyRecycleBinW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszRootPath", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHQueryUserNotificationState": [ + { + "name": "pquns", + "type": "QUERY_USER_NOTIFICATION_STATE" + } + ], + "SHGetPropertyStoreForWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "Shell_NotifyIconA": [ + { + "name": "dwMessage", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "PNOTIFYICONDATAA" + } + ], + "Shell_NotifyIconW": [ + { + "name": "dwMessage", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "PNOTIFYICONDATAW" + } + ], + "Shell_NotifyIconGetRect": [ + { + "name": "identifier", + "type": "NOTIFYICONIDENTIFIER" + }, + { + "name": "iconLocation", + "type": "RECT" + } + ], + "SHGetFileInfoA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "dwFileAttributes", + "type": "DWORD" + }, + { + "name": "psfi", + "type": "SHFILEINFOA" + }, + { + "name": "cbFileInfo", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "SHGetFileInfoW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "dwFileAttributes", + "type": "DWORD" + }, + { + "name": "psfi", + "type": "SHFILEINFOW" + }, + { + "name": "cbFileInfo", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "SHGetStockIconInfo": [ + { + "name": "siid", + "type": "SHSTOCKICONID" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "psii", + "type": "SHSTOCKICONINFO" + } + ], + "SHGetDiskFreeSpaceExA": [ + { + "name": "pszDirectoryName", + "type": "LPCSTR" + }, + { + "name": "pulFreeBytesAvailableToCaller", + "type": "ULARGE_INTEGER" + }, + { + "name": "pulTotalNumberOfBytes", + "type": "ULARGE_INTEGER" + }, + { + "name": "pulTotalNumberOfFreeBytes", + "type": "ULARGE_INTEGER" + } + ], + "SHGetDiskFreeSpaceExW": [ + { + "name": "pszDirectoryName", + "type": "LPCWSTR" + }, + { + "name": "pulFreeBytesAvailableToCaller", + "type": "ULARGE_INTEGER" + }, + { + "name": "pulTotalNumberOfBytes", + "type": "ULARGE_INTEGER" + }, + { + "name": "pulTotalNumberOfFreeBytes", + "type": "ULARGE_INTEGER" + } + ], + "SHGetNewLinkInfoA": [ + { + "name": "pszLinkTo", + "type": "LPCSTR" + }, + { + "name": "pszDir", + "type": "LPCSTR" + }, + { + "name": "pszName", + "type": "LPSTR" + }, + { + "name": "pfMustCopy", + "type": "BOOL" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "SHGetNewLinkInfoW": [ + { + "name": "pszLinkTo", + "type": "LPCWSTR" + }, + { + "name": "pszDir", + "type": "LPCWSTR" + }, + { + "name": "pszName", + "type": "LPWSTR" + }, + { + "name": "pfMustCopy", + "type": "BOOL" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "SHInvokePrinterCommandA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "uAction", + "type": "UINT" + }, + { + "name": "lpBuf1", + "type": "LPCSTR" + }, + { + "name": "lpBuf2", + "type": "LPCSTR" + }, + { + "name": "fModal", + "type": "BOOL" + } + ], + "SHInvokePrinterCommandW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "uAction", + "type": "UINT" + }, + { + "name": "lpBuf1", + "type": "LPCWSTR" + }, + { + "name": "lpBuf2", + "type": "LPCWSTR" + }, + { + "name": "fModal", + "type": "BOOL" + } + ], + "SHLoadNonloadedIconOverlayIdentifiers": [ + { + "name": "VOID", + "type": "void" + } + ], + "SHIsFileAvailableOffline": [ + { + "name": "pwszPath", + "type": "PCWSTR" + }, + { + "name": "pdwStatus", + "type": "DWORD" + } + ], + "SHSetLocalizedName": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "pszResModule", + "type": "PCWSTR" + }, + { + "name": "idsRes", + "type": "int" + } + ], + "SHRemoveLocalizedName": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "SHGetLocalizedName": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "pszResModule", + "type": "PWSTR" + }, + { + "name": "cch", + "type": "UINT" + }, + { + "name": "pidsRes", + "type": "int" + } + ], + "SHEnumerateUnreadMailAccountsA": [ + { + "name": "hKeyUser", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszMailAddress", + "type": "LPSTR" + }, + { + "name": "cchMailAddress", + "type": "int" + } + ], + "SHEnumerateUnreadMailAccountsW": [ + { + "name": "hKeyUser", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszMailAddress", + "type": "LPWSTR" + }, + { + "name": "cchMailAddress", + "type": "int" + } + ], + "SHGetUnreadMailCountW": [ + { + "name": "hKeyUser", + "type": "HKEY" + }, + { + "name": "pszMailAddress", + "type": "LPCWSTR" + }, + { + "name": "pdwCount", + "type": "DWORD" + }, + { + "name": "pFileTime", + "type": "FILETIME" + }, + { + "name": "pszShellExecuteCommand", + "type": "LPWSTR" + }, + { + "name": "cchShellExecuteCommand", + "type": "int" + } + ], + "SHSetUnreadMailCountW": [ + { + "name": "pszMailAddress", + "type": "LPCWSTR" + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "pszShellExecuteCommand", + "type": "LPCWSTR" + } + ], + "SHTestTokenMembership": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "ulRID", + "type": "ULONG" + } + ], + "SHGetImageList": [ + { + "name": "iImageList", + "type": "int" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObj", + "type": "void" + } + ], + "InitNetworkAddressControl": [ + { + "name": "VOID", + "type": "void" + } + ], + "SHGetDriveMedia": [ + { + "name": "pszDrive", + "type": "PCWSTR" + }, + { + "name": "pdwMediaContent", + "type": "DWORD" + } + ], + "SHGetMalloc": [ + { + "name": "ppMalloc", + "type": "IMalloc" + } + ], + "SHFree": [ + { + "name": "pv", + "type": "void" + } + ], + "SHGetIconOverlayIndexA": [ + { + "name": "pszIconPath", + "type": "LPCSTR" + }, + { + "name": "iIconIndex", + "type": "int" + } + ], + "SHGetIconOverlayIndexW": [ + { + "name": "pszIconPath", + "type": "LPCWSTR" + }, + { + "name": "iIconIndex", + "type": "int" + } + ], + "ILClone": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "ILCloneFirst": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "ILCombine": [ + { + "name": "pidl1", + "type": "LPCITEMIDLIST" + }, + { + "name": "pidl2", + "type": "LPCITEMIDLIST" + } + ], + "ILFree": [ + { + "name": "pidl", + "type": "LPITEMIDLIST" + } + ], + "ILGetNext": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "ILGetSize": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "ILFindChild": [ + { + "name": "pidlParent", + "type": "LPITEMIDLIST" + }, + { + "name": "pidlChild", + "type": "LPCITEMIDLIST" + } + ], + "ILFindLastID": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "ILRemoveLastID": [ + { + "name": "pidl", + "type": "LPITEMIDLIST" + } + ], + "ILIsEqual": [ + { + "name": "pidl1", + "type": "LPCITEMIDLIST" + }, + { + "name": "pidl2", + "type": "LPCITEMIDLIST" + } + ], + "ILIsParent": [ + { + "name": "pidl1", + "type": "LPCITEMIDLIST" + }, + { + "name": "pidl2", + "type": "LPCITEMIDLIST" + }, + { + "name": "fImmediate", + "type": "BOOL" + } + ], + "ILSaveToStream": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "ILLoadFromStream": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pidl", + "type": "LPITEMIDLIST" + } + ], + "ILCreateFromPathA": [ + { + "name": "pszPath", + "type": "PCSTR" + } + ], + "ILCreateFromPathW": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "SHILCreateFromPath": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "ppidl", + "type": "LPITEMIDLIST" + }, + { + "name": "rgfInOut", + "type": "DWORD" + } + ], + "ILAppendID": [ + { + "name": "pidl", + "type": "LPITEMIDLIST" + }, + { + "name": "pmkid", + "type": "LPCSHITEMID" + }, + { + "name": "fAppend", + "type": "BOOL" + } + ], + "SHGetPathFromIDListEx": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "DWORD" + }, + { + "name": "uOpts", + "type": "GPFIDL_FLAGS" + } + ], + "SHGetPathFromIDListA": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "SHGetPathFromIDListW": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "SHCreateDirectory": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "SHCreateDirectoryExA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "psa", + "type": "SECURITY_ATTRIBUTES" + } + ], + "SHCreateDirectoryExW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "psa", + "type": "SECURITY_ATTRIBUTES" + } + ], + "SHOpenFolderAndSelectItems": [ + { + "name": "pidlFolder", + "type": "LPCITEMIDLIST" + }, + { + "name": "cidl", + "type": "UINT" + }, + { + "name": "apidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHCreateShellItem": [ + { + "name": "pidlParent", + "type": "LPCITEMIDLIST" + }, + { + "name": "psfParent", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppsi", + "type": "IShellItem" + } + ], + "SHGetSpecialFolderLocation": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "ppidl", + "type": "LPITEMIDLIST" + } + ], + "SHCloneSpecialIDList": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "fCreate", + "type": "BOOL" + } + ], + "SHGetSpecialFolderPathA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "fCreate", + "type": "BOOL" + } + ], + "SHGetSpecialFolderPathW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "fCreate", + "type": "BOOL" + } + ], + "SHFlushSFCache": [ + { + "name": "VOID", + "type": "void" + } + ], + "SHGetFolderPathA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "SHGetFolderPathW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "SHGetFolderLocation": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppidl", + "type": "LPITEMIDLIST" + } + ], + "SHSetFolderPathA": [ + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "SHSetFolderPathW": [ + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "SHGetFolderPathAndSubDirA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszSubDir", + "type": "LPCSTR" + }, + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "SHGetFolderPathAndSubDirW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszSubDir", + "type": "LPCWSTR" + }, + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "SHGetKnownFolderIDList": [ + { + "name": "rfid", + "type": "KNOWNFOLDERID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "ppidl", + "type": "LPITEMIDLIST" + } + ], + "SHSetKnownFolderPath": [ + { + "name": "rfid", + "type": "KNOWNFOLDERID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "SHGetKnownFolderPath": [ + { + "name": "rfid", + "type": "KNOWNFOLDERID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "ppszPath", + "type": "PWSTR" + } + ], + "SHGetKnownFolderItem": [ + { + "name": "rfid", + "type": "KNOWNFOLDERID" + }, + { + "name": "flags", + "type": "KNOWN_FOLDER_FLAG" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHGetSetFolderCustomSettings": [ + { + "name": "pfcs", + "type": "LPSHFOLDERCUSTOMSETTINGS" + }, + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "dwReadWrite", + "type": "DWORD" + } + ], + "SHBrowseForFolderA": [ + { + "name": "lpbi", + "type": "LPBROWSEINFOA" + } + ], + "SHBrowseForFolderW": [ + { + "name": "lpbi", + "type": "LPBROWSEINFOW" + } + ], + "SHLoadInProc": [ + { + "name": "rclsid", + "type": "IID" + } + ], + "SHGetDesktopFolder": [ + { + "name": "ppshf", + "type": "IShellFolder" + } + ], + "SHChangeNotify": [ + { + "name": "wEventId", + "type": "LONG" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "dwItem1", + "type": "LPCVOID" + }, + { + "name": "dwItem2", + "type": "LPCVOID" + } + ], + "SHAddToRecentDocs": [ + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "pv", + "type": "LPCVOID" + } + ], + "SHHandleUpdateImage": [ + { + "name": "pidlExtra", + "type": "LPCITEMIDLIST" + } + ], + "SHUpdateImageA": [ + { + "name": "pszHashItem", + "type": "LPCSTR" + }, + { + "name": "iIndex", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "iImageIndex", + "type": "int" + } + ], + "SHUpdateImageW": [ + { + "name": "pszHashItem", + "type": "LPCWSTR" + }, + { + "name": "iIndex", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "iImageIndex", + "type": "int" + } + ], + "SHChangeNotifyRegister": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "fSources", + "type": "int" + }, + { + "name": "fEvents", + "type": "LONG" + }, + { + "name": "wMsg", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "int" + }, + { + "name": "pshcne", + "type": "SHChangeNotifyEntry" + } + ], + "SHChangeNotifyDeregister": [ + { + "name": "ulID", + "type": "ULONG" + } + ], + "SHChangeNotification_Lock": [ + { + "name": "hChange", + "type": "HANDLE" + }, + { + "name": "dwProcId", + "type": "DWORD" + }, + { + "name": "pppidl", + "type": "LPITEMIDLIST" + }, + { + "name": "plEvent", + "type": "LONG" + } + ], + "SHChangeNotification_Unlock": [ + { + "name": "hLock", + "type": "HANDLE" + } + ], + "SHGetRealIDL": [ + { + "name": "psf", + "type": "IShellFolder" + }, + { + "name": "pidlSimple", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppidlReal", + "type": "LPITEMIDLIST" + } + ], + "SHGetInstanceExplorer": [ + { + "name": "ppunk", + "type": "IUnknown" + } + ], + "SHGetDataFromIDListA": [ + { + "name": "psf", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "nFormat", + "type": "int" + }, + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "int" + } + ], + "SHGetDataFromIDListW": [ + { + "name": "psf", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "nFormat", + "type": "int" + }, + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "int" + } + ], + "RestartDialog": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPrompt", + "type": "PCWSTR" + }, + { + "name": "dwReturn", + "type": "DWORD" + } + ], + "RestartDialogEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPrompt", + "type": "PCWSTR" + }, + { + "name": "dwReturn", + "type": "DWORD" + }, + { + "name": "dwReasonCode", + "type": "DWORD" + } + ], + "SHCoCreateInstance": [ + { + "name": "pszCLSID", + "type": "PCWSTR" + }, + { + "name": "pclsid", + "type": "CLSID" + }, + { + "name": "pUnkOuter", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHCreateDataObject": [ + { + "name": "pidlFolder", + "type": "LPCITEMIDLIST" + }, + { + "name": "cidl", + "type": "UINT" + }, + { + "name": "apidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pdtInner", + "type": "IDataObject" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CIDLData_CreateFromIDArray": [ + { + "name": "pidlFolder", + "type": "LPCITEMIDLIST" + }, + { + "name": "cidl", + "type": "UINT" + }, + { + "name": "apidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppdtobj", + "type": "IDataObject" + } + ], + "SHCreateStdEnumFmtEtc": [ + { + "name": "cfmt", + "type": "UINT" + }, + { + "name": "afmt", + "type": "FORMATETC" + }, + { + "name": "ppenumFormatEtc", + "type": "IEnumFORMATETC" + } + ], + "SHDoDragDrop": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pdata", + "type": "IDataObject" + }, + { + "name": "pdsrc", + "type": "IDropSource" + }, + { + "name": "dwEffect", + "type": "DWORD" + }, + { + "name": "pdwEffect", + "type": "DWORD" + } + ], + "DAD_SetDragImage": [ + { + "name": "him", + "type": "HIMAGELIST" + }, + { + "name": "pptOffset", + "type": "POINT" + } + ], + "DAD_DragEnterEx": [ + { + "name": "hwndTarget", + "type": "HWND" + }, + { + "name": "ptStart", + "type": "POINT" + } + ], + "DAD_DragEnterEx2": [ + { + "name": "hwndTarget", + "type": "HWND" + }, + { + "name": "ptStart", + "type": "POINT" + }, + { + "name": "pdtObject", + "type": "IDataObject" + } + ], + "DAD_ShowDragImage": [ + { + "name": "fShow", + "type": "BOOL" + } + ], + "DAD_DragMove": [ + { + "name": "pt", + "type": "POINT" + } + ], + "DAD_DragLeave": [ + { + "name": "VOID", + "type": "void" + } + ], + "DAD_AutoScroll": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pad", + "type": "AUTO_SCROLL_DATA" + }, + { + "name": "pptNow", + "type": "POINT" + } + ], + "ReadCabinetState": [ + { + "name": "pcs", + "type": "CABINETSTATE" + }, + { + "name": "cLength", + "type": "int" + } + ], + "WriteCabinetState": [ + { + "name": "pcs", + "type": "CABINETSTATE" + } + ], + "PathMakeUniqueName": [ + { + "name": "pszUniqueName", + "type": "PWSTR" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "pszTemplate", + "type": "PCWSTR" + }, + { + "name": "pszLongPlate", + "type": "PCWSTR" + }, + { + "name": "pszDir", + "type": "PCWSTR" + } + ], + "PathIsExe": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "PathCleanupSpec": [ + { + "name": "pszDir", + "type": "PCWSTR" + }, + { + "name": "pszSpec", + "type": "PWSTR" + } + ], + "PathResolve": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "dirs", + "type": "PZPCWSTR" + }, + { + "name": "fFlags", + "type": "UINT" + } + ], + "GetFileNameFromBrowse": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszFilePath", + "type": "PWSTR" + }, + { + "name": "cchFilePath", + "type": "UINT" + }, + { + "name": "pszWorkingDir", + "type": "PCWSTR" + }, + { + "name": "pszDefExt", + "type": "PCWSTR" + }, + { + "name": "pszFilters", + "type": "PCWSTR" + }, + { + "name": "pszTitle", + "type": "PCWSTR" + } + ], + "DriveType": [ + { + "name": "iDrive", + "type": "int" + } + ], + "RealDriveType": [ + { + "name": "iDrive", + "type": "int" + }, + { + "name": "fOKToHitNet", + "type": "BOOL" + } + ], + "IsNetDrive": [ + { + "name": "iDrive", + "type": "int" + } + ], + "Shell_MergeMenus": [ + { + "name": "hmDst", + "type": "HMENU" + }, + { + "name": "hmSrc", + "type": "HMENU" + }, + { + "name": "uInsert", + "type": "UINT" + }, + { + "name": "uIDAdjust", + "type": "UINT" + }, + { + "name": "uIDAdjustMax", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "ULONG" + } + ], + "SHObjectProperties": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "shopObjectType", + "type": "DWORD" + }, + { + "name": "pszObjectName", + "type": "PCWSTR" + }, + { + "name": "pszPropertyPage", + "type": "PCWSTR" + } + ], + "SHFormatDrive": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "drive", + "type": "UINT" + }, + { + "name": "fmtID", + "type": "UINT" + }, + { + "name": "options", + "type": "UINT" + } + ], + "SHDestroyPropSheetExtArray": [ + { + "name": "hpsxa", + "type": "HPSXA" + } + ], + "SHAddFromPropSheetExtArray": [ + { + "name": "hpsxa", + "type": "HPSXA" + }, + { + "name": "lpfnAddPage", + "type": "LPFNADDPROPSHEETPAGE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SHReplaceFromPropSheetExtArray": [ + { + "name": "hpsxa", + "type": "HPSXA" + }, + { + "name": "uPageID", + "type": "UINT" + }, + { + "name": "lpfnReplaceWith", + "type": "LPFNADDPROPSHEETPAGE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SHFindFiles": [ + { + "name": "pidlFolder", + "type": "LPCITEMIDLIST" + }, + { + "name": "pidlSaveFile", + "type": "LPCITEMIDLIST" + } + ], + "PathGetShortPath": [ + { + "name": "pszLongPath", + "type": "PWSTR" + } + ], + "PathYetAnotherMakeUniqueName": [ + { + "name": "pszUniqueName", + "type": "PWSTR" + }, + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "pszShort", + "type": "PCWSTR" + }, + { + "name": "pszFileSpec", + "type": "PCWSTR" + } + ], + "Win32DeleteFile": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "SHRestricted": [ + { + "name": "rest", + "type": "RESTRICTIONS" + } + ], + "SignalFileOpen": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "AssocGetDetailsOfPropKey": [ + { + "name": "psf", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pkey", + "type": "PROPERTYKEY" + }, + { + "name": "pv", + "type": "VARIANT" + }, + { + "name": "pfFoundPropKey", + "type": "BOOL" + } + ], + "SHStartNetConnectionDialogA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszRemoteName", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "SHStartNetConnectionDialogW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszRemoteName", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "SHDefExtractIconA": [ + { + "name": "pszIconFile", + "type": "LPCSTR" + }, + { + "name": "iIndex", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "phiconLarge", + "type": "HICON" + }, + { + "name": "phiconSmall", + "type": "HICON" + }, + { + "name": "nIconSize", + "type": "UINT" + } + ], + "SHDefExtractIconW": [ + { + "name": "pszIconFile", + "type": "LPCWSTR" + }, + { + "name": "iIndex", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "phiconLarge", + "type": "HICON" + }, + { + "name": "phiconSmall", + "type": "HICON" + }, + { + "name": "nIconSize", + "type": "UINT" + } + ], + "SHOpenWithDialog": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "poainfo", + "type": "OPENASINFO" + } + ], + "Shell_GetImageLists": [ + { + "name": "phiml", + "type": "HIMAGELIST" + }, + { + "name": "phimlSmall", + "type": "HIMAGELIST" + } + ], + "Shell_GetCachedImageIndex": [ + { + "name": "pwszIconPath", + "type": "PCWSTR" + }, + { + "name": "iIconIndex", + "type": "int" + }, + { + "name": "uIconFlags", + "type": "UINT" + } + ], + "Shell_GetCachedImageIndexA": [ + { + "name": "pszIconPath", + "type": "LPCSTR" + }, + { + "name": "iIconIndex", + "type": "int" + }, + { + "name": "uIconFlags", + "type": "UINT" + } + ], + "Shell_GetCachedImageIndexW": [ + { + "name": "pszIconPath", + "type": "LPCWSTR" + }, + { + "name": "iIconIndex", + "type": "int" + }, + { + "name": "uIconFlags", + "type": "UINT" + } + ], + "SHValidateUNC": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "pszFile", + "type": "PWSTR" + }, + { + "name": "fConnect", + "type": "UINT" + } + ], + "PifMgr_OpenProperties": [ + { + "name": "pszApp", + "type": "PCWSTR" + }, + { + "name": "pszPIF", + "type": "PCWSTR" + }, + { + "name": "hInf", + "type": "UINT" + }, + { + "name": "flOpt", + "type": "UINT" + } + ], + "PifMgr_GetProperties": [ + { + "name": "hProps", + "type": "HANDLE" + }, + { + "name": "pszGroup", + "type": "PCSTR" + }, + { + "name": "lpProps", + "type": "void" + }, + { + "name": "cbProps", + "type": "int" + }, + { + "name": "flOpt", + "type": "UINT" + } + ], + "PifMgr_SetProperties": [ + { + "name": "hProps", + "type": "HANDLE" + }, + { + "name": "pszGroup", + "type": "PCSTR" + }, + { + "name": "lpProps", + "type": "void" + }, + { + "name": "cbProps", + "type": "int" + }, + { + "name": "flOpt", + "type": "UINT" + } + ], + "PifMgr_CloseProperties": [ + { + "name": "hProps", + "type": "HANDLE" + }, + { + "name": "flOpt", + "type": "UINT" + } + ], + "SHSetInstanceExplorer": [ + { + "name": "punk", + "type": "IUnknown" + } + ], + "IsUserAnAdmin": [ + { + "name": "VOID", + "type": "void" + } + ], + "SHShellFolderView_Message": [ + { + "name": "hwndMain", + "type": "HWND" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SHCreateShellFolderView": [ + { + "name": "pcsfv", + "type": "SFV_CREATE" + }, + { + "name": "ppsv", + "type": "IShellView" + } + ], + "CDefFolderMenu_Create2": [ + { + "name": "pidlFolder", + "type": "LPCITEMIDLIST" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "cidl", + "type": "UINT" + }, + { + "name": "apidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "psf", + "type": "IShellFolder" + }, + { + "name": "pfn", + "type": "LPFNDFMCALLBACK" + }, + { + "name": "nKeys", + "type": "UINT" + }, + { + "name": "ahkeys", + "type": "HKEY" + }, + { + "name": "ppcm", + "type": "IContextMenu" + } + ], + "SHCreateDefaultContextMenu": [ + { + "name": "pdcm", + "type": "DEFCONTEXTMENU" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHCreateShellFolderViewEx": [ + { + "name": "pcsfv", + "type": "CSFV" + }, + { + "name": "ppsv", + "type": "IShellView" + } + ], + "SHGetSetSettings": [ + { + "name": "lpss", + "type": "LPSHELLSTATEA" + }, + { + "name": "dwMask", + "type": "DWORD" + }, + { + "name": "bSet", + "type": "BOOL" + } + ], + "SHGetSettings": [ + { + "name": "psfs", + "type": "SHELLFLAGSTATE" + }, + { + "name": "dwMask", + "type": "DWORD" + } + ], + "SHBindToParent": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + }, + { + "name": "ppidlLast", + "type": "LPCITEMIDLIST" + } + ], + "SHBindToFolderIDListParent": [ + { + "name": "psfRoot", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + }, + { + "name": "ppidlLast", + "type": "LPCITEMIDLIST" + } + ], + "SHBindToFolderIDListParentEx": [ + { + "name": "psfRoot", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppbc", + "type": "IBindCtx" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + }, + { + "name": "ppidlLast", + "type": "LPCITEMIDLIST" + } + ], + "SHBindToObject": [ + { + "name": "psf", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pbc", + "type": "IBindCtx" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHParseDisplayName": [ + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "pbc", + "type": "IBindCtx" + }, + { + "name": "ppidl", + "type": "LPITEMIDLIST" + }, + { + "name": "sfgaoIn", + "type": "SFGAOF" + }, + { + "name": "psfgaoOut", + "type": "SFGAOF" + } + ], + "SHPathPrepareForWriteA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "punkEnableModless", + "type": "IUnknown" + }, + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHPathPrepareForWriteW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "punkEnableModless", + "type": "IUnknown" + }, + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHPropStgCreate": [ + { + "name": "psstg", + "type": "IPropertySetStorage" + }, + { + "name": "fmtid", + "type": "IID" + }, + { + "name": "pclsid", + "type": "CLSID" + }, + { + "name": "grfFlags", + "type": "DWORD" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "dwDisposition", + "type": "DWORD" + }, + { + "name": "ppstg", + "type": "IPropertyStorage" + }, + { + "name": "puCodePage", + "type": "UINT" + } + ], + "SHPropStgReadMultiple": [ + { + "name": "pps", + "type": "IPropertyStorage" + }, + { + "name": "uCodePage", + "type": "UINT" + }, + { + "name": "cpspec", + "type": "ULONG" + }, + { + "name": "rgpspec", + "type": "PROPSPEC" + }, + { + "name": "rgvar", + "type": "PROPVARIANT" + } + ], + "SHPropStgWriteMultiple": [ + { + "name": "pps", + "type": "IPropertyStorage" + }, + { + "name": "puCodePage", + "type": "UINT" + }, + { + "name": "cpspec", + "type": "ULONG" + }, + { + "name": "rgpspec", + "type": "PROPSPEC" + }, + { + "name": "rgvar", + "type": "PROPVARIANT" + }, + { + "name": "propidNameFirst", + "type": "PROPID" + } + ], + "SHCreateFileExtractIconW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "dwFileAttributes", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHLimitInputEdit": [ + { + "name": "hwndEdit", + "type": "HWND" + }, + { + "name": "psf", + "type": "IShellFolder" + } + ], + "SHGetAttributesFromDataObject": [ + { + "name": "pdo", + "type": "IDataObject" + }, + { + "name": "dwAttributeMask", + "type": "DWORD" + }, + { + "name": "pdwAttributes", + "type": "DWORD" + }, + { + "name": "pcItems", + "type": "UINT" + } + ], + "SHMapPIDLToSystemImageListIndex": [ + { + "name": "pshf", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "piIndexSel", + "type": "int" + } + ], + "SHCLSIDFromString": [ + { + "name": "psz", + "type": "PCWSTR" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "PickIconDlg": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszIconPath", + "type": "PWSTR" + }, + { + "name": "cchIconPath", + "type": "UINT" + }, + { + "name": "piIconIndex", + "type": "int" + } + ], + "StgMakeUniqueName": [ + { + "name": "pstgParent", + "type": "IStorage" + }, + { + "name": "pszFileSpec", + "type": "PCWSTR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHSimpleIDListFromPath": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "SHCreateItemFromIDList": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHCreateItemFromParsingName": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "pbc", + "type": "IBindCtx" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHCreateItemWithParent": [ + { + "name": "pidlParent", + "type": "LPCITEMIDLIST" + }, + { + "name": "psfParent", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvItem", + "type": "void" + } + ], + "SHCreateItemFromRelativeName": [ + { + "name": "psiParent", + "type": "IShellItem" + }, + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "pbc", + "type": "IBindCtx" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHCreateItemInKnownFolder": [ + { + "name": "kfid", + "type": "KNOWNFOLDERID" + }, + { + "name": "dwKFFlags", + "type": "DWORD" + }, + { + "name": "pszItem", + "type": "PCWSTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHGetIDListFromObject": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "ppidl", + "type": "LPITEMIDLIST" + } + ], + "SHGetItemFromObject": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHGetPropertyStoreFromIDList": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "flags", + "type": "GETPROPERTYSTOREFLAGS" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHGetPropertyStoreFromParsingName": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "pbc", + "type": "IBindCtx" + }, + { + "name": "flags", + "type": "GETPROPERTYSTOREFLAGS" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHGetNameFromIDList": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "sigdnName", + "type": "SIGDN" + }, + { + "name": "ppszName", + "type": "PWSTR" + } + ], + "SHGetItemFromDataObject": [ + { + "name": "pdtobj", + "type": "IDataObject" + }, + { + "name": "dwFlags", + "type": "DATAOBJ_GET_ITEM_FLAGS" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHCreateShellItemArray": [ + { + "name": "pidlParent", + "type": "LPCITEMIDLIST" + }, + { + "name": "psf", + "type": "IShellFolder" + }, + { + "name": "cidl", + "type": "UINT" + }, + { + "name": "ppidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppsiItemArray", + "type": "IShellItemArray" + } + ], + "SHCreateShellItemArrayFromDataObject": [ + { + "name": "pdo", + "type": "IDataObject" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHCreateShellItemArrayFromIDLists": [ + { + "name": "cidl", + "type": "UINT" + }, + { + "name": "rgpidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppsiItemArray", + "type": "IShellItemArray" + } + ], + "SHCreateShellItemArrayFromShellItem": [ + { + "name": "psi", + "type": "IShellItem" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHCreateAssociationRegistration": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHCreateDefaultExtractIcon": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SetCurrentProcessExplicitAppUserModelID": [ + { + "name": "AppID", + "type": "PCWSTR" + } + ], + "GetCurrentProcessExplicitAppUserModelID": [ + { + "name": "AppID", + "type": "PWSTR" + } + ], + "SHGetTemporaryPropertyForItem": [ + { + "name": "psi", + "type": "IShellItem" + }, + { + "name": "propkey", + "type": "PROPERTYKEY" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "SHSetTemporaryPropertyForItem": [ + { + "name": "psi", + "type": "IShellItem" + }, + { + "name": "propkey", + "type": "PROPERTYKEY" + }, + { + "name": "propvar", + "type": "PROPVARIANT" + } + ], + "SHShowManageLibraryUI": [ + { + "name": "psiLibrary", + "type": "IShellItem" + }, + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "pszTitle", + "type": "LPCWSTR" + }, + { + "name": "pszInstruction", + "type": "LPCWSTR" + }, + { + "name": "lmdOptions", + "type": "LIBRARYMANAGEDIALOGOPTIONS" + } + ], + "SHResolveLibrary": [ + { + "name": "psiLibrary", + "type": "IShellItem" + } + ], + "SHAssocEnumHandlers": [ + { + "name": "pszExtra", + "type": "PCWSTR" + }, + { + "name": "afFilter", + "type": "ASSOC_FILTER" + }, + { + "name": "ppEnumHandler", + "type": "IEnumAssocHandlers" + } + ], + "SHAssocEnumHandlersForProtocolByApplication": [ + { + "name": "protocol", + "type": "PCWSTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "enumHandlers", + "type": "void" + } + ], + "SHAddDefaultPropertiesByExt": [ + { + "name": "pszExt", + "type": "PCWSTR" + }, + { + "name": "pPropStore", + "type": "IPropertyStore" + } + ], + "SHCreateDefaultPropertiesOp": [ + { + "name": "psi", + "type": "IShellItem" + }, + { + "name": "ppFileOp", + "type": "IFileOperation" + } + ], + "SHSetDefaultProperties": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "psi", + "type": "IShellItem" + }, + { + "name": "dwFileOpFlags", + "type": "DWORD" + }, + { + "name": "pfops", + "type": "IFileOperationProgressSink" + } + ], + "SHChangeNotifyRegisterThread": [ + { + "name": "status", + "type": "SCNRT_STATUS" + } + ], + "PathIsSlowA": [ + { + "name": "pszFile", + "type": "LPCSTR" + }, + { + "name": "dwAttr", + "type": "DWORD" + } + ], + "PathIsSlowW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "dwAttr", + "type": "DWORD" + } + ], + "SHCreatePropSheetExtArray": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "PCWSTR" + }, + { + "name": "max_iface", + "type": "UINT" + } + ], + "SHOpenPropSheetA": [ + { + "name": "pszCaption", + "type": "LPCSTR" + }, + { + "name": "ahkeys", + "type": "HKEY" + }, + { + "name": "ckeys", + "type": "UINT" + }, + { + "name": "pclsidDefault", + "type": "CLSID" + }, + { + "name": "pdtobj", + "type": "IDataObject" + }, + { + "name": "psb", + "type": "IShellBrowser" + }, + { + "name": "pStartPage", + "type": "LPCSTR" + } + ], + "SHOpenPropSheetW": [ + { + "name": "pszCaption", + "type": "LPCWSTR" + }, + { + "name": "ahkeys", + "type": "HKEY" + }, + { + "name": "ckeys", + "type": "UINT" + }, + { + "name": "pclsidDefault", + "type": "CLSID" + }, + { + "name": "pdtobj", + "type": "IDataObject" + }, + { + "name": "psb", + "type": "IShellBrowser" + }, + { + "name": "pStartPage", + "type": "LPCWSTR" + } + ], + "SHMultiFileProperties": [ + { + "name": "pdtobj", + "type": "IDataObject" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHCreateQueryCancelAutoPlayMoniker": [ + { + "name": "ppmoniker", + "type": "IMoniker" + } + ], + "SHRunControlPanel": [ + { + "name": "lpcszCmdLine", + "type": "PCWSTR" + }, + { + "name": "hwndMsgParent", + "type": "HWND" + } + ], + "StrStrNW": [ + { + "name": "pszFirst", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + }, + { + "name": "cchMax", + "type": "UINT" + } + ], + "StrStrNIW": [ + { + "name": "pszFirst", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + }, + { + "name": "cchMax", + "type": "UINT" + } + ], + "SHRegGetBoolValueFromHKCUHKLM": [ + { + "name": "pszKey", + "type": "PCWSTR" + }, + { + "name": "pszValue", + "type": "PCWSTR" + }, + { + "name": "fDefault", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/shlobj_core_h.json b/qiling/extensions/windows_sdk/defs/shlobj_core_h.json new file mode 100644 index 000000000..c140cb56d --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/shlobj_core_h.json @@ -0,0 +1,12 @@ +{ + "ILLoadFromStreamEx": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pidl", + "type": "LPITEMIDLIST" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/shlwapi_dll.json b/qiling/extensions/windows_sdk/defs/shlwapi_dll.json new file mode 100644 index 000000000..6c78b5e98 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/shlwapi_dll.json @@ -0,0 +1,4596 @@ +{ + "ShellMessageBoxA": [ + { + "name": "hAppInst", + "type": "HINSTANCE" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpcText", + "type": "LPCSTR" + }, + { + "name": "lpcTitle", + "type": "LPCSTR" + }, + { + "name": "fuStyle", + "type": "UINT" + } + ], + "ShellMessageBoxW": [ + { + "name": "hAppInst", + "type": "HINSTANCE" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpcText", + "type": "LPCWSTR" + }, + { + "name": "lpcTitle", + "type": "LPCWSTR" + }, + { + "name": "fuStyle", + "type": "UINT" + } + ], + "StrChrA": [ + { + "name": "pszStart", + "type": "PCSTR" + }, + { + "name": "wMatch", + "type": "WORD" + } + ], + "StrChrW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + } + ], + "StrChrIA": [ + { + "name": "pszStart", + "type": "PCSTR" + }, + { + "name": "wMatch", + "type": "WORD" + } + ], + "StrChrIW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + } + ], + "StrChrNW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + }, + { + "name": "cchMax", + "type": "UINT" + } + ], + "StrChrNIW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + }, + { + "name": "cchMax", + "type": "UINT" + } + ], + "StrCmpNA": [ + { + "name": "psz1", + "type": "PCSTR" + }, + { + "name": "psz2", + "type": "PCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNIA": [ + { + "name": "psz1", + "type": "PCSTR" + }, + { + "name": "psz2", + "type": "PCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNIW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCSpnA": [ + { + "name": "pszStr", + "type": "PCSTR" + }, + { + "name": "pszSet", + "type": "PCSTR" + } + ], + "StrCSpnW": [ + { + "name": "pszStr", + "type": "PCWSTR" + }, + { + "name": "pszSet", + "type": "PCWSTR" + } + ], + "StrCSpnIA": [ + { + "name": "pszStr", + "type": "PCSTR" + }, + { + "name": "pszSet", + "type": "PCSTR" + } + ], + "StrCSpnIW": [ + { + "name": "pszStr", + "type": "PCWSTR" + }, + { + "name": "pszSet", + "type": "PCWSTR" + } + ], + "StrDupA": [ + { + "name": "pszSrch", + "type": "PCSTR" + } + ], + "StrDupW": [ + { + "name": "pszSrch", + "type": "PCWSTR" + } + ], + "StrFormatByteSizeEx": [ + { + "name": "ull", + "type": "ULONGLONG" + }, + { + "name": "flags", + "type": "SFBS_FLAGS" + }, + { + "name": "pszBuf", + "type": "PWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatByteSizeA": [ + { + "name": "dw", + "type": "DWORD" + }, + { + "name": "pszBuf", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatByteSize64A": [ + { + "name": "qdw", + "type": "LONGLONG" + }, + { + "name": "pszBuf", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatByteSizeW": [ + { + "name": "qdw", + "type": "LONGLONG" + }, + { + "name": "pszBuf", + "type": "PWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatKBSizeW": [ + { + "name": "qdw", + "type": "LONGLONG" + }, + { + "name": "pszBuf", + "type": "PWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatKBSizeA": [ + { + "name": "qdw", + "type": "LONGLONG" + }, + { + "name": "pszBuf", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFromTimeIntervalA": [ + { + "name": "pszOut", + "type": "PSTR" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "dwTimeMS", + "type": "DWORD" + }, + { + "name": "digits", + "type": "int" + } + ], + "StrFromTimeIntervalW": [ + { + "name": "pszOut", + "type": "PWSTR" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "dwTimeMS", + "type": "DWORD" + }, + { + "name": "digits", + "type": "int" + } + ], + "StrIsIntlEqualA": [ + { + "name": "fCaseSens", + "type": "BOOL" + }, + { + "name": "pszString1", + "type": "PCSTR" + }, + { + "name": "pszString2", + "type": "PCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrIsIntlEqualW": [ + { + "name": "fCaseSens", + "type": "BOOL" + }, + { + "name": "pszString1", + "type": "PCWSTR" + }, + { + "name": "pszString2", + "type": "PCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrNCatA": [ + { + "name": "psz1", + "type": "PSTR" + }, + { + "name": "psz2", + "type": "PCSTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "StrNCatW": [ + { + "name": "psz1", + "type": "PWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "StrPBrkA": [ + { + "name": "psz", + "type": "PCSTR" + }, + { + "name": "pszSet", + "type": "PCSTR" + } + ], + "StrPBrkW": [ + { + "name": "psz", + "type": "PCWSTR" + }, + { + "name": "pszSet", + "type": "PCWSTR" + } + ], + "StrRChrA": [ + { + "name": "pszStart", + "type": "PCSTR" + }, + { + "name": "pszEnd", + "type": "PCSTR" + }, + { + "name": "wMatch", + "type": "WORD" + } + ], + "StrRChrW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "pszEnd", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + } + ], + "StrRChrIA": [ + { + "name": "pszStart", + "type": "PCSTR" + }, + { + "name": "pszEnd", + "type": "PCSTR" + }, + { + "name": "wMatch", + "type": "WORD" + } + ], + "StrRChrIW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "pszEnd", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + } + ], + "StrRStrIA": [ + { + "name": "pszSource", + "type": "PCSTR" + }, + { + "name": "pszLast", + "type": "PCSTR" + }, + { + "name": "pszSrch", + "type": "PCSTR" + } + ], + "StrRStrIW": [ + { + "name": "pszSource", + "type": "PCWSTR" + }, + { + "name": "pszLast", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + } + ], + "StrSpnA": [ + { + "name": "psz", + "type": "PCSTR" + }, + { + "name": "pszSet", + "type": "PCSTR" + } + ], + "StrSpnW": [ + { + "name": "psz", + "type": "PCWSTR" + }, + { + "name": "pszSet", + "type": "PCWSTR" + } + ], + "StrStrA": [ + { + "name": "pszFirst", + "type": "PCSTR" + }, + { + "name": "pszSrch", + "type": "PCSTR" + } + ], + "StrStrW": [ + { + "name": "pszFirst", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + } + ], + "StrStrIA": [ + { + "name": "pszFirst", + "type": "PCSTR" + }, + { + "name": "pszSrch", + "type": "PCSTR" + } + ], + "StrStrIW": [ + { + "name": "pszFirst", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + } + ], + "StrToIntA": [ + { + "name": "pszSrc", + "type": "PCSTR" + } + ], + "StrToIntW": [ + { + "name": "pszSrc", + "type": "PCWSTR" + } + ], + "StrToIntExA": [ + { + "name": "pszString", + "type": "PCSTR" + }, + { + "name": "dwFlags", + "type": "STIF_FLAGS" + }, + { + "name": "piRet", + "type": "int" + } + ], + "StrToIntExW": [ + { + "name": "pszString", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "STIF_FLAGS" + }, + { + "name": "piRet", + "type": "int" + } + ], + "StrToInt64ExA": [ + { + "name": "pszString", + "type": "PCSTR" + }, + { + "name": "dwFlags", + "type": "STIF_FLAGS" + }, + { + "name": "pllRet", + "type": "LONGLONG" + } + ], + "StrToInt64ExW": [ + { + "name": "pszString", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "STIF_FLAGS" + }, + { + "name": "pllRet", + "type": "LONGLONG" + } + ], + "StrTrimA": [ + { + "name": "psz", + "type": "PSTR" + }, + { + "name": "pszTrimChars", + "type": "PCSTR" + } + ], + "StrTrimW": [ + { + "name": "psz", + "type": "PWSTR" + }, + { + "name": "pszTrimChars", + "type": "PCWSTR" + } + ], + "StrCatW": [ + { + "name": "psz1", + "type": "PWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCmpW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCmpIW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCpyW": [ + { + "name": "psz1", + "type": "PWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCpyNW": [ + { + "name": "pszDst", + "type": "PWSTR" + }, + { + "name": "pszSrc", + "type": "PCWSTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "StrCatBuffW": [ + { + "name": "pszDest", + "type": "PWSTR" + }, + { + "name": "pszSrc", + "type": "PCWSTR" + }, + { + "name": "cchDestBuffSize", + "type": "int" + } + ], + "StrCatBuffA": [ + { + "name": "pszDest", + "type": "PSTR" + }, + { + "name": "pszSrc", + "type": "PCSTR" + }, + { + "name": "cchDestBuffSize", + "type": "int" + } + ], + "ChrCmpIA": [ + { + "name": "w1", + "type": "WORD" + }, + { + "name": "w2", + "type": "WORD" + } + ], + "ChrCmpIW": [ + { + "name": "w1", + "type": "WCHAR" + }, + { + "name": "w2", + "type": "WCHAR" + } + ], + "wvnsprintfA": [ + { + "name": "pszDest", + "type": "PSTR" + }, + { + "name": "cchDest", + "type": "int" + }, + { + "name": "pszFmt", + "type": "PCSTR" + }, + { + "name": "arglist", + "type": "va_list" + } + ], + "wvnsprintfW": [ + { + "name": "pszDest", + "type": "PWSTR" + }, + { + "name": "cchDest", + "type": "int" + }, + { + "name": "pszFmt", + "type": "PCWSTR" + }, + { + "name": "arglist", + "type": "va_list" + } + ], + "wnsprintfA": [ + { + "name": "pszDest", + "type": "PSTR" + }, + { + "name": "cchDest", + "type": "int" + }, + { + "name": "pszFmt", + "type": "PCSTR" + } + ], + "wnsprintfW": [ + { + "name": "pszDest", + "type": "PWSTR" + }, + { + "name": "cchDest", + "type": "int" + }, + { + "name": "pszFmt", + "type": "PCWSTR" + } + ], + "StrRetToStrA": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppsz", + "type": "LPSTR" + } + ], + "StrRetToStrW": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppsz", + "type": "LPWSTR" + } + ], + "StrRetToBufA": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszBuf", + "type": "LPSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrRetToBufW": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszBuf", + "type": "LPWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "SHStrDupA": [ + { + "name": "psz", + "type": "LPCSTR" + }, + { + "name": "ppwsz", + "type": "LPWSTR" + } + ], + "SHStrDupW": [ + { + "name": "psz", + "type": "LPCWSTR" + }, + { + "name": "ppwsz", + "type": "LPWSTR" + } + ], + "StrCmpLogicalW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCatChainW": [ + { + "name": "pszDst", + "type": "PWSTR" + }, + { + "name": "cchDst", + "type": "DWORD" + }, + { + "name": "ichAt", + "type": "DWORD" + }, + { + "name": "pszSrc", + "type": "PCWSTR" + } + ], + "StrRetToBSTR": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pbstr", + "type": "BSTR" + } + ], + "SHLoadIndirectString": [ + { + "name": "pszSource", + "type": "PCWSTR" + }, + { + "name": "pszOutBuf", + "type": "PWSTR" + }, + { + "name": "cchOutBuf", + "type": "UINT" + }, + { + "name": "ppvReserved", + "type": "void" + } + ], + "IsCharSpaceA": [ + { + "name": "wch", + "type": "CHAR" + } + ], + "IsCharSpaceW": [ + { + "name": "wch", + "type": "WCHAR" + } + ], + "StrCmpCA": [ + { + "name": "pszStr1", + "type": "LPCSTR" + }, + { + "name": "pszStr2", + "type": "LPCSTR" + } + ], + "StrCmpCW": [ + { + "name": "pszStr1", + "type": "LPCWSTR" + }, + { + "name": "pszStr2", + "type": "LPCWSTR" + } + ], + "StrCmpICA": [ + { + "name": "pszStr1", + "type": "LPCSTR" + }, + { + "name": "pszStr2", + "type": "LPCSTR" + } + ], + "StrCmpICW": [ + { + "name": "pszStr1", + "type": "LPCWSTR" + }, + { + "name": "pszStr2", + "type": "LPCWSTR" + } + ], + "StrCmpNCA": [ + { + "name": "pszStr1", + "type": "LPCSTR" + }, + { + "name": "pszStr2", + "type": "LPCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNCW": [ + { + "name": "pszStr1", + "type": "LPCWSTR" + }, + { + "name": "pszStr2", + "type": "LPCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNICA": [ + { + "name": "pszStr1", + "type": "LPCSTR" + }, + { + "name": "pszStr2", + "type": "LPCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNICW": [ + { + "name": "pszStr1", + "type": "LPCWSTR" + }, + { + "name": "pszStr2", + "type": "LPCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "IntlStrEqWorkerA": [ + { + "name": "fCaseSens", + "type": "BOOL" + }, + { + "name": "lpString1", + "type": "LPCSTR" + }, + { + "name": "lpString2", + "type": "LPCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "IntlStrEqWorkerW": [ + { + "name": "fCaseSens", + "type": "BOOL" + }, + { + "name": "lpString1", + "type": "LPCWSTR" + }, + { + "name": "lpString2", + "type": "LPCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "PathAddBackslashA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathAddBackslashW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathBuildRootA": [ + { + "name": "pszRoot", + "type": "LPSTR" + }, + { + "name": "iDrive", + "type": "int" + } + ], + "PathBuildRootW": [ + { + "name": "pszRoot", + "type": "LPWSTR" + }, + { + "name": "iDrive", + "type": "int" + } + ], + "PathCombineA": [ + { + "name": "pszDest", + "type": "LPSTR" + }, + { + "name": "pszDir", + "type": "LPCSTR" + }, + { + "name": "pszFile", + "type": "LPCSTR" + } + ], + "PathCombineW": [ + { + "name": "pszDest", + "type": "LPWSTR" + }, + { + "name": "pszDir", + "type": "LPCWSTR" + }, + { + "name": "pszFile", + "type": "LPCWSTR" + } + ], + "PathCompactPathA": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "dx", + "type": "UINT" + } + ], + "PathCompactPathW": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "dx", + "type": "UINT" + } + ], + "PathCompactPathExA": [ + { + "name": "pszOut", + "type": "LPSTR" + }, + { + "name": "pszSrc", + "type": "LPCSTR" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCompactPathExW": [ + { + "name": "pszOut", + "type": "LPWSTR" + }, + { + "name": "pszSrc", + "type": "LPCWSTR" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCommonPrefixA": [ + { + "name": "pszFile1", + "type": "LPCSTR" + }, + { + "name": "pszFile2", + "type": "LPCSTR" + }, + { + "name": "achPath", + "type": "LPSTR" + } + ], + "PathCommonPrefixW": [ + { + "name": "pszFile1", + "type": "LPCWSTR" + }, + { + "name": "pszFile2", + "type": "LPCWSTR" + }, + { + "name": "achPath", + "type": "LPWSTR" + } + ], + "PathFileExistsA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathFileExistsW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathFindExtensionA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathFindExtensionW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathFindFileNameA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathFindFileNameW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathFindNextComponentA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathFindNextComponentW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathFindOnPathA": [ + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "ppszOtherDirs", + "type": "PZPCSTR" + } + ], + "PathFindOnPathW": [ + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "ppszOtherDirs", + "type": "PZPCWSTR" + } + ], + "PathFindSuffixArrayA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "apszSuffix", + "type": "LPCSTR" + }, + { + "name": "iArraySize", + "type": "int" + } + ], + "PathFindSuffixArrayW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "apszSuffix", + "type": "LPCWSTR" + }, + { + "name": "iArraySize", + "type": "int" + } + ], + "PathGetArgsA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathGetArgsW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsLFNFileSpecA": [ + { + "name": "pszName", + "type": "LPCSTR" + } + ], + "PathIsLFNFileSpecW": [ + { + "name": "pszName", + "type": "LPCWSTR" + } + ], + "PathGetCharTypeA": [ + { + "name": "ch", + "type": "UCHAR" + } + ], + "PathGetCharTypeW": [ + { + "name": "ch", + "type": "WCHAR" + } + ], + "PathGetDriveNumberA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathGetDriveNumberW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsDirectoryA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsDirectoryW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsDirectoryEmptyA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsDirectoryEmptyW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsFileSpecA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsFileSpecW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsPrefixA": [ + { + "name": "pszPrefix", + "type": "LPCSTR" + }, + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsPrefixW": [ + { + "name": "pszPrefix", + "type": "LPCWSTR" + }, + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsRelativeA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsRelativeW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsRootA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsRootW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsSameRootA": [ + { + "name": "pszPath1", + "type": "LPCSTR" + }, + { + "name": "pszPath2", + "type": "LPCSTR" + } + ], + "PathIsSameRootW": [ + { + "name": "pszPath1", + "type": "LPCWSTR" + }, + { + "name": "pszPath2", + "type": "LPCWSTR" + } + ], + "PathIsUNCA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsUNCW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsNetworkPathA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsNetworkPathW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsUNCServerA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsUNCServerW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsUNCServerShareA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsUNCServerShareW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsContentTypeA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "pszContentType", + "type": "LPCSTR" + } + ], + "PathIsContentTypeW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "pszContentType", + "type": "LPCWSTR" + } + ], + "PathIsURLA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsURLW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathMakePrettyA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathMakePrettyW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathMatchSpecA": [ + { + "name": "pszFile", + "type": "LPCSTR" + }, + { + "name": "pszSpec", + "type": "LPCSTR" + } + ], + "PathMatchSpecW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "pszSpec", + "type": "LPCWSTR" + } + ], + "PathMatchSpecExA": [ + { + "name": "pszFile", + "type": "LPCSTR" + }, + { + "name": "pszSpec", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathMatchSpecExW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "pszSpec", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathParseIconLocationA": [ + { + "name": "pszIconFile", + "type": "LPSTR" + } + ], + "PathParseIconLocationW": [ + { + "name": "pszIconFile", + "type": "LPWSTR" + } + ], + "PathQuoteSpacesA": [ + { + "name": "lpsz", + "type": "LPSTR" + } + ], + "PathQuoteSpacesW": [ + { + "name": "lpsz", + "type": "LPWSTR" + } + ], + "PathRelativePathToA": [ + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "pszFrom", + "type": "LPCSTR" + }, + { + "name": "dwAttrFrom", + "type": "DWORD" + }, + { + "name": "pszTo", + "type": "LPCSTR" + }, + { + "name": "dwAttrTo", + "type": "DWORD" + } + ], + "PathRelativePathToW": [ + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "pszFrom", + "type": "LPCWSTR" + }, + { + "name": "dwAttrFrom", + "type": "DWORD" + }, + { + "name": "pszTo", + "type": "LPCWSTR" + }, + { + "name": "dwAttrTo", + "type": "DWORD" + } + ], + "PathRemoveArgsA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveArgsW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRemoveBackslashA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveBackslashW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRemoveBlanksA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveBlanksW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRemoveExtensionA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveExtensionW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRemoveFileSpecA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveFileSpecW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRenameExtensionA": [ + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "pszExt", + "type": "LPCSTR" + } + ], + "PathRenameExtensionW": [ + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "pszExt", + "type": "LPCWSTR" + } + ], + "PathSearchAndQualifyA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "pszBuf", + "type": "LPSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "PathSearchAndQualifyW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "pszBuf", + "type": "LPWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "PathSetDlgItemPathA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "id", + "type": "int" + }, + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathSetDlgItemPathW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "id", + "type": "int" + }, + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathSkipRootA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathSkipRootW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathStripPathA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathStripPathW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathStripToRootA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathStripToRootW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathUnquoteSpacesA": [ + { + "name": "lpsz", + "type": "LPSTR" + } + ], + "PathUnquoteSpacesW": [ + { + "name": "lpsz", + "type": "LPWSTR" + } + ], + "PathMakeSystemFolderA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathMakeSystemFolderW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathUnmakeSystemFolderA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathUnmakeSystemFolderW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsSystemFolderA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "dwAttrb", + "type": "DWORD" + } + ], + "PathIsSystemFolderW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "dwAttrb", + "type": "DWORD" + } + ], + "PathUndecorateA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathUndecorateW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathUnExpandEnvStringsA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "pszBuf", + "type": "LPSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "PathUnExpandEnvStringsW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "pszBuf", + "type": "LPWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "UrlCompareA": [ + { + "name": "psz1", + "type": "PCSTR" + }, + { + "name": "psz2", + "type": "PCSTR" + }, + { + "name": "fIgnoreSlash", + "type": "BOOL" + } + ], + "UrlCompareW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + }, + { + "name": "fIgnoreSlash", + "type": "BOOL" + } + ], + "UrlCombineA": [ + { + "name": "pszBase", + "type": "PCSTR" + }, + { + "name": "pszRelative", + "type": "PCSTR" + }, + { + "name": "pszCombined", + "type": "PSTR" + }, + { + "name": "pcchCombined", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCombineW": [ + { + "name": "pszBase", + "type": "PCWSTR" + }, + { + "name": "pszRelative", + "type": "PCWSTR" + }, + { + "name": "pszCombined", + "type": "PWSTR" + }, + { + "name": "pcchCombined", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCanonicalizeA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "pszCanonicalized", + "type": "PSTR" + }, + { + "name": "pcchCanonicalized", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCanonicalizeW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "pszCanonicalized", + "type": "PWSTR" + }, + { + "name": "pcchCanonicalized", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlIsOpaqueA": [ + { + "name": "pszURL", + "type": "PCSTR" + } + ], + "UrlIsOpaqueW": [ + { + "name": "pszURL", + "type": "PCWSTR" + } + ], + "UrlIsNoHistoryA": [ + { + "name": "pszURL", + "type": "PCSTR" + } + ], + "UrlIsNoHistoryW": [ + { + "name": "pszURL", + "type": "PCWSTR" + } + ], + "UrlIsA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "UrlIs", + "type": "URLIS" + } + ], + "UrlIsW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "UrlIs", + "type": "URLIS" + } + ], + "UrlGetLocationA": [ + { + "name": "pszURL", + "type": "PCSTR" + } + ], + "UrlGetLocationW": [ + { + "name": "pszURL", + "type": "PCWSTR" + } + ], + "UrlUnescapeA": [ + { + "name": "pszUrl", + "type": "PSTR" + }, + { + "name": "pszUnescaped", + "type": "PSTR" + }, + { + "name": "pcchUnescaped", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlUnescapeW": [ + { + "name": "pszUrl", + "type": "PWSTR" + }, + { + "name": "pszUnescaped", + "type": "PWSTR" + }, + { + "name": "pcchUnescaped", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlEscapeA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "pszEscaped", + "type": "PSTR" + }, + { + "name": "pcchEscaped", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlEscapeW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "pszEscaped", + "type": "PWSTR" + }, + { + "name": "pcchEscaped", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCreateFromPathA": [ + { + "name": "pszPath", + "type": "PCSTR" + }, + { + "name": "pszUrl", + "type": "PSTR" + }, + { + "name": "pcchUrl", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCreateFromPathW": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "pszUrl", + "type": "PWSTR" + }, + { + "name": "pcchUrl", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCreateFromUrlA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "pszPath", + "type": "PSTR" + }, + { + "name": "pcchPath", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCreateFromUrlW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "pcchPath", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCreateFromUrlAlloc": [ + { + "name": "pszIn", + "type": "PCWSTR" + }, + { + "name": "ppszOut", + "type": "PWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlHashA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "cbHash", + "type": "DWORD" + } + ], + "UrlHashW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "cbHash", + "type": "DWORD" + } + ], + "UrlGetPartW": [ + { + "name": "pszIn", + "type": "PCWSTR" + }, + { + "name": "pszOut", + "type": "PWSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + }, + { + "name": "dwPart", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlGetPartA": [ + { + "name": "pszIn", + "type": "PCSTR" + }, + { + "name": "pszOut", + "type": "PSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + }, + { + "name": "dwPart", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlApplySchemeA": [ + { + "name": "pszIn", + "type": "PCSTR" + }, + { + "name": "pszOut", + "type": "PSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlApplySchemeW": [ + { + "name": "pszIn", + "type": "PCWSTR" + }, + { + "name": "pszOut", + "type": "PWSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "HashData": [ + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "cbHash", + "type": "DWORD" + } + ], + "UrlFixupW": [ + { + "name": "pcszUrl", + "type": "PCWSTR" + }, + { + "name": "pszTranslatedUrl", + "type": "PWSTR" + }, + { + "name": "cchMax", + "type": "DWORD" + } + ], + "SHDeleteEmptyKeyA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + } + ], + "SHDeleteEmptyKeyW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + } + ], + "SHDeleteKeyA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + } + ], + "SHDeleteKeyW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + } + ], + "SHRegDuplicateHKey": [ + { + "name": "hkey", + "type": "HKEY" + } + ], + "SHDeleteValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + } + ], + "SHDeleteValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + } + ], + "SHGetValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHGetValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHSetValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "LPCVOID" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "SHSetValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "LPCVOID" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "SHRegGetValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "srrfFlags", + "type": "SRRF" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHRegGetValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "srrfFlags", + "type": "SRRF" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHRegSetValue": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "srrfFlags", + "type": "SRRF" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "LPCVOID" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "SHRegGetValueFromHKCUHKLM": [ + { + "name": "pwszKey", + "type": "PCWSTR" + }, + { + "name": "pwszValue", + "type": "PCWSTR" + }, + { + "name": "srrfFlags", + "type": "SRRF" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHQueryValueExA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHQueryValueExW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHEnumKeyExA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszName", + "type": "LPSTR" + }, + { + "name": "pcchName", + "type": "LPDWORD" + } + ], + "SHEnumKeyExW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszName", + "type": "LPWSTR" + }, + { + "name": "pcchName", + "type": "LPDWORD" + } + ], + "SHEnumValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszValueName", + "type": "PSTR" + }, + { + "name": "pcchValueName", + "type": "LPDWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "LPDWORD" + } + ], + "SHEnumValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszValueName", + "type": "PWSTR" + }, + { + "name": "pcchValueName", + "type": "LPDWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "LPDWORD" + } + ], + "SHQueryInfoKeyA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pcSubKeys", + "type": "LPDWORD" + }, + { + "name": "pcchMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "pcValues", + "type": "LPDWORD" + }, + { + "name": "pcchMaxValueNameLen", + "type": "LPDWORD" + } + ], + "SHQueryInfoKeyW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pcSubKeys", + "type": "LPDWORD" + }, + { + "name": "pcchMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "pcValues", + "type": "LPDWORD" + }, + { + "name": "pcchMaxValueNameLen", + "type": "LPDWORD" + } + ], + "SHCopyKeyA": [ + { + "name": "hkeySrc", + "type": "HKEY" + }, + { + "name": "pszSrcSubKey", + "type": "LPCSTR" + }, + { + "name": "hkeyDest", + "type": "HKEY" + }, + { + "name": "fReserved", + "type": "DWORD" + } + ], + "SHCopyKeyW": [ + { + "name": "hkeySrc", + "type": "HKEY" + }, + { + "name": "pszSrcSubKey", + "type": "LPCWSTR" + }, + { + "name": "hkeyDest", + "type": "HKEY" + }, + { + "name": "fReserved", + "type": "DWORD" + } + ], + "SHRegGetPathA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pcszSubKey", + "type": "LPCSTR" + }, + { + "name": "pcszValue", + "type": "LPCSTR" + }, + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegGetPathW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pcszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pcszValue", + "type": "LPCWSTR" + }, + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegSetPathA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pcszSubKey", + "type": "LPCSTR" + }, + { + "name": "pcszValue", + "type": "LPCSTR" + }, + { + "name": "pcszPath", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegSetPathW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pcszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pcszValue", + "type": "LPCWSTR" + }, + { + "name": "pcszPath", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegCreateUSKeyA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "hRelativeUSKey", + "type": "HUSKEY" + }, + { + "name": "phNewUSKey", + "type": "PHUSKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegCreateUSKeyW": [ + { + "name": "pwzPath", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "hRelativeUSKey", + "type": "HUSKEY" + }, + { + "name": "phNewUSKey", + "type": "PHUSKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegOpenUSKeyA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "hRelativeUSKey", + "type": "HUSKEY" + }, + { + "name": "phNewUSKey", + "type": "PHUSKEY" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + } + ], + "SHRegOpenUSKeyW": [ + { + "name": "pwzPath", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "hRelativeUSKey", + "type": "HUSKEY" + }, + { + "name": "phNewUSKey", + "type": "PHUSKEY" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + } + ], + "SHRegQueryUSValueA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "pvDefaultData", + "type": "void" + }, + { + "name": "dwDefaultDataSize", + "type": "DWORD" + } + ], + "SHRegQueryUSValueW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "pvDefaultData", + "type": "void" + }, + { + "name": "dwDefaultDataSize", + "type": "DWORD" + } + ], + "SHRegWriteUSValueA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegWriteUSValueW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pwzValue", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegDeleteUSValueA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "delRegFlags", + "type": "SHREGDEL_FLAGS" + } + ], + "SHRegDeleteUSValueW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pwzValue", + "type": "LPCWSTR" + }, + { + "name": "delRegFlags", + "type": "SHREGDEL_FLAGS" + } + ], + "SHRegDeleteEmptyUSKeyW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pwzSubKey", + "type": "LPCWSTR" + }, + { + "name": "delRegFlags", + "type": "SHREGDEL_FLAGS" + } + ], + "SHRegDeleteEmptyUSKeyA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "delRegFlags", + "type": "SHREGDEL_FLAGS" + } + ], + "SHRegEnumUSKeyA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszName", + "type": "LPSTR" + }, + { + "name": "pcchName", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegEnumUSKeyW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pwzName", + "type": "LPWSTR" + }, + { + "name": "pcchName", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegEnumUSValueA": [ + { + "name": "hUSkey", + "type": "HUSKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszValueName", + "type": "LPSTR" + }, + { + "name": "pcchValueName", + "type": "LPDWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegEnumUSValueW": [ + { + "name": "hUSkey", + "type": "HUSKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszValueName", + "type": "LPWSTR" + }, + { + "name": "pcchValueName", + "type": "LPDWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegQueryInfoUSKeyA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pcSubKeys", + "type": "LPDWORD" + }, + { + "name": "pcchMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "pcValues", + "type": "LPDWORD" + }, + { + "name": "pcchMaxValueNameLen", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegQueryInfoUSKeyW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pcSubKeys", + "type": "LPDWORD" + }, + { + "name": "pcchMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "pcValues", + "type": "LPDWORD" + }, + { + "name": "pcchMaxValueNameLen", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegCloseUSKey": [ + { + "name": "hUSKey", + "type": "HUSKEY" + } + ], + "SHRegGetUSValueA": [ + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "pvDefaultData", + "type": "void" + }, + { + "name": "dwDefaultDataSize", + "type": "DWORD" + } + ], + "SHRegGetUSValueW": [ + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "pvDefaultData", + "type": "void" + }, + { + "name": "dwDefaultDataSize", + "type": "DWORD" + } + ], + "SHRegSetUSValueA": [ + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegSetUSValueW": [ + { + "name": "pwzSubKey", + "type": "LPCWSTR" + }, + { + "name": "pwzValue", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegGetIntW": [ + { + "name": "hk", + "type": "HKEY" + }, + { + "name": "pwzKey", + "type": "PCWSTR" + }, + { + "name": "iDefault", + "type": "int" + } + ], + "SHRegGetBoolUSValueA": [ + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "fDefault", + "type": "BOOL" + } + ], + "SHRegGetBoolUSValueW": [ + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "fDefault", + "type": "BOOL" + } + ], + "AssocCreate": [ + { + "name": "clsid", + "type": "CLSID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHGetAssocKeys": [ + { + "name": "pqa", + "type": "IQueryAssociations" + }, + { + "name": "rgKeys", + "type": "HKEY" + }, + { + "name": "cKeys", + "type": "DWORD" + } + ], + "AssocQueryStringA": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "str", + "type": "ASSOCSTR" + }, + { + "name": "pszAssoc", + "type": "LPCSTR" + }, + { + "name": "pszExtra", + "type": "LPCSTR" + }, + { + "name": "pszOut", + "type": "LPSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + } + ], + "AssocQueryStringW": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "str", + "type": "ASSOCSTR" + }, + { + "name": "pszAssoc", + "type": "LPCWSTR" + }, + { + "name": "pszExtra", + "type": "LPCWSTR" + }, + { + "name": "pszOut", + "type": "LPWSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + } + ], + "AssocQueryStringByKeyA": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "str", + "type": "ASSOCSTR" + }, + { + "name": "hkAssoc", + "type": "HKEY" + }, + { + "name": "pszExtra", + "type": "LPCSTR" + }, + { + "name": "pszOut", + "type": "LPSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + } + ], + "AssocQueryStringByKeyW": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "str", + "type": "ASSOCSTR" + }, + { + "name": "hkAssoc", + "type": "HKEY" + }, + { + "name": "pszExtra", + "type": "LPCWSTR" + }, + { + "name": "pszOut", + "type": "LPWSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + } + ], + "AssocQueryKeyA": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "key", + "type": "ASSOCKEY" + }, + { + "name": "pszAssoc", + "type": "LPCSTR" + }, + { + "name": "pszExtra", + "type": "LPCSTR" + }, + { + "name": "phkeyOut", + "type": "HKEY" + } + ], + "AssocQueryKeyW": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "key", + "type": "ASSOCKEY" + }, + { + "name": "pszAssoc", + "type": "LPCWSTR" + }, + { + "name": "pszExtra", + "type": "LPCWSTR" + }, + { + "name": "phkeyOut", + "type": "HKEY" + } + ], + "AssocIsDangerous": [ + { + "name": "pszAssoc", + "type": "PCWSTR" + } + ], + "AssocGetPerceivedType": [ + { + "name": "pszExt", + "type": "PCWSTR" + }, + { + "name": "ptype", + "type": "PERCEIVED" + }, + { + "name": "pflag", + "type": "PERCEIVEDFLAG" + }, + { + "name": "ppszType", + "type": "PWSTR" + } + ], + "SHCreateStreamOnFileA": [ + { + "name": "pszFile", + "type": "LPCSTR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "ppstm", + "type": "IStream" + } + ], + "SHCreateStreamOnFileW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "ppstm", + "type": "IStream" + } + ], + "SHCreateStreamOnFileEx": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + }, + { + "name": "fCreate", + "type": "BOOL" + }, + { + "name": "pstmTemplate", + "type": "IStream" + }, + { + "name": "ppstm", + "type": "IStream" + } + ], + "GetAcceptLanguagesA": [ + { + "name": "pszLanguages", + "type": "LPSTR" + }, + { + "name": "pcchLanguages", + "type": "DWORD" + } + ], + "GetAcceptLanguagesW": [ + { + "name": "pszLanguages", + "type": "LPWSTR" + }, + { + "name": "pcchLanguages", + "type": "DWORD" + } + ], + "IUnknown_Set": [ + { + "name": "ppunk", + "type": "IUnknown" + }, + { + "name": "punk", + "type": "IUnknown" + } + ], + "IUnknown_AtomicRelease": [ + { + "name": "ppunk", + "type": "void" + } + ], + "IUnknown_GetWindow": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "phwnd", + "type": "HWND" + } + ], + "IUnknown_SetSite": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "punkSite", + "type": "IUnknown" + } + ], + "IUnknown_GetSite": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "IUnknown_QueryService": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "guidService", + "type": "GUID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvOut", + "type": "void" + } + ], + "IStream_Read": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "ULONG" + } + ], + "IStream_Write": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "ULONG" + } + ], + "IStream_Reset": [ + { + "name": "pstm", + "type": "IStream" + } + ], + "IStream_Size": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pui", + "type": "ULARGE_INTEGER" + } + ], + "ConnectToConnectionPoint": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "riidEvent", + "type": "IID" + }, + { + "name": "fConnect", + "type": "BOOL" + }, + { + "name": "punkTarget", + "type": "IUnknown" + }, + { + "name": "pdwCookie", + "type": "DWORD" + }, + { + "name": "ppcpOut", + "type": "IConnectionPoint" + } + ], + "IStream_ReadPidl": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "ppidlOut", + "type": "LPITEMIDLIST" + } + ], + "IStream_WritePidl": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pidlWrite", + "type": "LPCITEMIDLIST" + } + ], + "IStream_ReadStr": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "ppsz", + "type": "PWSTR" + } + ], + "IStream_WriteStr": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "psz", + "type": "PCWSTR" + } + ], + "IStream_Copy": [ + { + "name": "pstmFrom", + "type": "IStream" + }, + { + "name": "pstmTo", + "type": "IStream" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "SHGetViewStatePropertyBag": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszBagName", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHFormatDateTimeA": [ + { + "name": "pft", + "type": "FILETIME" + }, + { + "name": "pdwFlags", + "type": "DWORD" + }, + { + "name": "pszBuf", + "type": "LPSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "SHFormatDateTimeW": [ + { + "name": "pft", + "type": "FILETIME" + }, + { + "name": "pdwFlags", + "type": "DWORD" + }, + { + "name": "pszBuf", + "type": "LPWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "SHAnsiToUnicode": [ + { + "name": "pszSrc", + "type": "PCSTR" + }, + { + "name": "pwszDst", + "type": "PWSTR" + }, + { + "name": "cwchBuf", + "type": "int" + } + ], + "SHAnsiToAnsi": [ + { + "name": "pszSrc", + "type": "PCSTR" + }, + { + "name": "pszDst", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "int" + } + ], + "SHUnicodeToAnsi": [ + { + "name": "pwszSrc", + "type": "PCWSTR" + }, + { + "name": "pszDst", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "int" + } + ], + "SHUnicodeToUnicode": [ + { + "name": "pwzSrc", + "type": "PCWSTR" + }, + { + "name": "pwzDst", + "type": "PWSTR" + }, + { + "name": "cwchBuf", + "type": "int" + } + ], + "SHMessageBoxCheckA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszText", + "type": "LPCSTR" + }, + { + "name": "pszCaption", + "type": "LPCSTR" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "iDefault", + "type": "int" + }, + { + "name": "pszRegVal", + "type": "LPCSTR" + } + ], + "SHMessageBoxCheckW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszText", + "type": "LPCWSTR" + }, + { + "name": "pszCaption", + "type": "LPCWSTR" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "iDefault", + "type": "int" + }, + { + "name": "pszRegVal", + "type": "LPCWSTR" + } + ], + "SHSendMessageBroadcastA": [ + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SHSendMessageBroadcastW": [ + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SHStripMneumonicA": [ + { + "name": "pszMenu", + "type": "LPSTR" + } + ], + "SHStripMneumonicW": [ + { + "name": "pszMenu", + "type": "LPWSTR" + } + ], + "IsOS": [ + { + "name": "dwOS", + "type": "DWORD" + } + ], + "SHGlobalCounterGetValue": [ + { + "name": "id", + "type": "SHGLOBALCOUNTER" + } + ], + "SHGlobalCounterIncrement": [ + { + "name": "id", + "type": "SHGLOBALCOUNTER" + } + ], + "SHGlobalCounterDecrement": [ + { + "name": "id", + "type": "SHGLOBALCOUNTER" + } + ], + "SHAllocShared": [ + { + "name": "pvData", + "type": "void" + }, + { + "name": "dwSize", + "type": "DWORD" + }, + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "SHFreeShared": [ + { + "name": "hData", + "type": "HANDLE" + }, + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "SHUnlockShared": [ + { + "name": "pvData", + "type": "void" + } + ], + "WhichPlatform": [ + { + "name": "VOID", + "type": "void" + } + ], + "QISearch": [ + { + "name": "that", + "type": "void" + }, + { + "name": "pqit", + "type": "LPCQITAB" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHIsLowMemoryMachine": [ + { + "name": "dwType", + "type": "DWORD" + } + ], + "GetMenuPosFromID": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "id", + "type": "UINT" + } + ], + "SHGetInverseCMAP": [ + { + "name": "pbMap", + "type": "BYTE" + }, + { + "name": "cbMap", + "type": "ULONG" + } + ], + "SHAutoComplete": [ + { + "name": "hwndEdit", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHCreateThreadRef": [ + { + "name": "pcRef", + "type": "LONG" + }, + { + "name": "ppunk", + "type": "IUnknown" + } + ], + "SHSetThreadRef": [ + { + "name": "punk", + "type": "IUnknown" + } + ], + "SHGetThreadRef": [ + { + "name": "ppunk", + "type": "IUnknown" + } + ], + "SHSkipJunction": [ + { + "name": "pbc", + "type": "IBindCtx" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "SHCreateThread": [ + { + "name": "pfnThreadProc", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "pData", + "type": "void" + }, + { + "name": "flags", + "type": "SHCT_FLAGS" + }, + { + "name": "pfnCallback", + "type": "LPTHREAD_START_ROUTINE" + } + ], + "SHCreateThreadWithHandle": [ + { + "name": "pfnThreadProc", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "pData", + "type": "void" + }, + { + "name": "flags", + "type": "SHCT_FLAGS" + }, + { + "name": "pfnCallback", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "pHandle", + "type": "HANDLE" + } + ], + "SHReleaseThreadRef": [ + { + "name": "VOID", + "type": "void" + } + ], + "SHCreateShellPalette": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "ColorRGBToHLS": [ + { + "name": "clrRGB", + "type": "COLORREF" + }, + { + "name": "pwHue", + "type": "WORD" + }, + { + "name": "pwLuminance", + "type": "WORD" + }, + { + "name": "pwSaturation", + "type": "WORD" + } + ], + "ColorHLSToRGB": [ + { + "name": "wHue", + "type": "WORD" + }, + { + "name": "wLuminance", + "type": "WORD" + }, + { + "name": "wSaturation", + "type": "WORD" + } + ], + "ColorAdjustLuma": [ + { + "name": "clrRGB", + "type": "COLORREF" + }, + { + "name": "n", + "type": "int" + }, + { + "name": "fScale", + "type": "BOOL" + } + ], + "DllInstall": [ + { + "name": "bInstall", + "type": "BOOL" + }, + { + "name": "pszCmdLine", + "type": "PCWSTR" + } + ], + "IsInternetESCEnabled": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/slc_dll.json b/qiling/extensions/windows_sdk/defs/slc_dll.json new file mode 100644 index 000000000..96e185c42 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/slc_dll.json @@ -0,0 +1,884 @@ +{ + "SLOpen": [ + { + "name": "phSLC", + "type": "HSLC" + } + ], + "SLClose": [ + { + "name": "hSLC", + "type": "HSLC" + } + ], + "SLInstallProofOfPurchase": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszPKeyAlgorithm", + "type": "PCWSTR" + }, + { + "name": "pwszPKeyString", + "type": "PCWSTR" + }, + { + "name": "cbPKeySpecificData", + "type": "UINT" + }, + { + "name": "pbPKeySpecificData", + "type": "PBYTE" + }, + { + "name": "pPkeyId", + "type": "SLID" + } + ], + "SLInstallProofOfPurchaseEx": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszPKeyAlgorithm", + "type": "PCWSTR" + }, + { + "name": "pwszPKeyString", + "type": "PCWSTR" + }, + { + "name": "cbPKeySpecificData", + "type": "UINT" + }, + { + "name": "pbPKeySpecificData", + "type": "PBYTE" + }, + { + "name": "pPkeyId", + "type": "SLID" + } + ], + "SLUninstallProofOfPurchase": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pPKeyId", + "type": "SLID" + } + ], + "SLInstallLicense": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "cbLicenseBlob", + "type": "UINT" + }, + { + "name": "pbLicenseBlob", + "type": "BYTE" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + } + ], + "SLUninstallLicense": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + } + ], + "SLConsumeRight": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszRightName", + "type": "PCWSTR" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "SLGetProductSkuInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetPKeyInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pPKeyId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetLicenseInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pSLLicenseId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetLicensingStatusInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pAppID", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszRightName", + "type": "PCWSTR" + }, + { + "name": "pnStatusCount", + "type": "UINT" + }, + { + "name": "ppLicensingStatus", + "type": "SL_LICENSING_STATUS" + } + ], + "SLGetPolicyInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetPolicyInformationDWORD": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "pdwValue", + "type": "DWORD" + } + ], + "SLGetServiceInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetApplicationInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLActivateProduct": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "cbAppSpecificData", + "type": "UINT" + }, + { + "name": "pvAppSpecificData", + "type": "PVOID" + }, + { + "name": "pActivationInfo", + "type": "SL_ACTIVATION_INFO_HEADER" + }, + { + "name": "pwszProxyServer", + "type": "PCWSTR" + }, + { + "name": "wProxyPort", + "type": "WORD" + } + ], + "SLGetServerStatus": [ + { + "name": "pwszServerURL", + "type": "PCWSTR" + }, + { + "name": "pwszAcquisitionType", + "type": "PCWSTR" + }, + { + "name": "pwszProxyServer", + "type": "PCWSTR" + }, + { + "name": "wProxyPort", + "type": "WORD" + }, + { + "name": "phrStatus", + "type": "HRESULT" + } + ], + "SLReArm": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SLGenerateOfflineInstallationId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "ppwszInstallationId", + "type": "PWSTR" + } + ], + "SLGenerateOfflineInstallationIdEx": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pActivationInfo", + "type": "SL_ACTIVATION_INFO_HEADER" + }, + { + "name": "ppwszInstallationId", + "type": "PWSTR" + } + ], + "SLDepositOfflineConfirmationId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszInstallationId", + "type": "PCWSTR" + }, + { + "name": "pwszConfirmationId", + "type": "PCWSTR" + } + ], + "SLDepositOfflineConfirmationIdEx": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pActivationInfo", + "type": "SL_ACTIVATION_INFO_HEADER" + }, + { + "name": "pwszInstallationId", + "type": "PCWSTR" + }, + { + "name": "pwszConfirmationId", + "type": "PCWSTR" + } + ], + "SLGetPKeyId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszPKeyAlgorithm", + "type": "PCWSTR" + }, + { + "name": "pwszPKeyString", + "type": "PCWSTR" + }, + { + "name": "cbPKeySpecificData", + "type": "UINT" + }, + { + "name": "pbPKeySpecificData", + "type": "BYTE" + }, + { + "name": "pPKeyId", + "type": "SLID" + } + ], + "SLGetInstalledProductKeyIds": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pnProductKeyIds", + "type": "UINT" + }, + { + "name": "ppProductKeyIds", + "type": "SLID" + } + ], + "SLSetCurrentProductKey": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pProductKeyId", + "type": "SLID" + } + ], + "SLGetSLIDList": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "eQueryIdType", + "type": "SLIDTYPE" + }, + { + "name": "pQueryId", + "type": "SLID" + }, + { + "name": "eReturnIdType", + "type": "SLIDTYPE" + }, + { + "name": "pnReturnIds", + "type": "UINT" + }, + { + "name": "ppReturnIds", + "type": "SLID" + } + ], + "SLGetLicenseFileId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "cbLicenseBlob", + "type": "UINT" + }, + { + "name": "pbLicenseBlob", + "type": "BYTE" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + } + ], + "SLGetLicense": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + }, + { + "name": "pcbLicenseFile", + "type": "UINT" + }, + { + "name": "ppbLicenseFile", + "type": "PBYTE" + } + ], + "SLFireEvent": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszEventId", + "type": "PCWSTR" + }, + { + "name": "pApplicationId", + "type": "SLID" + } + ], + "SLRegisterEvent": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszEventId", + "type": "PCWSTR" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "SLUnregisterEvent": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszEventId", + "type": "PCWSTR" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "SLGetWindowsInformation": [ + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetWindowsInformationDWORD": [ + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "pdwValue", + "type": "DWORD" + } + ], + "SLSetGenuineInformation": [ + { + "name": "pQueryId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "eDataType", + "type": "SLDATATYPE" + }, + { + "name": "cbValue", + "type": "UINT" + }, + { + "name": "pbValue", + "type": "BYTE" + } + ], + "SLGetReferralInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "eReferralType", + "type": "SLREFERRALTYPE" + }, + { + "name": "pSkuOrAppId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "SLPersistRTSPayloadOverride": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "SLPersistApplicationPolicies": [ + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SLGetApplicationPolicy": [ + { + "name": "hPolicyContext", + "type": "HSLP" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLLoadApplicationPolicies": [ + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phPolicyContext", + "type": "HSLP" + } + ], + "SLUnloadApplicationPolicies": [ + { + "name": "hPolicyContext", + "type": "HSLP" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SLGetAuthenticationResult": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLSetAuthenticationData": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "cbValue", + "type": "UINT" + }, + { + "name": "pbValue", + "type": "BYTE" + } + ], + "SLGetGenuineInformation": [ + { + "name": "pQueryId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "BYTE" + } + ], + "SLGetGenuineInformationEx": [ + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "BYTE" + } + ], + "SLGatherMigrationBlob": [ + { + "name": "bMigratableOnly", + "type": "BOOL" + }, + { + "name": "pwszEncryptorUri", + "type": "LPCWSTR" + }, + { + "name": "hFile", + "type": "HANDLE" + } + ], + "SLDepositMigrationBlob": [ + { + "name": "hFile", + "type": "HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/slcext_dll.json b/qiling/extensions/windows_sdk/defs/slcext_dll.json new file mode 100644 index 000000000..218830f68 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/slcext_dll.json @@ -0,0 +1,24 @@ +{ + "SLAcquireGenuineTicket": [ + { + "name": "ppTicketBlob", + "type": "void" + }, + { + "name": "pcbTicketBlob", + "type": "UINT" + }, + { + "name": "pwszTemplateId", + "type": "PCWSTR" + }, + { + "name": "pwszServerUrl", + "type": "PCWSTR" + }, + { + "name": "pwszClientToken", + "type": "PCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/slwga_dll.json b/qiling/extensions/windows_sdk/defs/slwga_dll.json new file mode 100644 index 000000000..2aa203cba --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/slwga_dll.json @@ -0,0 +1,30 @@ +{ + "SLIsGenuineLocal": [ + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pGenuineState", + "type": "SL_GENUINE_STATE" + }, + { + "name": "pUIOptions", + "type": "SL_NONGENUINE_UI_OPTIONS" + } + ], + "SLIsGenuineLocalEx": [ + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pSkuId", + "type": "SLID" + }, + { + "name": "pGenuineState", + "type": "SL_GENUINE_STATE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/snmpapi_dll.json b/qiling/extensions/windows_sdk/defs/snmpapi_dll.json new file mode 100644 index 000000000..2511cf2ef --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/snmpapi_dll.json @@ -0,0 +1,212 @@ +{ + "SnmpUtilOidCpy": [ + { + "name": "pOidDst", + "type": "AsnObjectIdentifier" + }, + { + "name": "pOidSrc", + "type": "AsnObjectIdentifier" + } + ], + "SnmpUtilOidAppend": [ + { + "name": "pOidDst", + "type": "AsnObjectIdentifier" + }, + { + "name": "pOidSrc", + "type": "AsnObjectIdentifier" + } + ], + "SnmpUtilOidNCmp": [ + { + "name": "pOid1", + "type": "AsnObjectIdentifier" + }, + { + "name": "pOid2", + "type": "AsnObjectIdentifier" + }, + { + "name": "nSubIds", + "type": "UINT" + } + ], + "SnmpUtilOidCmp": [ + { + "name": "pOid1", + "type": "AsnObjectIdentifier" + }, + { + "name": "pOid2", + "type": "AsnObjectIdentifier" + } + ], + "SnmpUtilOidFree": [ + { + "name": "pOid", + "type": "AsnObjectIdentifier" + } + ], + "SnmpUtilOctetsCmp": [ + { + "name": "pOctets1", + "type": "AsnOctetString" + }, + { + "name": "pOctets2", + "type": "AsnOctetString" + } + ], + "SnmpUtilOctetsNCmp": [ + { + "name": "pOctets1", + "type": "AsnOctetString" + }, + { + "name": "pOctets2", + "type": "AsnOctetString" + }, + { + "name": "nChars", + "type": "UINT" + } + ], + "SnmpUtilOctetsCpy": [ + { + "name": "pOctetsDst", + "type": "AsnOctetString" + }, + { + "name": "pOctetsSrc", + "type": "AsnOctetString" + } + ], + "SnmpUtilOctetsFree": [ + { + "name": "pOctets", + "type": "AsnOctetString" + } + ], + "SnmpUtilAsnAnyCpy": [ + { + "name": "pAnyDst", + "type": "AsnAny" + }, + { + "name": "pAnySrc", + "type": "AsnAny" + } + ], + "SnmpUtilAsnAnyFree": [ + { + "name": "pAny", + "type": "AsnAny" + } + ], + "SnmpUtilVarBindCpy": [ + { + "name": "pVbDst", + "type": "SnmpVarBind" + }, + { + "name": "pVbSrc", + "type": "SnmpVarBind" + } + ], + "SnmpUtilVarBindFree": [ + { + "name": "pVb", + "type": "SnmpVarBind" + } + ], + "SnmpUtilVarBindListCpy": [ + { + "name": "pVblDst", + "type": "SnmpVarBindList" + }, + { + "name": "pVblSrc", + "type": "SnmpVarBindList" + } + ], + "SnmpUtilVarBindListFree": [ + { + "name": "pVbl", + "type": "SnmpVarBindList" + } + ], + "SnmpUtilMemFree": [ + { + "name": "pMem", + "type": "LPVOID" + } + ], + "SnmpUtilMemAlloc": [ + { + "name": "nBytes", + "type": "UINT" + } + ], + "SnmpUtilMemReAlloc": [ + { + "name": "pMem", + "type": "LPVOID" + }, + { + "name": "nBytes", + "type": "UINT" + } + ], + "SnmpUtilOidToA": [ + { + "name": "Oid", + "type": "AsnObjectIdentifier" + } + ], + "SnmpUtilIdsToA": [ + { + "name": "Ids", + "type": "UINT" + }, + { + "name": "IdLength", + "type": "UINT" + } + ], + "SnmpUtilPrintOid": [ + { + "name": "Oid", + "type": "AsnObjectIdentifier" + } + ], + "SnmpUtilPrintAsnAny": [ + { + "name": "pAny", + "type": "AsnAny" + } + ], + "SnmpSvcSetLogLevel": [ + { + "name": "nLogLevel", + "type": "INT" + } + ], + "SnmpSvcSetLogType": [ + { + "name": "nLogType", + "type": "INT" + } + ], + "SnmpUtilDbgPrint": [ + { + "name": "nLogLevel", + "type": "INT" + }, + { + "name": "szFormat", + "type": "LPSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/spoolss_dll.json b/qiling/extensions/windows_sdk/defs/spoolss_dll.json new file mode 100644 index 000000000..ee50d993d --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/spoolss_dll.json @@ -0,0 +1,60 @@ +{ + "RegisterForPrintAsyncNotifications": [ + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "pNotificationType", + "type": "PrintAsyncNotificationType" + }, + { + "name": "eUserFilter", + "type": "PrintAsyncNotifyUserFilter" + }, + { + "name": "eConversationStyle", + "type": "PrintAsyncNotifyConversationStyle" + }, + { + "name": "pCallback", + "type": "IPrintAsyncNotifyCallback" + }, + { + "name": "phNotify", + "type": "HANDLE" + } + ], + "UnRegisterForPrintAsyncNotifications": [ + { + "name": "VOID", + "type": "HANDLE" + } + ], + "CreatePrintAsyncNotifyChannel": [ + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "pNotificationType", + "type": "PrintAsyncNotificationType" + }, + { + "name": "eUserFilter", + "type": "PrintAsyncNotifyUserFilter" + }, + { + "name": "eConversationStyle", + "type": "PrintAsyncNotifyConversationStyle" + }, + { + "name": "pCallback", + "type": "IPrintAsyncNotifyCallback" + }, + { + "name": "ppIAsynchNotification", + "type": "IPrintAsyncNotifyChannel" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/srclient_dll.json b/qiling/extensions/windows_sdk/defs/srclient_dll.json new file mode 100644 index 000000000..a8a6f199f --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/srclient_dll.json @@ -0,0 +1,28 @@ +{ + "SRSetRestorePointA": [ + { + "name": "pRestorePtSpec", + "type": "PRESTOREPOINTINFOA" + }, + { + "name": "pSMgrStatus", + "type": "PSTATEMGRSTATUS" + } + ], + "SRSetRestorePointW": [ + { + "name": "pRestorePtSpec", + "type": "PRESTOREPOINTINFOW" + }, + { + "name": "pSMgrStatus", + "type": "PSTATEMGRSTATUS" + } + ], + "SRRemoveRestorePoint": [ + { + "name": "dwRPNum", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/srpapi_dll.json b/qiling/extensions/windows_sdk/defs/srpapi_dll.json new file mode 100644 index 000000000..a6a6ed122 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/srpapi_dll.json @@ -0,0 +1,88 @@ +{ + "SrpCreateThreadNetworkContext": [ + { + "name": "enterpriseId", + "type": "PCWSTR" + }, + { + "name": "threadNetworkContext", + "type": "HTHREAD_NETWORK_CONTEXT" + } + ], + "SrpCloseThreadNetworkContext": [ + { + "name": "threadNetworkContext", + "type": "HTHREAD_NETWORK_CONTEXT" + } + ], + "SrpSetTokenEnterpriseId": [ + { + "name": "tokenHandle", + "type": "HANDLE" + }, + { + "name": "enterpriseId", + "type": "PCWSTR" + } + ], + "SrpGetEnterpriseIds": [ + { + "name": "tokenHandle", + "type": "HANDLE" + }, + { + "name": "numberOfBytes", + "type": "PULONG" + }, + { + "name": "enterpriseIds", + "type": "PCWSTR" + }, + { + "name": "enterpriseIdCount", + "type": "PULONG" + } + ], + "SrpEnablePermissiveModeFileEncryption": [ + { + "name": "enterpriseId", + "type": "PCWSTR" + } + ], + "SrpDisablePermissiveModeFileEncryption": [ + { + "name": "VOID", + "type": "void" + } + ], + "SrpGetEnterprisePolicy": [ + { + "name": "tokenHandle", + "type": "HANDLE" + }, + { + "name": "policyFlags", + "type": "ENTERPRISE_DATA_POLICIES" + } + ], + "SrpIsTokenService": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "IsTokenService", + "type": "BOOLEAN" + } + ], + "SrpDoesPolicyAllowAppExecution": [ + { + "name": "packageId", + "type": "PACKAGE_ID" + }, + { + "name": "isAllowed", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/storprop_dll.json b/qiling/extensions/windows_sdk/defs/storprop_dll.json new file mode 100644 index 000000000..70c54fdc4 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/storprop_dll.json @@ -0,0 +1,50 @@ +{ + "CdromKnownGoodDigitalPlayback": [ + { + "name": "HDevInfo", + "type": "HDEVINFO" + }, + { + "name": "DevInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "CdromEnableDigitalPlayback": [ + { + "name": "DevInfo", + "type": "HDEVINFO" + }, + { + "name": "DevInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "ForceUnknown", + "type": "BOOLEAN" + } + ], + "CdromDisableDigitalPlayback": [ + { + "name": "DevInfo", + "type": "HDEVINFO" + }, + { + "name": "DevInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "CdromIsDigitalPlaybackEnabled": [ + { + "name": "DevInfo", + "type": "HDEVINFO" + }, + { + "name": "DevInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "Enabled", + "type": "PBOOLEAN" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/sxs_dll.json b/qiling/extensions/windows_sdk/defs/sxs_dll.json new file mode 100644 index 000000000..d4ee206b9 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/sxs_dll.json @@ -0,0 +1,30 @@ +{ + "CreateAssemblyNameObject": [ + { + "name": "ppAssemblyNameObj", + "type": "LPASSEMBLYNAME" + }, + { + "name": "szAssemblyName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "CreateAssemblyCache": [ + { + "name": "ppAsmCache", + "type": "IAssemblyCache" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/t2embed_dll.json b/qiling/extensions/windows_sdk/defs/t2embed_dll.json new file mode 100644 index 000000000..4b862a8ea --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/t2embed_dll.json @@ -0,0 +1,342 @@ +{ + "TTEmbedFont": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "ulCharSet", + "type": "ULONG" + }, + { + "name": "pulPrivStatus", + "type": "ULONG" + }, + { + "name": "pulStatus", + "type": "ULONG" + }, + { + "name": "lpfnWriteToStream", + "type": "WRITEEMBEDPROC" + }, + { + "name": "lpvWriteStream", + "type": "LPVOID" + }, + { + "name": "pusCharCodeSet", + "type": "USHORT" + }, + { + "name": "usCharCodeCount", + "type": "USHORT" + }, + { + "name": "usLanguage", + "type": "USHORT" + }, + { + "name": "pTTEmbedInfo", + "type": "TTEMBEDINFO" + } + ], + "TTEmbedFontFromFileA": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "szFontFileName", + "type": "LPCSTR" + }, + { + "name": "usTTCIndex", + "type": "USHORT" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "ulCharSet", + "type": "ULONG" + }, + { + "name": "pulPrivStatus", + "type": "ULONG" + }, + { + "name": "pulStatus", + "type": "ULONG" + }, + { + "name": "lpfnWriteToStream", + "type": "WRITEEMBEDPROC" + }, + { + "name": "lpvWriteStream", + "type": "LPVOID" + }, + { + "name": "pusCharCodeSet", + "type": "USHORT" + }, + { + "name": "usCharCodeCount", + "type": "USHORT" + }, + { + "name": "usLanguage", + "type": "USHORT" + }, + { + "name": "pTTEmbedInfo", + "type": "TTEMBEDINFO" + } + ], + "TTLoadEmbeddedFont": [ + { + "name": "phFontReference", + "type": "HANDLE" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "pulPrivStatus", + "type": "ULONG" + }, + { + "name": "ulPrivs", + "type": "ULONG" + }, + { + "name": "pulStatus", + "type": "ULONG" + }, + { + "name": "lpfnReadFromStream", + "type": "READEMBEDPROC" + }, + { + "name": "lpvReadStream", + "type": "LPVOID" + }, + { + "name": "szWinFamilyName", + "type": "LPWSTR" + }, + { + "name": "szMacFamilyName", + "type": "LPSTR" + }, + { + "name": "pTTLoadInfo", + "type": "TTLOADINFO" + } + ], + "TTGetEmbeddedFontInfo": [ + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "pulPrivStatus", + "type": "ULONG" + }, + { + "name": "ulPrivs", + "type": "ULONG" + }, + { + "name": "pulStatus", + "type": "ULONG" + }, + { + "name": "lpfnReadFromStream", + "type": "READEMBEDPROC" + }, + { + "name": "lpvReadStream", + "type": "LPVOID" + }, + { + "name": "pTTLoadInfo", + "type": "TTLOADINFO" + } + ], + "TTDeleteEmbeddedFont": [ + { + "name": "hFontReference", + "type": "HANDLE" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "pulStatus", + "type": "ULONG" + } + ], + "TTGetEmbeddingType": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "pulEmbedType", + "type": "ULONG" + } + ], + "TTCharToUnicode": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "pucCharCodes", + "type": "UCHAR" + }, + { + "name": "ulCharCodeSize", + "type": "ULONG" + }, + { + "name": "pusShortCodes", + "type": "USHORT" + }, + { + "name": "ulShortCodeSize", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "TTRunValidationTests": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "pTestParam", + "type": "TTVALIDATIONTESTSPARAMS" + } + ], + "TTIsEmbeddingEnabled": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "pbEnabled", + "type": "BOOL" + } + ], + "TTIsEmbeddingEnabledForFacename": [ + { + "name": "lpszFacename", + "type": "LPCSTR" + }, + { + "name": "pbEnabled", + "type": "BOOL" + } + ], + "TTEnableEmbeddingForFacename": [ + { + "name": "lpszFacename", + "type": "LPCSTR" + }, + { + "name": "bEnable", + "type": "BOOL" + } + ], + "TTEmbedFontEx": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "ulCharSet", + "type": "ULONG" + }, + { + "name": "pulPrivStatus", + "type": "ULONG" + }, + { + "name": "pulStatus", + "type": "ULONG" + }, + { + "name": "lpfnWriteToStream", + "type": "WRITEEMBEDPROC" + }, + { + "name": "lpvWriteStream", + "type": "LPVOID" + }, + { + "name": "pulCharCodeSet", + "type": "ULONG" + }, + { + "name": "usCharCodeCount", + "type": "USHORT" + }, + { + "name": "usLanguage", + "type": "USHORT" + }, + { + "name": "pTTEmbedInfo", + "type": "TTEMBEDINFO" + } + ], + "TTRunValidationTestsEx": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "pTestParam", + "type": "TTVALIDATIONTESTSPARAMSEX" + } + ], + "TTGetNewFontName": [ + { + "name": "phFontReference", + "type": "HANDLE" + }, + { + "name": "wzWinFamilyName", + "type": "LPWSTR" + }, + { + "name": "cchMaxWinName", + "type": "LONG" + }, + { + "name": "szMacFamilyName", + "type": "LPSTR" + }, + { + "name": "cchMaxMacName", + "type": "LONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/tbs_dll.json b/qiling/extensions/windows_sdk/defs/tbs_dll.json new file mode 100644 index 000000000..a69a523f8 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/tbs_dll.json @@ -0,0 +1,132 @@ +{ + "Tbsi_Context_Create": [ + { + "name": "pContextParams", + "type": "PCTBS_CONTEXT_PARAMS" + }, + { + "name": "phContext", + "type": "PTBS_HCONTEXT" + } + ], + "Tbsip_Context_Close": [ + { + "name": "hContext", + "type": "TBS_HCONTEXT" + } + ], + "Tbsip_Submit_Command": [ + { + "name": "hContext", + "type": "TBS_HCONTEXT" + }, + { + "name": "Locality", + "type": "TBS_COMMAND_LOCALITY" + }, + { + "name": "Priority", + "type": "TBS_COMMAND_PRIORITY" + }, + { + "name": "pabCommand", + "type": "PCBYTE" + }, + { + "name": "cbCommand", + "type": "UINT32" + }, + { + "name": "pabResult", + "type": "PBYTE" + }, + { + "name": "pcbResult", + "type": "PUINT32" + } + ], + "Tbsip_Cancel_Commands": [ + { + "name": "hContext", + "type": "TBS_HCONTEXT" + } + ], + "Tbsi_Physical_Presence_Command": [ + { + "name": "hContext", + "type": "TBS_HCONTEXT" + }, + { + "name": "pabInput", + "type": "PCBYTE" + }, + { + "name": "cbInput", + "type": "UINT32" + }, + { + "name": "pabOutput", + "type": "PBYTE" + }, + { + "name": "pcbOutput", + "type": "PUINT32" + } + ], + "Tbsi_Get_TCG_Log": [ + { + "name": "hContext", + "type": "TBS_HCONTEXT" + }, + { + "name": "pOutputBuf", + "type": "PBYTE" + }, + { + "name": "pOutputBufLen", + "type": "PUINT32" + } + ], + "Tbsi_GetDeviceInfo": [ + { + "name": "Size", + "type": "UINT32" + }, + { + "name": "Info", + "type": "PVOID" + } + ], + "Tbsi_Get_OwnerAuth": [ + { + "name": "hContext", + "type": "TBS_HCONTEXT" + }, + { + "name": "ownerauthType", + "type": "TBS_OWNERAUTH_TYPE" + }, + { + "name": "pOutputBuf", + "type": "PBYTE" + }, + { + "name": "pOutputBufLen", + "type": "PUINT32" + } + ], + "Tbsi_Get_TCG_Log_Ex": [ + { + "name": "logType", + "type": "UINT32" + }, + { + "name": "pbOutput", + "type": "PBYTE" + }, + { + "name": "pcbOutput", + "type": "PUINT32" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/tdh_dll.json b/qiling/extensions/windows_sdk/defs/tdh_dll.json new file mode 100644 index 000000000..d74aca11a --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/tdh_dll.json @@ -0,0 +1,398 @@ +{ + "TdhCreatePayloadFilter": [ + { + "name": "ProviderGuid", + "type": "LPCGUID" + }, + { + "name": "EventDescriptor", + "type": "PCEVENT_DESCRIPTOR" + }, + { + "name": "EventMatchANY", + "type": "BOOLEAN" + }, + { + "name": "PayloadPredicateCount", + "type": "ULONG" + }, + { + "name": "PayloadPredicates", + "type": "PPAYLOAD_FILTER_PREDICATE" + }, + { + "name": "PayloadFilter", + "type": "PVOID" + } + ], + "TdhDeletePayloadFilter": [ + { + "name": "PayloadFilter", + "type": "PVOID" + } + ], + "TdhAggregatePayloadFilters": [ + { + "name": "PayloadFilterCount", + "type": "ULONG" + }, + { + "name": "PayloadFilterPtrs", + "type": "PVOID" + }, + { + "name": "EventMatchALLFlags", + "type": "PBOOLEAN" + }, + { + "name": "EventFilterDescriptor", + "type": "PEVENT_FILTER_DESCRIPTOR" + } + ], + "TdhCleanupPayloadEventFilterDescriptor": [ + { + "name": "EventFilterDescriptor", + "type": "PEVENT_FILTER_DESCRIPTOR" + } + ], + "TdhGetEventInformation": [ + { + "name": "Event", + "type": "PEVENT_RECORD" + }, + { + "name": "TdhContextCount", + "type": "ULONG" + }, + { + "name": "TdhContext", + "type": "PTDH_CONTEXT" + }, + { + "name": "Buffer", + "type": "PTRACE_EVENT_INFO" + }, + { + "name": "BufferSize", + "type": "PULONG" + } + ], + "TdhGetEventMapInformation": [ + { + "name": "pEvent", + "type": "PEVENT_RECORD" + }, + { + "name": "pMapName", + "type": "PWSTR" + }, + { + "name": "pBuffer", + "type": "PEVENT_MAP_INFO" + }, + { + "name": "pBufferSize", + "type": "ULONG" + } + ], + "TdhGetPropertySize": [ + { + "name": "pEvent", + "type": "PEVENT_RECORD" + }, + { + "name": "TdhContextCount", + "type": "ULONG" + }, + { + "name": "pTdhContext", + "type": "PTDH_CONTEXT" + }, + { + "name": "PropertyDataCount", + "type": "ULONG" + }, + { + "name": "pPropertyData", + "type": "PPROPERTY_DATA_DESCRIPTOR" + }, + { + "name": "pPropertySize", + "type": "ULONG" + } + ], + "TdhGetProperty": [ + { + "name": "pEvent", + "type": "PEVENT_RECORD" + }, + { + "name": "TdhContextCount", + "type": "ULONG" + }, + { + "name": "pTdhContext", + "type": "PTDH_CONTEXT" + }, + { + "name": "PropertyDataCount", + "type": "ULONG" + }, + { + "name": "pPropertyData", + "type": "PPROPERTY_DATA_DESCRIPTOR" + }, + { + "name": "BufferSize", + "type": "ULONG" + }, + { + "name": "pBuffer", + "type": "PBYTE" + } + ], + "TdhEnumerateProviders": [ + { + "name": "pBuffer", + "type": "PPROVIDER_ENUMERATION_INFO" + }, + { + "name": "pBufferSize", + "type": "ULONG" + } + ], + "TdhQueryProviderFieldInformation": [ + { + "name": "pGuid", + "type": "LPGUID" + }, + { + "name": "EventFieldValue", + "type": "ULONGLONG" + }, + { + "name": "EventFieldType", + "type": "EVENT_FIELD_TYPE" + }, + { + "name": "pBuffer", + "type": "PPROVIDER_FIELD_INFOARRAY" + }, + { + "name": "pBufferSize", + "type": "ULONG" + } + ], + "TdhEnumerateProviderFieldInformation": [ + { + "name": "pGuid", + "type": "LPGUID" + }, + { + "name": "EventFieldType", + "type": "EVENT_FIELD_TYPE" + }, + { + "name": "pBuffer", + "type": "PPROVIDER_FIELD_INFOARRAY" + }, + { + "name": "pBufferSize", + "type": "ULONG" + } + ], + "TdhEnumerateProviderFilters": [ + { + "name": "Guid", + "type": "LPGUID" + }, + { + "name": "TdhContextCount", + "type": "ULONG" + }, + { + "name": "TdhContext", + "type": "PTDH_CONTEXT" + }, + { + "name": "FilterCount", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PPROVIDER_FILTER_INFO" + }, + { + "name": "BufferSize", + "type": "ULONG" + } + ], + "TdhLoadManifest": [ + { + "name": "Manifest", + "type": "PWSTR" + } + ], + "TdhUnloadManifest": [ + { + "name": "Manifest", + "type": "PWSTR" + } + ], + "TdhFormatProperty": [ + { + "name": "EventInfo", + "type": "PTRACE_EVENT_INFO" + }, + { + "name": "MapInfo", + "type": "PEVENT_MAP_INFO" + }, + { + "name": "PointerSize", + "type": "ULONG" + }, + { + "name": "PropertyInType", + "type": "USHORT" + }, + { + "name": "PropertyOutType", + "type": "USHORT" + }, + { + "name": "PropertyLength", + "type": "USHORT" + }, + { + "name": "UserDataLength", + "type": "USHORT" + }, + { + "name": "UserData", + "type": "PBYTE" + }, + { + "name": "BufferSize", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "PWCHAR" + }, + { + "name": "UserDataConsumed", + "type": "PUSHORT" + } + ], + "TdhOpenDecodingHandle": [ + { + "name": "Handle", + "type": "PTDH_HANDLE" + } + ], + "TdhSetDecodingParameter": [ + { + "name": "Handle", + "type": "TDH_HANDLE" + }, + { + "name": "TdhContext", + "type": "PTDH_CONTEXT" + } + ], + "TdhGetDecodingParameter": [ + { + "name": "Handle", + "type": "TDH_HANDLE" + }, + { + "name": "TdhContext", + "type": "PTDH_CONTEXT" + } + ], + "TdhGetWppProperty": [ + { + "name": "Handle", + "type": "TDH_HANDLE" + }, + { + "name": "EventRecord", + "type": "PEVENT_RECORD" + }, + { + "name": "PropertyName", + "type": "PWSTR" + }, + { + "name": "BufferSize", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "PBYTE" + } + ], + "TdhGetWppMessage": [ + { + "name": "Handle", + "type": "TDH_HANDLE" + }, + { + "name": "EventRecord", + "type": "PEVENT_RECORD" + }, + { + "name": "BufferSize", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "PBYTE" + } + ], + "TdhCloseDecodingHandle": [ + { + "name": "Handle", + "type": "TDH_HANDLE" + } + ], + "TdhLoadManifestFromBinary": [ + { + "name": "BinaryPath", + "type": "PWSTR" + } + ], + "TdhEnumerateManifestProviderEvents": [ + { + "name": "ProviderGuid", + "type": "LPGUID" + }, + { + "name": "Buffer", + "type": "PPROVIDER_EVENT_INFO" + }, + { + "name": "BufferSize", + "type": "ULONG" + } + ], + "TdhGetManifestEventInformation": [ + { + "name": "ProviderGuid", + "type": "LPGUID" + }, + { + "name": "EventDescriptor", + "type": "PEVENT_DESCRIPTOR" + }, + { + "name": "Buffer", + "type": "PTRACE_EVENT_INFO" + }, + { + "name": "BufferSize", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/tokenbinding_dll.json b/qiling/extensions/windows_sdk/defs/tokenbinding_dll.json new file mode 100644 index 000000000..e8c354340 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/tokenbinding_dll.json @@ -0,0 +1,128 @@ +{ + "TokenBindingGenerateBinding": [ + { + "name": "keyType", + "type": "TOKENBINDING_KEY_PARAMETERS_TYPE" + }, + { + "name": "targetURL", + "type": "PCWSTR" + }, + { + "name": "bindingType", + "type": "TOKENBINDING_TYPE" + }, + { + "name": "tlsEKM", + "type": "void" + }, + { + "name": "tlsEKMSize", + "type": "DWORD" + }, + { + "name": "extensionFormat", + "type": "TOKENBINDING_EXTENSION_FORMAT" + }, + { + "name": "extensionData", + "type": "void" + }, + { + "name": "tokenBinding", + "type": "void" + }, + { + "name": "tokenBindingSize", + "type": "DWORD" + }, + { + "name": "resultData", + "type": "TOKENBINDING_RESULT_DATA" + } + ], + "TokenBindingGenerateMessage": [ + { + "name": "tokenBindings", + "type": "void" + }, + { + "name": "tokenBindingsSize", + "type": "DWORD" + }, + { + "name": "tokenBindingsCount", + "type": "DWORD" + }, + { + "name": "tokenBindingMessage", + "type": "void" + }, + { + "name": "tokenBindingMessageSize", + "type": "DWORD" + } + ], + "TokenBindingVerifyMessage": [ + { + "name": "tokenBindingMessage", + "type": "void" + }, + { + "name": "tokenBindingMessageSize", + "type": "DWORD" + }, + { + "name": "keyType", + "type": "TOKENBINDING_KEY_PARAMETERS_TYPE" + }, + { + "name": "tlsEKM", + "type": "void" + }, + { + "name": "tlsEKMSize", + "type": "DWORD" + }, + { + "name": "resultList", + "type": "TOKENBINDING_RESULT_LIST" + } + ], + "TokenBindingGetKeyTypesClient": [ + { + "name": "keyTypes", + "type": "TOKENBINDING_KEY_TYPES" + } + ], + "TokenBindingGetKeyTypesServer": [ + { + "name": "keyTypes", + "type": "TOKENBINDING_KEY_TYPES" + } + ], + "TokenBindingDeleteBinding": [ + { + "name": "targetURL", + "type": "PCWSTR" + } + ], + "TokenBindingGenerateID": [ + { + "name": "keyType", + "type": "TOKENBINDING_KEY_PARAMETERS_TYPE" + }, + { + "name": "publicKey", + "type": "void" + }, + { + "name": "publicKeySize", + "type": "DWORD" + }, + { + "name": "resultData", + "type": "TOKENBINDING_RESULT_DATA" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/twinapi_core_dll.json b/qiling/extensions/windows_sdk/defs/twinapi_core_dll.json new file mode 100644 index 000000000..f01df8e94 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/twinapi_core_dll.json @@ -0,0 +1,22 @@ +{ + "RegisterAppStateChangeNotification": [ + { + "name": "Routine", + "type": "PAPPSTATE_CHANGE_ROUTINE" + }, + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "Registration", + "type": "PAPPSTATE_REGISTRATION" + } + ], + "UnregisterAppStateChangeNotification": [ + { + "name": "Registration", + "type": "PAPPSTATE_REGISTRATION" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/txfw32_dll.json b/qiling/extensions/windows_sdk/defs/txfw32_dll.json new file mode 100644 index 000000000..066d9b05f --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/txfw32_dll.json @@ -0,0 +1,94 @@ +{ + "TxfLogCreateFileReadContext": [ + { + "name": "LogPath", + "type": "LPCWSTR" + }, + { + "name": "BeginningLsn", + "type": "CLFS_LSN" + }, + { + "name": "EndingLsn", + "type": "CLFS_LSN" + }, + { + "name": "TxfFileId", + "type": "PTXF_ID" + }, + { + "name": "TxfLogContext", + "type": "PVOID" + } + ], + "TxfLogCreateRangeReadContext": [ + { + "name": "LogPath", + "type": "LPCWSTR" + }, + { + "name": "BeginningLsn", + "type": "CLFS_LSN" + }, + { + "name": "EndingLsn", + "type": "CLFS_LSN" + }, + { + "name": "BeginningVirtualClock", + "type": "PLARGE_INTEGER" + }, + { + "name": "EndingVirtualClock", + "type": "PLARGE_INTEGER" + }, + { + "name": "RecordTypeMask", + "type": "ULONG" + }, + { + "name": "TxfLogContext", + "type": "PVOID" + } + ], + "TxfLogDestroyReadContext": [ + { + "name": "TxfLogContext", + "type": "PVOID" + } + ], + "TxfLogReadRecords": [ + { + "name": "TxfLogContext", + "type": "PVOID" + }, + { + "name": "BufferLength", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "BytesUsed", + "type": "PULONG" + }, + { + "name": "RecordCount", + "type": "PULONG" + } + ], + "TxfSetThreadMiniVersionForCreate": [ + { + "name": "MiniVersion", + "type": "USHORT" + } + ], + "TxfGetThreadMiniVersionForCreate": [ + { + "name": "MiniVersion", + "type": "PUSHORT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/ualapi_dll.json b/qiling/extensions/windows_sdk/defs/ualapi_dll.json new file mode 100644 index 000000000..5dc22db83 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/ualapi_dll.json @@ -0,0 +1,34 @@ +{ + "UalStart": [ + { + "name": "Data", + "type": "PUAL_DATA_BLOB" + } + ], + "UalStop": [ + { + "name": "Data", + "type": "PUAL_DATA_BLOB" + } + ], + "UalInstrument": [ + { + "name": "Data", + "type": "PUAL_DATA_BLOB" + } + ], + "UalRegisterProduct": [ + { + "name": "wszProductName", + "type": "WCHAR" + }, + { + "name": "wszRoleName", + "type": "WCHAR" + }, + { + "name": "wszGuid", + "type": "WCHAR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/url_dll.json b/qiling/extensions/windows_sdk/defs/url_dll.json new file mode 100644 index 000000000..0399bdaab --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/url_dll.json @@ -0,0 +1,140 @@ +{ + "TranslateURLA": [ + { + "name": "pcszURL", + "type": "PCSTR" + }, + { + "name": "dwInFlags", + "type": "DWORD" + }, + { + "name": "ppszTranslatedURL", + "type": "PSTR" + } + ], + "TranslateURLW": [ + { + "name": "pcszURL", + "type": "PCWSTR" + }, + { + "name": "dwInFlags", + "type": "DWORD" + }, + { + "name": "ppszTranslatedURL", + "type": "PWSTR" + } + ], + "URLAssociationDialogA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwInFlags", + "type": "DWORD" + }, + { + "name": "pcszFile", + "type": "PCSTR" + }, + { + "name": "pcszURL", + "type": "PCSTR" + }, + { + "name": "pszAppBuf", + "type": "PSTR" + }, + { + "name": "ucAppBufLen", + "type": "UINT" + } + ], + "URLAssociationDialogW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwInFlags", + "type": "DWORD" + }, + { + "name": "pcszFile", + "type": "PCWSTR" + }, + { + "name": "pcszURL", + "type": "PCWSTR" + }, + { + "name": "pszAppBuf", + "type": "PWSTR" + }, + { + "name": "ucAppBufLen", + "type": "UINT" + } + ], + "MIMEAssociationDialogA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwInFlags", + "type": "DWORD" + }, + { + "name": "pcszFile", + "type": "PCSTR" + }, + { + "name": "pcszMIMEContentType", + "type": "PCSTR" + }, + { + "name": "pszAppBuf", + "type": "PSTR" + }, + { + "name": "ucAppBufLen", + "type": "UINT" + } + ], + "MIMEAssociationDialogW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwInFlags", + "type": "DWORD" + }, + { + "name": "pcszFile", + "type": "PCWSTR" + }, + { + "name": "pcszMIMEContentType", + "type": "PCWSTR" + }, + { + "name": "pszAppBuf", + "type": "PWSTR" + }, + { + "name": "ucAppBufLen", + "type": "UINT" + } + ], + "InetIsOffline": [ + { + "name": "dwFlags", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/urlmon_dll.json b/qiling/extensions/windows_sdk/defs/urlmon_dll.json new file mode 100644 index 000000000..ab6303485 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/urlmon_dll.json @@ -0,0 +1,34 @@ +{ + "CreateAsyncBindCtx": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "pBSCb", + "type": "IBindStatusCallback" + }, + { + "name": "pEFetc", + "type": "IEnumFORMATETC" + }, + { + "name": "ppBC", + "type": "IBindCtx" + } + ], + "CreateFormatEnumerator": [ + { + "name": "cfmtetc", + "type": "UINT" + }, + { + "name": "rgfmtetc", + "type": "FORMATETC" + }, + { + "name": "ppenumfmtetc", + "type": "IEnumFORMATETC" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/user32_dll.json b/qiling/extensions/windows_sdk/defs/user32_dll.json new file mode 100644 index 000000000..2e4e26707 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/user32_dll.json @@ -0,0 +1,9508 @@ +{ + "WINNLSEnableIME": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "SendIMEMessageExA": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "LPARAM" + } + ], + "SendIMEMessageExW": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "LPARAM" + } + ], + "DdeSetQualityOfService": [ + { + "name": "hwndClient", + "type": "HWND" + }, + { + "name": "pqosNew", + "type": "SECURITY_QUALITY_OF_SERVICE" + }, + { + "name": "pqosPrev", + "type": "PSECURITY_QUALITY_OF_SERVICE" + } + ], + "ImpersonateDdeClientWindow": [ + { + "name": "hWndClient", + "type": "HWND" + }, + { + "name": "hWndServer", + "type": "HWND" + } + ], + "PackDDElParam": [ + { + "name": "msg", + "type": "UINT" + }, + { + "name": "uiLo", + "type": "UINT_PTR" + }, + { + "name": "uiHi", + "type": "UINT_PTR" + } + ], + "UnpackDDElParam": [ + { + "name": "msg", + "type": "UINT" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "puiLo", + "type": "PUINT_PTR" + }, + { + "name": "puiHi", + "type": "PUINT_PTR" + } + ], + "FreeDDElParam": [ + { + "name": "msg", + "type": "UINT" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "ReuseDDElParam": [ + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "msgIn", + "type": "UINT" + }, + { + "name": "msgOut", + "type": "UINT" + }, + { + "name": "uiLo", + "type": "UINT_PTR" + }, + { + "name": "uiHi", + "type": "UINT_PTR" + } + ], + "DdeInitializeA": [ + { + "name": "pidInst", + "type": "LPDWORD" + }, + { + "name": "pfnCallback", + "type": "PFNCALLBACK" + }, + { + "name": "afCmd", + "type": "DWORD" + }, + { + "name": "ulRes", + "type": "DWORD" + } + ], + "DdeInitializeW": [ + { + "name": "pidInst", + "type": "LPDWORD" + }, + { + "name": "pfnCallback", + "type": "PFNCALLBACK" + }, + { + "name": "afCmd", + "type": "DWORD" + }, + { + "name": "ulRes", + "type": "DWORD" + } + ], + "DdeUninitialize": [ + { + "name": "idInst", + "type": "DWORD" + } + ], + "DdeConnectList": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hszService", + "type": "HSZ" + }, + { + "name": "hszTopic", + "type": "HSZ" + }, + { + "name": "hConvList", + "type": "HCONVLIST" + }, + { + "name": "pCC", + "type": "PCONVCONTEXT" + } + ], + "DdeQueryNextServer": [ + { + "name": "hConvList", + "type": "HCONVLIST" + }, + { + "name": "hConvPrev", + "type": "HCONV" + } + ], + "DdeDisconnectList": [ + { + "name": "hConvList", + "type": "HCONVLIST" + } + ], + "DdeConnect": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hszService", + "type": "HSZ" + }, + { + "name": "hszTopic", + "type": "HSZ" + }, + { + "name": "pCC", + "type": "PCONVCONTEXT" + } + ], + "DdeDisconnect": [ + { + "name": "hConv", + "type": "HCONV" + } + ], + "DdeReconnect": [ + { + "name": "hConv", + "type": "HCONV" + } + ], + "DdeQueryConvInfo": [ + { + "name": "hConv", + "type": "HCONV" + }, + { + "name": "idTransaction", + "type": "DWORD" + }, + { + "name": "pConvInfo", + "type": "PCONVINFO" + } + ], + "DdeSetUserHandle": [ + { + "name": "hConv", + "type": "HCONV" + }, + { + "name": "id", + "type": "DWORD" + }, + { + "name": "hUser", + "type": "DWORD_PTR" + } + ], + "DdeAbandonTransaction": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hConv", + "type": "HCONV" + }, + { + "name": "idTransaction", + "type": "DWORD" + } + ], + "DdePostAdvise": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hszTopic", + "type": "HSZ" + }, + { + "name": "hszItem", + "type": "HSZ" + } + ], + "DdeEnableCallback": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hConv", + "type": "HCONV" + }, + { + "name": "wCmd", + "type": "UINT" + } + ], + "DdeImpersonateClient": [ + { + "name": "hConv", + "type": "HCONV" + } + ], + "DdeNameService": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hsz1", + "type": "HSZ" + }, + { + "name": "hsz2", + "type": "HSZ" + }, + { + "name": "afCmd", + "type": "UINT" + } + ], + "DdeClientTransaction": [ + { + "name": "pData", + "type": "LPBYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "hConv", + "type": "HCONV" + }, + { + "name": "hszItem", + "type": "HSZ" + }, + { + "name": "wFmt", + "type": "UINT" + }, + { + "name": "wType", + "type": "UINT" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "pdwResult", + "type": "LPDWORD" + } + ], + "DdeCreateDataHandle": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "pSrc", + "type": "LPBYTE" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "cbOff", + "type": "DWORD" + }, + { + "name": "hszItem", + "type": "HSZ" + }, + { + "name": "wFmt", + "type": "UINT" + }, + { + "name": "afCmd", + "type": "UINT" + } + ], + "DdeAddData": [ + { + "name": "hData", + "type": "HDDEDATA" + }, + { + "name": "pSrc", + "type": "LPBYTE" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "cbOff", + "type": "DWORD" + } + ], + "DdeGetData": [ + { + "name": "hData", + "type": "HDDEDATA" + }, + { + "name": "pDst", + "type": "LPBYTE" + }, + { + "name": "cbMax", + "type": "DWORD" + }, + { + "name": "cbOff", + "type": "DWORD" + } + ], + "DdeAccessData": [ + { + "name": "hData", + "type": "HDDEDATA" + }, + { + "name": "pcbDataSize", + "type": "LPDWORD" + } + ], + "DdeUnaccessData": [ + { + "name": "hData", + "type": "HDDEDATA" + } + ], + "DdeFreeDataHandle": [ + { + "name": "hData", + "type": "HDDEDATA" + } + ], + "DdeGetLastError": [ + { + "name": "idInst", + "type": "DWORD" + } + ], + "DdeCreateStringHandleA": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "psz", + "type": "LPCSTR" + }, + { + "name": "iCodePage", + "type": "int" + } + ], + "DdeCreateStringHandleW": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "psz", + "type": "LPCWSTR" + }, + { + "name": "iCodePage", + "type": "int" + } + ], + "DdeQueryStringA": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hsz", + "type": "HSZ" + }, + { + "name": "psz", + "type": "LPSTR" + }, + { + "name": "cchMax", + "type": "DWORD" + }, + { + "name": "iCodePage", + "type": "int" + } + ], + "DdeQueryStringW": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hsz", + "type": "HSZ" + }, + { + "name": "psz", + "type": "LPWSTR" + }, + { + "name": "cchMax", + "type": "DWORD" + }, + { + "name": "iCodePage", + "type": "int" + } + ], + "DdeFreeStringHandle": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hsz", + "type": "HSZ" + } + ], + "DdeKeepStringHandle": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hsz", + "type": "HSZ" + } + ], + "DdeCmpStringHandles": [ + { + "name": "hsz1", + "type": "HSZ" + }, + { + "name": "hsz2", + "type": "HSZ" + } + ], + "OpenThemeDataForDpi": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszClassList", + "type": "LPCWSTR" + }, + { + "name": "dpi", + "type": "UINT" + } + ], + "LoadStringA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "uID", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "cchBufferMax", + "type": "int" + } + ], + "LoadStringW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "uID", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "cchBufferMax", + "type": "int" + } + ], + "wvsprintfA": [ + { + "name": "VOID", + "type": "LPSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "arglist", + "type": "va_list" + } + ], + "wvsprintfW": [ + { + "name": "VOID", + "type": "LPWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "arglist", + "type": "va_list" + } + ], + "wsprintfA": [ + { + "name": "VOID", + "type": "LPSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "wsprintfW": [ + { + "name": "VOID", + "type": "LPWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "LoadKeyboardLayoutA": [ + { + "name": "pwszKLID", + "type": "LPCSTR" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "LoadKeyboardLayoutW": [ + { + "name": "pwszKLID", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "ActivateKeyboardLayout": [ + { + "name": "hkl", + "type": "HKL" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "ToUnicodeEx": [ + { + "name": "wVirtKey", + "type": "UINT" + }, + { + "name": "wScanCode", + "type": "UINT" + }, + { + "name": "lpKeyState", + "type": "BYTE" + }, + { + "name": "pwszBuff", + "type": "LPWSTR" + }, + { + "name": "cchBuff", + "type": "int" + }, + { + "name": "wFlags", + "type": "UINT" + }, + { + "name": "dwhkl", + "type": "HKL" + } + ], + "UnloadKeyboardLayout": [ + { + "name": "hkl", + "type": "HKL" + } + ], + "GetKeyboardLayoutNameA": [ + { + "name": "pwszKLID", + "type": "LPSTR" + } + ], + "GetKeyboardLayoutNameW": [ + { + "name": "pwszKLID", + "type": "LPWSTR" + } + ], + "GetKeyboardLayoutList": [ + { + "name": "nBuff", + "type": "int" + }, + { + "name": "lpList", + "type": "HKL" + } + ], + "GetKeyboardLayout": [ + { + "name": "idThread", + "type": "DWORD" + } + ], + "GetMouseMovePointsEx": [ + { + "name": "cbSize", + "type": "UINT" + }, + { + "name": "lppt", + "type": "LPMOUSEMOVEPOINT" + }, + { + "name": "lpptBuf", + "type": "LPMOUSEMOVEPOINT" + }, + { + "name": "nBufPoints", + "type": "int" + }, + { + "name": "resolution", + "type": "DWORD" + } + ], + "CreateDesktopA": [ + { + "name": "lpszDesktop", + "type": "LPCSTR" + }, + { + "name": "lpszDevice", + "type": "LPCSTR" + }, + { + "name": "pDevmode", + "type": "DEVMODEA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "lpsa", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateDesktopW": [ + { + "name": "lpszDesktop", + "type": "LPCWSTR" + }, + { + "name": "lpszDevice", + "type": "LPCWSTR" + }, + { + "name": "pDevmode", + "type": "DEVMODEW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "lpsa", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateDesktopExA": [ + { + "name": "lpszDesktop", + "type": "LPCSTR" + }, + { + "name": "lpszDevice", + "type": "LPCSTR" + }, + { + "name": "pDevmode", + "type": "DEVMODEA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "lpsa", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "ulHeapSize", + "type": "ULONG" + }, + { + "name": "pvoid", + "type": "PVOID" + } + ], + "CreateDesktopExW": [ + { + "name": "lpszDesktop", + "type": "LPCWSTR" + }, + { + "name": "lpszDevice", + "type": "LPCWSTR" + }, + { + "name": "pDevmode", + "type": "DEVMODEW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "lpsa", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "ulHeapSize", + "type": "ULONG" + }, + { + "name": "pvoid", + "type": "PVOID" + } + ], + "OpenDesktopA": [ + { + "name": "lpszDesktop", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "fInherit", + "type": "BOOL" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + } + ], + "OpenDesktopW": [ + { + "name": "lpszDesktop", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "fInherit", + "type": "BOOL" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + } + ], + "OpenInputDesktop": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "fInherit", + "type": "BOOL" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + } + ], + "EnumDesktopsA": [ + { + "name": "hwinsta", + "type": "HWINSTA" + }, + { + "name": "lpEnumFunc", + "type": "DESKTOPENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumDesktopsW": [ + { + "name": "hwinsta", + "type": "HWINSTA" + }, + { + "name": "lpEnumFunc", + "type": "DESKTOPENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumDesktopWindows": [ + { + "name": "hDesktop", + "type": "HDESK" + }, + { + "name": "lpfn", + "type": "WNDENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SwitchDesktop": [ + { + "name": "hDesktop", + "type": "HDESK" + } + ], + "SetThreadDesktop": [ + { + "name": "hDesktop", + "type": "HDESK" + } + ], + "CloseDesktop": [ + { + "name": "hDesktop", + "type": "HDESK" + } + ], + "GetThreadDesktop": [ + { + "name": "dwThreadId", + "type": "DWORD" + } + ], + "CreateWindowStationA": [ + { + "name": "lpwinsta", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "lpsa", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateWindowStationW": [ + { + "name": "lpwinsta", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "lpsa", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "OpenWindowStationA": [ + { + "name": "lpszWinSta", + "type": "LPCSTR" + }, + { + "name": "fInherit", + "type": "BOOL" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + } + ], + "OpenWindowStationW": [ + { + "name": "lpszWinSta", + "type": "LPCWSTR" + }, + { + "name": "fInherit", + "type": "BOOL" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + } + ], + "EnumWindowStationsA": [ + { + "name": "lpEnumFunc", + "type": "WINSTAENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumWindowStationsW": [ + { + "name": "lpEnumFunc", + "type": "WINSTAENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "CloseWindowStation": [ + { + "name": "hWinSta", + "type": "HWINSTA" + } + ], + "SetProcessWindowStation": [ + { + "name": "hWinSta", + "type": "HWINSTA" + } + ], + "GetProcessWindowStation": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetUserObjectSecurity": [ + { + "name": "hObj", + "type": "HANDLE" + }, + { + "name": "pSIRequested", + "type": "PSECURITY_INFORMATION" + }, + { + "name": "pSID", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "GetUserObjectSecurity": [ + { + "name": "hObj", + "type": "HANDLE" + }, + { + "name": "pSIRequested", + "type": "PSECURITY_INFORMATION" + }, + { + "name": "pSID", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "GetUserObjectInformationA": [ + { + "name": "hObj", + "type": "HANDLE" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "pvInfo", + "type": "PVOID" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "GetUserObjectInformationW": [ + { + "name": "hObj", + "type": "HANDLE" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "pvInfo", + "type": "PVOID" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "SetUserObjectInformationA": [ + { + "name": "hObj", + "type": "HANDLE" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "pvInfo", + "type": "PVOID" + }, + { + "name": "nLength", + "type": "DWORD" + } + ], + "SetUserObjectInformationW": [ + { + "name": "hObj", + "type": "HANDLE" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "pvInfo", + "type": "PVOID" + }, + { + "name": "nLength", + "type": "DWORD" + } + ], + "IsHungAppWindow": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "DisableProcessWindowsGhosting": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegisterWindowMessageA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "RegisterWindowMessageW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "TrackMouseEvent": [ + { + "name": "lpEventTrack", + "type": "LPTRACKMOUSEEVENT" + } + ], + "DrawEdge": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "qrc", + "type": "LPRECT" + }, + { + "name": "edge", + "type": "UINT" + }, + { + "name": "grfFlags", + "type": "UINT" + } + ], + "DrawFrameControl": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "LPRECT" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "UINT" + } + ], + "DrawCaption": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "RECT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "DrawAnimatedRects": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "idAni", + "type": "int" + }, + { + "name": "lprcFrom", + "type": "RECT" + }, + { + "name": "lprcTo", + "type": "RECT" + } + ], + "GetMessageA": [ + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsgFilterMin", + "type": "UINT" + }, + { + "name": "wMsgFilterMax", + "type": "UINT" + } + ], + "GetMessageW": [ + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsgFilterMin", + "type": "UINT" + }, + { + "name": "wMsgFilterMax", + "type": "UINT" + } + ], + "TranslateMessage": [ + { + "name": "lpMsg", + "type": "MSG" + } + ], + "DispatchMessageA": [ + { + "name": "lpMsg", + "type": "MSG" + } + ], + "DispatchMessageW": [ + { + "name": "lpMsg", + "type": "MSG" + } + ], + "PeekMessageA": [ + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsgFilterMin", + "type": "UINT" + }, + { + "name": "wMsgFilterMax", + "type": "UINT" + }, + { + "name": "wRemoveMsg", + "type": "UINT" + } + ], + "PeekMessageW": [ + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsgFilterMin", + "type": "UINT" + }, + { + "name": "wMsgFilterMax", + "type": "UINT" + }, + { + "name": "wRemoveMsg", + "type": "UINT" + } + ], + "RegisterHotKey": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "id", + "type": "int" + }, + { + "name": "fsModifiers", + "type": "UINT" + }, + { + "name": "vk", + "type": "UINT" + } + ], + "UnregisterHotKey": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "id", + "type": "int" + } + ], + "ExitWindowsEx": [ + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "dwReason", + "type": "DWORD" + } + ], + "SwapMouseButton": [ + { + "name": "fSwap", + "type": "BOOL" + } + ], + "GetMessagePos": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetMessageTime": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetMessageExtraInfo": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetUnpredictedMessagePos": [ + { + "name": "VOID", + "type": "void" + } + ], + "IsWow64Message": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetMessageExtraInfo": [ + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SendMessageA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SendMessageW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SendMessageTimeoutA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "fuFlags", + "type": "UINT" + }, + { + "name": "uTimeout", + "type": "UINT" + }, + { + "name": "lpdwResult", + "type": "PDWORD_PTR" + } + ], + "SendMessageTimeoutW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "fuFlags", + "type": "UINT" + }, + { + "name": "uTimeout", + "type": "UINT" + }, + { + "name": "lpdwResult", + "type": "PDWORD_PTR" + } + ], + "SendNotifyMessageA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SendNotifyMessageW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SendMessageCallbackA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "lpResultCallBack", + "type": "SENDASYNCPROC" + }, + { + "name": "dwData", + "type": "ULONG_PTR" + } + ], + "SendMessageCallbackW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "lpResultCallBack", + "type": "SENDASYNCPROC" + }, + { + "name": "dwData", + "type": "ULONG_PTR" + } + ], + "BroadcastSystemMessageExA": [ + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "lpInfo", + "type": "LPDWORD" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "pbsmInfo", + "type": "PBSMINFO" + } + ], + "BroadcastSystemMessageExW": [ + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "lpInfo", + "type": "LPDWORD" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "pbsmInfo", + "type": "PBSMINFO" + } + ], + "BroadcastSystemMessageW": [ + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "lpInfo", + "type": "LPDWORD" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "RegisterDeviceNotificationA": [ + { + "name": "hRecipient", + "type": "HANDLE" + }, + { + "name": "NotificationFilter", + "type": "LPVOID" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "RegisterDeviceNotificationW": [ + { + "name": "hRecipient", + "type": "HANDLE" + }, + { + "name": "NotificationFilter", + "type": "LPVOID" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "UnregisterDeviceNotification": [ + { + "name": "Handle", + "type": "HDEVNOTIFY" + } + ], + "RegisterPowerSettingNotification": [ + { + "name": "hRecipient", + "type": "HANDLE" + }, + { + "name": "PowerSettingGuid", + "type": "LPCGUID" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "UnregisterPowerSettingNotification": [ + { + "name": "Handle", + "type": "HPOWERNOTIFY" + } + ], + "RegisterSuspendResumeNotification": [ + { + "name": "hRecipient", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "UnregisterSuspendResumeNotification": [ + { + "name": "Handle", + "type": "HPOWERNOTIFY" + } + ], + "PostMessageA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "PostMessageW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "PostThreadMessageA": [ + { + "name": "idThread", + "type": "DWORD" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "PostThreadMessageW": [ + { + "name": "idThread", + "type": "DWORD" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "AttachThreadInput": [ + { + "name": "idAttach", + "type": "DWORD" + }, + { + "name": "idAttachTo", + "type": "DWORD" + }, + { + "name": "fAttach", + "type": "BOOL" + } + ], + "ReplyMessage": [ + { + "name": "lResult", + "type": "LRESULT" + } + ], + "WaitMessage": [ + { + "name": "VOID", + "type": "void" + } + ], + "WaitForInputIdle": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "DefWindowProcA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DefWindowProcW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "PostQuitMessage": [ + { + "name": "nExitCode", + "type": "int" + } + ], + "CallWindowProcA": [ + { + "name": "lpPrevWndFunc", + "type": "WNDPROC" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "CallWindowProcW": [ + { + "name": "lpPrevWndFunc", + "type": "WNDPROC" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "InSendMessage": [ + { + "name": "VOID", + "type": "void" + } + ], + "InSendMessageEx": [ + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "GetDoubleClickTime": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetDoubleClickTime": [ + { + "name": "VOID", + "type": "UINT" + } + ], + "RegisterClassA": [ + { + "name": "lpWndClass", + "type": "WNDCLASSA" + } + ], + "RegisterClassW": [ + { + "name": "lpWndClass", + "type": "WNDCLASSW" + } + ], + "UnregisterClassA": [ + { + "name": "lpClassName", + "type": "LPCSTR" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + } + ], + "UnregisterClassW": [ + { + "name": "lpClassName", + "type": "LPCWSTR" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + } + ], + "GetClassInfoA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpClassName", + "type": "LPCSTR" + }, + { + "name": "lpWndClass", + "type": "LPWNDCLASSA" + } + ], + "GetClassInfoW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpClassName", + "type": "LPCWSTR" + }, + { + "name": "lpWndClass", + "type": "LPWNDCLASSW" + } + ], + "RegisterClassExA": [ + { + "name": "VOID", + "type": "WNDCLASSEXA" + } + ], + "RegisterClassExW": [ + { + "name": "VOID", + "type": "WNDCLASSEXW" + } + ], + "GetClassInfoExA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpszClass", + "type": "LPCSTR" + }, + { + "name": "lpwcx", + "type": "LPWNDCLASSEXA" + } + ], + "GetClassInfoExW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpszClass", + "type": "LPCWSTR" + }, + { + "name": "lpwcx", + "type": "LPWNDCLASSEXW" + } + ], + "CreateWindowExA": [ + { + "name": "dwExStyle", + "type": "DWORD" + }, + { + "name": "lpClassName", + "type": "LPCSTR" + }, + { + "name": "lpWindowName", + "type": "LPCSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpParam", + "type": "LPVOID" + } + ], + "CreateWindowExW": [ + { + "name": "dwExStyle", + "type": "DWORD" + }, + { + "name": "lpClassName", + "type": "LPCWSTR" + }, + { + "name": "lpWindowName", + "type": "LPCWSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpParam", + "type": "LPVOID" + } + ], + "IsWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "IsMenu": [ + { + "name": "hMenu", + "type": "HMENU" + } + ], + "IsChild": [ + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hWnd", + "type": "HWND" + } + ], + "DestroyWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "ShowWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nCmdShow", + "type": "int" + } + ], + "AnimateWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "dwTime", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UpdateLayeredWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hdcDst", + "type": "HDC" + }, + { + "name": "pptDst", + "type": "POINT" + }, + { + "name": "psize", + "type": "SIZE" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "pptSrc", + "type": "POINT" + }, + { + "name": "crKey", + "type": "COLORREF" + }, + { + "name": "pblend", + "type": "BLENDFUNCTION" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetLayeredWindowAttributes": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pcrKey", + "type": "COLORREF" + }, + { + "name": "pbAlpha", + "type": "BYTE" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "PrintWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hdcBlt", + "type": "HDC" + }, + { + "name": "nFlags", + "type": "UINT" + } + ], + "SetLayeredWindowAttributes": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "crKey", + "type": "COLORREF" + }, + { + "name": "bAlpha", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "ShowWindowAsync": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nCmdShow", + "type": "int" + } + ], + "FlashWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "bInvert", + "type": "BOOL" + } + ], + "FlashWindowEx": [ + { + "name": "pfwi", + "type": "PFLASHWINFO" + } + ], + "ShowOwnedPopups": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "fShow", + "type": "BOOL" + } + ], + "OpenIcon": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "CloseWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "MoveWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "bRepaint", + "type": "BOOL" + } + ], + "SetWindowPos": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hWndInsertAfter", + "type": "HWND" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "GetWindowPlacement": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpwndpl", + "type": "WINDOWPLACEMENT" + } + ], + "SetWindowPlacement": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpwndpl", + "type": "WINDOWPLACEMENT" + } + ], + "GetWindowDisplayAffinity": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pdwAffinity", + "type": "DWORD" + } + ], + "SetWindowDisplayAffinity": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "dwAffinity", + "type": "DWORD" + } + ], + "BeginDeferWindowPos": [ + { + "name": "nNumWindows", + "type": "int" + } + ], + "DeferWindowPos": [ + { + "name": "hWinPosInfo", + "type": "HDWP" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hWndInsertAfter", + "type": "HWND" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "EndDeferWindowPos": [ + { + "name": "hWinPosInfo", + "type": "HDWP" + } + ], + "IsWindowVisible": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "IsIconic": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "AnyPopup": [ + { + "name": "VOID", + "type": "void" + } + ], + "BringWindowToTop": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "IsZoomed": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "CreateDialogParamA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTemplateName", + "type": "LPCSTR" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "CreateDialogParamW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTemplateName", + "type": "LPCWSTR" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "CreateDialogIndirectParamA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTemplate", + "type": "LPCDLGTEMPLATEA" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "CreateDialogIndirectParamW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTemplate", + "type": "LPCDLGTEMPLATEW" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "DialogBoxParamA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTemplateName", + "type": "LPCSTR" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "DialogBoxParamW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTemplateName", + "type": "LPCWSTR" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "DialogBoxIndirectParamA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "hDialogTemplate", + "type": "LPCDLGTEMPLATEA" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "DialogBoxIndirectParamW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "hDialogTemplate", + "type": "LPCDLGTEMPLATEW" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "EndDialog": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nResult", + "type": "INT_PTR" + } + ], + "GetDlgItem": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + } + ], + "SetDlgItemInt": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "uValue", + "type": "UINT" + }, + { + "name": "bSigned", + "type": "BOOL" + } + ], + "GetDlgItemInt": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "lpTranslated", + "type": "BOOL" + }, + { + "name": "bSigned", + "type": "BOOL" + } + ], + "SetDlgItemTextA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "SetDlgItemTextW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GetDlgItemTextA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "lpString", + "type": "LPSTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "GetDlgItemTextW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "lpString", + "type": "LPWSTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "CheckDlgButton": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDButton", + "type": "int" + }, + { + "name": "uCheck", + "type": "UINT" + } + ], + "CheckRadioButton": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDFirstButton", + "type": "int" + }, + { + "name": "nIDLastButton", + "type": "int" + }, + { + "name": "nIDCheckButton", + "type": "int" + } + ], + "IsDlgButtonChecked": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDButton", + "type": "int" + } + ], + "SendDlgItemMessageA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SendDlgItemMessageW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "GetNextDlgGroupItem": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "hCtl", + "type": "HWND" + }, + { + "name": "bPrevious", + "type": "BOOL" + } + ], + "GetNextDlgTabItem": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "hCtl", + "type": "HWND" + }, + { + "name": "bPrevious", + "type": "BOOL" + } + ], + "GetDlgCtrlID": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetDialogBaseUnits": [ + { + "name": "VOID", + "type": "void" + } + ], + "DefDlgProcW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "GetDialogControlDpiChangeBehavior": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "SetDialogDpiChangeBehavior": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "mask", + "type": "DIALOG_DPI_CHANGE_BEHAVIORS" + }, + { + "name": "values", + "type": "DIALOG_DPI_CHANGE_BEHAVIORS" + } + ], + "GetDialogDpiChangeBehavior": [ + { + "name": "hDlg", + "type": "HWND" + } + ], + "CallMsgFilterA": [ + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "nCode", + "type": "int" + } + ], + "CallMsgFilterW": [ + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "nCode", + "type": "int" + } + ], + "OpenClipboard": [ + { + "name": "hWndNewOwner", + "type": "HWND" + } + ], + "CloseClipboard": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetClipboardSequenceNumber": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetClipboardOwner": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetClipboardViewer": [ + { + "name": "hWndNewViewer", + "type": "HWND" + } + ], + "GetClipboardViewer": [ + { + "name": "VOID", + "type": "void" + } + ], + "ChangeClipboardChain": [ + { + "name": "hWndRemove", + "type": "HWND" + }, + { + "name": "hWndNewNext", + "type": "HWND" + } + ], + "SetClipboardData": [ + { + "name": "uFormat", + "type": "UINT" + }, + { + "name": "hMem", + "type": "HANDLE" + } + ], + "GetClipboardData": [ + { + "name": "uFormat", + "type": "UINT" + } + ], + "RegisterClipboardFormatA": [ + { + "name": "lpszFormat", + "type": "LPCSTR" + } + ], + "RegisterClipboardFormatW": [ + { + "name": "lpszFormat", + "type": "LPCWSTR" + } + ], + "CountClipboardFormats": [ + { + "name": "VOID", + "type": "void" + } + ], + "EnumClipboardFormats": [ + { + "name": "format", + "type": "UINT" + } + ], + "GetClipboardFormatNameA": [ + { + "name": "format", + "type": "UINT" + }, + { + "name": "lpszFormatName", + "type": "LPSTR" + }, + { + "name": "cchMaxCount", + "type": "int" + } + ], + "GetClipboardFormatNameW": [ + { + "name": "format", + "type": "UINT" + }, + { + "name": "lpszFormatName", + "type": "LPWSTR" + }, + { + "name": "cchMaxCount", + "type": "int" + } + ], + "EmptyClipboard": [ + { + "name": "VOID", + "type": "void" + } + ], + "IsClipboardFormatAvailable": [ + { + "name": "format", + "type": "UINT" + } + ], + "GetPriorityClipboardFormat": [ + { + "name": "paFormatPriorityList", + "type": "UINT" + }, + { + "name": "cFormats", + "type": "int" + } + ], + "GetOpenClipboardWindow": [ + { + "name": "VOID", + "type": "void" + } + ], + "AddClipboardFormatListener": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "RemoveClipboardFormatListener": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "GetUpdatedClipboardFormats": [ + { + "name": "lpuiFormats", + "type": "PUINT" + }, + { + "name": "cFormats", + "type": "UINT" + }, + { + "name": "pcFormatsOut", + "type": "PUINT" + } + ], + "CharToOemA": [ + { + "name": "pSrc", + "type": "LPCSTR" + }, + { + "name": "pDst", + "type": "LPSTR" + } + ], + "CharToOemW": [ + { + "name": "pSrc", + "type": "LPCWSTR" + }, + { + "name": "pDst", + "type": "LPSTR" + } + ], + "OemToCharA": [ + { + "name": "pSrc", + "type": "LPCSTR" + }, + { + "name": "pDst", + "type": "LPSTR" + } + ], + "OemToCharW": [ + { + "name": "pSrc", + "type": "LPCSTR" + }, + { + "name": "pDst", + "type": "LPWSTR" + } + ], + "CharToOemBuffA": [ + { + "name": "lpszSrc", + "type": "LPCSTR" + }, + { + "name": "lpszDst", + "type": "LPSTR" + }, + { + "name": "cchDstLength", + "type": "DWORD" + } + ], + "CharToOemBuffW": [ + { + "name": "lpszSrc", + "type": "LPCWSTR" + }, + { + "name": "lpszDst", + "type": "LPSTR" + }, + { + "name": "cchDstLength", + "type": "DWORD" + } + ], + "OemToCharBuffA": [ + { + "name": "lpszSrc", + "type": "LPCSTR" + }, + { + "name": "lpszDst", + "type": "LPSTR" + }, + { + "name": "cchDstLength", + "type": "DWORD" + } + ], + "OemToCharBuffW": [ + { + "name": "lpszSrc", + "type": "LPCSTR" + }, + { + "name": "lpszDst", + "type": "LPWSTR" + }, + { + "name": "cchDstLength", + "type": "DWORD" + } + ], + "CharUpperA": [ + { + "name": "lpsz", + "type": "LPSTR" + } + ], + "CharUpperW": [ + { + "name": "lpsz", + "type": "LPWSTR" + } + ], + "CharUpperBuffA": [ + { + "name": "lpsz", + "type": "LPSTR" + }, + { + "name": "cchLength", + "type": "DWORD" + } + ], + "CharUpperBuffW": [ + { + "name": "lpsz", + "type": "LPWSTR" + }, + { + "name": "cchLength", + "type": "DWORD" + } + ], + "CharLowerA": [ + { + "name": "lpsz", + "type": "LPSTR" + } + ], + "CharLowerW": [ + { + "name": "lpsz", + "type": "LPWSTR" + } + ], + "CharLowerBuffA": [ + { + "name": "lpsz", + "type": "LPSTR" + }, + { + "name": "cchLength", + "type": "DWORD" + } + ], + "CharLowerBuffW": [ + { + "name": "lpsz", + "type": "LPWSTR" + }, + { + "name": "cchLength", + "type": "DWORD" + } + ], + "CharNextA": [ + { + "name": "lpsz", + "type": "LPCSTR" + } + ], + "CharNextW": [ + { + "name": "lpsz", + "type": "LPCWSTR" + } + ], + "CharPrevA": [ + { + "name": "lpszStart", + "type": "LPCSTR" + }, + { + "name": "lpszCurrent", + "type": "LPCSTR" + } + ], + "CharPrevW": [ + { + "name": "lpszStart", + "type": "LPCWSTR" + }, + { + "name": "lpszCurrent", + "type": "LPCWSTR" + } + ], + "CharNextExA": [ + { + "name": "CodePage", + "type": "WORD" + }, + { + "name": "lpCurrentChar", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CharPrevExA": [ + { + "name": "CodePage", + "type": "WORD" + }, + { + "name": "lpStart", + "type": "LPCSTR" + }, + { + "name": "lpCurrentChar", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "IsCharAlphaA": [ + { + "name": "ch", + "type": "CHAR" + } + ], + "IsCharAlphaW": [ + { + "name": "ch", + "type": "WCHAR" + } + ], + "IsCharAlphaNumericA": [ + { + "name": "ch", + "type": "CHAR" + } + ], + "IsCharAlphaNumericW": [ + { + "name": "ch", + "type": "WCHAR" + } + ], + "IsCharUpperA": [ + { + "name": "ch", + "type": "CHAR" + } + ], + "IsCharUpperW": [ + { + "name": "ch", + "type": "WCHAR" + } + ], + "IsCharLowerA": [ + { + "name": "ch", + "type": "CHAR" + } + ], + "IsCharLowerW": [ + { + "name": "ch", + "type": "WCHAR" + } + ], + "SetFocus": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetActiveWindow": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetFocus": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetKBCodePage": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetKeyState": [ + { + "name": "nVirtKey", + "type": "int" + } + ], + "GetAsyncKeyState": [ + { + "name": "vKey", + "type": "int" + } + ], + "GetKeyboardState": [ + { + "name": "lpKeyState", + "type": "PBYTE" + } + ], + "SetKeyboardState": [ + { + "name": "lpKeyState", + "type": "LPBYTE" + } + ], + "GetKeyNameTextA": [ + { + "name": "lParam", + "type": "LONG" + }, + { + "name": "lpString", + "type": "LPSTR" + }, + { + "name": "cchSize", + "type": "int" + } + ], + "GetKeyNameTextW": [ + { + "name": "lParam", + "type": "LONG" + }, + { + "name": "lpString", + "type": "LPWSTR" + }, + { + "name": "cchSize", + "type": "int" + } + ], + "GetKeyboardType": [ + { + "name": "nTypeFlag", + "type": "int" + } + ], + "ToAscii": [ + { + "name": "uVirtKey", + "type": "UINT" + }, + { + "name": "uScanCode", + "type": "UINT" + }, + { + "name": "lpKeyState", + "type": "BYTE" + }, + { + "name": "lpChar", + "type": "LPWORD" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "ToAsciiEx": [ + { + "name": "uVirtKey", + "type": "UINT" + }, + { + "name": "uScanCode", + "type": "UINT" + }, + { + "name": "lpKeyState", + "type": "BYTE" + }, + { + "name": "lpChar", + "type": "LPWORD" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "dwhkl", + "type": "HKL" + } + ], + "ToUnicode": [ + { + "name": "wVirtKey", + "type": "UINT" + }, + { + "name": "wScanCode", + "type": "UINT" + }, + { + "name": "lpKeyState", + "type": "BYTE" + }, + { + "name": "pwszBuff", + "type": "LPWSTR" + }, + { + "name": "cchBuff", + "type": "int" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "OemKeyScan": [ + { + "name": "wOemChar", + "type": "WORD" + } + ], + "VkKeyScanA": [ + { + "name": "ch", + "type": "CHAR" + } + ], + "VkKeyScanW": [ + { + "name": "ch", + "type": "WCHAR" + } + ], + "VkKeyScanExA": [ + { + "name": "ch", + "type": "CHAR" + }, + { + "name": "dwhkl", + "type": "HKL" + } + ], + "VkKeyScanExW": [ + { + "name": "ch", + "type": "WCHAR" + }, + { + "name": "dwhkl", + "type": "HKL" + } + ], + "keybd_event": [ + { + "name": "bVk", + "type": "BYTE" + }, + { + "name": "bScan", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwExtraInfo", + "type": "ULONG_PTR" + } + ], + "mouse_event": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dx", + "type": "DWORD" + }, + { + "name": "dy", + "type": "DWORD" + }, + { + "name": "dwData", + "type": "DWORD" + }, + { + "name": "dwExtraInfo", + "type": "ULONG_PTR" + } + ], + "SendInput": [ + { + "name": "cInputs", + "type": "UINT" + }, + { + "name": "pInputs", + "type": "LPINPUT" + }, + { + "name": "cbSize", + "type": "int" + } + ], + "GetTouchInputInfo": [ + { + "name": "hTouchInput", + "type": "HTOUCHINPUT" + }, + { + "name": "cInputs", + "type": "UINT" + }, + { + "name": "pInputs", + "type": "PTOUCHINPUT" + }, + { + "name": "cbSize", + "type": "int" + } + ], + "CloseTouchInputHandle": [ + { + "name": "hTouchInput", + "type": "HTOUCHINPUT" + } + ], + "RegisterTouchWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "UnregisterTouchWindow": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "IsTouchWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pulFlags", + "type": "PULONG" + } + ], + "InitializeTouchInjection": [ + { + "name": "maxCount", + "type": "UINT32" + }, + { + "name": "dwMode", + "type": "DWORD" + } + ], + "InjectTouchInput": [ + { + "name": "count", + "type": "UINT32" + }, + { + "name": "contacts", + "type": "POINTER_TOUCH_INFO" + } + ], + "GetPointerType": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "pointerType", + "type": "POINTER_INPUT_TYPE" + } + ], + "GetPointerCursorId": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "cursorId", + "type": "UINT32" + } + ], + "GetPointerInfo": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "pointerInfo", + "type": "POINTER_INFO" + } + ], + "GetPointerInfoHistory": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "pointerInfo", + "type": "POINTER_INFO" + } + ], + "GetPointerFrameInfo": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "pointerInfo", + "type": "POINTER_INFO" + } + ], + "GetPointerFrameInfoHistory": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "pointerInfo", + "type": "POINTER_INFO" + } + ], + "GetPointerTouchInfo": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "touchInfo", + "type": "POINTER_TOUCH_INFO" + } + ], + "GetPointerTouchInfoHistory": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "touchInfo", + "type": "POINTER_TOUCH_INFO" + } + ], + "GetPointerFrameTouchInfo": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "touchInfo", + "type": "POINTER_TOUCH_INFO" + } + ], + "GetPointerFrameTouchInfoHistory": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "touchInfo", + "type": "POINTER_TOUCH_INFO" + } + ], + "GetPointerPenInfo": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "penInfo", + "type": "POINTER_PEN_INFO" + } + ], + "GetPointerPenInfoHistory": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "penInfo", + "type": "POINTER_PEN_INFO" + } + ], + "GetPointerFramePenInfo": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "penInfo", + "type": "POINTER_PEN_INFO" + } + ], + "GetPointerFramePenInfoHistory": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "penInfo", + "type": "POINTER_PEN_INFO" + } + ], + "SkipPointerFrameMessages": [ + { + "name": "pointerId", + "type": "UINT32" + } + ], + "RegisterPointerInputTarget": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pointerType", + "type": "POINTER_INPUT_TYPE" + } + ], + "UnregisterPointerInputTarget": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pointerType", + "type": "POINTER_INPUT_TYPE" + } + ], + "RegisterPointerInputTargetEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pointerType", + "type": "POINTER_INPUT_TYPE" + }, + { + "name": "fObserve", + "type": "BOOL" + } + ], + "UnregisterPointerInputTargetEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pointerType", + "type": "POINTER_INPUT_TYPE" + } + ], + "CreateSyntheticPointerDevice": [ + { + "name": "pointerType", + "type": "POINTER_INPUT_TYPE" + }, + { + "name": "maxCount", + "type": "ULONG" + }, + { + "name": "mode", + "type": "POINTER_FEEDBACK_MODE" + } + ], + "InjectSyntheticPointerInput": [ + { + "name": "device", + "type": "HSYNTHETICPOINTERDEVICE" + }, + { + "name": "pointerInfo", + "type": "POINTER_TYPE_INFO" + }, + { + "name": "count", + "type": "UINT32" + } + ], + "DestroySyntheticPointerDevice": [ + { + "name": "device", + "type": "HSYNTHETICPOINTERDEVICE" + } + ], + "EnableMouseInPointer": [ + { + "name": "fEnable", + "type": "BOOL" + } + ], + "IsMouseInPointerEnabled": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegisterTouchHitTestingWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "value", + "type": "ULONG" + } + ], + "EvaluateProximityToRect": [ + { + "name": "controlBoundingBox", + "type": "RECT" + }, + { + "name": "pHitTestingInput", + "type": "TOUCH_HIT_TESTING_INPUT" + }, + { + "name": "pProximityEval", + "type": "TOUCH_HIT_TESTING_PROXIMITY_EVALUATION" + } + ], + "EvaluateProximityToPolygon": [ + { + "name": "numVertices", + "type": "UINT32" + }, + { + "name": "controlPolygon", + "type": "POINT" + }, + { + "name": "pHitTestingInput", + "type": "TOUCH_HIT_TESTING_INPUT" + }, + { + "name": "pProximityEval", + "type": "TOUCH_HIT_TESTING_PROXIMITY_EVALUATION" + } + ], + "PackTouchHitTestingProximityEvaluation": [ + { + "name": "pHitTestingInput", + "type": "TOUCH_HIT_TESTING_INPUT" + }, + { + "name": "pProximityEval", + "type": "TOUCH_HIT_TESTING_PROXIMITY_EVALUATION" + } + ], + "GetWindowFeedbackSetting": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "feedback", + "type": "FEEDBACK_TYPE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pSize", + "type": "UINT32" + }, + { + "name": "config", + "type": "void" + } + ], + "SetWindowFeedbackSetting": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "feedback", + "type": "FEEDBACK_TYPE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "size", + "type": "UINT32" + }, + { + "name": "configuration", + "type": "void" + } + ], + "GetPointerInputTransform": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "historyCount", + "type": "UINT32" + }, + { + "name": "inputTransform", + "type": "INPUT_TRANSFORM" + } + ], + "GetLastInputInfo": [ + { + "name": "plii", + "type": "PLASTINPUTINFO" + } + ], + "MapVirtualKeyA": [ + { + "name": "uCode", + "type": "UINT" + }, + { + "name": "uMapType", + "type": "UINT" + } + ], + "MapVirtualKeyW": [ + { + "name": "uCode", + "type": "UINT" + }, + { + "name": "uMapType", + "type": "UINT" + } + ], + "MapVirtualKeyExA": [ + { + "name": "uCode", + "type": "UINT" + }, + { + "name": "uMapType", + "type": "UINT" + }, + { + "name": "dwhkl", + "type": "HKL" + } + ], + "MapVirtualKeyExW": [ + { + "name": "uCode", + "type": "UINT" + }, + { + "name": "uMapType", + "type": "UINT" + }, + { + "name": "dwhkl", + "type": "HKL" + } + ], + "GetInputState": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetQueueStatus": [ + { + "name": "flags", + "type": "UINT" + } + ], + "GetCapture": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetCapture": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "ReleaseCapture": [ + { + "name": "VOID", + "type": "void" + } + ], + "MsgWaitForMultipleObjects": [ + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "pHandles", + "type": "HANDLE" + }, + { + "name": "fWaitAll", + "type": "BOOL" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "dwWakeMask", + "type": "DWORD" + } + ], + "MsgWaitForMultipleObjectsEx": [ + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "pHandles", + "type": "HANDLE" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "dwWakeMask", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SetTimer": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIDEvent", + "type": "UINT_PTR" + }, + { + "name": "uElapse", + "type": "UINT" + }, + { + "name": "lpTimerFunc", + "type": "TIMERPROC" + } + ], + "SetCoalescableTimer": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIDEvent", + "type": "UINT_PTR" + }, + { + "name": "uElapse", + "type": "UINT" + }, + { + "name": "lpTimerFunc", + "type": "TIMERPROC" + }, + { + "name": "uToleranceDelay", + "type": "ULONG" + } + ], + "KillTimer": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "uIDEvent", + "type": "UINT_PTR" + } + ], + "IsWindowUnicode": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "EnableWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "bEnable", + "type": "BOOL" + } + ], + "IsWindowEnabled": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "LoadAcceleratorsA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTableName", + "type": "LPCSTR" + } + ], + "LoadAcceleratorsW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTableName", + "type": "LPCWSTR" + } + ], + "CreateAcceleratorTableA": [ + { + "name": "paccel", + "type": "LPACCEL" + }, + { + "name": "cAccel", + "type": "int" + } + ], + "CreateAcceleratorTableW": [ + { + "name": "paccel", + "type": "LPACCEL" + }, + { + "name": "cAccel", + "type": "int" + } + ], + "DestroyAcceleratorTable": [ + { + "name": "hAccel", + "type": "HACCEL" + } + ], + "CopyAcceleratorTableA": [ + { + "name": "hAccelSrc", + "type": "HACCEL" + }, + { + "name": "lpAccelDst", + "type": "LPACCEL" + }, + { + "name": "cAccelEntries", + "type": "int" + } + ], + "CopyAcceleratorTableW": [ + { + "name": "hAccelSrc", + "type": "HACCEL" + }, + { + "name": "lpAccelDst", + "type": "LPACCEL" + }, + { + "name": "cAccelEntries", + "type": "int" + } + ], + "TranslateAcceleratorA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hAccTable", + "type": "HACCEL" + }, + { + "name": "lpMsg", + "type": "LPMSG" + } + ], + "TranslateAcceleratorW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hAccTable", + "type": "HACCEL" + }, + { + "name": "lpMsg", + "type": "LPMSG" + } + ], + "GetSystemMetrics": [ + { + "name": "nIndex", + "type": "int" + } + ], + "GetSystemMetricsForDpi": [ + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dpi", + "type": "UINT" + } + ], + "LoadMenuA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpMenuName", + "type": "LPCSTR" + } + ], + "LoadMenuW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpMenuName", + "type": "LPCWSTR" + } + ], + "LoadMenuIndirectA": [ + { + "name": "lpMenuTemplate", + "type": "MENUTEMPLATEA" + } + ], + "LoadMenuIndirectW": [ + { + "name": "lpMenuTemplate", + "type": "MENUTEMPLATEW" + } + ], + "GetMenu": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "SetMenu": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hMenu", + "type": "HMENU" + } + ], + "HiliteMenuItem": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uIDHiliteItem", + "type": "UINT" + }, + { + "name": "uHilite", + "type": "UINT" + } + ], + "GetMenuStringA": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uIDItem", + "type": "UINT" + }, + { + "name": "lpString", + "type": "LPSTR" + }, + { + "name": "cchMax", + "type": "int" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "GetMenuStringW": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uIDItem", + "type": "UINT" + }, + { + "name": "lpString", + "type": "LPWSTR" + }, + { + "name": "cchMax", + "type": "int" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "GetMenuState": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uId", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "DrawMenuBar": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetSystemMenu": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "bRevert", + "type": "BOOL" + } + ], + "CreateMenu": [ + { + "name": "VOID", + "type": "void" + } + ], + "CreatePopupMenu": [ + { + "name": "VOID", + "type": "void" + } + ], + "DestroyMenu": [ + { + "name": "hMenu", + "type": "HMENU" + } + ], + "CheckMenuItem": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uIDCheckItem", + "type": "UINT" + }, + { + "name": "uCheck", + "type": "UINT" + } + ], + "EnableMenuItem": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uIDEnableItem", + "type": "UINT" + }, + { + "name": "uEnable", + "type": "UINT" + } + ], + "GetSubMenu": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "nPos", + "type": "int" + } + ], + "GetMenuItemID": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "nPos", + "type": "int" + } + ], + "GetMenuItemCount": [ + { + "name": "hMenu", + "type": "HMENU" + } + ], + "InsertMenuA": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIDNewItem", + "type": "UINT_PTR" + }, + { + "name": "lpNewItem", + "type": "LPCSTR" + } + ], + "InsertMenuW": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIDNewItem", + "type": "UINT_PTR" + }, + { + "name": "lpNewItem", + "type": "LPCWSTR" + } + ], + "AppendMenuA": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIDNewItem", + "type": "UINT_PTR" + }, + { + "name": "lpNewItem", + "type": "LPCSTR" + } + ], + "AppendMenuW": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIDNewItem", + "type": "UINT_PTR" + }, + { + "name": "lpNewItem", + "type": "LPCWSTR" + } + ], + "ModifyMenuA": [ + { + "name": "hMnu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIDNewItem", + "type": "UINT_PTR" + }, + { + "name": "lpNewItem", + "type": "LPCSTR" + } + ], + "ModifyMenuW": [ + { + "name": "hMnu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIDNewItem", + "type": "UINT_PTR" + }, + { + "name": "lpNewItem", + "type": "LPCWSTR" + } + ], + "RemoveMenu": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "DeleteMenu": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "SetMenuItemBitmaps": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "hBitmapUnchecked", + "type": "HBITMAP" + }, + { + "name": "hBitmapChecked", + "type": "HBITMAP" + } + ], + "GetMenuCheckMarkDimensions": [ + { + "name": "VOID", + "type": "void" + } + ], + "TrackPopupMenu": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "nReserved", + "type": "int" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "prcRect", + "type": "RECT" + } + ], + "TrackPopupMenuEx": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "lptpm", + "type": "LPTPMPARAMS" + } + ], + "CalculatePopupWindowPosition": [ + { + "name": "anchorPoint", + "type": "POINT" + }, + { + "name": "windowSize", + "type": "SIZE" + }, + { + "name": "flags", + "type": "UINT" + }, + { + "name": "excludeRect", + "type": "RECT" + }, + { + "name": "popupWindowPosition", + "type": "RECT" + } + ], + "GetMenuInfo": [ + { + "name": "VOID", + "type": "HMENU" + }, + { + "name": "VOID", + "type": "LPMENUINFO" + } + ], + "SetMenuInfo": [ + { + "name": "VOID", + "type": "HMENU" + }, + { + "name": "VOID", + "type": "LPCMENUINFO" + } + ], + "EndMenu": [ + { + "name": "VOID", + "type": "void" + } + ], + "InsertMenuItemA": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "item", + "type": "UINT" + }, + { + "name": "fByPosition", + "type": "BOOL" + }, + { + "name": "lpmi", + "type": "LPCMENUITEMINFOA" + } + ], + "InsertMenuItemW": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "item", + "type": "UINT" + }, + { + "name": "fByPosition", + "type": "BOOL" + }, + { + "name": "lpmi", + "type": "LPCMENUITEMINFOW" + } + ], + "GetMenuItemInfoA": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "item", + "type": "UINT" + }, + { + "name": "fByPosition", + "type": "BOOL" + }, + { + "name": "lpmii", + "type": "LPMENUITEMINFOA" + } + ], + "GetMenuItemInfoW": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "item", + "type": "UINT" + }, + { + "name": "fByPosition", + "type": "BOOL" + }, + { + "name": "lpmii", + "type": "LPMENUITEMINFOW" + } + ], + "SetMenuItemInfoA": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "item", + "type": "UINT" + }, + { + "name": "fByPositon", + "type": "BOOL" + }, + { + "name": "lpmii", + "type": "LPCMENUITEMINFOA" + } + ], + "SetMenuItemInfoW": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "item", + "type": "UINT" + }, + { + "name": "fByPositon", + "type": "BOOL" + }, + { + "name": "lpmii", + "type": "LPCMENUITEMINFOW" + } + ], + "GetMenuDefaultItem": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "fByPos", + "type": "UINT" + }, + { + "name": "gmdiFlags", + "type": "UINT" + } + ], + "SetMenuDefaultItem": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uItem", + "type": "UINT" + }, + { + "name": "fByPos", + "type": "UINT" + } + ], + "GetMenuItemRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uItem", + "type": "UINT" + }, + { + "name": "lprcItem", + "type": "LPRECT" + } + ], + "MenuItemFromPoint": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "ptScreen", + "type": "POINT" + } + ], + "DragDetect": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pt", + "type": "POINT" + } + ], + "DrawIcon": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "hIcon", + "type": "HICON" + } + ], + "DrawTextA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpchText", + "type": "LPCSTR" + }, + { + "name": "cchText", + "type": "int" + }, + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "format", + "type": "UINT" + } + ], + "DrawTextW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpchText", + "type": "LPCWSTR" + }, + { + "name": "cchText", + "type": "int" + }, + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "format", + "type": "UINT" + } + ], + "DrawTextExA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpchText", + "type": "LPSTR" + }, + { + "name": "cchText", + "type": "int" + }, + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "format", + "type": "UINT" + }, + { + "name": "lpdtp", + "type": "LPDRAWTEXTPARAMS" + } + ], + "DrawTextExW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpchText", + "type": "LPWSTR" + }, + { + "name": "cchText", + "type": "int" + }, + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "format", + "type": "UINT" + }, + { + "name": "lpdtp", + "type": "LPDRAWTEXTPARAMS" + } + ], + "GrayStringA": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "hBrush", + "type": "HBRUSH" + }, + { + "name": "lpOutputFunc", + "type": "GRAYSTRINGPROC" + }, + { + "name": "lpData", + "type": "LPARAM" + }, + { + "name": "nCount", + "type": "int" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + } + ], + "GrayStringW": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "hBrush", + "type": "HBRUSH" + }, + { + "name": "lpOutputFunc", + "type": "GRAYSTRINGPROC" + }, + { + "name": "lpData", + "type": "LPARAM" + }, + { + "name": "nCount", + "type": "int" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + } + ], + "DrawStateA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hbrFore", + "type": "HBRUSH" + }, + { + "name": "qfnCallBack", + "type": "DRAWSTATEPROC" + }, + { + "name": "lData", + "type": "LPARAM" + }, + { + "name": "wData", + "type": "WPARAM" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "DrawStateW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hbrFore", + "type": "HBRUSH" + }, + { + "name": "qfnCallBack", + "type": "DRAWSTATEPROC" + }, + { + "name": "lData", + "type": "LPARAM" + }, + { + "name": "wData", + "type": "WPARAM" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "TabbedTextOutA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "chCount", + "type": "int" + }, + { + "name": "nTabPositions", + "type": "int" + }, + { + "name": "lpnTabStopPositions", + "type": "INT" + }, + { + "name": "nTabOrigin", + "type": "int" + } + ], + "TabbedTextOutW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "chCount", + "type": "int" + }, + { + "name": "nTabPositions", + "type": "int" + }, + { + "name": "lpnTabStopPositions", + "type": "INT" + }, + { + "name": "nTabOrigin", + "type": "int" + } + ], + "GetTabbedTextExtentA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "chCount", + "type": "int" + }, + { + "name": "nTabPositions", + "type": "int" + }, + { + "name": "lpnTabStopPositions", + "type": "INT" + } + ], + "GetTabbedTextExtentW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "chCount", + "type": "int" + }, + { + "name": "nTabPositions", + "type": "int" + }, + { + "name": "lpnTabStopPositions", + "type": "INT" + } + ], + "UpdateWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "SetActiveWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetForegroundWindow": [ + { + "name": "VOID", + "type": "void" + } + ], + "PaintDesktop": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SwitchToThisWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "fUnknown", + "type": "BOOL" + } + ], + "SetForegroundWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "AllowSetForegroundWindow": [ + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "LockSetForegroundWindow": [ + { + "name": "uLockCode", + "type": "UINT" + } + ], + "WindowFromDC": [ + { + "name": "hDC", + "type": "HDC" + } + ], + "GetDC": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetDCEx": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hrgnClip", + "type": "HRGN" + }, + { + "name": "flags", + "type": "DWORD" + } + ], + "GetWindowDC": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "ReleaseDC": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hDC", + "type": "HDC" + } + ], + "BeginPaint": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPaint", + "type": "LPPAINTSTRUCT" + } + ], + "EndPaint": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPaint", + "type": "PAINTSTRUCT" + } + ], + "GetUpdateRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpRect", + "type": "LPRECT" + }, + { + "name": "bErase", + "type": "BOOL" + } + ], + "GetUpdateRgn": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hRgn", + "type": "HRGN" + }, + { + "name": "bErase", + "type": "BOOL" + } + ], + "SetWindowRgn": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hRgn", + "type": "HRGN" + }, + { + "name": "bRedraw", + "type": "BOOL" + } + ], + "GetWindowRgn": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hRgn", + "type": "HRGN" + } + ], + "GetWindowRgnBox": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lprc", + "type": "LPRECT" + } + ], + "ExcludeUpdateRgn": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "hWnd", + "type": "HWND" + } + ], + "InvalidateRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpRect", + "type": "RECT" + }, + { + "name": "bErase", + "type": "BOOL" + } + ], + "ValidateRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpRect", + "type": "RECT" + } + ], + "InvalidateRgn": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hRgn", + "type": "HRGN" + }, + { + "name": "bErase", + "type": "BOOL" + } + ], + "ValidateRgn": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hRgn", + "type": "HRGN" + } + ], + "RedrawWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lprcUpdate", + "type": "RECT" + }, + { + "name": "hrgnUpdate", + "type": "HRGN" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "LockWindowUpdate": [ + { + "name": "hWndLock", + "type": "HWND" + } + ], + "ScrollWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "XAmount", + "type": "int" + }, + { + "name": "YAmount", + "type": "int" + }, + { + "name": "lpRect", + "type": "RECT" + }, + { + "name": "lpClipRect", + "type": "RECT" + } + ], + "ScrollDC": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + }, + { + "name": "lprcScroll", + "type": "RECT" + }, + { + "name": "lprcClip", + "type": "RECT" + }, + { + "name": "hrgnUpdate", + "type": "HRGN" + }, + { + "name": "lprcUpdate", + "type": "LPRECT" + } + ], + "ScrollWindowEx": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + }, + { + "name": "prcScroll", + "type": "RECT" + }, + { + "name": "prcClip", + "type": "RECT" + }, + { + "name": "hrgnUpdate", + "type": "HRGN" + }, + { + "name": "prcUpdate", + "type": "LPRECT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "SetScrollPos": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nBar", + "type": "int" + }, + { + "name": "nPos", + "type": "int" + }, + { + "name": "bRedraw", + "type": "BOOL" + } + ], + "GetScrollPos": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nBar", + "type": "int" + } + ], + "SetScrollRange": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nBar", + "type": "int" + }, + { + "name": "nMinPos", + "type": "int" + }, + { + "name": "nMaxPos", + "type": "int" + }, + { + "name": "bRedraw", + "type": "BOOL" + } + ], + "GetScrollRange": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nBar", + "type": "int" + }, + { + "name": "lpMinPos", + "type": "LPINT" + }, + { + "name": "lpMaxPos", + "type": "LPINT" + } + ], + "ShowScrollBar": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wBar", + "type": "int" + }, + { + "name": "bShow", + "type": "BOOL" + } + ], + "EnableScrollBar": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wSBflags", + "type": "UINT" + }, + { + "name": "wArrows", + "type": "UINT" + } + ], + "SetPropA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "hData", + "type": "HANDLE" + } + ], + "SetPropW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "hData", + "type": "HANDLE" + } + ], + "GetPropA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "GetPropW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "RemovePropA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "RemovePropW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "EnumPropsExA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpEnumFunc", + "type": "PROPENUMPROCEXA" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumPropsExW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpEnumFunc", + "type": "PROPENUMPROCEXW" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumPropsA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpEnumFunc", + "type": "PROPENUMPROCA" + } + ], + "EnumPropsW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpEnumFunc", + "type": "PROPENUMPROCW" + } + ], + "SetWindowTextA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "SetWindowTextW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GetWindowTextA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPSTR" + }, + { + "name": "nMaxCount", + "type": "int" + } + ], + "GetWindowTextW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPWSTR" + }, + { + "name": "nMaxCount", + "type": "int" + } + ], + "GetWindowTextLengthA": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetWindowTextLengthW": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetClientRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpRect", + "type": "LPRECT" + } + ], + "GetWindowRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpRect", + "type": "LPRECT" + } + ], + "AdjustWindowRect": [ + { + "name": "lpRect", + "type": "LPRECT" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "bMenu", + "type": "BOOL" + } + ], + "AdjustWindowRectEx": [ + { + "name": "lpRect", + "type": "LPRECT" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "bMenu", + "type": "BOOL" + }, + { + "name": "dwExStyle", + "type": "DWORD" + } + ], + "AdjustWindowRectExForDpi": [ + { + "name": "lpRect", + "type": "LPRECT" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "bMenu", + "type": "BOOL" + }, + { + "name": "dwExStyle", + "type": "DWORD" + }, + { + "name": "dpi", + "type": "UINT" + } + ], + "SetWindowContextHelpId": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "GetWindowContextHelpId": [ + { + "name": "VOID", + "type": "HWND" + } + ], + "SetMenuContextHelpId": [ + { + "name": "VOID", + "type": "HMENU" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "GetMenuContextHelpId": [ + { + "name": "VOID", + "type": "HMENU" + } + ], + "MessageBoxA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpText", + "type": "LPCSTR" + }, + { + "name": "lpCaption", + "type": "LPCSTR" + }, + { + "name": "uType", + "type": "UINT" + } + ], + "MessageBoxW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpText", + "type": "LPCWSTR" + }, + { + "name": "lpCaption", + "type": "LPCWSTR" + }, + { + "name": "uType", + "type": "UINT" + } + ], + "MessageBoxExA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpText", + "type": "LPCSTR" + }, + { + "name": "lpCaption", + "type": "LPCSTR" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "wLanguageId", + "type": "WORD" + } + ], + "MessageBoxExW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpText", + "type": "LPCWSTR" + }, + { + "name": "lpCaption", + "type": "LPCWSTR" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "wLanguageId", + "type": "WORD" + } + ], + "MessageBoxIndirectA": [ + { + "name": "lpmbp", + "type": "MSGBOXPARAMSA" + } + ], + "MessageBoxIndirectW": [ + { + "name": "lpmbp", + "type": "MSGBOXPARAMSW" + } + ], + "MessageBeep": [ + { + "name": "uType", + "type": "UINT" + } + ], + "ShowCursor": [ + { + "name": "bShow", + "type": "BOOL" + } + ], + "SetCursorPos": [ + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + } + ], + "SetPhysicalCursorPos": [ + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + } + ], + "SetCursor": [ + { + "name": "hCursor", + "type": "HCURSOR" + } + ], + "GetCursorPos": [ + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "GetPhysicalCursorPos": [ + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "GetClipCursor": [ + { + "name": "lpRect", + "type": "LPRECT" + } + ], + "GetCursor": [ + { + "name": "VOID", + "type": "void" + } + ], + "CreateCaret": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hBitmap", + "type": "HBITMAP" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + } + ], + "GetCaretBlinkTime": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetCaretBlinkTime": [ + { + "name": "uMSeconds", + "type": "UINT" + } + ], + "DestroyCaret": [ + { + "name": "VOID", + "type": "void" + } + ], + "HideCaret": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "ShowCaret": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "SetCaretPos": [ + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + } + ], + "GetCaretPos": [ + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "ClientToScreen": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "ScreenToClient": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "LogicalToPhysicalPoint": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "PhysicalToLogicalPoint": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "LogicalToPhysicalPointForPerMonitorDPI": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "PhysicalToLogicalPointForPerMonitorDPI": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "MapWindowPoints": [ + { + "name": "hWndFrom", + "type": "HWND" + }, + { + "name": "hWndTo", + "type": "HWND" + }, + { + "name": "lpPoints", + "type": "LPPOINT" + }, + { + "name": "cPoints", + "type": "UINT" + } + ], + "WindowFromPoint": [ + { + "name": "Point", + "type": "POINT" + } + ], + "WindowFromPhysicalPoint": [ + { + "name": "Point", + "type": "POINT" + } + ], + "ChildWindowFromPoint": [ + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "Point", + "type": "POINT" + } + ], + "ClipCursor": [ + { + "name": "lpRect", + "type": "RECT" + } + ], + "ChildWindowFromPointEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pt", + "type": "POINT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "GetSysColor": [ + { + "name": "nIndex", + "type": "int" + } + ], + "GetSysColorBrush": [ + { + "name": "nIndex", + "type": "int" + } + ], + "SetSysColors": [ + { + "name": "cElements", + "type": "int" + }, + { + "name": "lpaElements", + "type": "INT" + }, + { + "name": "lpaRgbValues", + "type": "COLORREF" + } + ], + "DrawFocusRect": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "lprc", + "type": "RECT" + } + ], + "FillRect": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "hbr", + "type": "HBRUSH" + } + ], + "FrameRect": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "hbr", + "type": "HBRUSH" + } + ], + "InvertRect": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "lprc", + "type": "RECT" + } + ], + "SetRect": [ + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "xLeft", + "type": "int" + }, + { + "name": "yTop", + "type": "int" + }, + { + "name": "xRight", + "type": "int" + }, + { + "name": "yBottom", + "type": "int" + } + ], + "SetRectEmpty": [ + { + "name": "lprc", + "type": "LPRECT" + } + ], + "CopyRect": [ + { + "name": "lprcDst", + "type": "LPRECT" + }, + { + "name": "lprcSrc", + "type": "RECT" + } + ], + "InflateRect": [ + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + } + ], + "IntersectRect": [ + { + "name": "lprcDst", + "type": "LPRECT" + }, + { + "name": "lprcSrc1", + "type": "RECT" + }, + { + "name": "lprcSrc2", + "type": "RECT" + } + ], + "UnionRect": [ + { + "name": "lprcDst", + "type": "LPRECT" + }, + { + "name": "lprcSrc1", + "type": "RECT" + }, + { + "name": "lprcSrc2", + "type": "RECT" + } + ], + "SubtractRect": [ + { + "name": "lprcDst", + "type": "LPRECT" + }, + { + "name": "lprcSrc1", + "type": "RECT" + }, + { + "name": "lprcSrc2", + "type": "RECT" + } + ], + "OffsetRect": [ + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + } + ], + "IsRectEmpty": [ + { + "name": "lprc", + "type": "RECT" + } + ], + "EqualRect": [ + { + "name": "lprc1", + "type": "RECT" + }, + { + "name": "lprc2", + "type": "RECT" + } + ], + "PtInRect": [ + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "pt", + "type": "POINT" + } + ], + "GetWindowLongA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "GetWindowLongW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "SetWindowLongA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG" + } + ], + "SetWindowLongW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG" + } + ], + "GetWindowLongPtrA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "GetWindowLongPtrW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "SetWindowLongPtrA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG_PTR" + } + ], + "SetWindowLongPtrW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG_PTR" + } + ], + "GetClassWord": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "SetClassWord": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "wNewWord", + "type": "WORD" + } + ], + "GetClassLongA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "GetClassLongW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "SetClassLongA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG" + } + ], + "SetClassLongW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG" + } + ], + "GetClassLongPtrA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "GetClassLongPtrW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "SetClassLongPtrA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG_PTR" + } + ], + "SetClassLongPtrW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG_PTR" + } + ], + "GetProcessDefaultLayout": [ + { + "name": "pdwDefaultLayout", + "type": "DWORD" + } + ], + "SetProcessDefaultLayout": [ + { + "name": "dwDefaultLayout", + "type": "DWORD" + } + ], + "GetDesktopWindow": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetParent": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "SetParent": [ + { + "name": "hWndChild", + "type": "HWND" + }, + { + "name": "hWndNewParent", + "type": "HWND" + } + ], + "EnumChildWindows": [ + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpEnumFunc", + "type": "WNDENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "FindWindowA": [ + { + "name": "lpClassName", + "type": "LPCSTR" + }, + { + "name": "lpWindowName", + "type": "LPCSTR" + } + ], + "FindWindowW": [ + { + "name": "lpClassName", + "type": "LPCWSTR" + }, + { + "name": "lpWindowName", + "type": "LPCWSTR" + } + ], + "FindWindowExA": [ + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hWndChildAfter", + "type": "HWND" + }, + { + "name": "lpszClass", + "type": "LPCSTR" + }, + { + "name": "lpszWindow", + "type": "LPCSTR" + } + ], + "FindWindowExW": [ + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hWndChildAfter", + "type": "HWND" + }, + { + "name": "lpszClass", + "type": "LPCWSTR" + }, + { + "name": "lpszWindow", + "type": "LPCWSTR" + } + ], + "GetShellWindow": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegisterShellHookWindow": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "DeregisterShellHookWindow": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "EnumWindows": [ + { + "name": "lpEnumFunc", + "type": "WNDENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumThreadWindows": [ + { + "name": "dwThreadId", + "type": "DWORD" + }, + { + "name": "lpfn", + "type": "WNDENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "GetClassNameA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpClassName", + "type": "LPSTR" + }, + { + "name": "nMaxCount", + "type": "int" + } + ], + "GetClassNameW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpClassName", + "type": "LPWSTR" + }, + { + "name": "nMaxCount", + "type": "int" + } + ], + "GetTopWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetWindowThreadProcessId": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpdwProcessId", + "type": "LPDWORD" + } + ], + "IsGUIThread": [ + { + "name": "bConvert", + "type": "BOOL" + } + ], + "GetLastActivePopup": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "uCmd", + "type": "UINT" + } + ], + "SetWindowsHookExA": [ + { + "name": "idHook", + "type": "int" + }, + { + "name": "lpfn", + "type": "HOOKPROC" + }, + { + "name": "hmod", + "type": "HINSTANCE" + }, + { + "name": "dwThreadId", + "type": "DWORD" + } + ], + "SetWindowsHookExW": [ + { + "name": "idHook", + "type": "int" + }, + { + "name": "lpfn", + "type": "HOOKPROC" + }, + { + "name": "hmod", + "type": "HINSTANCE" + }, + { + "name": "dwThreadId", + "type": "DWORD" + } + ], + "UnhookWindowsHookEx": [ + { + "name": "hhk", + "type": "HHOOK" + } + ], + "CallNextHookEx": [ + { + "name": "hhk", + "type": "HHOOK" + }, + { + "name": "nCode", + "type": "int" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "CheckMenuRadioItem": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "first", + "type": "UINT" + }, + { + "name": "last", + "type": "UINT" + }, + { + "name": "check", + "type": "UINT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "LoadBitmapA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpBitmapName", + "type": "LPCSTR" + } + ], + "LoadBitmapW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpBitmapName", + "type": "LPCWSTR" + } + ], + "LoadCursorA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpCursorName", + "type": "LPCSTR" + } + ], + "LoadCursorW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpCursorName", + "type": "LPCWSTR" + } + ], + "LoadCursorFromFileA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "LoadCursorFromFileW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "CreateCursor": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "xHotSpot", + "type": "int" + }, + { + "name": "yHotSpot", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "pvANDPlane", + "type": "void" + }, + { + "name": "pvXORPlane", + "type": "void" + } + ], + "DestroyCursor": [ + { + "name": "hCursor", + "type": "HCURSOR" + } + ], + "SetSystemCursor": [ + { + "name": "hcur", + "type": "HCURSOR" + }, + { + "name": "id", + "type": "DWORD" + } + ], + "LoadIconA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpIconName", + "type": "LPCSTR" + } + ], + "LoadIconW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpIconName", + "type": "LPCWSTR" + } + ], + "PrivateExtractIconsA": [ + { + "name": "szFileName", + "type": "LPCSTR" + }, + { + "name": "nIconIndex", + "type": "int" + }, + { + "name": "cxIcon", + "type": "int" + }, + { + "name": "cyIcon", + "type": "int" + }, + { + "name": "phicon", + "type": "HICON" + }, + { + "name": "piconid", + "type": "UINT" + }, + { + "name": "nIcons", + "type": "UINT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "PrivateExtractIconsW": [ + { + "name": "szFileName", + "type": "LPCWSTR" + }, + { + "name": "nIconIndex", + "type": "int" + }, + { + "name": "cxIcon", + "type": "int" + }, + { + "name": "cyIcon", + "type": "int" + }, + { + "name": "phicon", + "type": "HICON" + }, + { + "name": "piconid", + "type": "UINT" + }, + { + "name": "nIcons", + "type": "UINT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "CreateIcon": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "cPlanes", + "type": "BYTE" + }, + { + "name": "cBitsPixel", + "type": "BYTE" + }, + { + "name": "lpbANDbits", + "type": "BYTE" + }, + { + "name": "lpbXORbits", + "type": "BYTE" + } + ], + "DestroyIcon": [ + { + "name": "hIcon", + "type": "HICON" + } + ], + "LookupIconIdFromDirectory": [ + { + "name": "presbits", + "type": "PBYTE" + }, + { + "name": "fIcon", + "type": "BOOL" + } + ], + "LookupIconIdFromDirectoryEx": [ + { + "name": "presbits", + "type": "PBYTE" + }, + { + "name": "fIcon", + "type": "BOOL" + }, + { + "name": "cxDesired", + "type": "int" + }, + { + "name": "cyDesired", + "type": "int" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "CreateIconFromResource": [ + { + "name": "presbits", + "type": "PBYTE" + }, + { + "name": "dwResSize", + "type": "DWORD" + }, + { + "name": "fIcon", + "type": "BOOL" + }, + { + "name": "dwVer", + "type": "DWORD" + } + ], + "CreateIconFromResourceEx": [ + { + "name": "presbits", + "type": "PBYTE" + }, + { + "name": "dwResSize", + "type": "DWORD" + }, + { + "name": "fIcon", + "type": "BOOL" + }, + { + "name": "dwVer", + "type": "DWORD" + }, + { + "name": "cxDesired", + "type": "int" + }, + { + "name": "cyDesired", + "type": "int" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "LoadImageA": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "name", + "type": "LPCSTR" + }, + { + "name": "type", + "type": "UINT" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "fuLoad", + "type": "UINT" + } + ], + "LoadImageW": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "name", + "type": "LPCWSTR" + }, + { + "name": "type", + "type": "UINT" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "fuLoad", + "type": "UINT" + } + ], + "CopyImage": [ + { + "name": "h", + "type": "HANDLE" + }, + { + "name": "type", + "type": "UINT" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "DrawIconEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xLeft", + "type": "int" + }, + { + "name": "yTop", + "type": "int" + }, + { + "name": "hIcon", + "type": "HICON" + }, + { + "name": "cxWidth", + "type": "int" + }, + { + "name": "cyWidth", + "type": "int" + }, + { + "name": "istepIfAniCur", + "type": "UINT" + }, + { + "name": "hbrFlickerFreeDraw", + "type": "HBRUSH" + }, + { + "name": "diFlags", + "type": "UINT" + } + ], + "CreateIconIndirect": [ + { + "name": "piconinfo", + "type": "PICONINFO" + } + ], + "CopyIcon": [ + { + "name": "hIcon", + "type": "HICON" + } + ], + "GetIconInfo": [ + { + "name": "hIcon", + "type": "HICON" + }, + { + "name": "piconinfo", + "type": "PICONINFO" + } + ], + "GetIconInfoExA": [ + { + "name": "hicon", + "type": "HICON" + }, + { + "name": "piconinfo", + "type": "PICONINFOEXA" + } + ], + "GetIconInfoExW": [ + { + "name": "hicon", + "type": "HICON" + }, + { + "name": "piconinfo", + "type": "PICONINFOEXW" + } + ], + "IsDialogMessageA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpMsg", + "type": "LPMSG" + } + ], + "IsDialogMessageW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpMsg", + "type": "LPMSG" + } + ], + "MapDialogRect": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpRect", + "type": "LPRECT" + } + ], + "DlgDirListA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpPathSpec", + "type": "LPSTR" + }, + { + "name": "nIDListBox", + "type": "int" + }, + { + "name": "nIDStaticPath", + "type": "int" + }, + { + "name": "uFileType", + "type": "UINT" + } + ], + "DlgDirListW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpPathSpec", + "type": "LPWSTR" + }, + { + "name": "nIDListBox", + "type": "int" + }, + { + "name": "nIDStaticPath", + "type": "int" + }, + { + "name": "uFileType", + "type": "UINT" + } + ], + "DlgDirSelectExA": [ + { + "name": "hwndDlg", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPSTR" + }, + { + "name": "chCount", + "type": "int" + }, + { + "name": "idListBox", + "type": "int" + } + ], + "DlgDirSelectExW": [ + { + "name": "hwndDlg", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPWSTR" + }, + { + "name": "chCount", + "type": "int" + }, + { + "name": "idListBox", + "type": "int" + } + ], + "DlgDirListComboBoxA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpPathSpec", + "type": "LPSTR" + }, + { + "name": "nIDComboBox", + "type": "int" + }, + { + "name": "nIDStaticPath", + "type": "int" + }, + { + "name": "uFiletype", + "type": "UINT" + } + ], + "DlgDirListComboBoxW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpPathSpec", + "type": "LPWSTR" + }, + { + "name": "nIDComboBox", + "type": "int" + }, + { + "name": "nIDStaticPath", + "type": "int" + }, + { + "name": "uFiletype", + "type": "UINT" + } + ], + "DlgDirSelectComboBoxExA": [ + { + "name": "hwndDlg", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPSTR" + }, + { + "name": "cchOut", + "type": "int" + }, + { + "name": "idComboBox", + "type": "int" + } + ], + "DlgDirSelectComboBoxExW": [ + { + "name": "hwndDlg", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPWSTR" + }, + { + "name": "cchOut", + "type": "int" + }, + { + "name": "idComboBox", + "type": "int" + } + ], + "SetScrollInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "nBar", + "type": "int" + }, + { + "name": "lpsi", + "type": "LPCSCROLLINFO" + }, + { + "name": "redraw", + "type": "BOOL" + } + ], + "GetScrollInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "nBar", + "type": "int" + }, + { + "name": "lpsi", + "type": "LPSCROLLINFO" + } + ], + "DefFrameProcA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hWndMDIClient", + "type": "HWND" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DefFrameProcW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hWndMDIClient", + "type": "HWND" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DefMDIChildProcA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DefMDIChildProcW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "TranslateMDISysAccel": [ + { + "name": "hWndClient", + "type": "HWND" + }, + { + "name": "lpMsg", + "type": "LPMSG" + } + ], + "ArrangeIconicWindows": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "CreateMDIWindowA": [ + { + "name": "lpClassName", + "type": "LPCSTR" + }, + { + "name": "lpWindowName", + "type": "LPCSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "CreateMDIWindowW": [ + { + "name": "lpClassName", + "type": "LPCWSTR" + }, + { + "name": "lpWindowName", + "type": "LPCWSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "TileWindows": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "wHow", + "type": "UINT" + }, + { + "name": "lpRect", + "type": "RECT" + }, + { + "name": "cKids", + "type": "UINT" + }, + { + "name": "lpKids", + "type": "HWND" + } + ], + "CascadeWindows": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "wHow", + "type": "UINT" + }, + { + "name": "lpRect", + "type": "RECT" + }, + { + "name": "cKids", + "type": "UINT" + }, + { + "name": "lpKids", + "type": "HWND" + } + ], + "WinHelpA": [ + { + "name": "hWndMain", + "type": "HWND" + }, + { + "name": "lpszHelp", + "type": "LPCSTR" + }, + { + "name": "uCommand", + "type": "UINT" + }, + { + "name": "dwData", + "type": "ULONG_PTR" + } + ], + "WinHelpW": [ + { + "name": "hWndMain", + "type": "HWND" + }, + { + "name": "lpszHelp", + "type": "LPCWSTR" + }, + { + "name": "uCommand", + "type": "UINT" + }, + { + "name": "dwData", + "type": "ULONG_PTR" + } + ], + "GetGuiResources": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "uiFlags", + "type": "DWORD" + } + ], + "ChangeDisplaySettingsA": [ + { + "name": "lpDevMode", + "type": "DEVMODEA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "ChangeDisplaySettingsW": [ + { + "name": "lpDevMode", + "type": "DEVMODEW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "ChangeDisplaySettingsExA": [ + { + "name": "lpszDeviceName", + "type": "LPCSTR" + }, + { + "name": "lpDevMode", + "type": "DEVMODEA" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwflags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPVOID" + } + ], + "ChangeDisplaySettingsExW": [ + { + "name": "lpszDeviceName", + "type": "LPCWSTR" + }, + { + "name": "lpDevMode", + "type": "DEVMODEW" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwflags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPVOID" + } + ], + "EnumDisplaySettingsA": [ + { + "name": "lpszDeviceName", + "type": "LPCSTR" + }, + { + "name": "iModeNum", + "type": "DWORD" + }, + { + "name": "lpDevMode", + "type": "DEVMODEA" + } + ], + "EnumDisplaySettingsW": [ + { + "name": "lpszDeviceName", + "type": "LPCWSTR" + }, + { + "name": "iModeNum", + "type": "DWORD" + }, + { + "name": "lpDevMode", + "type": "DEVMODEW" + } + ], + "EnumDisplaySettingsExA": [ + { + "name": "lpszDeviceName", + "type": "LPCSTR" + }, + { + "name": "iModeNum", + "type": "DWORD" + }, + { + "name": "lpDevMode", + "type": "DEVMODEA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDisplaySettingsExW": [ + { + "name": "lpszDeviceName", + "type": "LPCWSTR" + }, + { + "name": "iModeNum", + "type": "DWORD" + }, + { + "name": "lpDevMode", + "type": "DEVMODEW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDisplayDevicesA": [ + { + "name": "lpDevice", + "type": "LPCSTR" + }, + { + "name": "iDevNum", + "type": "DWORD" + }, + { + "name": "lpDisplayDevice", + "type": "PDISPLAY_DEVICEA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDisplayDevicesW": [ + { + "name": "lpDevice", + "type": "LPCWSTR" + }, + { + "name": "iDevNum", + "type": "DWORD" + }, + { + "name": "lpDisplayDevice", + "type": "PDISPLAY_DEVICEW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetDisplayConfigBufferSizes": [ + { + "name": "flags", + "type": "UINT32" + }, + { + "name": "numPathArrayElements", + "type": "UINT32" + }, + { + "name": "numModeInfoArrayElements", + "type": "UINT32" + } + ], + "SetDisplayConfig": [ + { + "name": "numPathArrayElements", + "type": "UINT32" + }, + { + "name": "pathArray", + "type": "DISPLAYCONFIG_PATH_INFO" + }, + { + "name": "numModeInfoArrayElements", + "type": "UINT32" + }, + { + "name": "modeInfoArray", + "type": "DISPLAYCONFIG_MODE_INFO" + }, + { + "name": "flags", + "type": "UINT32" + } + ], + "QueryDisplayConfig": [ + { + "name": "flags", + "type": "UINT32" + }, + { + "name": "numPathArrayElements", + "type": "UINT32" + }, + { + "name": "pathArray", + "type": "DISPLAYCONFIG_PATH_INFO" + }, + { + "name": "numModeInfoArrayElements", + "type": "UINT32" + }, + { + "name": "modeInfoArray", + "type": "DISPLAYCONFIG_MODE_INFO" + }, + { + "name": "currentTopologyId", + "type": "DISPLAYCONFIG_TOPOLOGY_ID" + } + ], + "DisplayConfigGetDeviceInfo": [ + { + "name": "requestPacket", + "type": "DISPLAYCONFIG_DEVICE_INFO_HEADER" + } + ], + "DisplayConfigSetDeviceInfo": [ + { + "name": "setPacket", + "type": "DISPLAYCONFIG_DEVICE_INFO_HEADER" + } + ], + "SystemParametersInfoA": [ + { + "name": "uiAction", + "type": "UINT" + }, + { + "name": "uiParam", + "type": "UINT" + }, + { + "name": "pvParam", + "type": "PVOID" + }, + { + "name": "fWinIni", + "type": "UINT" + } + ], + "SystemParametersInfoW": [ + { + "name": "uiAction", + "type": "UINT" + }, + { + "name": "uiParam", + "type": "UINT" + }, + { + "name": "pvParam", + "type": "PVOID" + }, + { + "name": "fWinIni", + "type": "UINT" + } + ], + "SystemParametersInfoForDpi": [ + { + "name": "uiAction", + "type": "UINT" + }, + { + "name": "uiParam", + "type": "UINT" + }, + { + "name": "pvParam", + "type": "PVOID" + }, + { + "name": "fWinIni", + "type": "UINT" + }, + { + "name": "dpi", + "type": "UINT" + } + ], + "SoundSentry": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetLastErrorEx": [ + { + "name": "dwErrCode", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "InternalGetWindowText": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pString", + "type": "LPWSTR" + }, + { + "name": "cchMaxCount", + "type": "int" + } + ], + "MonitorFromPoint": [ + { + "name": "pt", + "type": "POINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MonitorFromRect": [ + { + "name": "lprc", + "type": "LPCRECT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MonitorFromWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetMonitorInfoA": [ + { + "name": "hMonitor", + "type": "HMONITOR" + }, + { + "name": "lpmi", + "type": "LPMONITORINFO" + } + ], + "GetMonitorInfoW": [ + { + "name": "hMonitor", + "type": "HMONITOR" + }, + { + "name": "lpmi", + "type": "LPMONITORINFO" + } + ], + "EnumDisplayMonitors": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprcClip", + "type": "LPCRECT" + }, + { + "name": "lpfnEnum", + "type": "MONITORENUMPROC" + }, + { + "name": "dwData", + "type": "LPARAM" + } + ], + "NotifyWinEvent": [ + { + "name": "event", + "type": "DWORD" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "idObject", + "type": "LONG" + }, + { + "name": "idChild", + "type": "LONG" + } + ], + "SetWinEventHook": [ + { + "name": "eventMin", + "type": "DWORD" + }, + { + "name": "eventMax", + "type": "DWORD" + }, + { + "name": "hmodWinEventProc", + "type": "HMODULE" + }, + { + "name": "pfnWinEventProc", + "type": "WINEVENTPROC" + }, + { + "name": "idProcess", + "type": "DWORD" + }, + { + "name": "idThread", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "IsWinEventHookInstalled": [ + { + "name": "event", + "type": "DWORD" + } + ], + "UnhookWinEvent": [ + { + "name": "hWinEventHook", + "type": "HWINEVENTHOOK" + } + ], + "GetGUIThreadInfo": [ + { + "name": "idThread", + "type": "DWORD" + }, + { + "name": "pgui", + "type": "PGUITHREADINFO" + } + ], + "BlockInput": [ + { + "name": "fBlockIt", + "type": "BOOL" + } + ], + "SetProcessDPIAware": [ + { + "name": "VOID", + "type": "void" + } + ], + "IsProcessDPIAware": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetThreadDpiAwarenessContext": [ + { + "name": "dpiContext", + "type": "DPI_AWARENESS_CONTEXT" + } + ], + "GetThreadDpiAwarenessContext": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetWindowDpiAwarenessContext": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "GetAwarenessFromDpiAwarenessContext": [ + { + "name": "value", + "type": "DPI_AWARENESS_CONTEXT" + } + ], + "GetDpiFromDpiAwarenessContext": [ + { + "name": "value", + "type": "DPI_AWARENESS_CONTEXT" + } + ], + "AreDpiAwarenessContextsEqual": [ + { + "name": "dpiContextA", + "type": "DPI_AWARENESS_CONTEXT" + }, + { + "name": "dpiContextB", + "type": "DPI_AWARENESS_CONTEXT" + } + ], + "IsValidDpiAwarenessContext": [ + { + "name": "value", + "type": "DPI_AWARENESS_CONTEXT" + } + ], + "GetDpiForWindow": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "GetDpiForSystem": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetSystemDpiForProcess": [ + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "EnableNonClientDpiScaling": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "SetProcessDpiAwarenessContext": [ + { + "name": "value", + "type": "DPI_AWARENESS_CONTEXT" + } + ], + "SetThreadDpiHostingBehavior": [ + { + "name": "value", + "type": "DPI_HOSTING_BEHAVIOR" + } + ], + "GetThreadDpiHostingBehavior": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetWindowDpiHostingBehavior": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "GetWindowModuleFileNameA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszFileName", + "type": "LPSTR" + }, + { + "name": "cchFileNameMax", + "type": "UINT" + } + ], + "GetWindowModuleFileNameW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszFileName", + "type": "LPWSTR" + }, + { + "name": "cchFileNameMax", + "type": "UINT" + } + ], + "GetCursorInfo": [ + { + "name": "pci", + "type": "PCURSORINFO" + } + ], + "GetWindowInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pwi", + "type": "PWINDOWINFO" + } + ], + "GetTitleBarInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pti", + "type": "PTITLEBARINFO" + } + ], + "GetMenuBarInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "idObject", + "type": "LONG" + }, + { + "name": "idItem", + "type": "LONG" + }, + { + "name": "pmbi", + "type": "PMENUBARINFO" + } + ], + "GetScrollBarInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "idObject", + "type": "LONG" + }, + { + "name": "psbi", + "type": "PSCROLLBARINFO" + } + ], + "GetComboBoxInfo": [ + { + "name": "hwndCombo", + "type": "HWND" + }, + { + "name": "pcbi", + "type": "PCOMBOBOXINFO" + } + ], + "GetAncestor": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "gaFlags", + "type": "UINT" + } + ], + "RealChildWindowFromPoint": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "ptParentClientCoords", + "type": "POINT" + } + ], + "RealGetWindowClassW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "ptszClassName", + "type": "LPWSTR" + }, + { + "name": "cchClassNameMax", + "type": "UINT" + } + ], + "GetAltTabInfoA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "iItem", + "type": "int" + }, + { + "name": "pati", + "type": "PALTTABINFO" + }, + { + "name": "pszItemText", + "type": "LPSTR" + }, + { + "name": "cchItemText", + "type": "UINT" + } + ], + "GetAltTabInfoW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "iItem", + "type": "int" + }, + { + "name": "pati", + "type": "PALTTABINFO" + }, + { + "name": "pszItemText", + "type": "LPWSTR" + }, + { + "name": "cchItemText", + "type": "UINT" + } + ], + "GetListBoxInfo": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "LockWorkStation": [ + { + "name": "VOID", + "type": "void" + } + ], + "UserHandleGrantAccess": [ + { + "name": "hUserHandle", + "type": "HANDLE" + }, + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "bGrant", + "type": "BOOL" + } + ], + "GetRawInputData": [ + { + "name": "hRawInput", + "type": "HRAWINPUT" + }, + { + "name": "uiCommand", + "type": "UINT" + }, + { + "name": "pData", + "type": "LPVOID" + }, + { + "name": "pcbSize", + "type": "PUINT" + }, + { + "name": "cbSizeHeader", + "type": "UINT" + } + ], + "GetRawInputDeviceInfoA": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "uiCommand", + "type": "UINT" + }, + { + "name": "pData", + "type": "LPVOID" + }, + { + "name": "pcbSize", + "type": "PUINT" + } + ], + "GetRawInputDeviceInfoW": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "uiCommand", + "type": "UINT" + }, + { + "name": "pData", + "type": "LPVOID" + }, + { + "name": "pcbSize", + "type": "PUINT" + } + ], + "GetRawInputBuffer": [ + { + "name": "pData", + "type": "PRAWINPUT" + }, + { + "name": "pcbSize", + "type": "PUINT" + }, + { + "name": "cbSizeHeader", + "type": "UINT" + } + ], + "RegisterRawInputDevices": [ + { + "name": "pRawInputDevices", + "type": "PCRAWINPUTDEVICE" + }, + { + "name": "uiNumDevices", + "type": "UINT" + }, + { + "name": "cbSize", + "type": "UINT" + } + ], + "GetRegisteredRawInputDevices": [ + { + "name": "pRawInputDevices", + "type": "PRAWINPUTDEVICE" + }, + { + "name": "puiNumDevices", + "type": "PUINT" + }, + { + "name": "cbSize", + "type": "UINT" + } + ], + "GetRawInputDeviceList": [ + { + "name": "pRawInputDeviceList", + "type": "PRAWINPUTDEVICELIST" + }, + { + "name": "puiNumDevices", + "type": "PUINT" + }, + { + "name": "cbSize", + "type": "UINT" + } + ], + "DefRawInputProc": [ + { + "name": "paRawInput", + "type": "PRAWINPUT" + }, + { + "name": "nInput", + "type": "INT" + }, + { + "name": "cbSizeHeader", + "type": "UINT" + } + ], + "GetPointerDevices": [ + { + "name": "deviceCount", + "type": "UINT32" + }, + { + "name": "pointerDevices", + "type": "POINTER_DEVICE_INFO" + } + ], + "GetPointerDevice": [ + { + "name": "device", + "type": "HANDLE" + }, + { + "name": "pointerDevice", + "type": "POINTER_DEVICE_INFO" + } + ], + "GetPointerDeviceProperties": [ + { + "name": "device", + "type": "HANDLE" + }, + { + "name": "propertyCount", + "type": "UINT32" + }, + { + "name": "pointerProperties", + "type": "POINTER_DEVICE_PROPERTY" + } + ], + "RegisterPointerDeviceNotifications": [ + { + "name": "window", + "type": "HWND" + }, + { + "name": "notifyRange", + "type": "BOOL" + } + ], + "GetPointerDeviceRects": [ + { + "name": "device", + "type": "HANDLE" + }, + { + "name": "pointerDeviceRect", + "type": "RECT" + }, + { + "name": "displayRect", + "type": "RECT" + } + ], + "GetPointerDeviceCursors": [ + { + "name": "device", + "type": "HANDLE" + }, + { + "name": "cursorCount", + "type": "UINT32" + }, + { + "name": "deviceCursors", + "type": "POINTER_DEVICE_CURSOR_INFO" + } + ], + "GetRawPointerDeviceData": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "historyCount", + "type": "UINT32" + }, + { + "name": "propertiesCount", + "type": "UINT32" + }, + { + "name": "pProperties", + "type": "POINTER_DEVICE_PROPERTY" + }, + { + "name": "pValues", + "type": "LONG" + } + ], + "ChangeWindowMessageFilter": [ + { + "name": "message", + "type": "UINT" + }, + { + "name": "dwFlag", + "type": "DWORD" + } + ], + "ChangeWindowMessageFilterEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "message", + "type": "UINT" + }, + { + "name": "action", + "type": "DWORD" + }, + { + "name": "pChangeFilterStruct", + "type": "PCHANGEFILTERSTRUCT" + } + ], + "GetGestureInfo": [ + { + "name": "hGestureInfo", + "type": "HGESTUREINFO" + }, + { + "name": "pGestureInfo", + "type": "PGESTUREINFO" + } + ], + "GetGestureExtraArgs": [ + { + "name": "hGestureInfo", + "type": "HGESTUREINFO" + }, + { + "name": "cbExtraArgs", + "type": "UINT" + }, + { + "name": "pExtraArgs", + "type": "PBYTE" + } + ], + "CloseGestureInfoHandle": [ + { + "name": "hGestureInfo", + "type": "HGESTUREINFO" + } + ], + "SetGestureConfig": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "cIDs", + "type": "UINT" + }, + { + "name": "pGestureConfig", + "type": "PGESTURECONFIG" + }, + { + "name": "cbSize", + "type": "UINT" + } + ], + "GetGestureConfig": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pcIDs", + "type": "PUINT" + }, + { + "name": "pGestureConfig", + "type": "PGESTURECONFIG" + }, + { + "name": "cbSize", + "type": "UINT" + } + ], + "ShutdownBlockReasonCreate": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pwszReason", + "type": "LPCWSTR" + } + ], + "ShutdownBlockReasonQuery": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pwszBuff", + "type": "LPWSTR" + }, + { + "name": "pcchBuff", + "type": "DWORD" + } + ], + "ShutdownBlockReasonDestroy": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetCurrentInputMessageSource": [ + { + "name": "inputMessageSource", + "type": "INPUT_MESSAGE_SOURCE" + } + ], + "GetCIMSSM": [ + { + "name": "inputMessageSource", + "type": "INPUT_MESSAGE_SOURCE" + } + ], + "IsImmersiveProcess": [ + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "SetProcessRestrictionExemption": [ + { + "name": "fEnableExemption", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/userenv_dll.json b/qiling/extensions/windows_sdk/defs/userenv_dll.json new file mode 100644 index 000000000..6e7cd1ff3 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/userenv_dll.json @@ -0,0 +1,488 @@ +{ + "LoadUserProfileA": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpProfileInfo", + "type": "LPPROFILEINFOA" + } + ], + "LoadUserProfileW": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpProfileInfo", + "type": "LPPROFILEINFOW" + } + ], + "UnloadUserProfile": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "hProfile", + "type": "HANDLE" + } + ], + "GetProfilesDirectoryA": [ + { + "name": "lpProfileDir", + "type": "LPSTR" + }, + { + "name": "lpcchSize", + "type": "LPDWORD" + } + ], + "GetProfilesDirectoryW": [ + { + "name": "lpProfileDir", + "type": "LPWSTR" + }, + { + "name": "lpcchSize", + "type": "LPDWORD" + } + ], + "GetProfileType": [ + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "DeleteProfileA": [ + { + "name": "lpSidString", + "type": "LPCSTR" + }, + { + "name": "lpProfilePath", + "type": "LPCSTR" + }, + { + "name": "lpComputerName", + "type": "LPCSTR" + } + ], + "DeleteProfileW": [ + { + "name": "lpSidString", + "type": "LPCWSTR" + }, + { + "name": "lpProfilePath", + "type": "LPCWSTR" + }, + { + "name": "lpComputerName", + "type": "LPCWSTR" + } + ], + "CreateProfile": [ + { + "name": "pszUserSid", + "type": "LPCWSTR" + }, + { + "name": "pszUserName", + "type": "LPCWSTR" + }, + { + "name": "pszProfilePath", + "type": "LPWSTR" + }, + { + "name": "cchProfilePath", + "type": "DWORD" + } + ], + "GetDefaultUserProfileDirectoryA": [ + { + "name": "lpProfileDir", + "type": "LPSTR" + }, + { + "name": "lpcchSize", + "type": "LPDWORD" + } + ], + "GetDefaultUserProfileDirectoryW": [ + { + "name": "lpProfileDir", + "type": "LPWSTR" + }, + { + "name": "lpcchSize", + "type": "LPDWORD" + } + ], + "GetAllUsersProfileDirectoryA": [ + { + "name": "lpProfileDir", + "type": "LPSTR" + }, + { + "name": "lpcchSize", + "type": "LPDWORD" + } + ], + "GetAllUsersProfileDirectoryW": [ + { + "name": "lpProfileDir", + "type": "LPWSTR" + }, + { + "name": "lpcchSize", + "type": "LPDWORD" + } + ], + "GetUserProfileDirectoryA": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpProfileDir", + "type": "LPSTR" + }, + { + "name": "lpcchSize", + "type": "LPDWORD" + } + ], + "GetUserProfileDirectoryW": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpProfileDir", + "type": "LPWSTR" + }, + { + "name": "lpcchSize", + "type": "LPDWORD" + } + ], + "CreateEnvironmentBlock": [ + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "bInherit", + "type": "BOOL" + } + ], + "DestroyEnvironmentBlock": [ + { + "name": "lpEnvironment", + "type": "LPVOID" + } + ], + "ExpandEnvironmentStringsForUserA": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpSrc", + "type": "LPCSTR" + }, + { + "name": "lpDest", + "type": "LPSTR" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "ExpandEnvironmentStringsForUserW": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpSrc", + "type": "LPCWSTR" + }, + { + "name": "lpDest", + "type": "LPWSTR" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "RefreshPolicy": [ + { + "name": "bMachine", + "type": "BOOL" + } + ], + "RefreshPolicyEx": [ + { + "name": "bMachine", + "type": "BOOL" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "EnterCriticalPolicySection": [ + { + "name": "bMachine", + "type": "BOOL" + } + ], + "LeaveCriticalPolicySection": [ + { + "name": "hSection", + "type": "HANDLE" + } + ], + "RegisterGPNotification": [ + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "bMachine", + "type": "BOOL" + } + ], + "UnregisterGPNotification": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "GetGPOListA": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpHostName", + "type": "LPCSTR" + }, + { + "name": "lpComputerName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pGPOList", + "type": "PGROUP_POLICY_OBJECTA" + } + ], + "GetGPOListW": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpHostName", + "type": "LPCWSTR" + }, + { + "name": "lpComputerName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pGPOList", + "type": "PGROUP_POLICY_OBJECTW" + } + ], + "FreeGPOListA": [ + { + "name": "pGPOList", + "type": "PGROUP_POLICY_OBJECTA" + } + ], + "FreeGPOListW": [ + { + "name": "pGPOList", + "type": "PGROUP_POLICY_OBJECTW" + } + ], + "GetAppliedGPOListA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pMachineName", + "type": "LPCSTR" + }, + { + "name": "pSidUser", + "type": "PSID" + }, + { + "name": "pGuidExtension", + "type": "GUID" + }, + { + "name": "ppGPOList", + "type": "PGROUP_POLICY_OBJECTA" + } + ], + "GetAppliedGPOListW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pMachineName", + "type": "LPCWSTR" + }, + { + "name": "pSidUser", + "type": "PSID" + }, + { + "name": "pGuidExtension", + "type": "GUID" + }, + { + "name": "ppGPOList", + "type": "PGROUP_POLICY_OBJECTW" + } + ], + "ProcessGroupPolicyCompleted": [ + { + "name": "extensionId", + "type": "REFGPEXTENSIONID" + }, + { + "name": "pAsyncHandle", + "type": "ASYNCCOMPLETIONHANDLE" + }, + { + "name": "dwStatus", + "type": "DWORD" + } + ], + "ProcessGroupPolicyCompletedEx": [ + { + "name": "extensionId", + "type": "REFGPEXTENSIONID" + }, + { + "name": "pAsyncHandle", + "type": "ASYNCCOMPLETIONHANDLE" + }, + { + "name": "dwStatus", + "type": "DWORD" + }, + { + "name": "RsopStatus", + "type": "HRESULT" + } + ], + "CreateAppContainerProfile": [ + { + "name": "pszAppContainerName", + "type": "PCWSTR" + }, + { + "name": "pszDisplayName", + "type": "PCWSTR" + }, + { + "name": "pszDescription", + "type": "PCWSTR" + }, + { + "name": "pCapabilities", + "type": "PSID_AND_ATTRIBUTES" + }, + { + "name": "dwCapabilityCount", + "type": "DWORD" + }, + { + "name": "ppSidAppContainerSid", + "type": "PSID" + } + ], + "DeleteAppContainerProfile": [ + { + "name": "pszAppContainerName", + "type": "PCWSTR" + } + ], + "GetAppContainerRegistryLocation": [ + { + "name": "desiredAccess", + "type": "REGSAM" + }, + { + "name": "phAppContainerKey", + "type": "PHKEY" + } + ], + "GetAppContainerFolderPath": [ + { + "name": "pszAppContainerSid", + "type": "PCWSTR" + }, + { + "name": "ppszPath", + "type": "PWSTR" + } + ], + "DeriveAppContainerSidFromAppContainerName": [ + { + "name": "pszAppContainerName", + "type": "PCWSTR" + }, + { + "name": "ppsidAppContainerSid", + "type": "PSID" + } + ], + "DeriveRestrictedAppContainerSidFromAppContainerSidAndRestrictedName": [ + { + "name": "psidAppContainerSid", + "type": "PSID" + }, + { + "name": "pszRestrictedAppContainerName", + "type": "PCWSTR" + }, + { + "name": "ppsidRestrictedAppContainerSid", + "type": "PSID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/usp10_dll.json b/qiling/extensions/windows_sdk/defs/usp10_dll.json new file mode 100644 index 000000000..edf86a8bc --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/usp10_dll.json @@ -0,0 +1,1052 @@ +{ + "ScriptFreeCache": [ + { + "name": "psc", + "type": "SCRIPT_CACHE" + } + ], + "ScriptItemize": [ + { + "name": "pwcInChars", + "type": "WCHAR" + }, + { + "name": "cInChars", + "type": "int" + }, + { + "name": "cMaxItems", + "type": "int" + }, + { + "name": "psControl", + "type": "SCRIPT_CONTROL" + }, + { + "name": "psState", + "type": "SCRIPT_STATE" + }, + { + "name": "pItems", + "type": "SCRIPT_ITEM" + }, + { + "name": "pcItems", + "type": "int" + } + ], + "ScriptLayout": [ + { + "name": "cRuns", + "type": "int" + }, + { + "name": "pbLevel", + "type": "BYTE" + }, + { + "name": "piVisualToLogical", + "type": "int" + }, + { + "name": "piLogicalToVisual", + "type": "int" + } + ], + "ScriptShape": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "pwcChars", + "type": "WCHAR" + }, + { + "name": "cChars", + "type": "int" + }, + { + "name": "cMaxGlyphs", + "type": "int" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "pwOutGlyphs", + "type": "WORD" + }, + { + "name": "pwLogClust", + "type": "WORD" + }, + { + "name": "psva", + "type": "SCRIPT_VISATTR" + }, + { + "name": "pcGlyphs", + "type": "int" + } + ], + "ScriptPlace": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "pwGlyphs", + "type": "WORD" + }, + { + "name": "cGlyphs", + "type": "int" + }, + { + "name": "psva", + "type": "SCRIPT_VISATTR" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "piAdvance", + "type": "int" + }, + { + "name": "pGoffset", + "type": "GOFFSET" + }, + { + "name": "pABC", + "type": "ABC" + } + ], + "ScriptTextOut": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "fuOptions", + "type": "UINT" + }, + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "pwcReserved", + "type": "WCHAR" + }, + { + "name": "iReserved", + "type": "int" + }, + { + "name": "pwGlyphs", + "type": "WORD" + }, + { + "name": "cGlyphs", + "type": "int" + }, + { + "name": "piAdvance", + "type": "int" + }, + { + "name": "piJustify", + "type": "int" + }, + { + "name": "pGoffset", + "type": "GOFFSET" + } + ], + "ScriptJustify": [ + { + "name": "psva", + "type": "SCRIPT_VISATTR" + }, + { + "name": "piAdvance", + "type": "int" + }, + { + "name": "cGlyphs", + "type": "int" + }, + { + "name": "iDx", + "type": "int" + }, + { + "name": "iMinKashida", + "type": "int" + }, + { + "name": "piJustify", + "type": "int" + } + ], + "ScriptBreak": [ + { + "name": "pwcChars", + "type": "WCHAR" + }, + { + "name": "cChars", + "type": "int" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "psla", + "type": "SCRIPT_LOGATTR" + } + ], + "ScriptCPtoX": [ + { + "name": "iCP", + "type": "int" + }, + { + "name": "fTrailing", + "type": "BOOL" + }, + { + "name": "cChars", + "type": "int" + }, + { + "name": "cGlyphs", + "type": "int" + }, + { + "name": "pwLogClust", + "type": "WORD" + }, + { + "name": "psva", + "type": "SCRIPT_VISATTR" + }, + { + "name": "piAdvance", + "type": "int" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "piX", + "type": "int" + } + ], + "ScriptXtoCP": [ + { + "name": "iX", + "type": "int" + }, + { + "name": "cChars", + "type": "int" + }, + { + "name": "cGlyphs", + "type": "int" + }, + { + "name": "pwLogClust", + "type": "WORD" + }, + { + "name": "psva", + "type": "SCRIPT_VISATTR" + }, + { + "name": "piAdvance", + "type": "int" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "piCP", + "type": "int" + }, + { + "name": "piTrailing", + "type": "int" + } + ], + "ScriptGetLogicalWidths": [ + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "cChars", + "type": "int" + }, + { + "name": "cGlyphs", + "type": "int" + }, + { + "name": "piGlyphWidth", + "type": "int" + }, + { + "name": "pwLogClust", + "type": "WORD" + }, + { + "name": "psva", + "type": "SCRIPT_VISATTR" + }, + { + "name": "piDx", + "type": "int" + } + ], + "ScriptApplyLogicalWidth": [ + { + "name": "piDx", + "type": "int" + }, + { + "name": "cChars", + "type": "int" + }, + { + "name": "cGlyphs", + "type": "int" + }, + { + "name": "pwLogClust", + "type": "WORD" + }, + { + "name": "psva", + "type": "SCRIPT_VISATTR" + }, + { + "name": "piAdvance", + "type": "int" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "pABC", + "type": "ABC" + }, + { + "name": "piJustify", + "type": "int" + } + ], + "ScriptGetCMap": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "pwcInChars", + "type": "WCHAR" + }, + { + "name": "cChars", + "type": "int" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwOutGlyphs", + "type": "WORD" + } + ], + "ScriptGetGlyphABCWidth": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "wGlyph", + "type": "WORD" + }, + { + "name": "pABC", + "type": "ABC" + } + ], + "ScriptGetProperties": [ + { + "name": "ppSp", + "type": "SCRIPT_PROPERTIES" + }, + { + "name": "piNumScripts", + "type": "int" + } + ], + "ScriptGetFontProperties": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "sfp", + "type": "SCRIPT_FONTPROPERTIES" + } + ], + "ScriptCacheGetHeight": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "tmHeight", + "type": "long" + } + ], + "ScriptStringAnalyse": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pString", + "type": "void" + }, + { + "name": "cString", + "type": "int" + }, + { + "name": "cGlyphs", + "type": "int" + }, + { + "name": "iCharset", + "type": "int" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "iReqWidth", + "type": "int" + }, + { + "name": "psControl", + "type": "SCRIPT_CONTROL" + }, + { + "name": "psState", + "type": "SCRIPT_STATE" + }, + { + "name": "piDx", + "type": "int" + }, + { + "name": "pTabdef", + "type": "SCRIPT_TABDEF" + }, + { + "name": "pbInClass", + "type": "BYTE" + }, + { + "name": "pssa", + "type": "SCRIPT_STRING_ANALYSIS" + } + ], + "ScriptStringFree": [ + { + "name": "pssa", + "type": "SCRIPT_STRING_ANALYSIS" + } + ], + "ScriptStringGetOrder": [ + { + "name": "ssa", + "type": "SCRIPT_STRING_ANALYSIS" + }, + { + "name": "puOrder", + "type": "UINT" + } + ], + "ScriptStringCPtoX": [ + { + "name": "ssa", + "type": "SCRIPT_STRING_ANALYSIS" + }, + { + "name": "icp", + "type": "int" + }, + { + "name": "fTrailing", + "type": "BOOL" + }, + { + "name": "pX", + "type": "int" + } + ], + "ScriptStringXtoCP": [ + { + "name": "ssa", + "type": "SCRIPT_STRING_ANALYSIS" + }, + { + "name": "iX", + "type": "int" + }, + { + "name": "piCh", + "type": "int" + }, + { + "name": "piTrailing", + "type": "int" + } + ], + "ScriptStringGetLogicalWidths": [ + { + "name": "ssa", + "type": "SCRIPT_STRING_ANALYSIS" + }, + { + "name": "piDx", + "type": "int" + } + ], + "ScriptStringValidate": [ + { + "name": "ssa", + "type": "SCRIPT_STRING_ANALYSIS" + } + ], + "ScriptStringOut": [ + { + "name": "ssa", + "type": "SCRIPT_STRING_ANALYSIS" + }, + { + "name": "iX", + "type": "int" + }, + { + "name": "iY", + "type": "int" + }, + { + "name": "uOptions", + "type": "UINT" + }, + { + "name": "prc", + "type": "RECT" + }, + { + "name": "iMinSel", + "type": "int" + }, + { + "name": "iMaxSel", + "type": "int" + }, + { + "name": "fDisabled", + "type": "BOOL" + } + ], + "ScriptIsComplex": [ + { + "name": "pwcInChars", + "type": "WCHAR" + }, + { + "name": "cInChars", + "type": "int" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "ScriptRecordDigitSubstitution": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "psds", + "type": "SCRIPT_DIGITSUBSTITUTE" + } + ], + "ScriptApplyDigitSubstitution": [ + { + "name": "psds", + "type": "SCRIPT_DIGITSUBSTITUTE" + }, + { + "name": "psc", + "type": "SCRIPT_CONTROL" + }, + { + "name": "pss", + "type": "SCRIPT_STATE" + } + ], + "ScriptShapeOpenType": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "tagScript", + "type": "OPENTYPE_TAG" + }, + { + "name": "tagLangSys", + "type": "OPENTYPE_TAG" + }, + { + "name": "rcRangeChars", + "type": "int" + }, + { + "name": "rpRangeProperties", + "type": "TEXTRANGE_PROPERTIES" + }, + { + "name": "cRanges", + "type": "int" + }, + { + "name": "pwcChars", + "type": "WCHAR" + }, + { + "name": "cChars", + "type": "int" + }, + { + "name": "cMaxGlyphs", + "type": "int" + }, + { + "name": "pwLogClust", + "type": "WORD" + }, + { + "name": "pCharProps", + "type": "SCRIPT_CHARPROP" + }, + { + "name": "pwOutGlyphs", + "type": "WORD" + }, + { + "name": "pOutGlyphProps", + "type": "SCRIPT_GLYPHPROP" + }, + { + "name": "pcGlyphs", + "type": "int" + } + ], + "ScriptPlaceOpenType": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "tagScript", + "type": "OPENTYPE_TAG" + }, + { + "name": "tagLangSys", + "type": "OPENTYPE_TAG" + }, + { + "name": "rcRangeChars", + "type": "int" + }, + { + "name": "rpRangeProperties", + "type": "TEXTRANGE_PROPERTIES" + }, + { + "name": "cRanges", + "type": "int" + }, + { + "name": "pwcChars", + "type": "WCHAR" + }, + { + "name": "pwLogClust", + "type": "WORD" + }, + { + "name": "pCharProps", + "type": "SCRIPT_CHARPROP" + }, + { + "name": "cChars", + "type": "int" + }, + { + "name": "pwGlyphs", + "type": "WORD" + }, + { + "name": "pGlyphProps", + "type": "SCRIPT_GLYPHPROP" + }, + { + "name": "cGlyphs", + "type": "int" + }, + { + "name": "piAdvance", + "type": "int" + }, + { + "name": "pGoffset", + "type": "GOFFSET" + }, + { + "name": "pABC", + "type": "ABC" + } + ], + "ScriptItemizeOpenType": [ + { + "name": "pwcInChars", + "type": "WCHAR" + }, + { + "name": "cInChars", + "type": "int" + }, + { + "name": "cMaxItems", + "type": "int" + }, + { + "name": "psControl", + "type": "SCRIPT_CONTROL" + }, + { + "name": "psState", + "type": "SCRIPT_STATE" + }, + { + "name": "pItems", + "type": "SCRIPT_ITEM" + }, + { + "name": "pScriptTags", + "type": "OPENTYPE_TAG" + }, + { + "name": "pcItems", + "type": "int" + } + ], + "ScriptGetFontScriptTags": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "cMaxTags", + "type": "int" + }, + { + "name": "pScriptTags", + "type": "OPENTYPE_TAG" + }, + { + "name": "pcTags", + "type": "int" + } + ], + "ScriptGetFontLanguageTags": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "tagScript", + "type": "OPENTYPE_TAG" + }, + { + "name": "cMaxTags", + "type": "int" + }, + { + "name": "pLangsysTags", + "type": "OPENTYPE_TAG" + }, + { + "name": "pcTags", + "type": "int" + } + ], + "ScriptGetFontFeatureTags": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "tagScript", + "type": "OPENTYPE_TAG" + }, + { + "name": "tagLangSys", + "type": "OPENTYPE_TAG" + }, + { + "name": "cMaxTags", + "type": "int" + }, + { + "name": "pFeatureTags", + "type": "OPENTYPE_TAG" + }, + { + "name": "pcTags", + "type": "int" + } + ], + "ScriptGetFontAlternateGlyphs": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "tagScript", + "type": "OPENTYPE_TAG" + }, + { + "name": "tagLangSys", + "type": "OPENTYPE_TAG" + }, + { + "name": "tagFeature", + "type": "OPENTYPE_TAG" + }, + { + "name": "wGlyphId", + "type": "WORD" + }, + { + "name": "cMaxAlternates", + "type": "int" + }, + { + "name": "pAlternateGlyphs", + "type": "WORD" + }, + { + "name": "pcAlternates", + "type": "int" + } + ], + "ScriptSubstituteSingleGlyph": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "tagScript", + "type": "OPENTYPE_TAG" + }, + { + "name": "tagLangSys", + "type": "OPENTYPE_TAG" + }, + { + "name": "tagFeature", + "type": "OPENTYPE_TAG" + }, + { + "name": "lParameter", + "type": "LONG" + }, + { + "name": "wGlyphId", + "type": "WORD" + }, + { + "name": "pwOutGlyphId", + "type": "WORD" + } + ], + "ScriptPositionSingleGlyph": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "tagScript", + "type": "OPENTYPE_TAG" + }, + { + "name": "tagLangSys", + "type": "OPENTYPE_TAG" + }, + { + "name": "tagFeature", + "type": "OPENTYPE_TAG" + }, + { + "name": "lParameter", + "type": "LONG" + }, + { + "name": "wGlyphId", + "type": "WORD" + }, + { + "name": "iAdvance", + "type": "int" + }, + { + "name": "GOffset", + "type": "GOFFSET" + }, + { + "name": "piOutAdvance", + "type": "int" + }, + { + "name": "pOutGoffset", + "type": "GOFFSET" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/uxtheme_dll.json b/qiling/extensions/windows_sdk/defs/uxtheme_dll.json new file mode 100644 index 000000000..45817e47e --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/uxtheme_dll.json @@ -0,0 +1,1402 @@ +{ + "BeginPanningFeedback": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "UpdatePanningFeedback": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "lTotalOverpanOffsetX", + "type": "LONG" + }, + { + "name": "lTotalOverpanOffsetY", + "type": "LONG" + }, + { + "name": "fInInertia", + "type": "BOOL" + } + ], + "EndPanningFeedback": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "fAnimateBack", + "type": "BOOL" + } + ], + "GetThemeAnimationProperty": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iStoryboardId", + "type": "int" + }, + { + "name": "iTargetId", + "type": "int" + }, + { + "name": "eProperty", + "type": "TA_PROPERTY" + }, + { + "name": "pvProperty", + "type": "void" + }, + { + "name": "cbSize", + "type": "DWORD" + }, + { + "name": "pcbSizeOut", + "type": "DWORD" + } + ], + "GetThemeAnimationTransform": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iStoryboardId", + "type": "int" + }, + { + "name": "iTargetId", + "type": "int" + }, + { + "name": "dwTransformIndex", + "type": "DWORD" + }, + { + "name": "pTransform", + "type": "TA_TRANSFORM" + }, + { + "name": "cbSize", + "type": "DWORD" + }, + { + "name": "pcbSizeOut", + "type": "DWORD" + } + ], + "GetThemeTimingFunction": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iTimingFunctionId", + "type": "int" + }, + { + "name": "pTimingFunction", + "type": "TA_TIMINGFUNCTION" + }, + { + "name": "cbSize", + "type": "DWORD" + }, + { + "name": "pcbSizeOut", + "type": "DWORD" + } + ], + "OpenThemeData": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszClassList", + "type": "LPCWSTR" + } + ], + "OpenThemeDataEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszClassList", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CloseThemeData": [ + { + "name": "hTheme", + "type": "HTHEME" + } + ], + "DrawThemeBackground": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pRect", + "type": "LPCRECT" + }, + { + "name": "pClipRect", + "type": "LPCRECT" + } + ], + "DrawThemeBackgroundEx": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pRect", + "type": "LPCRECT" + }, + { + "name": "pOptions", + "type": "DTBGOPTS" + } + ], + "DrawThemeText": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pszText", + "type": "LPCWSTR" + }, + { + "name": "cchText", + "type": "int" + }, + { + "name": "dwTextFlags", + "type": "DWORD" + }, + { + "name": "dwTextFlags2", + "type": "DWORD" + }, + { + "name": "pRect", + "type": "LPCRECT" + } + ], + "GetThemeBackgroundContentRect": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pBoundingRect", + "type": "LPCRECT" + }, + { + "name": "pContentRect", + "type": "LPRECT" + } + ], + "GetThemeBackgroundExtent": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pContentRect", + "type": "LPCRECT" + }, + { + "name": "pExtentRect", + "type": "LPRECT" + } + ], + "GetThemeBackgroundRegion": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pRect", + "type": "LPCRECT" + }, + { + "name": "pRegion", + "type": "HRGN" + } + ], + "GetThemePartSize": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "prc", + "type": "LPCRECT" + }, + { + "name": "eSize", + "type": { + "name": "THEMESIZE", + "data_type": "Enum", + "enumerators": [] + } + }, + { + "name": "psz", + "type": "SIZE" + } + ], + "GetThemeTextExtent": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pszText", + "type": "LPCWSTR" + }, + { + "name": "cchCharCount", + "type": "int" + }, + { + "name": "dwTextFlags", + "type": "DWORD" + }, + { + "name": "pBoundingRect", + "type": "LPCRECT" + }, + { + "name": "pExtentRect", + "type": "LPRECT" + } + ], + "GetThemeTextMetrics": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "ptm", + "type": "TEXTMETRICW" + } + ], + "HitTestThemeBackground": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "pRect", + "type": "LPCRECT" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "ptTest", + "type": "POINT" + }, + { + "name": "pwHitTestCode", + "type": "WORD" + } + ], + "DrawThemeEdge": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pDestRect", + "type": "LPCRECT" + }, + { + "name": "uEdge", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "pContentRect", + "type": "LPRECT" + } + ], + "DrawThemeIcon": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pRect", + "type": "LPCRECT" + }, + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "iImageIndex", + "type": "int" + } + ], + "IsThemePartDefined": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + } + ], + "IsThemeBackgroundPartiallyTransparent": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + } + ], + "GetThemeColor": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pColor", + "type": "COLORREF" + } + ], + "GetThemeMetric": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "piVal", + "type": "int" + } + ], + "GetThemeString": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pszBuff", + "type": "LPWSTR" + }, + { + "name": "cchMaxBuffChars", + "type": "int" + } + ], + "GetThemeBool": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pfVal", + "type": "BOOL" + } + ], + "GetThemeInt": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "piVal", + "type": "int" + } + ], + "GetThemeEnumValue": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "piVal", + "type": "int" + } + ], + "GetThemePosition": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pPoint", + "type": "POINT" + } + ], + "GetThemeFont": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pFont", + "type": "LOGFONTW" + } + ], + "GetThemeRect": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pRect", + "type": "LPRECT" + } + ], + "GetThemeMargins": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "prc", + "type": "LPCRECT" + }, + { + "name": "pMargins", + "type": "MARGINS" + } + ], + "GetThemeIntList": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pIntList", + "type": "INTLIST" + } + ], + "GetThemePropertyOrigin": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pOrigin", + "type": { + "name": "PROPERTYORIGIN", + "data_type": "Enum", + "enumerators": [] + } + } + ], + "SetWindowTheme": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszSubAppName", + "type": "LPCWSTR" + }, + { + "name": "pszSubIdList", + "type": "LPCWSTR" + } + ], + "GetThemeFilename": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pszThemeFileName", + "type": "LPWSTR" + }, + { + "name": "cchMaxBuffChars", + "type": "int" + } + ], + "GetThemeSysColor": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iColorId", + "type": "int" + } + ], + "GetThemeSysColorBrush": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iColorId", + "type": "int" + } + ], + "GetThemeSysBool": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iBoolId", + "type": "int" + } + ], + "GetThemeSysSize": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iSizeId", + "type": "int" + } + ], + "GetThemeSysFont": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iFontId", + "type": "int" + }, + { + "name": "plf", + "type": "LOGFONTW" + } + ], + "GetThemeSysString": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iStringId", + "type": "int" + }, + { + "name": "pszStringBuff", + "type": "LPWSTR" + }, + { + "name": "cchMaxStringChars", + "type": "int" + } + ], + "GetThemeSysInt": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iIntId", + "type": "int" + }, + { + "name": "piValue", + "type": "int" + } + ], + "IsThemeActive": [ + { + "name": "VOID", + "type": "void" + } + ], + "IsAppThemed": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetWindowTheme": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "EnableThemeDialogTexture": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "IsThemeDialogTextureEnabled": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "GetThemeAppProperties": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetThemeAppProperties": [ + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetCurrentThemeName": [ + { + "name": "pszThemeFileName", + "type": "LPWSTR" + }, + { + "name": "cchMaxNameChars", + "type": "int" + }, + { + "name": "pszColorBuff", + "type": "LPWSTR" + }, + { + "name": "cchMaxColorChars", + "type": "int" + }, + { + "name": "pszSizeBuff", + "type": "LPWSTR" + }, + { + "name": "cchMaxSizeChars", + "type": "int" + } + ], + "GetThemeDocumentationProperty": [ + { + "name": "pszThemeName", + "type": "LPCWSTR" + }, + { + "name": "pszPropertyName", + "type": "LPCWSTR" + }, + { + "name": "pszValueBuff", + "type": "LPWSTR" + }, + { + "name": "cchMaxValChars", + "type": "int" + } + ], + "DrawThemeParentBackground": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "prc", + "type": "RECT" + } + ], + "EnableTheming": [ + { + "name": "fEnable", + "type": "BOOL" + } + ], + "DrawThemeParentBackgroundEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "prc", + "type": "RECT" + } + ], + "SetWindowThemeAttribute": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "eAttribute", + "type": { + "name": "WINDOWTHEMEATTRIBUTETYPE", + "data_type": "Enum", + "enumerators": [] + } + }, + { + "name": "pvAttribute", + "type": "PVOID" + }, + { + "name": "cbAttribute", + "type": "DWORD" + } + ], + "SetWindowThemeNonClientAttributes": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwMask", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + } + ], + "DrawThemeTextEx": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pszText", + "type": "LPCWSTR" + }, + { + "name": "cchText", + "type": "int" + }, + { + "name": "dwTextFlags", + "type": "DWORD" + }, + { + "name": "pRect", + "type": "LPRECT" + }, + { + "name": "pOptions", + "type": "DTTOPTS" + } + ], + "GetThemeBitmap": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "phBitmap", + "type": "HBITMAP" + } + ], + "GetThemeStream": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "ppvStream", + "type": "void" + }, + { + "name": "pcbStream", + "type": "DWORD" + }, + { + "name": "hInst", + "type": "HINSTANCE" + } + ], + "BufferedPaintInit": [ + { + "name": "VOID", + "type": "void" + } + ], + "BufferedPaintUnInit": [ + { + "name": "VOID", + "type": "void" + } + ], + "BeginBufferedPaint": [ + { + "name": "hdcTarget", + "type": "HDC" + }, + { + "name": "prcTarget", + "type": "RECT" + }, + { + "name": "dwFormat", + "type": "BP_BUFFERFORMAT" + }, + { + "name": "pPaintParams", + "type": "BP_PAINTPARAMS" + }, + { + "name": "phdc", + "type": "HDC" + } + ], + "EndBufferedPaint": [ + { + "name": "hBufferedPaint", + "type": "HPAINTBUFFER" + }, + { + "name": "fUpdateTarget", + "type": "BOOL" + } + ], + "GetBufferedPaintTargetRect": [ + { + "name": "hBufferedPaint", + "type": "HPAINTBUFFER" + }, + { + "name": "prc", + "type": "RECT" + } + ], + "GetBufferedPaintTargetDC": [ + { + "name": "hBufferedPaint", + "type": "HPAINTBUFFER" + } + ], + "GetBufferedPaintDC": [ + { + "name": "hBufferedPaint", + "type": "HPAINTBUFFER" + } + ], + "GetBufferedPaintBits": [ + { + "name": "hBufferedPaint", + "type": "HPAINTBUFFER" + }, + { + "name": "ppbBuffer", + "type": "RGBQUAD" + }, + { + "name": "pcxRow", + "type": "int" + } + ], + "BufferedPaintClear": [ + { + "name": "hBufferedPaint", + "type": "HPAINTBUFFER" + }, + { + "name": "prc", + "type": "RECT" + } + ], + "BufferedPaintSetAlpha": [ + { + "name": "hBufferedPaint", + "type": "HPAINTBUFFER" + }, + { + "name": "prc", + "type": "RECT" + }, + { + "name": "alpha", + "type": "BYTE" + } + ], + "BufferedPaintStopAllAnimations": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "BeginBufferedAnimation": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hdcTarget", + "type": "HDC" + }, + { + "name": "prcTarget", + "type": "RECT" + }, + { + "name": "dwFormat", + "type": "BP_BUFFERFORMAT" + }, + { + "name": "pPaintParams", + "type": "BP_PAINTPARAMS" + }, + { + "name": "pAnimationParams", + "type": "BP_ANIMATIONPARAMS" + }, + { + "name": "phdcFrom", + "type": "HDC" + }, + { + "name": "phdcTo", + "type": "HDC" + } + ], + "EndBufferedAnimation": [ + { + "name": "hbpAnimation", + "type": "HANIMATIONBUFFER" + }, + { + "name": "fUpdateTarget", + "type": "BOOL" + } + ], + "BufferedPaintRenderAnimation": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hdcTarget", + "type": "HDC" + } + ], + "GetThemeTransitionDuration": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateIdFrom", + "type": "int" + }, + { + "name": "iStateIdTo", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pdwDuration", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/vdmdbg_dll.json b/qiling/extensions/windows_sdk/defs/vdmdbg_dll.json new file mode 100644 index 000000000..8549ee5b2 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/vdmdbg_dll.json @@ -0,0 +1,26 @@ +{ + "VDMEnumProcessWOW": [ + { + "name": "fp", + "type": "PROCESSENUMPROC" + }, + { + "name": "lparam", + "type": "LPARAM" + } + ], + "VDMEnumTaskWOWEx": [ + { + "name": "dwProcessId", + "type": "DWORD" + }, + { + "name": "fp", + "type": "TASKENUMPROCEX" + }, + { + "name": "lparam", + "type": "LPARAM" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/verifier_dll.json b/qiling/extensions/windows_sdk/defs/verifier_dll.json new file mode 100644 index 000000000..bf7aad054 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/verifier_dll.json @@ -0,0 +1,30 @@ +{ + "VerifierEnumerateResource": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "ResourceType", + "type": "ULONG" + }, + { + "name": "ResourceCallback", + "type": "AVRF_RESOURCE_ENUMERATE_CALLBACK" + }, + { + "name": "EnumerationContext", + "type": "PVOID" + } + ], + "VerifierIsPerUserSettingsEnabled": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/vertdll_dll.json b/qiling/extensions/windows_sdk/defs/vertdll_dll.json new file mode 100644 index 000000000..dcb5e5329 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/vertdll_dll.json @@ -0,0 +1,20 @@ +{ + "CallEnclave": [ + { + "name": "lpRoutine", + "type": "LPENCLAVE_ROUTINE" + }, + { + "name": "lpParameter", + "type": "LPVOID" + }, + { + "name": "fWaitForThread", + "type": "BOOL" + }, + { + "name": "lpReturnValue", + "type": "LPVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/virtdisk_dll.json b/qiling/extensions/windows_sdk/defs/virtdisk_dll.json new file mode 100644 index 000000000..a0185c244 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/virtdisk_dll.json @@ -0,0 +1,458 @@ +{ + "OpenVirtualDisk": [ + { + "name": "VirtualStorageType", + "type": "PVIRTUAL_STORAGE_TYPE" + }, + { + "name": "Path", + "type": "PCWSTR" + }, + { + "name": "VirtualDiskAccessMask", + "type": "VIRTUAL_DISK_ACCESS_MASK" + }, + { + "name": "Flags", + "type": "OPEN_VIRTUAL_DISK_FLAG" + }, + { + "name": "Parameters", + "type": "POPEN_VIRTUAL_DISK_PARAMETERS" + }, + { + "name": "Handle", + "type": "PHANDLE" + } + ], + "CreateVirtualDisk": [ + { + "name": "VirtualStorageType", + "type": "PVIRTUAL_STORAGE_TYPE" + }, + { + "name": "Path", + "type": "PCWSTR" + }, + { + "name": "VirtualDiskAccessMask", + "type": "VIRTUAL_DISK_ACCESS_MASK" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "Flags", + "type": "CREATE_VIRTUAL_DISK_FLAG" + }, + { + "name": "ProviderSpecificFlags", + "type": "ULONG" + }, + { + "name": "Parameters", + "type": "PCREATE_VIRTUAL_DISK_PARAMETERS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "Handle", + "type": "PHANDLE" + } + ], + "AttachVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "Flags", + "type": "ATTACH_VIRTUAL_DISK_FLAG" + }, + { + "name": "ProviderSpecificFlags", + "type": "ULONG" + }, + { + "name": "Parameters", + "type": "PATTACH_VIRTUAL_DISK_PARAMETERS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "DetachVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DETACH_VIRTUAL_DISK_FLAG" + }, + { + "name": "ProviderSpecificFlags", + "type": "ULONG" + } + ], + "GetVirtualDiskPhysicalPath": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "DiskPathSizeInBytes", + "type": "PULONG" + }, + { + "name": "DiskPath", + "type": "PWSTR" + } + ], + "GetStorageDependencyInformation": [ + { + "name": "ObjectHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "GET_STORAGE_DEPENDENCY_FLAG" + }, + { + "name": "StorageDependencyInfoSize", + "type": "ULONG" + }, + { + "name": "StorageDependencyInfo", + "type": "PSTORAGE_DEPENDENCY_INFO" + }, + { + "name": "SizeUsed", + "type": "PULONG" + } + ], + "GetVirtualDiskInformation": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "VirtualDiskInfoSize", + "type": "PULONG" + }, + { + "name": "VirtualDiskInfo", + "type": "PGET_VIRTUAL_DISK_INFO" + }, + { + "name": "SizeUsed", + "type": "PULONG" + } + ], + "SetVirtualDiskInformation": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "VirtualDiskInfo", + "type": "PSET_VIRTUAL_DISK_INFO" + } + ], + "EnumerateVirtualDiskMetadata": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "NumberOfItems", + "type": "PULONG" + }, + { + "name": "Items", + "type": "GUID" + } + ], + "GetVirtualDiskMetadata": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Item", + "type": "GUID" + }, + { + "name": "MetaDataSize", + "type": "PULONG" + }, + { + "name": "MetaData", + "type": "PVOID" + } + ], + "SetVirtualDiskMetadata": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Item", + "type": "GUID" + }, + { + "name": "MetaDataSize", + "type": "ULONG" + }, + { + "name": "MetaData", + "type": "void" + } + ], + "DeleteVirtualDiskMetadata": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Item", + "type": "GUID" + } + ], + "GetVirtualDiskOperationProgress": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "Progress", + "type": "PVIRTUAL_DISK_PROGRESS" + } + ], + "CompactVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "COMPACT_VIRTUAL_DISK_FLAG" + }, + { + "name": "Parameters", + "type": "PCOMPACT_VIRTUAL_DISK_PARAMETERS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "MergeVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "MERGE_VIRTUAL_DISK_FLAG" + }, + { + "name": "Parameters", + "type": "PMERGE_VIRTUAL_DISK_PARAMETERS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "ExpandVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "EXPAND_VIRTUAL_DISK_FLAG" + }, + { + "name": "Parameters", + "type": "PEXPAND_VIRTUAL_DISK_PARAMETERS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "ResizeVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "RESIZE_VIRTUAL_DISK_FLAG" + }, + { + "name": "Parameters", + "type": "PRESIZE_VIRTUAL_DISK_PARAMETERS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "MirrorVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "MIRROR_VIRTUAL_DISK_FLAG" + }, + { + "name": "Parameters", + "type": "PMIRROR_VIRTUAL_DISK_PARAMETERS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "BreakMirrorVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + } + ], + "AddVirtualDiskParent": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "ParentPath", + "type": "PCWSTR" + } + ], + "QueryChangesVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "ChangeTrackingId", + "type": "PCWSTR" + }, + { + "name": "ByteOffset", + "type": "ULONG64" + }, + { + "name": "ByteLength", + "type": "ULONG64" + }, + { + "name": "Flags", + "type": "QUERY_CHANGES_VIRTUAL_DISK_FLAG" + }, + { + "name": "Ranges", + "type": "PQUERY_CHANGES_VIRTUAL_DISK_RANGE" + }, + { + "name": "RangeCount", + "type": "PULONG" + }, + { + "name": "ProcessedLength", + "type": "PULONG64" + } + ], + "TakeSnapshotVhdSet": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Parameters", + "type": "PTAKE_SNAPSHOT_VHDSET_PARAMETERS" + }, + { + "name": "Flags", + "type": "TAKE_SNAPSHOT_VHDSET_FLAG" + } + ], + "DeleteSnapshotVhdSet": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Parameters", + "type": "PDELETE_SNAPSHOT_VHDSET_PARAMETERS" + }, + { + "name": "Flags", + "type": "DELETE_SNAPSHOT_VHDSET_FLAG" + } + ], + "ModifyVhdSet": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Parameters", + "type": "PMODIFY_VHDSET_PARAMETERS" + }, + { + "name": "Flags", + "type": "MODIFY_VHDSET_FLAG" + } + ], + "ApplySnapshotVhdSet": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Parameters", + "type": "PAPPLY_SNAPSHOT_VHDSET_PARAMETERS" + }, + { + "name": "Flags", + "type": "APPLY_SNAPSHOT_VHDSET_FLAG" + } + ], + "RawSCSIVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Parameters", + "type": "PRAW_SCSI_VIRTUAL_DISK_PARAMETERS" + }, + { + "name": "Flags", + "type": "RAW_SCSI_VIRTUAL_DISK_FLAG" + }, + { + "name": "Response", + "type": "PRAW_SCSI_VIRTUAL_DISK_RESPONSE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wcmapi_dll.json b/qiling/extensions/windows_sdk/defs/wcmapi_dll.json new file mode 100644 index 000000000..343f22aa6 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wcmapi_dll.json @@ -0,0 +1,88 @@ +{ + "WcmQueryProperty": [ + { + "name": "pInterface", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "Property", + "type": "WCM_PROPERTY" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwDataSize", + "type": "PDWORD" + }, + { + "name": "ppData", + "type": "PBYTE" + } + ], + "WcmSetProperty": [ + { + "name": "pInterface", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "Property", + "type": "WCM_PROPERTY" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + } + ], + "WcmGetProfileList": [ + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppProfileList", + "type": "WCM_PROFILE_INFO_LIST" + } + ], + "WcmSetProfileList": [ + { + "name": "pProfileList", + "type": "WCM_PROFILE_INFO_LIST" + }, + { + "name": "dwPosition", + "type": "DWORD" + }, + { + "name": "fIgnoreUnknownProfiles", + "type": "BOOL" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WcmFreeMemory": [ + { + "name": "pMemory", + "type": "PVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wdsbp_dll.json b/qiling/extensions/windows_sdk/defs/wdsbp_dll.json new file mode 100644 index 000000000..f2928a548 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wdsbp_dll.json @@ -0,0 +1,112 @@ +{ + "WdsBpParseInitialize": [ + { + "name": "pPacket", + "type": "PVOID" + }, + { + "name": "uPacketLen", + "type": "ULONG" + }, + { + "name": "pbPacketType", + "type": "PBYTE" + }, + { + "name": "phHandle", + "type": "HANDLE" + } + ], + "WdsBpParseInitializev6": [ + { + "name": "pPacket", + "type": "PVOID" + }, + { + "name": "uPacketLen", + "type": "ULONG" + }, + { + "name": "pbPacketType", + "type": "PBYTE" + }, + { + "name": "phHandle", + "type": "HANDLE" + } + ], + "WdsBpInitialize": [ + { + "name": "bPacketType", + "type": "BYTE" + }, + { + "name": "phHandle", + "type": "HANDLE" + } + ], + "WdsBpCloseHandle": [ + { + "name": "hHandle", + "type": "HANDLE" + } + ], + "WdsBpQueryOption": [ + { + "name": "hHandle", + "type": "HANDLE" + }, + { + "name": "uOption", + "type": "ULONG" + }, + { + "name": "uValueLen", + "type": "ULONG" + }, + { + "name": "pValue", + "type": "PVOID" + }, + { + "name": "puBytes", + "type": "PULONG" + } + ], + "WdsBpAddOption": [ + { + "name": "hHandle", + "type": "HANDLE" + }, + { + "name": "uOption", + "type": "ULONG" + }, + { + "name": "uValueLen", + "type": "ULONG" + }, + { + "name": "pValue", + "type": "PVOID" + } + ], + "WdsBpGetOptionBuffer": [ + { + "name": "hHandle", + "type": "HANDLE" + }, + { + "name": "uBufferLen", + "type": "ULONG" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "puBytes", + "type": "PULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wdsclientapi_dll.json b/qiling/extensions/windows_sdk/defs/wdsclientapi_dll.json new file mode 100644 index 000000000..662e9018b --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wdsclientapi_dll.json @@ -0,0 +1,400 @@ +{ + "WdsCliClose": [ + { + "name": "Handle", + "type": "HANDLE" + } + ], + "WdsCliRegisterTrace": [ + { + "name": "pfn", + "type": "PFN_WdsCliTraceFunction" + } + ], + "WdsCliFreeStringArray": [ + { + "name": "ppwszArray", + "type": "PWSTR" + }, + { + "name": "ulCount", + "type": "ULONG" + } + ], + "WdsCliFindFirstImage": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "phFindHandle", + "type": "PHANDLE" + } + ], + "WdsCliFindNextImage": [ + { + "name": "Handle", + "type": "HANDLE" + } + ], + "WdsCliGetEnumerationFlags": [ + { + "name": "Handle", + "type": "HANDLE" + }, + { + "name": "pdwFlags", + "type": "PDWORD" + } + ], + "WdsCliGetImageHandleFromFindHandle": [ + { + "name": "FindHandle", + "type": "HANDLE" + }, + { + "name": "phImageHandle", + "type": "PHANDLE" + } + ], + "WdsCliGetImageHandleFromTransferHandle": [ + { + "name": "hTransfer", + "type": "HANDLE" + }, + { + "name": "phImageHandle", + "type": "PHANDLE" + } + ], + "WdsCliCreateSession": [ + { + "name": "pwszServer", + "type": "PWSTR" + }, + { + "name": "pCred", + "type": "PWDS_CLI_CRED" + }, + { + "name": "phSession", + "type": "PHANDLE" + } + ], + "WdsCliAuthorizeSession": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "pCred", + "type": "PWDS_CLI_CRED" + } + ], + "WdsCliInitializeLog": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "ulClientArchitecture", + "type": "ULONG" + }, + { + "name": "pwszClientId", + "type": "PWSTR" + }, + { + "name": "pwszClientAddress", + "type": "PWSTR" + } + ], + "WdsCliLog": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "ulLogLevel", + "type": "ULONG" + }, + { + "name": "ulMessageCode", + "type": "ULONG" + } + ], + "WdsCliGetImageName": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "WdsCliGetImageDescription": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "WdsCliGetImageLanguage": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "WdsCliGetImageLanguages": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "pppszValues", + "type": "PTSTR" + }, + { + "name": "pdwNumValues", + "type": "PDWORD" + } + ], + "WdsCliGetImageVersion": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "WdsCliGetImagePath": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "WdsCliGetImageIndex": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "pdwValue", + "type": "PDWORD" + } + ], + "WdsCliGetImageArchitecture": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "pdwValue", + "type": "PDWORD" + } + ], + "WdsCliGetImageLastModifiedTime": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "ppSysTimeValue", + "type": "PSYSTEMTIME" + } + ], + "WdsCliGetImageSize": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "pullValue", + "type": "PULONGLONG" + } + ], + "WdsCliGetImageHalName": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "WdsCliGetImageGroup": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "WdsCliGetImageNamespace": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "WdsCliGetTransferSize": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "pullValue", + "type": "PULONGLONG" + } + ], + "WdsCliTransferImage": [ + { + "name": "hImage", + "type": "HANDLE" + }, + { + "name": "pwszLocalPath", + "type": "PWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "pfnWdsCliCallback", + "type": "PFN_WdsCliCallback" + }, + { + "name": "pvUserData", + "type": "PVOID" + }, + { + "name": "phTransfer", + "type": "PHANDLE" + } + ], + "WdsCliTransferFile": [ + { + "name": "pwszServer", + "type": "PCWSTR" + }, + { + "name": "pwszNamespace", + "type": "PCWSTR" + }, + { + "name": "pwszRemoteFilePath", + "type": "PCWSTR" + }, + { + "name": "pwszLocalFilePath", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "pfnWdsCliCallback", + "type": "PFN_WdsCliCallback" + }, + { + "name": "pvUserData", + "type": "PVOID" + }, + { + "name": "phTransfer", + "type": "PHANDLE" + } + ], + "WdsCliCancelTransfer": [ + { + "name": "hTransfer", + "type": "HANDLE" + } + ], + "WdsCliWaitForTransfer": [ + { + "name": "hTransfer", + "type": "HANDLE" + } + ], + "WdsCliObtainDriverPackages": [ + { + "name": "hImage", + "type": "HANDLE" + }, + { + "name": "ppwszServerName", + "type": "PWSTR" + }, + { + "name": "pppwszDriverPackages", + "type": "PWSTR" + }, + { + "name": "pulCount", + "type": "ULONG" + } + ], + "WdsCliObtainDriverPackagesEx": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "pwszMachineInfo", + "type": "PWSTR" + }, + { + "name": "ppwszServerName", + "type": "PWSTR" + }, + { + "name": "pppwszDriverPackages", + "type": "PWSTR" + }, + { + "name": "pulCount", + "type": "ULONG" + } + ], + "WdsCliGetDriverQueryXml": [ + { + "name": "pwszWinDirPath", + "type": "PWSTR" + }, + { + "name": "ppwszDriverQuery", + "type": "PWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wdsmc_dll.json b/qiling/extensions/windows_sdk/defs/wdsmc_dll.json new file mode 100644 index 000000000..5d51f2b31 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wdsmc_dll.json @@ -0,0 +1,86 @@ +{ + "WdsTransportServerRegisterCallback": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "CallbackId", + "type": "TRANSPORTPROVIDER_CALLBACK_ID" + }, + { + "name": "pfnCallback", + "type": "PVOID" + } + ], + "WdsTransportServerCompleteRead": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "ulBytesRead", + "type": "ULONG" + }, + { + "name": "pvUserData", + "type": "PVOID" + }, + { + "name": "hReadResult", + "type": "HRESULT" + } + ], + "WdsTransportServerTrace": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "Severity", + "type": "WDS_MC_SEVERITY" + }, + { + "name": "pwszFormat", + "type": "LPCWSTR" + } + ], + "WdsTransportServerTraceV": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "Severity", + "type": "WDS_MC_SEVERITY" + }, + { + "name": "pwszFormat", + "type": "LPCWSTR" + }, + { + "name": "Params", + "type": "va_list" + } + ], + "WdsTransportServerAllocateBuffer": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "ulBufferSize", + "type": "ULONG" + } + ], + "WdsTransportServerFreeBuffer": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "pvBuffer", + "type": "PVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wdspxe_dll.json b/qiling/extensions/windows_sdk/defs/wdspxe_dll.json new file mode 100644 index 000000000..dbb338207 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wdspxe_dll.json @@ -0,0 +1,550 @@ +{ + "PxeProviderRegister": [ + { + "name": "pszProviderName", + "type": "LPCWSTR" + }, + { + "name": "pszModulePath", + "type": "LPCWSTR" + }, + { + "name": "Index", + "type": "PXE_REG_INDEX" + }, + { + "name": "bIsCritical", + "type": "BOOL" + }, + { + "name": "phProviderKey", + "type": "PHKEY" + } + ], + "PxeProviderUnRegister": [ + { + "name": "pszProviderName", + "type": "LPCWSTR" + } + ], + "PxeProviderQueryIndex": [ + { + "name": "pszProviderName", + "type": "LPCWSTR" + }, + { + "name": "puIndex", + "type": "PULONG" + } + ], + "PxeProviderEnumFirst": [ + { + "name": "phEnum", + "type": "HANDLE" + } + ], + "PxeProviderEnumNext": [ + { + "name": "hEnum", + "type": "HANDLE" + }, + { + "name": "ppProvider", + "type": "PPXE_PROVIDER" + } + ], + "PxeProviderEnumClose": [ + { + "name": "hEnum", + "type": "HANDLE" + } + ], + "PxeProviderFreeInfo": [ + { + "name": "pProvider", + "type": "PPXE_PROVIDER" + } + ], + "PxeRegisterCallback": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "CallbackType", + "type": "PXE_CALLBACK_TYPE" + }, + { + "name": "pCallbackFunction", + "type": "PVOID" + }, + { + "name": "pContext", + "type": "PVOID" + } + ], + "PxeSendReply": [ + { + "name": "hClientRequest", + "type": "HANDLE" + }, + { + "name": "pPacket", + "type": "PVOID" + }, + { + "name": "uPacketLen", + "type": "ULONG" + }, + { + "name": "pAddress", + "type": "PXE_ADDRESS" + } + ], + "PxeAsyncRecvDone": [ + { + "name": "hClientRequest", + "type": "HANDLE" + }, + { + "name": "Action", + "type": "PXE_BOOT_ACTION" + } + ], + "PxeTrace": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "Severity", + "type": "PXE_SEVERITY" + }, + { + "name": "pszFormat", + "type": "LPCWSTR" + } + ], + "PxePacketAllocate": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "hClientRequest", + "type": "HANDLE" + }, + { + "name": "uSize", + "type": "ULONG" + } + ], + "PxePacketFree": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "hClientRequest", + "type": "HANDLE" + }, + { + "name": "pPacket", + "type": "PVOID" + } + ], + "PxeProviderSetAttribute": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "Attribute", + "type": "PXE_PROVIDER_ATTRIBUTE" + }, + { + "name": "pParameterBuffer", + "type": "PVOID" + }, + { + "name": "uParamLen", + "type": "ULONG" + } + ], + "PxeDhcpInitialize": [ + { + "name": "pRecvPacket", + "type": "PVOID" + }, + { + "name": "uRecvPacketLen", + "type": "ULONG" + }, + { + "name": "pReplyPacket", + "type": "PVOID" + }, + { + "name": "uMaxReplyPacketLen", + "type": "ULONG" + }, + { + "name": "puReplyPacketLen", + "type": "PULONG" + } + ], + "PxeDhcpv6Initialize": [ + { + "name": "pRequest", + "type": "PVOID" + }, + { + "name": "cbRequest", + "type": "ULONG" + }, + { + "name": "pReply", + "type": "PVOID" + }, + { + "name": "cbReply", + "type": "ULONG" + }, + { + "name": "pcbReplyUsed", + "type": "PULONG" + } + ], + "PxeDhcpAppendOption": [ + { + "name": "pReplyPacket", + "type": "PVOID" + }, + { + "name": "uMaxReplyPacketLen", + "type": "ULONG" + }, + { + "name": "puReplyPacketLen", + "type": "PULONG" + }, + { + "name": "bOption", + "type": "BYTE" + }, + { + "name": "bOptionLen", + "type": "BYTE" + }, + { + "name": "pValue", + "type": "PVOID" + } + ], + "PxeDhcpv6AppendOption": [ + { + "name": "pReply", + "type": "PVOID" + }, + { + "name": "cbReply", + "type": "ULONG" + }, + { + "name": "pcbReplyUsed", + "type": "PULONG" + }, + { + "name": "wOptionType", + "type": "WORD" + }, + { + "name": "cbOption", + "type": "WORD" + }, + { + "name": "pOption", + "type": "PVOID" + } + ], + "PxeDhcpAppendOptionRaw": [ + { + "name": "pReplyPacket", + "type": "PVOID" + }, + { + "name": "uMaxReplyPacketLen", + "type": "ULONG" + }, + { + "name": "puReplyPacketLen", + "type": "PULONG" + }, + { + "name": "uBufferLen", + "type": "USHORT" + }, + { + "name": "pBuffer", + "type": "PVOID" + } + ], + "PxeDhcpv6AppendOptionRaw": [ + { + "name": "pReply", + "type": "PVOID" + }, + { + "name": "cbReply", + "type": "ULONG" + }, + { + "name": "pcbReplyUsed", + "type": "PULONG" + }, + { + "name": "cbBuffer", + "type": "USHORT" + }, + { + "name": "pBuffer", + "type": "PVOID" + } + ], + "PxeDhcpIsValid": [ + { + "name": "pPacket", + "type": "PVOID" + }, + { + "name": "uPacketLen", + "type": "ULONG" + }, + { + "name": "bRequestPacket", + "type": "BOOL" + }, + { + "name": "pbPxeOptionPresent", + "type": "PBOOL" + } + ], + "PxeDhcpv6IsValid": [ + { + "name": "pPacket", + "type": "PVOID" + }, + { + "name": "uPacketLen", + "type": "ULONG" + }, + { + "name": "bRequestPacket", + "type": "BOOL" + }, + { + "name": "pbPxeOptionPresent", + "type": "PBOOL" + } + ], + "PxeDhcpGetOptionValue": [ + { + "name": "pPacket", + "type": "PVOID" + }, + { + "name": "uPacketLen", + "type": "ULONG" + }, + { + "name": "uInstance", + "type": "ULONG" + }, + { + "name": "bOption", + "type": "BYTE" + }, + { + "name": "pbOptionLen", + "type": "PBYTE" + }, + { + "name": "ppOptionValue", + "type": "PVOID" + } + ], + "PxeDhcpv6GetOptionValue": [ + { + "name": "pPacket", + "type": "PVOID" + }, + { + "name": "uPacketLen", + "type": "ULONG" + }, + { + "name": "uInstance", + "type": "ULONG" + }, + { + "name": "wOption", + "type": "WORD" + }, + { + "name": "pwOptionLen", + "type": "PWORD" + }, + { + "name": "ppOptionValue", + "type": "PVOID" + } + ], + "PxeDhcpGetVendorOptionValue": [ + { + "name": "pPacket", + "type": "PVOID" + }, + { + "name": "uPacketLen", + "type": "ULONG" + }, + { + "name": "bOption", + "type": "BYTE" + }, + { + "name": "uInstance", + "type": "ULONG" + }, + { + "name": "pbOptionLen", + "type": "PBYTE" + }, + { + "name": "ppOptionValue", + "type": "PVOID" + } + ], + "PxeDhcpv6GetVendorOptionValue": [ + { + "name": "pPacket", + "type": "PVOID" + }, + { + "name": "uPacketLen", + "type": "ULONG" + }, + { + "name": "dwEnterpriseNumber", + "type": "DWORD" + }, + { + "name": "wOption", + "type": "WORD" + }, + { + "name": "uInstance", + "type": "ULONG" + }, + { + "name": "pwOptionLen", + "type": "PWORD" + }, + { + "name": "ppOptionValue", + "type": "PVOID" + } + ], + "PxeDhcpv6ParseRelayForw": [ + { + "name": "pRelayForwPacket", + "type": "PVOID" + }, + { + "name": "uRelayForwPacketLen", + "type": "ULONG" + }, + { + "name": "pRelayMessages", + "type": "PPXE_DHCPV6_NESTED_RELAY_MESSAGE" + }, + { + "name": "nRelayMessages", + "type": "ULONG" + }, + { + "name": "pnRelayMessages", + "type": "PULONG" + }, + { + "name": "ppInnerPacket", + "type": "PBYTE" + }, + { + "name": "pcbInnerPacket", + "type": "PULONG" + } + ], + "PxeDhcpv6CreateRelayRepl": [ + { + "name": "pRelayMessages", + "type": "PPXE_DHCPV6_NESTED_RELAY_MESSAGE" + }, + { + "name": "nRelayMessages", + "type": "ULONG" + }, + { + "name": "pInnerPacket", + "type": "PBYTE" + }, + { + "name": "cbInnerPacket", + "type": "ULONG" + }, + { + "name": "pReplyBuffer", + "type": "PVOID" + }, + { + "name": "cbReplyBuffer", + "type": "ULONG" + }, + { + "name": "pcbReplyBuffer", + "type": "PULONG" + } + ], + "PxeGetServerInfo": [ + { + "name": "uInfoType", + "type": "PXE_GSI_TYPE" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "uBufferLen", + "type": "ULONG" + } + ], + "PxeGetServerInfoEx": [ + { + "name": "uInfoType", + "type": "PXE_GSI_TYPE" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "uBufferLen", + "type": "ULONG" + }, + { + "name": "puBufferUsed", + "type": "PULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wdstptc_dll.json b/qiling/extensions/windows_sdk/defs/wdstptc_dll.json new file mode 100644 index 000000000..dcaf43289 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wdstptc_dll.json @@ -0,0 +1,110 @@ +{ + "WdsTransportClientInitialize": [ + { + "name": "VOID", + "type": "void" + } + ], + "WdsTransportClientInitializeSession": [ + { + "name": "pSessionRequest", + "type": "PWDS_TRANSPORTCLIENT_REQUEST" + }, + { + "name": "pCallerData", + "type": "PVOID" + }, + { + "name": "hSessionKey", + "type": "PHANDLE" + } + ], + "WdsTransportClientRegisterCallback": [ + { + "name": "hSessionKey", + "type": "HANDLE" + }, + { + "name": "CallbackId", + "type": "TRANSPORTCLIENT_CALLBACK_ID" + }, + { + "name": "pfnCallback", + "type": "PVOID" + } + ], + "WdsTransportClientStartSession": [ + { + "name": "hSessionKey", + "type": "HANDLE" + } + ], + "WdsTransportClientCompleteReceive": [ + { + "name": "hSessionKey", + "type": "HANDLE" + }, + { + "name": "ulSize", + "type": "ULONG" + }, + { + "name": "pullOffset", + "type": "PULARGE_INTEGER" + } + ], + "WdsTransportClientCancelSession": [ + { + "name": "hSessionKey", + "type": "HANDLE" + } + ], + "WdsTransportClientWaitForCompletion": [ + { + "name": "hSessionKey", + "type": "HANDLE" + }, + { + "name": "uTimeout", + "type": "ULONG" + } + ], + "WdsTransportClientQueryStatus": [ + { + "name": "hSessionKey", + "type": "HANDLE" + }, + { + "name": "puStatus", + "type": "PULONG" + }, + { + "name": "puErrorCode", + "type": "PULONG" + } + ], + "WdsTransportClientCloseSession": [ + { + "name": "hSessionKey", + "type": "HANDLE" + } + ], + "WdsTransportClientAddRefBuffer": [ + { + "name": "pvBuffer", + "type": "PVOID" + } + ], + "WdsTransportClientReleaseBuffer": [ + { + "name": "pvBuffer", + "type": "PVOID" + } + ], + "WdsTransportClientShutdown": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/websocket_dll.json b/qiling/extensions/windows_sdk/defs/websocket_dll.json new file mode 100644 index 000000000..a75425f6b --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/websocket_dll.json @@ -0,0 +1,240 @@ +{ + "WebSocketCreateClientHandle": [ + { + "name": "pProperties", + "type": "PWEB_SOCKET_PROPERTY" + }, + { + "name": "ulPropertyCount", + "type": "ULONG" + }, + { + "name": "phWebSocket", + "type": "WEB_SOCKET_HANDLE" + } + ], + "WebSocketBeginClientHandshake": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + }, + { + "name": "pszSubprotocols", + "type": "PCSTR" + }, + { + "name": "ulSubprotocolCount", + "type": "ULONG" + }, + { + "name": "pszExtensions", + "type": "PCSTR" + }, + { + "name": "ulExtensionCount", + "type": "ULONG" + }, + { + "name": "pInitialHeaders", + "type": "PWEB_SOCKET_HTTP_HEADER" + }, + { + "name": "ulInitialHeaderCount", + "type": "ULONG" + }, + { + "name": "pAdditionalHeaders", + "type": "PWEB_SOCKET_HTTP_HEADER" + }, + { + "name": "pulAdditionalHeaderCount", + "type": "ULONG" + } + ], + "WebSocketEndClientHandshake": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + }, + { + "name": "pResponseHeaders", + "type": "PWEB_SOCKET_HTTP_HEADER" + }, + { + "name": "ulReponseHeaderCount", + "type": "ULONG" + }, + { + "name": "pulSelectedExtensions", + "type": "ULONG" + }, + { + "name": "pulSelectedExtensionCount", + "type": "ULONG" + }, + { + "name": "pulSelectedSubprotocol", + "type": "ULONG" + } + ], + "WebSocketCreateServerHandle": [ + { + "name": "pProperties", + "type": "PWEB_SOCKET_PROPERTY" + }, + { + "name": "ulPropertyCount", + "type": "ULONG" + }, + { + "name": "phWebSocket", + "type": "WEB_SOCKET_HANDLE" + } + ], + "WebSocketBeginServerHandshake": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + }, + { + "name": "pszSubprotocolSelected", + "type": "PCSTR" + }, + { + "name": "pszExtensionSelected", + "type": "PCSTR" + }, + { + "name": "ulExtensionSelectedCount", + "type": "ULONG" + }, + { + "name": "pRequestHeaders", + "type": "PWEB_SOCKET_HTTP_HEADER" + }, + { + "name": "ulRequestHeaderCount", + "type": "ULONG" + }, + { + "name": "pResponseHeaders", + "type": "PWEB_SOCKET_HTTP_HEADER" + }, + { + "name": "pulResponseHeaderCount", + "type": "ULONG" + } + ], + "WebSocketEndServerHandshake": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + } + ], + "WebSocketSend": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + }, + { + "name": "BufferType", + "type": "WEB_SOCKET_BUFFER_TYPE" + }, + { + "name": "pBuffer", + "type": "WEB_SOCKET_BUFFER" + }, + { + "name": "Context", + "type": "PVOID" + } + ], + "WebSocketReceive": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + }, + { + "name": "pBuffer", + "type": "WEB_SOCKET_BUFFER" + }, + { + "name": "pvContext", + "type": "PVOID" + } + ], + "WebSocketGetAction": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + }, + { + "name": "eActionQueue", + "type": "WEB_SOCKET_ACTION_QUEUE" + }, + { + "name": "pDataBuffers", + "type": "WEB_SOCKET_BUFFER" + }, + { + "name": "pulDataBufferCount", + "type": "ULONG" + }, + { + "name": "pAction", + "type": "WEB_SOCKET_ACTION" + }, + { + "name": "pBufferType", + "type": "WEB_SOCKET_BUFFER_TYPE" + }, + { + "name": "pvApplicationContext", + "type": "PVOID" + }, + { + "name": "pvActionContext", + "type": "PVOID" + } + ], + "WebSocketCompleteAction": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + }, + { + "name": "pvActionContext", + "type": "PVOID" + }, + { + "name": "ulBytesTransferred", + "type": "ULONG" + } + ], + "WebSocketAbortHandle": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + } + ], + "WebSocketDeleteHandle": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + } + ], + "WebSocketGetGlobalProperty": [ + { + "name": "eType", + "type": "WEB_SOCKET_PROPERTY_TYPE" + }, + { + "name": "pvValue", + "type": "PVOID" + }, + { + "name": "ulSize", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wecapi_dll.json b/qiling/extensions/windows_sdk/defs/wecapi_dll.json new file mode 100644 index 000000000..b723cef54 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wecapi_dll.json @@ -0,0 +1,236 @@ +{ + "EcOpenSubscriptionEnum": [ + { + "name": "Flags", + "type": "DWORD" + } + ], + "EcEnumNextSubscription": [ + { + "name": "SubscriptionEnum", + "type": "EC_HANDLE" + }, + { + "name": "SubscriptionNameBufferSize", + "type": "DWORD" + }, + { + "name": "SubscriptionNameBuffer", + "type": "LPWSTR" + }, + { + "name": "SubscriptionNameBufferUsed", + "type": "PDWORD" + } + ], + "EcOpenSubscription": [ + { + "name": "SubscriptionName", + "type": "LPCWSTR" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EcSetSubscriptionProperty": [ + { + "name": "Subscription", + "type": "EC_HANDLE" + }, + { + "name": "PropertyId", + "type": "EC_SUBSCRIPTION_PROPERTY_ID" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PropertyValue", + "type": "PEC_VARIANT" + } + ], + "EcGetSubscriptionProperty": [ + { + "name": "Subscription", + "type": "EC_HANDLE" + }, + { + "name": "PropertyId", + "type": "EC_SUBSCRIPTION_PROPERTY_ID" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PropertyValueBufferSize", + "type": "DWORD" + }, + { + "name": "PropertyValueBuffer", + "type": "PEC_VARIANT" + }, + { + "name": "PropertyValueBufferUsed", + "type": "PDWORD" + } + ], + "EcSaveSubscription": [ + { + "name": "Subscription", + "type": "EC_HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EcDeleteSubscription": [ + { + "name": "SubscriptionName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EcGetObjectArraySize": [ + { + "name": "ObjectArray", + "type": "EC_OBJECT_ARRAY_PROPERTY_HANDLE" + }, + { + "name": "ObjectArraySize", + "type": "PDWORD" + } + ], + "EcSetObjectArrayProperty": [ + { + "name": "ObjectArray", + "type": "EC_OBJECT_ARRAY_PROPERTY_HANDLE" + }, + { + "name": "PropertyId", + "type": "EC_SUBSCRIPTION_PROPERTY_ID" + }, + { + "name": "ArrayIndex", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PropertyValue", + "type": "PEC_VARIANT" + } + ], + "EcGetObjectArrayProperty": [ + { + "name": "ObjectArray", + "type": "EC_OBJECT_ARRAY_PROPERTY_HANDLE" + }, + { + "name": "PropertyId", + "type": "EC_SUBSCRIPTION_PROPERTY_ID" + }, + { + "name": "ArrayIndex", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PropertyValueBufferSize", + "type": "DWORD" + }, + { + "name": "PropertyValueBuffer", + "type": "PEC_VARIANT" + }, + { + "name": "PropertyValueBufferUsed", + "type": "PDWORD" + } + ], + "EcInsertObjectArrayElement": [ + { + "name": "ObjectArray", + "type": "EC_OBJECT_ARRAY_PROPERTY_HANDLE" + }, + { + "name": "ArrayIndex", + "type": "DWORD" + } + ], + "EcRemoveObjectArrayElement": [ + { + "name": "ObjectArray", + "type": "EC_OBJECT_ARRAY_PROPERTY_HANDLE" + }, + { + "name": "ArrayIndex", + "type": "DWORD" + } + ], + "EcGetSubscriptionRunTimeStatus": [ + { + "name": "SubscriptionName", + "type": "LPCWSTR" + }, + { + "name": "StatusInfoId", + "type": "EC_SUBSCRIPTION_RUNTIME_STATUS_INFO_ID" + }, + { + "name": "EventSourceName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "StatusValueBufferSize", + "type": "DWORD" + }, + { + "name": "StatusValueBuffer", + "type": "PEC_VARIANT" + }, + { + "name": "StatusValueBufferUsed", + "type": "PDWORD" + } + ], + "EcRetrySubscription": [ + { + "name": "SubscriptionName", + "type": "LPCWSTR" + }, + { + "name": "EventSourceName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EcClose": [ + { + "name": "Object", + "type": "EC_HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wer_dll.json b/qiling/extensions/windows_sdk/defs/wer_dll.json new file mode 100644 index 000000000..62101ac70 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wer_dll.json @@ -0,0 +1,200 @@ +{ + "WerReportCreate": [ + { + "name": "pwzEventType", + "type": "PCWSTR" + }, + { + "name": "repType", + "type": "WER_REPORT_TYPE" + }, + { + "name": "pReportInformation", + "type": "PWER_REPORT_INFORMATION" + }, + { + "name": "phReportHandle", + "type": "HREPORT" + } + ], + "WerReportSetParameter": [ + { + "name": "hReportHandle", + "type": "HREPORT" + }, + { + "name": "dwparamID", + "type": "DWORD" + }, + { + "name": "pwzName", + "type": "PCWSTR" + }, + { + "name": "pwzValue", + "type": "PCWSTR" + } + ], + "WerReportAddFile": [ + { + "name": "hReportHandle", + "type": "HREPORT" + }, + { + "name": "pwzPath", + "type": "PCWSTR" + }, + { + "name": "repFileType", + "type": "WER_FILE_TYPE" + }, + { + "name": "dwFileFlags", + "type": "DWORD" + } + ], + "WerReportSetUIOption": [ + { + "name": "hReportHandle", + "type": "HREPORT" + }, + { + "name": "repUITypeID", + "type": "WER_REPORT_UI" + }, + { + "name": "pwzValue", + "type": "PCWSTR" + } + ], + "WerReportSubmit": [ + { + "name": "hReportHandle", + "type": "HREPORT" + }, + { + "name": "consent", + "type": "WER_CONSENT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pSubmitResult", + "type": "PWER_SUBMIT_RESULT" + } + ], + "WerReportAddDump": [ + { + "name": "hReportHandle", + "type": "HREPORT" + }, + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dumpType", + "type": "WER_DUMP_TYPE" + }, + { + "name": "pExceptionParam", + "type": "PWER_EXCEPTION_INFORMATION" + }, + { + "name": "pDumpCustomOptions", + "type": "PWER_DUMP_CUSTOM_OPTIONS" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WerReportCloseHandle": [ + { + "name": "hReportHandle", + "type": "HREPORT" + } + ], + "WerAddExcludedApplication": [ + { + "name": "pwzExeName", + "type": "PCWSTR" + }, + { + "name": "bAllUsers", + "type": "BOOL" + } + ], + "WerRemoveExcludedApplication": [ + { + "name": "pwzExeName", + "type": "PCWSTR" + }, + { + "name": "bAllUsers", + "type": "BOOL" + } + ], + "WerStoreOpen": [ + { + "name": "repStoreType", + "type": "REPORT_STORE_TYPES" + }, + { + "name": "phReportStore", + "type": "PHREPORTSTORE" + } + ], + "WerStoreClose": [ + { + "name": "hReportStore", + "type": "HREPORTSTORE" + } + ], + "WerStoreGetFirstReportKey": [ + { + "name": "hReportStore", + "type": "HREPORTSTORE" + }, + { + "name": "ppszReportKey", + "type": "PCWSTR" + } + ], + "WerStoreGetNextReportKey": [ + { + "name": "hReportStore", + "type": "HREPORTSTORE" + }, + { + "name": "ppszReportKey", + "type": "PCWSTR" + } + ], + "WerStoreQueryReportMetadataV2": [ + { + "name": "hReportStore", + "type": "HREPORTSTORE" + }, + { + "name": "pszReportKey", + "type": "PCWSTR" + }, + { + "name": "pReportMetadata", + "type": "PWER_REPORT_METADATA_V2" + } + ], + "WerFreeString": [ + { + "name": "pwszStr", + "type": "PCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wevtapi_dll.json b/qiling/extensions/windows_sdk/defs/wevtapi_dll.json new file mode 100644 index 000000000..373d1f5ee --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wevtapi_dll.json @@ -0,0 +1,640 @@ +{ + "EvtOpenSession": [ + { + "name": "LoginClass", + "type": "EVT_LOGIN_CLASS" + }, + { + "name": "Login", + "type": "PVOID" + }, + { + "name": "Timeout", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtClose": [ + { + "name": "Object", + "type": "EVT_HANDLE" + } + ], + "EvtCancel": [ + { + "name": "Object", + "type": "EVT_HANDLE" + } + ], + "EvtGetExtendedStatus": [ + { + "name": "BufferSize", + "type": "DWORD" + }, + { + "name": "Buffer", + "type": "LPWSTR" + }, + { + "name": "BufferUsed", + "type": "PDWORD" + } + ], + "EvtQuery": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "Path", + "type": "LPCWSTR" + }, + { + "name": "Query", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtNext": [ + { + "name": "ResultSet", + "type": "EVT_HANDLE" + }, + { + "name": "EventsSize", + "type": "DWORD" + }, + { + "name": "Events", + "type": "PEVT_HANDLE" + }, + { + "name": "Timeout", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Returned", + "type": "PDWORD" + } + ], + "EvtSeek": [ + { + "name": "ResultSet", + "type": "EVT_HANDLE" + }, + { + "name": "Position", + "type": "LONGLONG" + }, + { + "name": "Bookmark", + "type": "EVT_HANDLE" + }, + { + "name": "Timeout", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtSubscribe": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "SignalEvent", + "type": "HANDLE" + }, + { + "name": "ChannelPath", + "type": "LPCWSTR" + }, + { + "name": "Query", + "type": "LPCWSTR" + }, + { + "name": "Bookmark", + "type": "EVT_HANDLE" + }, + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "Callback", + "type": "EVT_SUBSCRIBE_CALLBACK" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtCreateRenderContext": [ + { + "name": "ValuePathsCount", + "type": "DWORD" + }, + { + "name": "ValuePaths", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtRender": [ + { + "name": "Context", + "type": "EVT_HANDLE" + }, + { + "name": "Fragment", + "type": "EVT_HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "BufferSize", + "type": "DWORD" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "BufferUsed", + "type": "PDWORD" + }, + { + "name": "PropertyCount", + "type": "PDWORD" + } + ], + "EvtFormatMessage": [ + { + "name": "PublisherMetadata", + "type": "EVT_HANDLE" + }, + { + "name": "Event", + "type": "EVT_HANDLE" + }, + { + "name": "MessageId", + "type": "DWORD" + }, + { + "name": "ValueCount", + "type": "DWORD" + }, + { + "name": "Values", + "type": "PEVT_VARIANT" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "BufferSize", + "type": "DWORD" + }, + { + "name": "Buffer", + "type": "LPWSTR" + }, + { + "name": "BufferUsed", + "type": "PDWORD" + } + ], + "EvtOpenLog": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "Path", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtGetLogInfo": [ + { + "name": "Log", + "type": "EVT_HANDLE" + }, + { + "name": "PropertyId", + "type": "EVT_LOG_PROPERTY_ID" + }, + { + "name": "PropertyValueBufferSize", + "type": "DWORD" + }, + { + "name": "PropertyValueBuffer", + "type": "PEVT_VARIANT" + }, + { + "name": "PropertyValueBufferUsed", + "type": "PDWORD" + } + ], + "EvtClearLog": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "ChannelPath", + "type": "LPCWSTR" + }, + { + "name": "TargetFilePath", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtExportLog": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "Path", + "type": "LPCWSTR" + }, + { + "name": "Query", + "type": "LPCWSTR" + }, + { + "name": "TargetFilePath", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtArchiveExportedLog": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "LogFilePath", + "type": "LPCWSTR" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtOpenChannelEnum": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtNextChannelPath": [ + { + "name": "ChannelEnum", + "type": "EVT_HANDLE" + }, + { + "name": "ChannelPathBufferSize", + "type": "DWORD" + }, + { + "name": "ChannelPathBuffer", + "type": "LPWSTR" + }, + { + "name": "ChannelPathBufferUsed", + "type": "PDWORD" + } + ], + "EvtOpenChannelConfig": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "ChannelPath", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtSaveChannelConfig": [ + { + "name": "ChannelConfig", + "type": "EVT_HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtSetChannelConfigProperty": [ + { + "name": "ChannelConfig", + "type": "EVT_HANDLE" + }, + { + "name": "PropertyId", + "type": "EVT_CHANNEL_CONFIG_PROPERTY_ID" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PropertyValue", + "type": "PEVT_VARIANT" + } + ], + "EvtGetChannelConfigProperty": [ + { + "name": "ChannelConfig", + "type": "EVT_HANDLE" + }, + { + "name": "PropertyId", + "type": "EVT_CHANNEL_CONFIG_PROPERTY_ID" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PropertyValueBufferSize", + "type": "DWORD" + }, + { + "name": "PropertyValueBuffer", + "type": "PEVT_VARIANT" + }, + { + "name": "PropertyValueBufferUsed", + "type": "PDWORD" + } + ], + "EvtOpenPublisherEnum": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtNextPublisherId": [ + { + "name": "PublisherEnum", + "type": "EVT_HANDLE" + }, + { + "name": "PublisherIdBufferSize", + "type": "DWORD" + }, + { + "name": "PublisherIdBuffer", + "type": "LPWSTR" + }, + { + "name": "PublisherIdBufferUsed", + "type": "PDWORD" + } + ], + "EvtOpenPublisherMetadata": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "PublisherId", + "type": "LPCWSTR" + }, + { + "name": "LogFilePath", + "type": "LPCWSTR" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtGetPublisherMetadataProperty": [ + { + "name": "PublisherMetadata", + "type": "EVT_HANDLE" + }, + { + "name": "PropertyId", + "type": "EVT_PUBLISHER_METADATA_PROPERTY_ID" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PublisherMetadataPropertyBufferSize", + "type": "DWORD" + }, + { + "name": "PublisherMetadataPropertyBuffer", + "type": "PEVT_VARIANT" + }, + { + "name": "PublisherMetadataPropertyBufferUsed", + "type": "PDWORD" + } + ], + "EvtOpenEventMetadataEnum": [ + { + "name": "PublisherMetadata", + "type": "EVT_HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtNextEventMetadata": [ + { + "name": "EventMetadataEnum", + "type": "EVT_HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtGetEventMetadataProperty": [ + { + "name": "EventMetadata", + "type": "EVT_HANDLE" + }, + { + "name": "PropertyId", + "type": "EVT_EVENT_METADATA_PROPERTY_ID" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "EventMetadataPropertyBufferSize", + "type": "DWORD" + }, + { + "name": "EventMetadataPropertyBuffer", + "type": "PEVT_VARIANT" + }, + { + "name": "EventMetadataPropertyBufferUsed", + "type": "PDWORD" + } + ], + "EvtGetObjectArraySize": [ + { + "name": "ObjectArray", + "type": "EVT_OBJECT_ARRAY_PROPERTY_HANDLE" + }, + { + "name": "ObjectArraySize", + "type": "PDWORD" + } + ], + "EvtGetObjectArrayProperty": [ + { + "name": "ObjectArray", + "type": "EVT_OBJECT_ARRAY_PROPERTY_HANDLE" + }, + { + "name": "PropertyId", + "type": "DWORD" + }, + { + "name": "ArrayIndex", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PropertyValueBufferSize", + "type": "DWORD" + }, + { + "name": "PropertyValueBuffer", + "type": "PEVT_VARIANT" + }, + { + "name": "PropertyValueBufferUsed", + "type": "PDWORD" + } + ], + "EvtGetQueryInfo": [ + { + "name": "QueryOrSubscription", + "type": "EVT_HANDLE" + }, + { + "name": "PropertyId", + "type": "EVT_QUERY_PROPERTY_ID" + }, + { + "name": "PropertyValueBufferSize", + "type": "DWORD" + }, + { + "name": "PropertyValueBuffer", + "type": "PEVT_VARIANT" + }, + { + "name": "PropertyValueBufferUsed", + "type": "PDWORD" + } + ], + "EvtCreateBookmark": [ + { + "name": "BookmarkXml", + "type": "LPCWSTR" + } + ], + "EvtUpdateBookmark": [ + { + "name": "Bookmark", + "type": "EVT_HANDLE" + }, + { + "name": "Event", + "type": "EVT_HANDLE" + } + ], + "EvtGetEventInfo": [ + { + "name": "Event", + "type": "EVT_HANDLE" + }, + { + "name": "PropertyId", + "type": "EVT_EVENT_PROPERTY_ID" + }, + { + "name": "PropertyValueBufferSize", + "type": "DWORD" + }, + { + "name": "PropertyValueBuffer", + "type": "PEVT_VARIANT" + }, + { + "name": "PropertyValueBufferUsed", + "type": "PDWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/winbio_dll.json b/qiling/extensions/windows_sdk/defs/winbio_dll.json new file mode 100644 index 000000000..a2188ff01 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/winbio_dll.json @@ -0,0 +1,814 @@ +{ + "WinBioEnumServiceProviders": [ + { + "name": "Factor", + "type": "WINBIO_BIOMETRIC_TYPE" + }, + { + "name": "BspSchemaArray", + "type": "WINBIO_BSP_SCHEMA" + }, + { + "name": "BspCount", + "type": "SIZE_T" + } + ], + "WinBioEnumBiometricUnits": [ + { + "name": "Factor", + "type": "WINBIO_BIOMETRIC_TYPE" + }, + { + "name": "UnitSchemaArray", + "type": "WINBIO_UNIT_SCHEMA" + }, + { + "name": "UnitCount", + "type": "SIZE_T" + } + ], + "WinBioEnumDatabases": [ + { + "name": "Factor", + "type": "WINBIO_BIOMETRIC_TYPE" + }, + { + "name": "StorageSchemaArray", + "type": "WINBIO_STORAGE_SCHEMA" + }, + { + "name": "StorageCount", + "type": "SIZE_T" + } + ], + "WinBioAsyncOpenFramework": [ + { + "name": "NotificationMethod", + "type": "WINBIO_ASYNC_NOTIFICATION_METHOD" + }, + { + "name": "TargetWindow", + "type": "HWND" + }, + { + "name": "MessageCode", + "type": "UINT" + }, + { + "name": "CallbackRoutine", + "type": "PWINBIO_ASYNC_COMPLETION_CALLBACK" + }, + { + "name": "UserData", + "type": "PVOID" + }, + { + "name": "AsynchronousOpen", + "type": "BOOL" + }, + { + "name": "FrameworkHandle", + "type": "WINBIO_FRAMEWORK_HANDLE" + } + ], + "WinBioCloseFramework": [ + { + "name": "FrameworkHandle", + "type": "WINBIO_FRAMEWORK_HANDLE" + } + ], + "WinBioAsyncEnumServiceProviders": [ + { + "name": "FrameworkHandle", + "type": "WINBIO_FRAMEWORK_HANDLE" + }, + { + "name": "Factor", + "type": "WINBIO_BIOMETRIC_TYPE" + } + ], + "WinBioAsyncEnumBiometricUnits": [ + { + "name": "FrameworkHandle", + "type": "WINBIO_FRAMEWORK_HANDLE" + }, + { + "name": "Factor", + "type": "WINBIO_BIOMETRIC_TYPE" + } + ], + "WinBioAsyncEnumDatabases": [ + { + "name": "FrameworkHandle", + "type": "WINBIO_FRAMEWORK_HANDLE" + }, + { + "name": "Factor", + "type": "WINBIO_BIOMETRIC_TYPE" + } + ], + "WinBioAsyncMonitorFrameworkChanges": [ + { + "name": "FrameworkHandle", + "type": "WINBIO_FRAMEWORK_HANDLE" + }, + { + "name": "ChangeTypes", + "type": "WINBIO_FRAMEWORK_CHANGE_TYPE" + } + ], + "WinBioOpenSession": [ + { + "name": "Factor", + "type": "WINBIO_BIOMETRIC_TYPE" + }, + { + "name": "PoolType", + "type": "WINBIO_POOL_TYPE" + }, + { + "name": "Flags", + "type": "WINBIO_SESSION_FLAGS" + }, + { + "name": "UnitArray", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "UnitCount", + "type": "SIZE_T" + }, + { + "name": "DatabaseId", + "type": "GUID" + }, + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + } + ], + "WinBioAsyncOpenSession": [ + { + "name": "Factor", + "type": "WINBIO_BIOMETRIC_TYPE" + }, + { + "name": "PoolType", + "type": "WINBIO_POOL_TYPE" + }, + { + "name": "Flags", + "type": "WINBIO_SESSION_FLAGS" + }, + { + "name": "UnitArray", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "UnitCount", + "type": "SIZE_T" + }, + { + "name": "DatabaseId", + "type": "GUID" + }, + { + "name": "NotificationMethod", + "type": "WINBIO_ASYNC_NOTIFICATION_METHOD" + }, + { + "name": "TargetWindow", + "type": "HWND" + }, + { + "name": "MessageCode", + "type": "UINT" + }, + { + "name": "CallbackRoutine", + "type": "PWINBIO_ASYNC_COMPLETION_CALLBACK" + }, + { + "name": "UserData", + "type": "PVOID" + }, + { + "name": "AsynchronousOpen", + "type": "BOOL" + }, + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + } + ], + "WinBioCloseSession": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + } + ], + "WinBioVerify": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "SubFactor", + "type": "WINBIO_BIOMETRIC_SUBTYPE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "Match", + "type": "BOOLEAN" + }, + { + "name": "RejectDetail", + "type": "WINBIO_REJECT_DETAIL" + } + ], + "WinBioVerifyWithCallback": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "SubFactor", + "type": "WINBIO_BIOMETRIC_SUBTYPE" + }, + { + "name": "VerifyCallback", + "type": "PWINBIO_VERIFY_CALLBACK" + }, + { + "name": "VerifyCallbackContext", + "type": "PVOID" + } + ], + "WinBioIdentify": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "SubFactor", + "type": "WINBIO_BIOMETRIC_SUBTYPE" + }, + { + "name": "RejectDetail", + "type": "WINBIO_REJECT_DETAIL" + } + ], + "WinBioIdentifyWithCallback": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "IdentifyCallback", + "type": "PWINBIO_IDENTIFY_CALLBACK" + }, + { + "name": "IdentifyCallbackContext", + "type": "PVOID" + } + ], + "WinBioWait": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + } + ], + "WinBioCancel": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + } + ], + "WinBioLocateSensor": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + } + ], + "WinBioLocateSensorWithCallback": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "LocateCallback", + "type": "PWINBIO_LOCATE_SENSOR_CALLBACK" + }, + { + "name": "LocateCallbackContext", + "type": "PVOID" + } + ], + "WinBioEnrollBegin": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "SubFactor", + "type": "WINBIO_BIOMETRIC_SUBTYPE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + } + ], + "WinBioEnrollSelect": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "SelectorValue", + "type": "ULONGLONG" + } + ], + "WinBioEnrollCapture": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "RejectDetail", + "type": "WINBIO_REJECT_DETAIL" + } + ], + "WinBioEnrollCaptureWithCallback": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "EnrollCallback", + "type": "PWINBIO_ENROLL_CAPTURE_CALLBACK" + }, + { + "name": "EnrollCallbackContext", + "type": "PVOID" + } + ], + "WinBioEnrollCommit": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "IsNewTemplate", + "type": "BOOLEAN" + } + ], + "WinBioEnrollDiscard": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + } + ], + "WinBioEnumEnrollments": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "SubFactorArray", + "type": "WINBIO_BIOMETRIC_SUBTYPE" + }, + { + "name": "SubFactorCount", + "type": "SIZE_T" + } + ], + "WinBioRegisterEventMonitor": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "EventMask", + "type": "WINBIO_EVENT_TYPE" + }, + { + "name": "EventCallback", + "type": "PWINBIO_EVENT_CALLBACK" + }, + { + "name": "EventCallbackContext", + "type": "PVOID" + } + ], + "WinBioUnregisterEventMonitor": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + } + ], + "WinBioMonitorPresence": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + } + ], + "WinBioCaptureSample": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "Purpose", + "type": "WINBIO_BIR_PURPOSE" + }, + { + "name": "Flags", + "type": "WINBIO_BIR_DATA_FLAGS" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "Sample", + "type": "PWINBIO_BIR" + }, + { + "name": "SampleSize", + "type": "SIZE_T" + }, + { + "name": "RejectDetail", + "type": "WINBIO_REJECT_DETAIL" + } + ], + "WinBioCaptureSampleWithCallback": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "Purpose", + "type": "WINBIO_BIR_PURPOSE" + }, + { + "name": "Flags", + "type": "WINBIO_BIR_DATA_FLAGS" + }, + { + "name": "CaptureCallback", + "type": "PWINBIO_CAPTURE_CALLBACK" + }, + { + "name": "CaptureCallbackContext", + "type": "PVOID" + } + ], + "WinBioDeleteTemplate": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "SubFactor", + "type": "WINBIO_BIOMETRIC_SUBTYPE" + } + ], + "WinBioLockUnit": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + } + ], + "WinBioUnlockUnit": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + } + ], + "WinBioControlUnit": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "Component", + "type": "WINBIO_COMPONENT" + }, + { + "name": "ControlCode", + "type": "ULONG" + }, + { + "name": "SendBuffer", + "type": "PUCHAR" + }, + { + "name": "SendBufferSize", + "type": "SIZE_T" + }, + { + "name": "ReceiveBuffer", + "type": "PUCHAR" + }, + { + "name": "ReceiveBufferSize", + "type": "SIZE_T" + }, + { + "name": "ReceiveDataSize", + "type": "SIZE_T" + }, + { + "name": "OperationStatus", + "type": "ULONG" + } + ], + "WinBioControlUnitPrivileged": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "Component", + "type": "WINBIO_COMPONENT" + }, + { + "name": "ControlCode", + "type": "ULONG" + }, + { + "name": "SendBuffer", + "type": "PUCHAR" + }, + { + "name": "SendBufferSize", + "type": "SIZE_T" + }, + { + "name": "ReceiveBuffer", + "type": "PUCHAR" + }, + { + "name": "ReceiveBufferSize", + "type": "SIZE_T" + }, + { + "name": "ReceiveDataSize", + "type": "SIZE_T" + }, + { + "name": "OperationStatus", + "type": "ULONG" + } + ], + "WinBioGetProperty": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "PropertyType", + "type": "WINBIO_PROPERTY_TYPE" + }, + { + "name": "PropertyId", + "type": "WINBIO_PROPERTY_ID" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "SubFactor", + "type": "WINBIO_BIOMETRIC_SUBTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PVOID" + }, + { + "name": "PropertyBufferSize", + "type": "SIZE_T" + } + ], + "WinBioSetProperty": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "PropertyType", + "type": "WINBIO_PROPERTY_TYPE" + }, + { + "name": "PropertyId", + "type": "WINBIO_PROPERTY_ID" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "SubFactor", + "type": "WINBIO_BIOMETRIC_SUBTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PVOID" + }, + { + "name": "PropertyBufferSize", + "type": "SIZE_T" + } + ], + "WinBioFree": [ + { + "name": "Address", + "type": "PVOID" + } + ], + "WinBioSetCredential": [ + { + "name": "Type", + "type": "WINBIO_CREDENTIAL_TYPE" + }, + { + "name": "Credential", + "type": "PUCHAR" + }, + { + "name": "CredentialSize", + "type": "SIZE_T" + }, + { + "name": "Format", + "type": "WINBIO_CREDENTIAL_FORMAT" + } + ], + "WinBioRemoveCredential": [ + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "Type", + "type": "WINBIO_CREDENTIAL_TYPE" + } + ], + "WinBioRemoveAllCredentials": [ + { + "name": "VOID", + "type": "void" + } + ], + "WinBioRemoveAllDomainCredentials": [ + { + "name": "VOID", + "type": "void" + } + ], + "WinBioGetCredentialState": [ + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "Type", + "type": "WINBIO_CREDENTIAL_TYPE" + }, + { + "name": "CredentialState", + "type": "WINBIO_CREDENTIAL_STATE" + } + ], + "WinBioLogonIdentifiedUser": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + } + ], + "WinBioGetEnrolledFactors": [ + { + "name": "AccountOwner", + "type": "WINBIO_IDENTITY" + }, + { + "name": "EnrolledFactors", + "type": "WINBIO_BIOMETRIC_TYPE" + } + ], + "WinBioGetEnabledSetting": [ + { + "name": "Value", + "type": "BOOLEAN" + }, + { + "name": "Source", + "type": "PWINBIO_SETTING_SOURCE_TYPE" + } + ], + "WinBioGetLogonSetting": [ + { + "name": "Value", + "type": "BOOLEAN" + }, + { + "name": "Source", + "type": "PWINBIO_SETTING_SOURCE_TYPE" + } + ], + "WinBioGetDomainLogonSetting": [ + { + "name": "Value", + "type": "BOOLEAN" + }, + { + "name": "Source", + "type": "PWINBIO_SETTING_SOURCE_TYPE" + } + ], + "WinBioAcquireFocus": [ + { + "name": "VOID", + "type": "void" + } + ], + "WinBioReleaseFocus": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/windows_media_audio_dll.json b/qiling/extensions/windows_sdk/defs/windows_media_audio_dll.json new file mode 100644 index 000000000..365a71e51 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/windows_media_audio_dll.json @@ -0,0 +1,44 @@ +{ + "CreateFX": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "pEffect", + "type": "IUnknown" + }, + { + "name": "pInitDat", + "type": "void" + }, + { + "name": "InitDataByteSize", + "type": "UINT32" + } + ], + "XAudio2Create": [ + { + "name": "ppXAudio2", + "type": "IXAudio2" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "XAudio2Processor", + "type": "XAUDIO2_PROCESSOR" + } + ], + "XAudio2CreateReverb": [ + { + "name": "ppApo", + "type": "IUnknown" + }, + { + "name": "Flags", + "type": "UINT32" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/windows_networking_dll.json b/qiling/extensions/windows_sdk/defs/windows_networking_dll.json new file mode 100644 index 000000000..ff7c0827e --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/windows_networking_dll.json @@ -0,0 +1,8 @@ +{ + "SetSocketMediaStreamingMode": [ + { + "name": "value", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/windows_ui_xaml_dll.json b/qiling/extensions/windows_sdk/defs/windows_ui_xaml_dll.json new file mode 100644 index 000000000..e08cc8008 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/windows_ui_xaml_dll.json @@ -0,0 +1,28 @@ +{ + "InitializeXamlDiagnosticsEx": [ + { + "name": "endPointName", + "type": "LPCWSTR" + }, + { + "name": "pid", + "type": "DWORD" + }, + { + "name": "wszDllXamlDiagnostics", + "type": "LPCWSTR" + }, + { + "name": "wszTAPDllName", + "type": "LPCWSTR" + }, + { + "name": "tapClsid", + "type": "CLSID" + }, + { + "name": "wszInitializationData", + "type": "LPCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/winhttp_dll.json b/qiling/extensions/windows_sdk/defs/winhttp_dll.json new file mode 100644 index 000000000..1bf4c37cf --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/winhttp_dll.json @@ -0,0 +1,598 @@ +{ + "WinHttpSetStatusCallback": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpfnInternetCallback", + "type": "WINHTTP_STATUS_CALLBACK" + }, + { + "name": "dwNotificationFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD_PTR" + } + ], + "WinHttpTimeFromSystemTime": [ + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "pwszTime", + "type": "LPWSTR" + } + ], + "WinHttpTimeToSystemTime": [ + { + "name": "pwszTime", + "type": "LPCWSTR" + }, + { + "name": "pst", + "type": "SYSTEMTIME" + } + ], + "WinHttpCrackUrl": [ + { + "name": "pwszUrl", + "type": "LPCWSTR" + }, + { + "name": "dwUrlLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpUrlComponents", + "type": "LPURL_COMPONENTS" + } + ], + "WinHttpCreateUrl": [ + { + "name": "lpUrlComponents", + "type": "LPURL_COMPONENTS" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszUrl", + "type": "LPWSTR" + }, + { + "name": "pdwUrlLength", + "type": "LPDWORD" + } + ], + "WinHttpCheckPlatform": [ + { + "name": "VOID", + "type": "void" + } + ], + "WinHttpGetDefaultProxyConfiguration": [ + { + "name": "pProxyInfo", + "type": "WINHTTP_PROXY_INFO" + } + ], + "WinHttpSetDefaultProxyConfiguration": [ + { + "name": "pProxyInfo", + "type": "WINHTTP_PROXY_INFO" + } + ], + "WinHttpOpen": [ + { + "name": "pszAgentW", + "type": "LPCWSTR" + }, + { + "name": "dwAccessType", + "type": "DWORD" + }, + { + "name": "pszProxyW", + "type": "LPCWSTR" + }, + { + "name": "pszProxyBypassW", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WinHttpCloseHandle": [ + { + "name": "hInternet", + "type": "HINTERNET" + } + ], + "WinHttpConnect": [ + { + "name": "hSession", + "type": "HINTERNET" + }, + { + "name": "pswzServerName", + "type": "LPCWSTR" + }, + { + "name": "nServerPort", + "type": "INTERNET_PORT" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "WinHttpReadData": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "lpdwNumberOfBytesRead", + "type": "LPDWORD" + } + ], + "WinHttpWriteData": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpBuffer", + "type": "LPCVOID" + }, + { + "name": "dwNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "lpdwNumberOfBytesWritten", + "type": "LPDWORD" + } + ], + "WinHttpQueryDataAvailable": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpdwNumberOfBytesAvailable", + "type": "LPDWORD" + } + ], + "WinHttpQueryOption": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "WinHttpSetOption": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + } + ], + "WinHttpSetTimeouts": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "nResolveTimeout", + "type": "int" + }, + { + "name": "nConnectTimeout", + "type": "int" + }, + { + "name": "nSendTimeout", + "type": "int" + }, + { + "name": "nReceiveTimeout", + "type": "int" + } + ], + "WinHttpOpenRequest": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "pwszVerb", + "type": "LPCWSTR" + }, + { + "name": "pwszObjectName", + "type": "LPCWSTR" + }, + { + "name": "pwszVersion", + "type": "LPCWSTR" + }, + { + "name": "pwszReferrer", + "type": "LPCWSTR" + }, + { + "name": "ppwszAcceptTypes", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WinHttpAddRequestHeaders": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpszHeaders", + "type": "LPCWSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "dwModifiers", + "type": "DWORD" + } + ], + "WinHttpSendRequest": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpszHeaders", + "type": "LPCWSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "lpOptional", + "type": "LPVOID" + }, + { + "name": "dwOptionalLength", + "type": "DWORD" + }, + { + "name": "dwTotalLength", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "WinHttpSetCredentials": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "AuthTargets", + "type": "DWORD" + }, + { + "name": "AuthScheme", + "type": "DWORD" + }, + { + "name": "pwszUserName", + "type": "LPCWSTR" + }, + { + "name": "pwszPassword", + "type": "LPCWSTR" + }, + { + "name": "pAuthParams", + "type": "LPVOID" + } + ], + "WinHttpQueryAuthSchemes": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpdwSupportedSchemes", + "type": "LPDWORD" + }, + { + "name": "lpdwFirstScheme", + "type": "LPDWORD" + }, + { + "name": "pdwAuthTarget", + "type": "LPDWORD" + } + ], + "WinHttpReceiveResponse": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "WinHttpQueryHeaders": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "pwszName", + "type": "LPCWSTR" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpdwIndex", + "type": "LPDWORD" + } + ], + "WinHttpDetectAutoProxyConfigUrl": [ + { + "name": "dwAutoDetectFlags", + "type": "DWORD" + }, + { + "name": "ppwstrAutoConfigUrl", + "type": "LPWSTR" + } + ], + "WinHttpGetProxyForUrl": [ + { + "name": "hSession", + "type": "HINTERNET" + }, + { + "name": "lpcwszUrl", + "type": "LPCWSTR" + }, + { + "name": "pAutoProxyOptions", + "type": "WINHTTP_AUTOPROXY_OPTIONS" + }, + { + "name": "pProxyInfo", + "type": "WINHTTP_PROXY_INFO" + } + ], + "WinHttpCreateProxyResolver": [ + { + "name": "hSession", + "type": "HINTERNET" + }, + { + "name": "phResolver", + "type": "HINTERNET" + } + ], + "WinHttpGetProxyForUrlEx": [ + { + "name": "hResolver", + "type": "HINTERNET" + }, + { + "name": "pcwszUrl", + "type": "PCWSTR" + }, + { + "name": "pAutoProxyOptions", + "type": "WINHTTP_AUTOPROXY_OPTIONS" + }, + { + "name": "pContext", + "type": "DWORD_PTR" + } + ], + "WinHttpGetProxyResult": [ + { + "name": "hResolver", + "type": "HINTERNET" + }, + { + "name": "pProxyResult", + "type": "WINHTTP_PROXY_RESULT" + } + ], + "WinHttpFreeProxyResult": [ + { + "name": "pProxyResult", + "type": "WINHTTP_PROXY_RESULT" + } + ], + "WinHttpResetAutoProxy": [ + { + "name": "hSession", + "type": "HINTERNET" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WinHttpGetIEProxyConfigForCurrentUser": [ + { + "name": "pProxyConfig", + "type": "WINHTTP_CURRENT_USER_IE_PROXY_CONFIG" + } + ], + "WinHttpWebSocketCompleteUpgrade": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "pContext", + "type": "DWORD_PTR" + } + ], + "WinHttpWebSocketSend": [ + { + "name": "hWebSocket", + "type": "HINTERNET" + }, + { + "name": "eBufferType", + "type": "WINHTTP_WEB_SOCKET_BUFFER_TYPE" + }, + { + "name": "pvBuffer", + "type": "PVOID" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + } + ], + "WinHttpWebSocketReceive": [ + { + "name": "hWebSocket", + "type": "HINTERNET" + }, + { + "name": "pvBuffer", + "type": "PVOID" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + }, + { + "name": "pdwBytesRead", + "type": "DWORD" + }, + { + "name": "peBufferType", + "type": "WINHTTP_WEB_SOCKET_BUFFER_TYPE" + } + ], + "WinHttpWebSocketShutdown": [ + { + "name": "hWebSocket", + "type": "HINTERNET" + }, + { + "name": "usStatus", + "type": "USHORT" + }, + { + "name": "pvReason", + "type": "PVOID" + }, + { + "name": "dwReasonLength", + "type": "DWORD" + } + ], + "WinHttpWebSocketClose": [ + { + "name": "hWebSocket", + "type": "HINTERNET" + }, + { + "name": "usStatus", + "type": "USHORT" + }, + { + "name": "pvReason", + "type": "PVOID" + }, + { + "name": "dwReasonLength", + "type": "DWORD" + } + ], + "WinHttpWebSocketQueryCloseStatus": [ + { + "name": "hWebSocket", + "type": "HINTERNET" + }, + { + "name": "pusStatus", + "type": "USHORT" + }, + { + "name": "pvReason", + "type": "PVOID" + }, + { + "name": "dwReasonLength", + "type": "DWORD" + }, + { + "name": "pdwReasonLengthConsumed", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wininet_dll.json b/qiling/extensions/windows_sdk/defs/wininet_dll.json new file mode 100644 index 000000000..65d3b834f --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wininet_dll.json @@ -0,0 +1,3140 @@ +{ + "InternetTimeFromSystemTimeA": [ + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "dwRFC", + "type": "DWORD" + }, + { + "name": "lpszTime", + "type": "LPSTR" + }, + { + "name": "cbTime", + "type": "DWORD" + } + ], + "InternetTimeFromSystemTimeW": [ + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "dwRFC", + "type": "DWORD" + }, + { + "name": "lpszTime", + "type": "LPWSTR" + }, + { + "name": "cbTime", + "type": "DWORD" + } + ], + "InternetTimeFromSystemTime": [ + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "dwRFC", + "type": "DWORD" + }, + { + "name": "lpszTime", + "type": "LPSTR" + }, + { + "name": "cbTime", + "type": "DWORD" + } + ], + "InternetTimeToSystemTimeA": [ + { + "name": "lpszTime", + "type": "LPCSTR" + }, + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetTimeToSystemTimeW": [ + { + "name": "lpszTime", + "type": "LPCWSTR" + }, + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetTimeToSystemTime": [ + { + "name": "lpszTime", + "type": "LPCSTR" + }, + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetCrackUrlA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "dwUrlLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpUrlComponents", + "type": "LPURL_COMPONENTSA" + } + ], + "InternetCrackUrlW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "dwUrlLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpUrlComponents", + "type": "LPURL_COMPONENTSW" + } + ], + "InternetCreateUrlA": [ + { + "name": "lpUrlComponents", + "type": "LPURL_COMPONENTSA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpszUrl", + "type": "LPSTR" + }, + { + "name": "lpdwUrlLength", + "type": "LPDWORD" + } + ], + "InternetCreateUrlW": [ + { + "name": "lpUrlComponents", + "type": "LPURL_COMPONENTSW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpszUrl", + "type": "LPWSTR" + }, + { + "name": "lpdwUrlLength", + "type": "LPDWORD" + } + ], + "InternetCanonicalizeUrlA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpszBuffer", + "type": "LPSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetCanonicalizeUrlW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszBuffer", + "type": "LPWSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetCombineUrlA": [ + { + "name": "lpszBaseUrl", + "type": "LPCSTR" + }, + { + "name": "lpszRelativeUrl", + "type": "LPCSTR" + }, + { + "name": "lpszBuffer", + "type": "LPSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetCombineUrlW": [ + { + "name": "lpszBaseUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszRelativeUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszBuffer", + "type": "LPWSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetOpenA": [ + { + "name": "lpszAgent", + "type": "LPCSTR" + }, + { + "name": "dwAccessType", + "type": "DWORD" + }, + { + "name": "lpszProxy", + "type": "LPCSTR" + }, + { + "name": "lpszProxyBypass", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetOpenW": [ + { + "name": "lpszAgent", + "type": "LPCWSTR" + }, + { + "name": "dwAccessType", + "type": "DWORD" + }, + { + "name": "lpszProxy", + "type": "LPCWSTR" + }, + { + "name": "lpszProxyBypass", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetCloseHandle": [ + { + "name": "hInternet", + "type": "HINTERNET" + } + ], + "InternetConnectA": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpszServerName", + "type": "LPCSTR" + }, + { + "name": "nServerPort", + "type": "INTERNET_PORT" + }, + { + "name": "lpszUserName", + "type": "LPCSTR" + }, + { + "name": "lpszPassword", + "type": "LPCSTR" + }, + { + "name": "dwService", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetConnectW": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpszServerName", + "type": "LPCWSTR" + }, + { + "name": "nServerPort", + "type": "INTERNET_PORT" + }, + { + "name": "lpszUserName", + "type": "LPCWSTR" + }, + { + "name": "lpszPassword", + "type": "LPCWSTR" + }, + { + "name": "dwService", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetOpenUrlA": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpszHeaders", + "type": "LPCSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetOpenUrlW": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszHeaders", + "type": "LPCWSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetReadFile": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "lpdwNumberOfBytesRead", + "type": "LPDWORD" + } + ], + "InternetReadFileExA": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lpBuffersOut", + "type": "LPINTERNET_BUFFERSA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetReadFileExW": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lpBuffersOut", + "type": "LPINTERNET_BUFFERSW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetSetFilePointer": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lDistanceToMove", + "type": "LONG" + }, + { + "name": "lpDistanceToMoveHigh", + "type": "PLONG" + }, + { + "name": "dwMoveMethod", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetWriteFile": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lpBuffer", + "type": "LPCVOID" + }, + { + "name": "dwNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "lpdwNumberOfBytesWritten", + "type": "LPDWORD" + } + ], + "InternetQueryDataAvailable": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lpdwNumberOfBytesAvailable", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetFindNextFileA": [ + { + "name": "hFind", + "type": "HINTERNET" + }, + { + "name": "lpvFindData", + "type": "LPVOID" + } + ], + "InternetFindNextFileW": [ + { + "name": "hFind", + "type": "HINTERNET" + }, + { + "name": "lpvFindData", + "type": "LPVOID" + } + ], + "InternetQueryOptionA": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "InternetQueryOptionW": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "InternetSetOptionA": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + } + ], + "InternetSetOptionW": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + } + ], + "InternetSetOptionExA": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetSetOptionExW": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetLockRequestFile": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lphLockRequestInfo", + "type": "HANDLE" + } + ], + "InternetUnlockRequestFile": [ + { + "name": "hLockRequestInfo", + "type": "HANDLE" + } + ], + "InternetGetLastResponseInfoA": [ + { + "name": "lpdwError", + "type": "LPDWORD" + }, + { + "name": "lpszBuffer", + "type": "LPSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "InternetGetLastResponseInfoW": [ + { + "name": "lpdwError", + "type": "LPDWORD" + }, + { + "name": "lpszBuffer", + "type": "LPWSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "InternetSetStatusCallbackA": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpfnInternetCallback", + "type": "INTERNET_STATUS_CALLBACK" + } + ], + "InternetSetStatusCallbackW": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpfnInternetCallback", + "type": "INTERNET_STATUS_CALLBACK" + } + ], + "InternetSetStatusCallback": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpfnInternetCallback", + "type": "INTERNET_STATUS_CALLBACK" + } + ], + "FtpFindFirstFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszSearchFile", + "type": "LPCSTR" + }, + { + "name": "lpFindFileData", + "type": "LPWIN32_FIND_DATAA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpFindFirstFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszSearchFile", + "type": "LPCWSTR" + }, + { + "name": "lpFindFileData", + "type": "LPWIN32_FIND_DATAW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpGetFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszRemoteFile", + "type": "LPCSTR" + }, + { + "name": "lpszNewFile", + "type": "LPCSTR" + }, + { + "name": "fFailIfExists", + "type": "BOOL" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpGetFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszRemoteFile", + "type": "LPCWSTR" + }, + { + "name": "lpszNewFile", + "type": "LPCWSTR" + }, + { + "name": "fFailIfExists", + "type": "BOOL" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpPutFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocalFile", + "type": "LPCSTR" + }, + { + "name": "lpszNewRemoteFile", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpPutFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocalFile", + "type": "LPCWSTR" + }, + { + "name": "lpszNewRemoteFile", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpDeleteFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszFileName", + "type": "LPCSTR" + } + ], + "FtpDeleteFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszFileName", + "type": "LPCWSTR" + } + ], + "FtpRenameFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszExisting", + "type": "LPCSTR" + }, + { + "name": "lpszNew", + "type": "LPCSTR" + } + ], + "FtpRenameFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszExisting", + "type": "LPCWSTR" + }, + { + "name": "lpszNew", + "type": "LPCWSTR" + } + ], + "FtpOpenFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszFileName", + "type": "LPCSTR" + }, + { + "name": "dwAccess", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpOpenFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszFileName", + "type": "LPCWSTR" + }, + { + "name": "dwAccess", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpCreateDirectoryA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszDirectory", + "type": "LPCSTR" + } + ], + "FtpCreateDirectoryW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszDirectory", + "type": "LPCWSTR" + } + ], + "FtpRemoveDirectoryA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszDirectory", + "type": "LPCSTR" + } + ], + "FtpRemoveDirectoryW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszDirectory", + "type": "LPCWSTR" + } + ], + "FtpSetCurrentDirectoryA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszDirectory", + "type": "LPCSTR" + } + ], + "FtpSetCurrentDirectoryW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszDirectory", + "type": "LPCWSTR" + } + ], + "FtpGetCurrentDirectoryA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszCurrentDirectory", + "type": "LPSTR" + }, + { + "name": "lpdwCurrentDirectory", + "type": "LPDWORD" + } + ], + "FtpGetCurrentDirectoryW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszCurrentDirectory", + "type": "LPWSTR" + }, + { + "name": "lpdwCurrentDirectory", + "type": "LPDWORD" + } + ], + "FtpCommandA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "fExpectResponse", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpszCommand", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + }, + { + "name": "phFtpCommand", + "type": "HINTERNET" + } + ], + "FtpCommandW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "fExpectResponse", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpszCommand", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + }, + { + "name": "phFtpCommand", + "type": "HINTERNET" + } + ], + "FtpGetFileSize": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lpdwFileSizeHigh", + "type": "LPDWORD" + } + ], + "GopherCreateLocatorA": [ + { + "name": "lpszHost", + "type": "LPCSTR" + }, + { + "name": "nServerPort", + "type": "INTERNET_PORT" + }, + { + "name": "lpszDisplayString", + "type": "LPCSTR" + }, + { + "name": "lpszSelectorString", + "type": "LPCSTR" + }, + { + "name": "dwGopherType", + "type": "DWORD" + }, + { + "name": "lpszLocator", + "type": "LPSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "GopherCreateLocatorW": [ + { + "name": "lpszHost", + "type": "LPCWSTR" + }, + { + "name": "nServerPort", + "type": "INTERNET_PORT" + }, + { + "name": "lpszDisplayString", + "type": "LPCWSTR" + }, + { + "name": "lpszSelectorString", + "type": "LPCWSTR" + }, + { + "name": "dwGopherType", + "type": "DWORD" + }, + { + "name": "lpszLocator", + "type": "LPWSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "GopherGetLocatorTypeA": [ + { + "name": "lpszLocator", + "type": "LPCSTR" + }, + { + "name": "lpdwGopherType", + "type": "LPDWORD" + } + ], + "GopherGetLocatorTypeW": [ + { + "name": "lpszLocator", + "type": "LPCWSTR" + }, + { + "name": "lpdwGopherType", + "type": "LPDWORD" + } + ], + "GopherFindFirstFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocator", + "type": "LPCSTR" + }, + { + "name": "lpszSearchString", + "type": "LPCSTR" + }, + { + "name": "lpFindData", + "type": "LPGOPHER_FIND_DATAA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "GopherFindFirstFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocator", + "type": "LPCWSTR" + }, + { + "name": "lpszSearchString", + "type": "LPCWSTR" + }, + { + "name": "lpFindData", + "type": "LPGOPHER_FIND_DATAW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "GopherOpenFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocator", + "type": "LPCSTR" + }, + { + "name": "lpszView", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "GopherOpenFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocator", + "type": "LPCWSTR" + }, + { + "name": "lpszView", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "GopherGetAttributeA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocator", + "type": "LPCSTR" + }, + { + "name": "lpszAttributeName", + "type": "LPCSTR" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + }, + { + "name": "lpdwCharactersReturned", + "type": "LPDWORD" + }, + { + "name": "lpfnEnumerator", + "type": "GOPHER_ATTRIBUTE_ENUMERATOR" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "GopherGetAttributeW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocator", + "type": "LPCWSTR" + }, + { + "name": "lpszAttributeName", + "type": "LPCWSTR" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + }, + { + "name": "lpdwCharactersReturned", + "type": "LPDWORD" + }, + { + "name": "lpfnEnumerator", + "type": "GOPHER_ATTRIBUTE_ENUMERATOR" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpOpenRequestA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszVerb", + "type": "LPCSTR" + }, + { + "name": "lpszObjectName", + "type": "LPCSTR" + }, + { + "name": "lpszVersion", + "type": "LPCSTR" + }, + { + "name": "lpszReferrer", + "type": "LPCSTR" + }, + { + "name": "lplpszAcceptTypes", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpOpenRequestW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszVerb", + "type": "LPCWSTR" + }, + { + "name": "lpszObjectName", + "type": "LPCWSTR" + }, + { + "name": "lpszVersion", + "type": "LPCWSTR" + }, + { + "name": "lpszReferrer", + "type": "LPCWSTR" + }, + { + "name": "lplpszAcceptTypes", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpAddRequestHeadersA": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpszHeaders", + "type": "LPCSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "dwModifiers", + "type": "DWORD" + } + ], + "HttpAddRequestHeadersW": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpszHeaders", + "type": "LPCWSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "dwModifiers", + "type": "DWORD" + } + ], + "HttpSendRequestA": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpszHeaders", + "type": "LPCSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "lpOptional", + "type": "LPVOID" + }, + { + "name": "dwOptionalLength", + "type": "DWORD" + } + ], + "HttpSendRequestW": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpszHeaders", + "type": "LPCWSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "lpOptional", + "type": "LPVOID" + }, + { + "name": "dwOptionalLength", + "type": "DWORD" + } + ], + "HttpSendRequestExA": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpBuffersIn", + "type": "LPINTERNET_BUFFERSA" + }, + { + "name": "lpBuffersOut", + "type": "LPINTERNET_BUFFERSA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpSendRequestExW": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpBuffersIn", + "type": "LPINTERNET_BUFFERSW" + }, + { + "name": "lpBuffersOut", + "type": "LPINTERNET_BUFFERSW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpEndRequestA": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpBuffersOut", + "type": "LPINTERNET_BUFFERSA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpEndRequestW": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpBuffersOut", + "type": "LPINTERNET_BUFFERSW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpQueryInfoA": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpdwIndex", + "type": "LPDWORD" + } + ], + "HttpQueryInfoW": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpdwIndex", + "type": "LPDWORD" + } + ], + "InternetSetCookieA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCSTR" + }, + { + "name": "lpszCookieData", + "type": "LPCSTR" + } + ], + "InternetSetCookieW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieData", + "type": "LPCWSTR" + } + ], + "InternetGetCookieA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCSTR" + }, + { + "name": "lpszCookieData", + "type": "LPSTR" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + } + ], + "InternetGetCookieW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieData", + "type": "LPWSTR" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + } + ], + "InternetSetCookieExA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCSTR" + }, + { + "name": "lpszCookieData", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD_PTR" + } + ], + "InternetSetCookieExW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieData", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD_PTR" + } + ], + "InternetGetCookieExA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCSTR" + }, + { + "name": "lpszCookieData", + "type": "LPSTR" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "InternetGetCookieExW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieData", + "type": "LPWSTR" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "InternetAttemptConnect": [ + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetCheckConnectionA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetCheckConnectionW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "ResumeSuspendedDownload": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "dwResultCode", + "type": "DWORD" + } + ], + "InternetErrorDlg": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "dwError", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lppvData", + "type": "LPVOID" + } + ], + "InternetConfirmZoneCrossingA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "szUrlPrev", + "type": "LPSTR" + }, + { + "name": "szUrlNew", + "type": "LPSTR" + }, + { + "name": "bPost", + "type": "BOOL" + } + ], + "InternetConfirmZoneCrossingW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "szUrlPrev", + "type": "LPWSTR" + }, + { + "name": "szUrlNew", + "type": "LPWSTR" + }, + { + "name": "bPost", + "type": "BOOL" + } + ], + "InternetConfirmZoneCrossing": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "szUrlPrev", + "type": "LPSTR" + }, + { + "name": "szUrlNew", + "type": "LPSTR" + }, + { + "name": "bPost", + "type": "BOOL" + } + ], + "CreateUrlCacheEntryA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "dwExpectedFileSize", + "type": "DWORD" + }, + { + "name": "lpszFileExtension", + "type": "LPCSTR" + }, + { + "name": "lpszFileName", + "type": "LPSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "CreateUrlCacheEntryW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "dwExpectedFileSize", + "type": "DWORD" + }, + { + "name": "lpszFileExtension", + "type": "LPCWSTR" + }, + { + "name": "lpszFileName", + "type": "LPWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "CommitUrlCacheEntryA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "lpszLocalFileName", + "type": "LPCSTR" + }, + { + "name": "ExpireTime", + "type": "FILETIME" + }, + { + "name": "LastModifiedTime", + "type": "FILETIME" + }, + { + "name": "CacheEntryType", + "type": "DWORD" + }, + { + "name": "lpHeaderInfo", + "type": "LPBYTE" + }, + { + "name": "cchHeaderInfo", + "type": "DWORD" + }, + { + "name": "lpszFileExtension", + "type": "LPCSTR" + }, + { + "name": "lpszOriginalUrl", + "type": "LPCSTR" + } + ], + "CommitUrlCacheEntryW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "lpszLocalFileName", + "type": "LPCWSTR" + }, + { + "name": "ExpireTime", + "type": "FILETIME" + }, + { + "name": "LastModifiedTime", + "type": "FILETIME" + }, + { + "name": "CacheEntryType", + "type": "DWORD" + }, + { + "name": "lpszHeaderInfo", + "type": "LPWSTR" + }, + { + "name": "cchHeaderInfo", + "type": "DWORD" + }, + { + "name": "lpszFileExtension", + "type": "LPCWSTR" + }, + { + "name": "lpszOriginalUrl", + "type": "LPCWSTR" + } + ], + "RetrieveUrlCacheEntryFileA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "RetrieveUrlCacheEntryFileW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "UnlockUrlCacheEntryFileA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "UnlockUrlCacheEntryFileW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "UnlockUrlCacheEntryFile": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "RetrieveUrlCacheEntryStreamA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "fRandomRead", + "type": "BOOL" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "RetrieveUrlCacheEntryStreamW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "fRandomRead", + "type": "BOOL" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "ReadUrlCacheEntryStream": [ + { + "name": "hUrlCacheStream", + "type": "HANDLE" + }, + { + "name": "dwLocation", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwLen", + "type": "LPDWORD" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "UnlockUrlCacheEntryStream": [ + { + "name": "hUrlCacheStream", + "type": "HANDLE" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "GetUrlCacheEntryInfoA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + } + ], + "GetUrlCacheEntryInfoW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + } + ], + "FindFirstUrlCacheGroup": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwFilter", + "type": "DWORD" + }, + { + "name": "lpSearchCondition", + "type": "LPVOID" + }, + { + "name": "dwSearchCondition", + "type": "DWORD" + }, + { + "name": "lpGroupId", + "type": "GROUPID" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "FindNextUrlCacheGroup": [ + { + "name": "hFind", + "type": "HANDLE" + }, + { + "name": "lpGroupId", + "type": "GROUPID" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "GetUrlCacheGroupAttributeA": [ + { + "name": "gid", + "type": "GROUPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + }, + { + "name": "lpGroupInfo", + "type": "LPINTERNET_CACHE_GROUP_INFOA" + }, + { + "name": "lpcbGroupInfo", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "GetUrlCacheGroupAttributeW": [ + { + "name": "gid", + "type": "GROUPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + }, + { + "name": "lpGroupInfo", + "type": "LPINTERNET_CACHE_GROUP_INFOW" + }, + { + "name": "lpcbGroupInfo", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SetUrlCacheGroupAttributeA": [ + { + "name": "gid", + "type": "GROUPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + }, + { + "name": "lpGroupInfo", + "type": "LPINTERNET_CACHE_GROUP_INFOA" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SetUrlCacheGroupAttributeW": [ + { + "name": "gid", + "type": "GROUPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + }, + { + "name": "lpGroupInfo", + "type": "LPINTERNET_CACHE_GROUP_INFOW" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "GetUrlCacheEntryInfoExA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "lpszRedirectUrl", + "type": "LPSTR" + }, + { + "name": "lpcbRedirectUrl", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetUrlCacheEntryInfoExW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "lpszRedirectUrl", + "type": "LPWSTR" + }, + { + "name": "lpcbRedirectUrl", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SetUrlCacheEntryInfoA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "dwFieldControl", + "type": "DWORD" + } + ], + "SetUrlCacheEntryInfoW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "dwFieldControl", + "type": "DWORD" + } + ], + "CreateUrlCacheGroup": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "DeleteUrlCacheGroup": [ + { + "name": "GroupId", + "type": "GROUPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SetUrlCacheEntryGroupA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "GroupId", + "type": "GROUPID" + }, + { + "name": "pbGroupAttributes", + "type": "LPBYTE" + }, + { + "name": "cbGroupAttributes", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SetUrlCacheEntryGroupW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "GroupId", + "type": "GROUPID" + }, + { + "name": "pbGroupAttributes", + "type": "LPBYTE" + }, + { + "name": "cbGroupAttributes", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SetUrlCacheEntryGroup": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "GroupId", + "type": "GROUPID" + }, + { + "name": "pbGroupAttributes", + "type": "LPBYTE" + }, + { + "name": "cbGroupAttributes", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "FindFirstUrlCacheEntryExA": [ + { + "name": "lpszUrlSearchPattern", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwFilter", + "type": "DWORD" + }, + { + "name": "GroupId", + "type": "GROUPID" + }, + { + "name": "lpFirstCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "lpGroupAttributes", + "type": "LPVOID" + }, + { + "name": "lpcbGroupAttributes", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "FindFirstUrlCacheEntryExW": [ + { + "name": "lpszUrlSearchPattern", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwFilter", + "type": "DWORD" + }, + { + "name": "GroupId", + "type": "GROUPID" + }, + { + "name": "lpFirstCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "lpGroupAttributes", + "type": "LPVOID" + }, + { + "name": "lpcbGroupAttributes", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "FindNextUrlCacheEntryExA": [ + { + "name": "hEnumHandle", + "type": "HANDLE" + }, + { + "name": "lpNextCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "lpGroupAttributes", + "type": "LPVOID" + }, + { + "name": "lpcbGroupAttributes", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "FindNextUrlCacheEntryExW": [ + { + "name": "hEnumHandle", + "type": "HANDLE" + }, + { + "name": "lpNextCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "lpGroupAttributes", + "type": "LPVOID" + }, + { + "name": "lpcbGroupAttributes", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "FindFirstUrlCacheEntryA": [ + { + "name": "lpszUrlSearchPattern", + "type": "LPCSTR" + }, + { + "name": "lpFirstCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + } + ], + "FindFirstUrlCacheEntryW": [ + { + "name": "lpszUrlSearchPattern", + "type": "LPCWSTR" + }, + { + "name": "lpFirstCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + } + ], + "FindNextUrlCacheEntryA": [ + { + "name": "hEnumHandle", + "type": "HANDLE" + }, + { + "name": "lpNextCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + } + ], + "FindNextUrlCacheEntryW": [ + { + "name": "hEnumHandle", + "type": "HANDLE" + }, + { + "name": "lpNextCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + } + ], + "FindCloseUrlCache": [ + { + "name": "hEnumHandle", + "type": "HANDLE" + } + ], + "DeleteUrlCacheEntryA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + } + ], + "DeleteUrlCacheEntryW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + } + ], + "DeleteUrlCacheEntry": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + } + ], + "InternetDialA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "lpszConnectoid", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpdwConnection", + "type": "DWORD_PTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetDialW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "lpszConnectoid", + "type": "LPWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpdwConnection", + "type": "DWORD_PTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetDial": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "lpszConnectoid", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpdwConnection", + "type": "LPDWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetHangUp": [ + { + "name": "dwConnection", + "type": "DWORD_PTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetGoOnlineA": [ + { + "name": "lpszURL", + "type": "LPCSTR" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetGoOnlineW": [ + { + "name": "lpszURL", + "type": "LPCWSTR" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetGoOnline": [ + { + "name": "lpszURL", + "type": "LPSTR" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetAutodial": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hwndParent", + "type": "HWND" + } + ], + "InternetAutodialHangup": [ + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetGetConnectedState": [ + { + "name": "lpdwFlags", + "type": "LPDWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetGetConnectedStateExA": [ + { + "name": "lpdwFlags", + "type": "LPDWORD" + }, + { + "name": "lpszConnectionName", + "type": "LPSTR" + }, + { + "name": "cchNameLen", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetGetConnectedStateExW": [ + { + "name": "lpdwFlags", + "type": "LPDWORD" + }, + { + "name": "lpszConnectionName", + "type": "LPWSTR" + }, + { + "name": "cchNameLen", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "DetectAutoProxyUrl": [ + { + "name": "pszAutoProxyUrl", + "type": "PSTR" + }, + { + "name": "cchAutoProxyUrl", + "type": "DWORD" + }, + { + "name": "dwDetectFlags", + "type": "DWORD" + } + ], + "CreateMD5SSOHash": [ + { + "name": "pszChallengeInfo", + "type": "PWSTR" + }, + { + "name": "pwszRealm", + "type": "PWSTR" + }, + { + "name": "pwszTarget", + "type": "PWSTR" + }, + { + "name": "pbHexHash", + "type": "PBYTE" + } + ], + "InternetGetConnectedStateEx": [ + { + "name": "lpdwFlags", + "type": "LPDWORD" + }, + { + "name": "lpszConnectionName", + "type": "LPSTR" + }, + { + "name": "dwNameLen", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetSetDialStateA": [ + { + "name": "lpszConnectoid", + "type": "LPCSTR" + }, + { + "name": "dwState", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetSetDialStateW": [ + { + "name": "lpszConnectoid", + "type": "LPCWSTR" + }, + { + "name": "dwState", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetSetDialState": [ + { + "name": "lpszConnectoid", + "type": "LPCSTR" + }, + { + "name": "dwState", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetSetPerSiteCookieDecisionA": [ + { + "name": "pchHostName", + "type": "LPCSTR" + }, + { + "name": "dwDecision", + "type": "DWORD" + } + ], + "InternetSetPerSiteCookieDecisionW": [ + { + "name": "pchHostName", + "type": "LPCWSTR" + }, + { + "name": "dwDecision", + "type": "DWORD" + } + ], + "InternetGetPerSiteCookieDecisionA": [ + { + "name": "pchHostName", + "type": "LPCSTR" + }, + { + "name": "pResult", + "type": "unsigned long" + } + ], + "InternetGetPerSiteCookieDecisionW": [ + { + "name": "pchHostName", + "type": "LPCWSTR" + }, + { + "name": "pResult", + "type": "unsigned long" + } + ], + "InternetEnumPerSiteCookieDecisionA": [ + { + "name": "pszSiteName", + "type": "LPSTR" + }, + { + "name": "pcSiteNameSize", + "type": "unsigned long" + }, + { + "name": "pdwDecision", + "type": "unsigned long" + }, + { + "name": "dwIndex", + "type": "unsigned long" + } + ], + "InternetEnumPerSiteCookieDecisionW": [ + { + "name": "pszSiteName", + "type": "LPWSTR" + }, + { + "name": "pcSiteNameSize", + "type": "unsigned long" + }, + { + "name": "pdwDecision", + "type": "unsigned long" + }, + { + "name": "dwIndex", + "type": "unsigned long" + } + ], + "PrivacySetZonePreferenceW": [ + { + "name": "dwZone", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwTemplate", + "type": "DWORD" + }, + { + "name": "pszPreference", + "type": "LPCWSTR" + } + ], + "PrivacyGetZonePreferenceW": [ + { + "name": "dwZone", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pdwTemplate", + "type": "LPDWORD" + }, + { + "name": "pszBuffer", + "type": "LPWSTR" + }, + { + "name": "pdwBufferLength", + "type": "LPDWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/winmm_dll.json b/qiling/extensions/windows_sdk/defs/winmm_dll.json new file mode 100644 index 000000000..c0ef196f3 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/winmm_dll.json @@ -0,0 +1,1710 @@ +{ + "joyGetPosEx": [ + { + "name": "uJoyID", + "type": "UINT" + }, + { + "name": "pji", + "type": "LPJOYINFOEX" + } + ], + "joyGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "joyGetDevCapsW": [ + { + "name": "uJoyID", + "type": "UINT_PTR" + }, + { + "name": "pjc", + "type": "LPJOYCAPSW" + }, + { + "name": "cbjc", + "type": "UINT" + } + ], + "joyGetPos": [ + { + "name": "uJoyID", + "type": "UINT" + }, + { + "name": "pji", + "type": "LPJOYINFO" + } + ], + "joyGetThreshold": [ + { + "name": "uJoyID", + "type": "UINT" + }, + { + "name": "puThreshold", + "type": "LPUINT" + } + ], + "joyReleaseCapture": [ + { + "name": "uJoyID", + "type": "UINT" + } + ], + "joySetCapture": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "uJoyID", + "type": "UINT" + }, + { + "name": "uPeriod", + "type": "UINT" + }, + { + "name": "fChanged", + "type": "BOOL" + } + ], + "joySetThreshold": [ + { + "name": "uJoyID", + "type": "UINT" + }, + { + "name": "uThreshold", + "type": "UINT" + } + ], + "joyConfigChanged": [ + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "mmTaskCreate": [ + { + "name": "lpfn", + "type": "LPTASKCALLBACK" + }, + { + "name": "lph", + "type": "HANDLE" + }, + { + "name": "dwInst", + "type": "DWORD_PTR" + } + ], + "mmTaskBlock": [ + { + "name": "h", + "type": "DWORD" + } + ], + "mmTaskYield": [ + { + "name": "VOID", + "type": "void" + } + ], + "mmGetCurrentTask": [ + { + "name": "VOID", + "type": "void" + } + ], + "waveOutGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "waveOutGetVolume": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pdwVolume", + "type": "LPDWORD" + } + ], + "waveOutSetVolume": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "dwVolume", + "type": "DWORD" + } + ], + "waveOutOpen": [ + { + "name": "phwo", + "type": "LPHWAVEOUT" + }, + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "pwfx", + "type": "LPCWAVEFORMATEX" + }, + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwInstance", + "type": "DWORD_PTR" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "waveOutClose": [ + { + "name": "hwo", + "type": "HWAVEOUT" + } + ], + "waveOutPrepareHeader": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pwh", + "type": "LPWAVEHDR" + }, + { + "name": "cbwh", + "type": "UINT" + } + ], + "waveOutUnprepareHeader": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pwh", + "type": "LPWAVEHDR" + }, + { + "name": "cbwh", + "type": "UINT" + } + ], + "waveOutWrite": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pwh", + "type": "LPWAVEHDR" + }, + { + "name": "cbwh", + "type": "UINT" + } + ], + "waveOutPause": [ + { + "name": "hwo", + "type": "HWAVEOUT" + } + ], + "waveOutRestart": [ + { + "name": "hwo", + "type": "HWAVEOUT" + } + ], + "waveOutReset": [ + { + "name": "hwo", + "type": "HWAVEOUT" + } + ], + "waveOutBreakLoop": [ + { + "name": "hwo", + "type": "HWAVEOUT" + } + ], + "waveOutGetPosition": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pmmt", + "type": "LPMMTIME" + }, + { + "name": "cbmmt", + "type": "UINT" + } + ], + "waveOutGetPitch": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pdwPitch", + "type": "LPDWORD" + } + ], + "waveOutSetPitch": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "dwPitch", + "type": "DWORD" + } + ], + "waveOutGetPlaybackRate": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pdwRate", + "type": "LPDWORD" + } + ], + "waveOutSetPlaybackRate": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "dwRate", + "type": "DWORD" + } + ], + "waveOutGetID": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "puDeviceID", + "type": "LPUINT" + } + ], + "waveOutMessage": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "waveInGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "waveInOpen": [ + { + "name": "phwi", + "type": "LPHWAVEIN" + }, + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "pwfx", + "type": "LPCWAVEFORMATEX" + }, + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwInstance", + "type": "DWORD_PTR" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "waveInClose": [ + { + "name": "hwi", + "type": "HWAVEIN" + } + ], + "waveInPrepareHeader": [ + { + "name": "hwi", + "type": "HWAVEIN" + }, + { + "name": "pwh", + "type": "LPWAVEHDR" + }, + { + "name": "cbwh", + "type": "UINT" + } + ], + "waveInUnprepareHeader": [ + { + "name": "hwi", + "type": "HWAVEIN" + }, + { + "name": "pwh", + "type": "LPWAVEHDR" + }, + { + "name": "cbwh", + "type": "UINT" + } + ], + "waveInAddBuffer": [ + { + "name": "hwi", + "type": "HWAVEIN" + }, + { + "name": "pwh", + "type": "LPWAVEHDR" + }, + { + "name": "cbwh", + "type": "UINT" + } + ], + "waveInStart": [ + { + "name": "hwi", + "type": "HWAVEIN" + } + ], + "waveInStop": [ + { + "name": "hwi", + "type": "HWAVEIN" + } + ], + "waveInReset": [ + { + "name": "hwi", + "type": "HWAVEIN" + } + ], + "waveInGetPosition": [ + { + "name": "hwi", + "type": "HWAVEIN" + }, + { + "name": "pmmt", + "type": "LPMMTIME" + }, + { + "name": "cbmmt", + "type": "UINT" + } + ], + "waveInGetID": [ + { + "name": "hwi", + "type": "HWAVEIN" + }, + { + "name": "puDeviceID", + "type": "LPUINT" + } + ], + "waveInMessage": [ + { + "name": "hwi", + "type": "HWAVEIN" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "midiOutGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "midiStreamOpen": [ + { + "name": "phms", + "type": "LPHMIDISTRM" + }, + { + "name": "puDeviceID", + "type": "LPUINT" + }, + { + "name": "cMidi", + "type": "DWORD" + }, + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwInstance", + "type": "DWORD_PTR" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "midiStreamClose": [ + { + "name": "hms", + "type": "HMIDISTRM" + } + ], + "midiStreamProperty": [ + { + "name": "hms", + "type": "HMIDISTRM" + }, + { + "name": "lppropdata", + "type": "LPBYTE" + }, + { + "name": "dwProperty", + "type": "DWORD" + } + ], + "midiStreamPosition": [ + { + "name": "hms", + "type": "HMIDISTRM" + }, + { + "name": "lpmmt", + "type": "LPMMTIME" + }, + { + "name": "cbmmt", + "type": "UINT" + } + ], + "midiStreamOut": [ + { + "name": "hms", + "type": "HMIDISTRM" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiStreamPause": [ + { + "name": "hms", + "type": "HMIDISTRM" + } + ], + "midiStreamRestart": [ + { + "name": "hms", + "type": "HMIDISTRM" + } + ], + "midiStreamStop": [ + { + "name": "hms", + "type": "HMIDISTRM" + } + ], + "midiConnect": [ + { + "name": "hmi", + "type": "HMIDI" + }, + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "midiDisconnect": [ + { + "name": "hmi", + "type": "HMIDI" + }, + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "midiOutGetDevCapsA": [ + { + "name": "uDeviceID", + "type": "UINT_PTR" + }, + { + "name": "pmoc", + "type": "LPMIDIOUTCAPSA" + }, + { + "name": "cbmoc", + "type": "UINT" + } + ], + "midiOutGetDevCapsW": [ + { + "name": "uDeviceID", + "type": "UINT_PTR" + }, + { + "name": "pmoc", + "type": "LPMIDIOUTCAPSW" + }, + { + "name": "cbmoc", + "type": "UINT" + } + ], + "midiOutGetVolume": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "pdwVolume", + "type": "LPDWORD" + } + ], + "midiOutSetVolume": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "dwVolume", + "type": "DWORD" + } + ], + "midiOutGetErrorTextA": [ + { + "name": "mmrError", + "type": "MMRESULT" + }, + { + "name": "pszText", + "type": "LPSTR" + }, + { + "name": "cchText", + "type": "UINT" + } + ], + "midiOutGetErrorTextW": [ + { + "name": "mmrError", + "type": "MMRESULT" + }, + { + "name": "pszText", + "type": "LPWSTR" + }, + { + "name": "cchText", + "type": "UINT" + } + ], + "midiOutOpen": [ + { + "name": "phmo", + "type": "LPHMIDIOUT" + }, + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwInstance", + "type": "DWORD_PTR" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "midiOutClose": [ + { + "name": "hmo", + "type": "HMIDIOUT" + } + ], + "midiOutPrepareHeader": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiOutUnprepareHeader": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiOutShortMsg": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "dwMsg", + "type": "DWORD" + } + ], + "midiOutLongMsg": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiOutReset": [ + { + "name": "hmo", + "type": "HMIDIOUT" + } + ], + "midiOutCachePatches": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "uBank", + "type": "UINT" + }, + { + "name": "pwpa", + "type": "LPWORD" + }, + { + "name": "fuCache", + "type": "UINT" + } + ], + "midiOutCacheDrumPatches": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "uPatch", + "type": "UINT" + }, + { + "name": "pwkya", + "type": "LPWORD" + }, + { + "name": "fuCache", + "type": "UINT" + } + ], + "midiOutGetID": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "puDeviceID", + "type": "LPUINT" + } + ], + "midiOutMessage": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "midiInGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "midiInGetDevCapsA": [ + { + "name": "uDeviceID", + "type": "UINT_PTR" + }, + { + "name": "pmic", + "type": "LPMIDIINCAPSA" + }, + { + "name": "cbmic", + "type": "UINT" + } + ], + "midiInGetDevCapsW": [ + { + "name": "uDeviceID", + "type": "UINT_PTR" + }, + { + "name": "pmic", + "type": "LPMIDIINCAPSW" + }, + { + "name": "cbmic", + "type": "UINT" + } + ], + "midiInGetErrorTextA": [ + { + "name": "mmrError", + "type": "MMRESULT" + }, + { + "name": "pszText", + "type": "LPSTR" + }, + { + "name": "cchText", + "type": "UINT" + } + ], + "midiInGetErrorTextW": [ + { + "name": "mmrError", + "type": "MMRESULT" + }, + { + "name": "pszText", + "type": "LPWSTR" + }, + { + "name": "cchText", + "type": "UINT" + } + ], + "midiInOpen": [ + { + "name": "phmi", + "type": "LPHMIDIIN" + }, + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwInstance", + "type": "DWORD_PTR" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "midiInClose": [ + { + "name": "hmi", + "type": "HMIDIIN" + } + ], + "midiInPrepareHeader": [ + { + "name": "hmi", + "type": "HMIDIIN" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiInUnprepareHeader": [ + { + "name": "hmi", + "type": "HMIDIIN" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiInAddBuffer": [ + { + "name": "hmi", + "type": "HMIDIIN" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiInStart": [ + { + "name": "hmi", + "type": "HMIDIIN" + } + ], + "midiInStop": [ + { + "name": "hmi", + "type": "HMIDIIN" + } + ], + "midiInReset": [ + { + "name": "hmi", + "type": "HMIDIIN" + } + ], + "midiInGetID": [ + { + "name": "hmi", + "type": "HMIDIIN" + }, + { + "name": "puDeviceID", + "type": "LPUINT" + } + ], + "midiInMessage": [ + { + "name": "hmi", + "type": "HMIDIIN" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "auxGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "auxGetDevCapsA": [ + { + "name": "uDeviceID", + "type": "UINT_PTR" + }, + { + "name": "pac", + "type": "LPAUXCAPSA" + }, + { + "name": "cbac", + "type": "UINT" + } + ], + "auxGetDevCapsW": [ + { + "name": "uDeviceID", + "type": "UINT_PTR" + }, + { + "name": "pac", + "type": "LPAUXCAPSW" + }, + { + "name": "cbac", + "type": "UINT" + } + ], + "auxSetVolume": [ + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "dwVolume", + "type": "DWORD" + } + ], + "auxGetVolume": [ + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "pdwVolume", + "type": "LPDWORD" + } + ], + "auxOutMessage": [ + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "mixerGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "mixerGetDevCapsA": [ + { + "name": "uMxId", + "type": "UINT_PTR" + }, + { + "name": "pmxcaps", + "type": "LPMIXERCAPSA" + }, + { + "name": "cbmxcaps", + "type": "UINT" + } + ], + "mixerGetDevCapsW": [ + { + "name": "uMxId", + "type": "UINT_PTR" + }, + { + "name": "pmxcaps", + "type": "LPMIXERCAPSW" + }, + { + "name": "cbmxcaps", + "type": "UINT" + } + ], + "mixerOpen": [ + { + "name": "phmx", + "type": "LPHMIXER" + }, + { + "name": "uMxId", + "type": "UINT" + }, + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwInstance", + "type": "DWORD_PTR" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "mixerClose": [ + { + "name": "hmx", + "type": "HMIXER" + } + ], + "mixerMessage": [ + { + "name": "hmx", + "type": "HMIXER" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "dwParam1", + "type": "DWORD_PTR" + }, + { + "name": "dwParam2", + "type": "DWORD_PTR" + } + ], + "mixerGetLineInfoA": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxl", + "type": "LPMIXERLINEA" + }, + { + "name": "fdwInfo", + "type": "DWORD" + } + ], + "mixerGetLineInfoW": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxl", + "type": "LPMIXERLINEW" + }, + { + "name": "fdwInfo", + "type": "DWORD" + } + ], + "mixerGetID": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "puMxId", + "type": "UINT" + }, + { + "name": "fdwId", + "type": "DWORD" + } + ], + "mixerGetLineControlsA": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxlc", + "type": "LPMIXERLINECONTROLSA" + }, + { + "name": "fdwControls", + "type": "DWORD" + } + ], + "mixerGetLineControlsW": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxlc", + "type": "LPMIXERLINECONTROLSW" + }, + { + "name": "fdwControls", + "type": "DWORD" + } + ], + "mixerGetControlDetailsA": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxcd", + "type": "LPMIXERCONTROLDETAILS" + }, + { + "name": "fdwDetails", + "type": "DWORD" + } + ], + "mixerGetControlDetailsW": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxcd", + "type": "LPMIXERCONTROLDETAILS" + }, + { + "name": "fdwDetails", + "type": "DWORD" + } + ], + "mixerSetControlDetails": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxcd", + "type": "LPMIXERCONTROLDETAILS" + }, + { + "name": "fdwDetails", + "type": "DWORD" + } + ], + "timeGetSystemTime": [ + { + "name": "pmmt", + "type": "LPMMTIME" + }, + { + "name": "cbmmt", + "type": "UINT" + } + ], + "timeGetTime": [ + { + "name": "VOID", + "type": "void" + } + ], + "timeGetDevCaps": [ + { + "name": "ptc", + "type": "LPTIMECAPS" + }, + { + "name": "cbtc", + "type": "UINT" + } + ], + "timeBeginPeriod": [ + { + "name": "uPeriod", + "type": "UINT" + } + ], + "timeEndPeriod": [ + { + "name": "uPeriod", + "type": "UINT" + } + ], + "CloseDriver": [ + { + "name": "hDriver", + "type": "HDRVR" + }, + { + "name": "lParam1", + "type": "LPARAM" + }, + { + "name": "lParam2", + "type": "LPARAM" + } + ], + "OpenDriver": [ + { + "name": "szDriverName", + "type": "LPCWSTR" + }, + { + "name": "szSectionName", + "type": "LPCWSTR" + }, + { + "name": "lParam2", + "type": "LPARAM" + } + ], + "SendDriverMessage": [ + { + "name": "hDriver", + "type": "HDRVR" + }, + { + "name": "message", + "type": "UINT" + }, + { + "name": "lParam1", + "type": "LPARAM" + }, + { + "name": "lParam2", + "type": "LPARAM" + } + ], + "DrvGetModuleHandle": [ + { + "name": "hDriver", + "type": "HDRVR" + } + ], + "GetDriverModuleHandle": [ + { + "name": "hDriver", + "type": "HDRVR" + } + ], + "DefDriverProc": [ + { + "name": "dwDriverIdentifier", + "type": "DWORD_PTR" + }, + { + "name": "hdrvr", + "type": "HDRVR" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "lParam1", + "type": "LPARAM" + }, + { + "name": "lParam2", + "type": "LPARAM" + } + ], + "DriverCallback": [ + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hDevice", + "type": "HDRVR" + }, + { + "name": "dwMsg", + "type": "DWORD" + }, + { + "name": "dwUser", + "type": "DWORD_PTR" + }, + { + "name": "dwParam1", + "type": "DWORD_PTR" + }, + { + "name": "dwParam2", + "type": "DWORD_PTR" + } + ], + "mmioStringToFOURCCA": [ + { + "name": "sz", + "type": "LPCSTR" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "mmioStringToFOURCCW": [ + { + "name": "sz", + "type": "LPCWSTR" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "mmioInstallIOProcA": [ + { + "name": "fccIOProc", + "type": "FOURCC" + }, + { + "name": "pIOProc", + "type": "LPMMIOPROC" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "mmioInstallIOProcW": [ + { + "name": "fccIOProc", + "type": "FOURCC" + }, + { + "name": "pIOProc", + "type": "LPMMIOPROC" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "mmioOpenA": [ + { + "name": "pszFileName", + "type": "LPSTR" + }, + { + "name": "pmmioinfo", + "type": "LPMMIOINFO" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "mmioOpenW": [ + { + "name": "pszFileName", + "type": "LPWSTR" + }, + { + "name": "pmmioinfo", + "type": "LPMMIOINFO" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "mmioRenameA": [ + { + "name": "pszFileName", + "type": "LPCSTR" + }, + { + "name": "pszNewFileName", + "type": "LPCSTR" + }, + { + "name": "pmmioinfo", + "type": "LPCMMIOINFO" + }, + { + "name": "fdwRename", + "type": "DWORD" + } + ], + "mmioRenameW": [ + { + "name": "pszFileName", + "type": "LPCWSTR" + }, + { + "name": "pszNewFileName", + "type": "LPCWSTR" + }, + { + "name": "pmmioinfo", + "type": "LPCMMIOINFO" + }, + { + "name": "fdwRename", + "type": "DWORD" + } + ], + "mmioClose": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "fuClose", + "type": "UINT" + } + ], + "mmioRead": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pch", + "type": "HPSTR" + }, + { + "name": "cch", + "type": "LONG" + } + ], + "mmioWrite": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pch", + "type": "char" + }, + { + "name": "cch", + "type": "LONG" + } + ], + "mmioSeek": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "lOffset", + "type": "LONG" + }, + { + "name": "iOrigin", + "type": "int" + } + ], + "mmioGetInfo": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pmmioinfo", + "type": "LPMMIOINFO" + }, + { + "name": "fuInfo", + "type": "UINT" + } + ], + "mmioSetInfo": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pmmioinfo", + "type": "LPCMMIOINFO" + }, + { + "name": "fuInfo", + "type": "UINT" + } + ], + "mmioSetBuffer": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pchBuffer", + "type": "LPSTR" + }, + { + "name": "cchBuffer", + "type": "LONG" + }, + { + "name": "fuBuffer", + "type": "UINT" + } + ], + "mmioFlush": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "fuFlush", + "type": "UINT" + } + ], + "mmioAdvance": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pmmioinfo", + "type": "LPMMIOINFO" + }, + { + "name": "fuAdvance", + "type": "UINT" + } + ], + "mmioSendMessage": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "lParam1", + "type": "LPARAM" + }, + { + "name": "lParam2", + "type": "LPARAM" + } + ], + "mmioDescend": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pmmcki", + "type": "LPMMCKINFO" + }, + { + "name": "pmmckiParent", + "type": "MMCKINFO" + }, + { + "name": "fuDescend", + "type": "UINT" + } + ], + "mmioAscend": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pmmcki", + "type": "LPMMCKINFO" + }, + { + "name": "fuAscend", + "type": "UINT" + } + ], + "mmioCreateChunk": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pmmcki", + "type": "LPMMCKINFO" + }, + { + "name": "fuCreate", + "type": "UINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/winmmbse_dll.json b/qiling/extensions/windows_sdk/defs/winmmbse_dll.json new file mode 100644 index 000000000..af1790dcf --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/winmmbse_dll.json @@ -0,0 +1,20 @@ +{ + "sndOpenSound": [ + { + "name": "EventName", + "type": "LPCWSTR" + }, + { + "name": "AppName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "INT32" + }, + { + "name": "FileHandle", + "type": "PHANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/winrttype_lib.json b/qiling/extensions/windows_sdk/defs/winrttype_lib.json new file mode 100644 index 000000000..c4281da7b --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/winrttype_lib.json @@ -0,0 +1,16 @@ +{ + "WindowsCompareStringOrdinal": [ + { + "name": "string1", + "type": "HSTRING" + }, + { + "name": "string2", + "type": "HSTRING" + }, + { + "name": "result", + "type": "INT32" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/winscard_dll.json b/qiling/extensions/windows_sdk/defs/winscard_dll.json new file mode 100644 index 000000000..6e7f4252d --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/winscard_dll.json @@ -0,0 +1,1076 @@ +{ + "SCardEstablishContext": [ + { + "name": "dwScope", + "type": "DWORD" + }, + { + "name": "pvReserved1", + "type": "LPCVOID" + }, + { + "name": "pvReserved2", + "type": "LPCVOID" + }, + { + "name": "phContext", + "type": "LPSCARDCONTEXT" + } + ], + "SCardReleaseContext": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + } + ], + "SCardIsValidContext": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + } + ], + "SCardListReaderGroupsA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "mszGroups", + "type": "LPSTR" + }, + { + "name": "pcchGroups", + "type": "LPDWORD" + } + ], + "SCardListReaderGroupsW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "mszGroups", + "type": "LPWSTR" + }, + { + "name": "pcchGroups", + "type": "LPDWORD" + } + ], + "SCardListReadersA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "mszGroups", + "type": "LPCSTR" + }, + { + "name": "mszReaders", + "type": "LPSTR" + }, + { + "name": "pcchReaders", + "type": "LPDWORD" + } + ], + "SCardListReadersW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "mszGroups", + "type": "LPCWSTR" + }, + { + "name": "mszReaders", + "type": "LPWSTR" + }, + { + "name": "pcchReaders", + "type": "LPDWORD" + } + ], + "SCardListCardsA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "pbAtr", + "type": "LPCBYTE" + }, + { + "name": "rgquidInterfaces", + "type": "LPCGUID" + }, + { + "name": "cguidInterfaceCount", + "type": "DWORD" + }, + { + "name": "mszCards", + "type": "CHAR" + }, + { + "name": "pcchCards", + "type": "LPDWORD" + } + ], + "SCardListCardsW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "pbAtr", + "type": "LPCBYTE" + }, + { + "name": "rgquidInterfaces", + "type": "LPCGUID" + }, + { + "name": "cguidInterfaceCount", + "type": "DWORD" + }, + { + "name": "mszCards", + "type": "WCHAR" + }, + { + "name": "pcchCards", + "type": "LPDWORD" + } + ], + "SCardListInterfacesA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCard", + "type": "LPCSTR" + }, + { + "name": "pguidInterfaces", + "type": "LPGUID" + }, + { + "name": "pcguidInterfaces", + "type": "LPDWORD" + } + ], + "SCardListInterfacesW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCard", + "type": "LPCWSTR" + }, + { + "name": "pguidInterfaces", + "type": "LPGUID" + }, + { + "name": "pcguidInterfaces", + "type": "LPDWORD" + } + ], + "SCardGetProviderIdA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCard", + "type": "LPCSTR" + }, + { + "name": "pguidProviderId", + "type": "LPGUID" + } + ], + "SCardGetProviderIdW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCard", + "type": "LPCWSTR" + }, + { + "name": "pguidProviderId", + "type": "LPGUID" + } + ], + "SCardGetCardTypeProviderNameA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCSTR" + }, + { + "name": "dwProviderId", + "type": "DWORD" + }, + { + "name": "szProvider", + "type": "CHAR" + }, + { + "name": "pcchProvider", + "type": "LPDWORD" + } + ], + "SCardGetCardTypeProviderNameW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCWSTR" + }, + { + "name": "dwProviderId", + "type": "DWORD" + }, + { + "name": "szProvider", + "type": "WCHAR" + }, + { + "name": "pcchProvider", + "type": "LPDWORD" + } + ], + "SCardIntroduceReaderGroupA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szGroupName", + "type": "LPCSTR" + } + ], + "SCardIntroduceReaderGroupW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szGroupName", + "type": "LPCWSTR" + } + ], + "SCardForgetReaderGroupA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szGroupName", + "type": "LPCSTR" + } + ], + "SCardForgetReaderGroupW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szGroupName", + "type": "LPCWSTR" + } + ], + "SCardIntroduceReaderA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCSTR" + }, + { + "name": "szDeviceName", + "type": "LPCSTR" + } + ], + "SCardIntroduceReaderW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCWSTR" + }, + { + "name": "szDeviceName", + "type": "LPCWSTR" + } + ], + "SCardForgetReaderA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCSTR" + } + ], + "SCardForgetReaderW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCWSTR" + } + ], + "SCardAddReaderToGroupA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCSTR" + }, + { + "name": "szGroupName", + "type": "LPCSTR" + } + ], + "SCardAddReaderToGroupW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCWSTR" + }, + { + "name": "szGroupName", + "type": "LPCWSTR" + } + ], + "SCardRemoveReaderFromGroupA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCSTR" + }, + { + "name": "szGroupName", + "type": "LPCSTR" + } + ], + "SCardRemoveReaderFromGroupW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCWSTR" + }, + { + "name": "szGroupName", + "type": "LPCWSTR" + } + ], + "SCardIntroduceCardTypeA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCSTR" + }, + { + "name": "pguidPrimaryProvider", + "type": "LPCGUID" + }, + { + "name": "rgguidInterfaces", + "type": "LPCGUID" + }, + { + "name": "dwInterfaceCount", + "type": "DWORD" + }, + { + "name": "pbAtr", + "type": "LPCBYTE" + }, + { + "name": "pbAtrMask", + "type": "LPCBYTE" + }, + { + "name": "cbAtrLen", + "type": "DWORD" + } + ], + "SCardIntroduceCardTypeW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCWSTR" + }, + { + "name": "pguidPrimaryProvider", + "type": "LPCGUID" + }, + { + "name": "rgguidInterfaces", + "type": "LPCGUID" + }, + { + "name": "dwInterfaceCount", + "type": "DWORD" + }, + { + "name": "pbAtr", + "type": "LPCBYTE" + }, + { + "name": "pbAtrMask", + "type": "LPCBYTE" + }, + { + "name": "cbAtrLen", + "type": "DWORD" + } + ], + "SCardSetCardTypeProviderNameA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCSTR" + }, + { + "name": "dwProviderId", + "type": "DWORD" + }, + { + "name": "szProvider", + "type": "LPCSTR" + } + ], + "SCardSetCardTypeProviderNameW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCWSTR" + }, + { + "name": "dwProviderId", + "type": "DWORD" + }, + { + "name": "szProvider", + "type": "LPCWSTR" + } + ], + "SCardForgetCardTypeA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCSTR" + } + ], + "SCardForgetCardTypeW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCWSTR" + } + ], + "SCardFreeMemory": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "pvMem", + "type": "LPCVOID" + } + ], + "SCardAccessStartedEvent": [ + { + "name": "VOID", + "type": "void" + } + ], + "SCardReleaseStartedEvent": [ + { + "name": "VOID", + "type": "void" + } + ], + "SCardLocateCardsA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "mszCards", + "type": "LPCSTR" + }, + { + "name": "rgReaderStates", + "type": "LPSCARD_READERSTATEA" + }, + { + "name": "cReaders", + "type": "DWORD" + } + ], + "SCardLocateCardsW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "mszCards", + "type": "LPCWSTR" + }, + { + "name": "rgReaderStates", + "type": "LPSCARD_READERSTATEW" + }, + { + "name": "cReaders", + "type": "DWORD" + } + ], + "SCardLocateCardsByATRA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "rgAtrMasks", + "type": "LPSCARD_ATRMASK" + }, + { + "name": "cAtrs", + "type": "DWORD" + }, + { + "name": "rgReaderStates", + "type": "LPSCARD_READERSTATEA" + }, + { + "name": "cReaders", + "type": "DWORD" + } + ], + "SCardLocateCardsByATRW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "rgAtrMasks", + "type": "LPSCARD_ATRMASK" + }, + { + "name": "cAtrs", + "type": "DWORD" + }, + { + "name": "rgReaderStates", + "type": "LPSCARD_READERSTATEW" + }, + { + "name": "cReaders", + "type": "DWORD" + } + ], + "SCardGetStatusChangeA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "rgReaderStates", + "type": "LPSCARD_READERSTATEA" + }, + { + "name": "cReaders", + "type": "DWORD" + } + ], + "SCardGetStatusChangeW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "rgReaderStates", + "type": "LPSCARD_READERSTATEW" + }, + { + "name": "cReaders", + "type": "DWORD" + } + ], + "SCardCancel": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + } + ], + "SCardConnectA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReader", + "type": "LPCSTR" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "dwPreferredProtocols", + "type": "DWORD" + }, + { + "name": "phCard", + "type": "LPSCARDHANDLE" + }, + { + "name": "pdwActiveProtocol", + "type": "LPDWORD" + } + ], + "SCardConnectW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReader", + "type": "LPCWSTR" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "dwPreferredProtocols", + "type": "DWORD" + }, + { + "name": "phCard", + "type": "LPSCARDHANDLE" + }, + { + "name": "pdwActiveProtocol", + "type": "LPDWORD" + } + ], + "SCardReconnect": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "dwPreferredProtocols", + "type": "DWORD" + }, + { + "name": "dwInitialization", + "type": "DWORD" + }, + { + "name": "pdwActiveProtocol", + "type": "LPDWORD" + } + ], + "SCardDisconnect": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "dwDisposition", + "type": "DWORD" + } + ], + "SCardBeginTransaction": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + } + ], + "SCardEndTransaction": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "dwDisposition", + "type": "DWORD" + } + ], + "SCardStatusA": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "mszReaderNames", + "type": "LPSTR" + }, + { + "name": "pcchReaderLen", + "type": "LPDWORD" + }, + { + "name": "pdwState", + "type": "LPDWORD" + }, + { + "name": "pdwProtocol", + "type": "LPDWORD" + }, + { + "name": "pbAtr", + "type": "LPBYTE" + }, + { + "name": "pcbAtrLen", + "type": "LPDWORD" + } + ], + "SCardStatusW": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "mszReaderNames", + "type": "LPWSTR" + }, + { + "name": "pcchReaderLen", + "type": "LPDWORD" + }, + { + "name": "pdwState", + "type": "LPDWORD" + }, + { + "name": "pdwProtocol", + "type": "LPDWORD" + }, + { + "name": "pbAtr", + "type": "LPBYTE" + }, + { + "name": "pcbAtrLen", + "type": "LPDWORD" + } + ], + "SCardTransmit": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "pioSendPci", + "type": "LPCSCARD_IO_REQUEST" + }, + { + "name": "pbSendBuffer", + "type": "LPCBYTE" + }, + { + "name": "cbSendLength", + "type": "DWORD" + }, + { + "name": "pioRecvPci", + "type": "LPSCARD_IO_REQUEST" + }, + { + "name": "pbRecvBuffer", + "type": "LPBYTE" + }, + { + "name": "pcbRecvLength", + "type": "LPDWORD" + } + ], + "SCardGetTransmitCount": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "pcTransmitCount", + "type": "LPDWORD" + } + ], + "SCardControl": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPCVOID" + }, + { + "name": "cbInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "cbOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "SCardGetAttrib": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "dwAttrId", + "type": "DWORD" + }, + { + "name": "pbAttr", + "type": "LPBYTE" + }, + { + "name": "pcbAttrLen", + "type": "LPDWORD" + } + ], + "SCardSetAttrib": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "dwAttrId", + "type": "DWORD" + }, + { + "name": "pbAttr", + "type": "LPCBYTE" + }, + { + "name": "cbAttrLen", + "type": "DWORD" + } + ], + "SCardReadCacheA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "CardIdentifier", + "type": "UUID" + }, + { + "name": "FreshnessCounter", + "type": "DWORD" + }, + { + "name": "LookupName", + "type": "LPSTR" + }, + { + "name": "Data", + "type": "PBYTE" + }, + { + "name": "DataLen", + "type": "DWORD" + } + ], + "SCardReadCacheW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "CardIdentifier", + "type": "UUID" + }, + { + "name": "FreshnessCounter", + "type": "DWORD" + }, + { + "name": "LookupName", + "type": "LPWSTR" + }, + { + "name": "Data", + "type": "PBYTE" + }, + { + "name": "DataLen", + "type": "DWORD" + } + ], + "SCardWriteCacheA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "CardIdentifier", + "type": "UUID" + }, + { + "name": "FreshnessCounter", + "type": "DWORD" + }, + { + "name": "LookupName", + "type": "LPSTR" + }, + { + "name": "Data", + "type": "PBYTE" + }, + { + "name": "DataLen", + "type": "DWORD" + } + ], + "SCardWriteCacheW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "CardIdentifier", + "type": "UUID" + }, + { + "name": "FreshnessCounter", + "type": "DWORD" + }, + { + "name": "LookupName", + "type": "LPWSTR" + }, + { + "name": "Data", + "type": "PBYTE" + }, + { + "name": "DataLen", + "type": "DWORD" + } + ], + "SCardGetDeviceTypeIdA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCSTR" + }, + { + "name": "pdwDeviceTypeId", + "type": "LPDWORD" + } + ], + "SCardGetDeviceTypeIdW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCWSTR" + }, + { + "name": "pdwDeviceTypeId", + "type": "LPDWORD" + } + ], + "SCardAudit": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "dwEvent", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/winspool_drv.json b/qiling/extensions/windows_sdk/defs/winspool_drv.json new file mode 100644 index 000000000..523139471 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/winspool_drv.json @@ -0,0 +1,46 @@ +{ + "DeviceCapabilitiesA": [ + { + "name": "pDevice", + "type": "LPCSTR" + }, + { + "name": "pPort", + "type": "LPCSTR" + }, + { + "name": "fwCapability", + "type": "WORD" + }, + { + "name": "pOutput", + "type": "LPSTR" + }, + { + "name": "pDevMode", + "type": "DEVMODEA" + } + ], + "DeviceCapabilitiesW": [ + { + "name": "pDevice", + "type": "LPCWSTR" + }, + { + "name": "pPort", + "type": "LPCWSTR" + }, + { + "name": "fwCapability", + "type": "WORD" + }, + { + "name": "pOutput", + "type": "LPWSTR" + }, + { + "name": "pDevMode", + "type": "DEVMODEW" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/winstring_h.json b/qiling/extensions/windows_sdk/defs/winstring_h.json new file mode 100644 index 000000000..52ab08f04 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/winstring_h.json @@ -0,0 +1,174 @@ +{ + "WindowsCreateString": [ + { + "name": "sourceString", + "type": "PCNZWCH" + }, + { + "name": "length", + "type": "UINT32" + }, + { + "name": "string", + "type": "HSTRING" + } + ], + "WindowsCreateStringReference": [ + { + "name": "sourceString", + "type": "PCWSTR" + }, + { + "name": "length", + "type": "UINT32" + }, + { + "name": "hstringHeader", + "type": "HSTRING_HEADER" + }, + { + "name": "string", + "type": "HSTRING" + } + ], + "WindowsDeleteString": [ + { + "name": "string", + "type": "HSTRING" + } + ], + "WindowsDuplicateString": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsGetStringLen": [ + { + "name": "string", + "type": "HSTRING" + } + ], + "WindowsGetStringRawBuffer": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "length", + "type": "UINT32" + } + ], + "WindowsIsStringEmpty": [ + { + "name": "string", + "type": "HSTRING" + } + ], + "WindowsStringHasEmbeddedNull": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "hasEmbedNull", + "type": "BOOL" + } + ], + "WindowsSubstring": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "startIndex", + "type": "UINT32" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsSubstringWithSpecifiedLength": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "startIndex", + "type": "UINT32" + }, + { + "name": "length", + "type": "UINT32" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsConcatString": [ + { + "name": "string1", + "type": "HSTRING" + }, + { + "name": "string2", + "type": "HSTRING" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsReplaceString": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "stringReplaced", + "type": "HSTRING" + }, + { + "name": "stringReplaceWith", + "type": "HSTRING" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsTrimStringStart": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "trimString", + "type": "HSTRING" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsTrimStringEnd": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "trimString", + "type": "HSTRING" + }, + { + "name": "newString", + "type": "HSTRING" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wintrust_dll.json b/qiling/extensions/windows_sdk/defs/wintrust_dll.json new file mode 100644 index 000000000..9a255f318 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wintrust_dll.json @@ -0,0 +1,380 @@ +{ + "WinVerifyTrust": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pgActionID", + "type": "GUID" + }, + { + "name": "pWVTData", + "type": "LPVOID" + } + ], + "WinVerifyTrustEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pgActionID", + "type": "GUID" + }, + { + "name": "pWinTrustData", + "type": "WINTRUST_DATA" + } + ], + "WintrustGetRegPolicyFlags": [ + { + "name": "pdwPolicyFlags", + "type": "DWORD" + } + ], + "WintrustSetRegPolicyFlags": [ + { + "name": "dwPolicyFlags", + "type": "DWORD" + } + ], + "WintrustAddActionID": [ + { + "name": "pgActionID", + "type": "GUID" + }, + { + "name": "fdwFlags", + "type": "DWORD" + }, + { + "name": "psProvInfo", + "type": "CRYPT_REGISTER_ACTIONID" + } + ], + "WintrustRemoveActionID": [ + { + "name": "pgActionID", + "type": "GUID" + } + ], + "WintrustLoadFunctionPointers": [ + { + "name": "pgActionID", + "type": "GUID" + }, + { + "name": "pPfns", + "type": "CRYPT_PROVIDER_FUNCTIONS" + } + ], + "WintrustAddDefaultForUsage": [ + { + "name": "pszUsageOID", + "type": "char" + }, + { + "name": "psDefUsage", + "type": "CRYPT_PROVIDER_REGDEFUSAGE" + } + ], + "WintrustGetDefaultForUsage": [ + { + "name": "dwAction", + "type": "DWORD" + }, + { + "name": "pszUsageOID", + "type": "char" + }, + { + "name": "psUsage", + "type": "CRYPT_PROVIDER_DEFUSAGE" + } + ], + "WTHelperCertIsSelfSigned": [ + { + "name": "dwEncoding", + "type": "DWORD" + }, + { + "name": "pCert", + "type": "CERT_INFO" + } + ], + "WTHelperCertCheckValidSignature": [ + { + "name": "pProvData", + "type": "CRYPT_PROVIDER_DATA" + } + ], + "OpenPersonalTrustDBDialogEx": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "OpenPersonalTrustDBDialog": [ + { + "name": "hwndParent", + "type": "HWND" + } + ], + "WintrustSetDefaultIncludePEPageHashes": [ + { + "name": "fIncludePEPageHashes", + "type": "BOOL" + } + ], + "CryptCATOpen": [ + { + "name": "pwszFileName", + "type": "LPWSTR" + }, + { + "name": "fdwOpenFlags", + "type": "DWORD" + }, + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwPublicVersion", + "type": "DWORD" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + } + ], + "CryptCATClose": [ + { + "name": "hCatalog", + "type": "HANDLE" + } + ], + "CryptCATHandleFromStore": [ + { + "name": "pCatStore", + "type": "CRYPTCATSTORE" + } + ], + "CryptCATPersistStore": [ + { + "name": "hCatalog", + "type": "HANDLE" + } + ], + "CryptCATCDFClose": [ + { + "name": "pCDF", + "type": "CRYPTCATCDF" + } + ], + "IsCatalogFile": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "pwszFileName", + "type": "WCHAR" + } + ], + "CryptCATAdminAcquireContext": [ + { + "name": "phCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "pgSubsystem", + "type": "GUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptCATAdminAcquireContext2": [ + { + "name": "phCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "pgSubsystem", + "type": "GUID" + }, + { + "name": "pwszHashAlgorithm", + "type": "PCWSTR" + }, + { + "name": "pStrongHashPolicy", + "type": "PCCERT_STRONG_SIGN_PARA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptCATAdminReleaseContext": [ + { + "name": "hCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptCATAdminReleaseCatalogContext": [ + { + "name": "hCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "hCatInfo", + "type": "HCATINFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptCATAdminEnumCatalogFromHash": [ + { + "name": "hCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "cbHash", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phPrevCatInfo", + "type": "HCATINFO" + } + ], + "CryptCATAdminCalcHashFromFileHandle": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "pcbHash", + "type": "DWORD" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptCATAdminCalcHashFromFileHandle2": [ + { + "name": "hCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "pcbHash", + "type": "DWORD" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptCATAdminAddCatalog": [ + { + "name": "hCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "pwszCatalogFile", + "type": "PWSTR" + }, + { + "name": "pwszSelectBaseName", + "type": "PWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptCATAdminRemoveCatalog": [ + { + "name": "hCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "pwszCatalogFile", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptCATCatalogInfoFromContext": [ + { + "name": "hCatInfo", + "type": "HCATINFO" + }, + { + "name": "psCatInfo", + "type": "CATALOG_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptCATAdminResolveCatalogPath": [ + { + "name": "hCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "pwszCatalogFile", + "type": "WCHAR" + }, + { + "name": "psCatInfo", + "type": "CATALOG_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wintypes_dll.json b/qiling/extensions/windows_sdk/defs/wintypes_dll.json new file mode 100644 index 000000000..1995ff228 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wintypes_dll.json @@ -0,0 +1,8 @@ +{ + "RoGetBufferMarshaler": [ + { + "name": "bufferMarshaler", + "type": "IMarshal" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/winusb_dll.json b/qiling/extensions/windows_sdk/defs/winusb_dll.json new file mode 100644 index 000000000..03dd301ab --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/winusb_dll.json @@ -0,0 +1,542 @@ +{ + "WinUsb_Initialize": [ + { + "name": "DeviceHandle", + "type": "HANDLE" + }, + { + "name": "InterfaceHandle", + "type": "PWINUSB_INTERFACE_HANDLE" + } + ], + "WinUsb_Free": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + } + ], + "WinUsb_GetAssociatedInterface": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "AssociatedInterfaceIndex", + "type": "UCHAR" + }, + { + "name": "AssociatedInterfaceHandle", + "type": "PWINUSB_INTERFACE_HANDLE" + } + ], + "WinUsb_GetDescriptor": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "DescriptorType", + "type": "UCHAR" + }, + { + "name": "Index", + "type": "UCHAR" + }, + { + "name": "LanguageID", + "type": "USHORT" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferLength", + "type": "ULONG" + }, + { + "name": "LengthTransferred", + "type": "PULONG" + } + ], + "WinUsb_QueryInterfaceSettings": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "AlternateInterfaceNumber", + "type": "UCHAR" + }, + { + "name": "UsbAltInterfaceDescriptor", + "type": "PUSB_INTERFACE_DESCRIPTOR" + } + ], + "WinUsb_QueryDeviceInformation": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "InformationType", + "type": "ULONG" + }, + { + "name": "BufferLength", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "WinUsb_SetCurrentAlternateSetting": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "SettingNumber", + "type": "UCHAR" + } + ], + "WinUsb_GetCurrentAlternateSetting": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "SettingNumber", + "type": "PUCHAR" + } + ], + "WinUsb_QueryPipe": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "AlternateInterfaceNumber", + "type": "UCHAR" + }, + { + "name": "PipeIndex", + "type": "UCHAR" + }, + { + "name": "PipeInformation", + "type": "PWINUSB_PIPE_INFORMATION" + } + ], + "WinUsb_QueryPipeEx": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "AlternateSettingNumber", + "type": "UCHAR" + }, + { + "name": "PipeIndex", + "type": "UCHAR" + }, + { + "name": "PipeInformationEx", + "type": "PWINUSB_PIPE_INFORMATION_EX" + } + ], + "WinUsb_SetPipePolicy": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PipeID", + "type": "UCHAR" + }, + { + "name": "PolicyType", + "type": "ULONG" + }, + { + "name": "ValueLength", + "type": "ULONG" + }, + { + "name": "Value", + "type": "PVOID" + } + ], + "WinUsb_GetPipePolicy": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PipeID", + "type": "UCHAR" + }, + { + "name": "PolicyType", + "type": "ULONG" + }, + { + "name": "ValueLength", + "type": "PULONG" + }, + { + "name": "Value", + "type": "PVOID" + } + ], + "WinUsb_ReadPipe": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PipeID", + "type": "UCHAR" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferLength", + "type": "ULONG" + }, + { + "name": "LengthTransferred", + "type": "PULONG" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "WinUsb_WritePipe": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PipeID", + "type": "UCHAR" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferLength", + "type": "ULONG" + }, + { + "name": "LengthTransferred", + "type": "PULONG" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "WinUsb_ControlTransfer": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "SetupPacket", + "type": "WINUSB_SETUP_PACKET" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferLength", + "type": "ULONG" + }, + { + "name": "LengthTransferred", + "type": "PULONG" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "WinUsb_ResetPipe": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PipeID", + "type": "UCHAR" + } + ], + "WinUsb_AbortPipe": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PipeID", + "type": "UCHAR" + } + ], + "WinUsb_FlushPipe": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PipeID", + "type": "UCHAR" + } + ], + "WinUsb_SetPowerPolicy": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PolicyType", + "type": "ULONG" + }, + { + "name": "ValueLength", + "type": "ULONG" + }, + { + "name": "Value", + "type": "PVOID" + } + ], + "WinUsb_GetPowerPolicy": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PolicyType", + "type": "ULONG" + }, + { + "name": "ValueLength", + "type": "PULONG" + }, + { + "name": "Value", + "type": "PVOID" + } + ], + "WinUsb_GetOverlappedResult": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpNumberOfBytesTransferred", + "type": "LPDWORD" + }, + { + "name": "bWait", + "type": "BOOL" + } + ], + "WinUsb_GetCurrentFrameNumber": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "CurrentFrameNumber", + "type": "PULONG" + }, + { + "name": "TimeStamp", + "type": "LARGE_INTEGER" + } + ], + "WinUsb_GetAdjustedFrameNumber": [ + { + "name": "CurrentFrameNumber", + "type": "PULONG" + }, + { + "name": "TimeStamp", + "type": "LARGE_INTEGER" + } + ], + "WinUsb_RegisterIsochBuffer": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PipeID", + "type": "UCHAR" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferLength", + "type": "ULONG" + }, + { + "name": "IsochBufferHandle", + "type": "PWINUSB_ISOCH_BUFFER_HANDLE" + } + ], + "WinUsb_UnregisterIsochBuffer": [ + { + "name": "IsochBufferHandle", + "type": "WINUSB_ISOCH_BUFFER_HANDLE" + } + ], + "WinUsb_WriteIsochPipe": [ + { + "name": "BufferHandle", + "type": "WINUSB_ISOCH_BUFFER_HANDLE" + }, + { + "name": "Offset", + "type": "ULONG" + }, + { + "name": "Length", + "type": "ULONG" + }, + { + "name": "FrameNumber", + "type": "PULONG" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "WinUsb_ReadIsochPipe": [ + { + "name": "BufferHandle", + "type": "WINUSB_ISOCH_BUFFER_HANDLE" + }, + { + "name": "Offset", + "type": "ULONG" + }, + { + "name": "Length", + "type": "ULONG" + }, + { + "name": "FrameNumber", + "type": "PULONG" + }, + { + "name": "NumberOfPackets", + "type": "ULONG" + }, + { + "name": "IsoPacketDescriptors", + "type": "PUSBD_ISO_PACKET_DESCRIPTOR" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "WinUsb_WriteIsochPipeAsap": [ + { + "name": "BufferHandle", + "type": "WINUSB_ISOCH_BUFFER_HANDLE" + }, + { + "name": "Offset", + "type": "ULONG" + }, + { + "name": "Length", + "type": "ULONG" + }, + { + "name": "ContinueStream", + "type": "BOOL" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "WinUsb_ReadIsochPipeAsap": [ + { + "name": "BufferHandle", + "type": "WINUSB_ISOCH_BUFFER_HANDLE" + }, + { + "name": "Offset", + "type": "ULONG" + }, + { + "name": "Length", + "type": "ULONG" + }, + { + "name": "ContinueStream", + "type": "BOOL" + }, + { + "name": "NumberOfPackets", + "type": "ULONG" + }, + { + "name": "IsoPacketDescriptors", + "type": "PUSBD_ISO_PACKET_DESCRIPTOR" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "WinUsb_StartTrackingForTimeSync": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "StartTrackingInfo", + "type": "PUSB_START_TRACKING_FOR_TIME_SYNC_INFORMATION" + } + ], + "WinUsb_GetCurrentFrameNumberAndQpc": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "FrameQpcInfo", + "type": "PUSB_FRAME_NUMBER_AND_QPC_FOR_TIME_SYNC_INFORMATION" + } + ], + "WinUsb_StopTrackingForTimeSync": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "StopTrackingInfo", + "type": "PUSB_STOP_TRACKING_FOR_TIME_SYNC_INFORMATION" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wlanapi_dll.json b/qiling/extensions/windows_sdk/defs/wlanapi_dll.json new file mode 100644 index 000000000..7eda5a705 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wlanapi_dll.json @@ -0,0 +1,1154 @@ +{ + "WlanOpenHandle": [ + { + "name": "dwClientVersion", + "type": "DWORD" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwNegotiatedVersion", + "type": "PDWORD" + }, + { + "name": "phClientHandle", + "type": "PHANDLE" + } + ], + "WlanCloseHandle": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanEnumInterfaces": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppInterfaceList", + "type": "PWLAN_INTERFACE_INFO_LIST" + } + ], + "WlanSetAutoConfigParameter": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "OpCode", + "type": "WLAN_AUTOCONF_OPCODE" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "pData", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanQueryAutoConfigParameter": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "OpCode", + "type": "WLAN_AUTOCONF_OPCODE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwDataSize", + "type": "PDWORD" + }, + { + "name": "ppData", + "type": "PVOID" + }, + { + "name": "pWlanOpcodeValueType", + "type": "PWLAN_OPCODE_VALUE_TYPE" + } + ], + "WlanGetInterfaceCapability": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppCapability", + "type": "PWLAN_INTERFACE_CAPABILITY" + } + ], + "WlanSetInterface": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "OpCode", + "type": "WLAN_INTF_OPCODE" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "pData", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanQueryInterface": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "OpCode", + "type": "WLAN_INTF_OPCODE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwDataSize", + "type": "PDWORD" + }, + { + "name": "ppData", + "type": "PVOID" + }, + { + "name": "pWlanOpcodeValueType", + "type": "PWLAN_OPCODE_VALUE_TYPE" + } + ], + "WlanIhvControl": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "Type", + "type": "WLAN_IHV_CONTROL_TYPE" + }, + { + "name": "dwInBufferSize", + "type": "DWORD" + }, + { + "name": "pInBuffer", + "type": "PVOID" + }, + { + "name": "dwOutBufferSize", + "type": "DWORD" + }, + { + "name": "pOutBuffer", + "type": "PVOID" + }, + { + "name": "pdwBytesReturned", + "type": "PDWORD" + } + ], + "WlanScan": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pDot11Ssid", + "type": "PDOT11_SSID" + }, + { + "name": "pIeData", + "type": "PWLAN_RAW_DATA" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanGetAvailableNetworkList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppAvailableNetworkList", + "type": "PWLAN_AVAILABLE_NETWORK_LIST" + } + ], + "WlanGetNetworkBssList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pDot11Ssid", + "type": "PDOT11_SSID" + }, + { + "name": "dot11BssType", + "type": "DOT11_BSS_TYPE" + }, + { + "name": "bSecurityEnabled", + "type": "BOOL" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppWlanBssList", + "type": "PWLAN_BSS_LIST" + } + ], + "WlanConnect": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pConnectionParameters", + "type": "PWLAN_CONNECTION_PARAMETERS" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanDisconnect": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanRegisterNotification": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "dwNotifSource", + "type": "DWORD" + }, + { + "name": "bIgnoreDuplicate", + "type": "BOOL" + }, + { + "name": "funcCallback", + "type": "WLAN_NOTIFICATION_CALLBACK" + }, + { + "name": "pCallbackContext", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwPrevNotifSource", + "type": "PDWORD" + } + ], + "WlanGetProfile": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pstrProfileXml", + "type": "LPWSTR" + }, + { + "name": "pdwFlags", + "type": "DWORD" + }, + { + "name": "pdwGrantedAccess", + "type": "DWORD" + } + ], + "WlanSetProfileEapUserData": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "eapType", + "type": "EAP_METHOD_TYPE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwEapUserDataSize", + "type": "DWORD" + }, + { + "name": "pbEapUserData", + "type": "LPBYTE" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanSetProfileEapXmlUserData": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "strEapXmlUserData", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanSetProfile": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "strProfileXml", + "type": "LPCWSTR" + }, + { + "name": "strAllUserProfileSecurity", + "type": "LPCWSTR" + }, + { + "name": "bOverwrite", + "type": "BOOL" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwReasonCode", + "type": "DWORD" + } + ], + "WlanDeleteProfile": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanRenameProfile": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strOldProfileName", + "type": "LPCWSTR" + }, + { + "name": "strNewProfileName", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanGetProfileList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppProfileList", + "type": "PWLAN_PROFILE_INFO_LIST" + } + ], + "WlanSetProfileList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "dwItems", + "type": "DWORD" + }, + { + "name": "strProfileNames", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanSetProfilePosition": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "dwPosition", + "type": "DWORD" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanSetProfileCustomUserData": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "pData", + "type": "PBYTE" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanGetProfileCustomUserData": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwDataSize", + "type": "DWORD" + }, + { + "name": "ppData", + "type": "PBYTE" + } + ], + "WlanSetFilterList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "wlanFilterListType", + "type": "WLAN_FILTER_LIST_TYPE" + }, + { + "name": "pNetworkList", + "type": "PDOT11_NETWORK_LIST" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanGetFilterList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "wlanFilterListType", + "type": "WLAN_FILTER_LIST_TYPE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppNetworkList", + "type": "PDOT11_NETWORK_LIST" + } + ], + "WlanSetPsdIEDataList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "strFormat", + "type": "LPCWSTR" + }, + { + "name": "pPsdIEDataList", + "type": "PWLAN_RAW_DATA_LIST" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanSaveTemporaryProfile": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "strAllUserProfileSecurity", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "bOverWrite", + "type": "BOOL" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanDeviceServiceCommand": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pDeviceServiceGuid", + "type": "LPGUID" + }, + { + "name": "dwOpCode", + "type": "DWORD" + }, + { + "name": "dwInBufferSize", + "type": "DWORD" + }, + { + "name": "pInBuffer", + "type": "PVOID" + }, + { + "name": "dwOutBufferSize", + "type": "DWORD" + }, + { + "name": "pOutBuffer", + "type": "PVOID" + }, + { + "name": "pdwBytesReturned", + "type": "PDWORD" + } + ], + "WlanGetSupportedDeviceServices": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "ppDevSvcGuidList", + "type": "PWLAN_DEVICE_SERVICE_GUID_LIST" + } + ], + "WlanRegisterDeviceServiceNotification": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pDevSvcGuidList", + "type": "PWLAN_DEVICE_SERVICE_GUID_LIST" + } + ], + "WlanExtractPsdIEDataList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "dwIeDataSize", + "type": "DWORD" + }, + { + "name": "pRawIeData", + "type": "PBYTE" + }, + { + "name": "strFormat", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppPsdIEDataList", + "type": "PWLAN_RAW_DATA_LIST" + } + ], + "WlanReasonCodeToString": [ + { + "name": "dwReasonCode", + "type": "DWORD" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "pStringBuffer", + "type": "PWCHAR" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanAllocateMemory": [ + { + "name": "dwMemorySize", + "type": "DWORD" + } + ], + "WlanFreeMemory": [ + { + "name": "pMemory", + "type": "PVOID" + } + ], + "WlanSetSecuritySettings": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "SecurableObject", + "type": "WLAN_SECURABLE_OBJECT" + }, + { + "name": "strModifiedSDDL", + "type": "LPCWSTR" + } + ], + "WlanGetSecuritySettings": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "SecurableObject", + "type": "WLAN_SECURABLE_OBJECT" + }, + { + "name": "pValueType", + "type": "PWLAN_OPCODE_VALUE_TYPE" + }, + { + "name": "pstrCurrentSDDL", + "type": "LPWSTR" + }, + { + "name": "pdwGrantedAccess", + "type": "PDWORD" + } + ], + "WlanHostedNetworkStartUsing": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkStopUsing": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkForceStart": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkForceStop": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkQueryProperty": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "OpCode", + "type": "WLAN_HOSTED_NETWORK_OPCODE" + }, + { + "name": "pdwDataSize", + "type": "PDWORD" + }, + { + "name": "ppvData", + "type": "PVOID" + }, + { + "name": "pWlanOpcodeValueType", + "type": "PWLAN_OPCODE_VALUE_TYPE" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkSetProperty": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "OpCode", + "type": "WLAN_HOSTED_NETWORK_OPCODE" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "PVOID" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkInitSettings": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkRefreshSecuritySettings": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkQueryStatus": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "ppWlanHostedNetworkStatus", + "type": "PWLAN_HOSTED_NETWORK_STATUS" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkSetSecondaryKey": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "dwKeyLength", + "type": "DWORD" + }, + { + "name": "pucKeyData", + "type": "PUCHAR" + }, + { + "name": "bIsPassPhrase", + "type": "BOOL" + }, + { + "name": "bPersistent", + "type": "BOOL" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkQuerySecondaryKey": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pdwKeyLength", + "type": "PDWORD" + }, + { + "name": "ppucKeyData", + "type": "PUCHAR" + }, + { + "name": "pbIsPassPhrase", + "type": "PBOOL" + }, + { + "name": "pbPersistent", + "type": "PBOOL" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanRegisterVirtualStationNotification": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "bRegister", + "type": "BOOL" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WFDOpenHandle": [ + { + "name": "dwClientVersion", + "type": "DWORD" + }, + { + "name": "pdwNegotiatedVersion", + "type": "PDWORD" + }, + { + "name": "phClientHandle", + "type": "PHANDLE" + } + ], + "WFDCloseHandle": [ + { + "name": "hClientHandle", + "type": "HANDLE" + } + ], + "WFDStartOpenSession": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pDeviceAddress", + "type": "PDOT11_MAC_ADDRESS" + }, + { + "name": "pvContext", + "type": "PVOID" + }, + { + "name": "pfnCallback", + "type": "WFD_OPEN_SESSION_COMPLETE_CALLBACK" + }, + { + "name": "phSessionHandle", + "type": "PHANDLE" + } + ], + "WFDCancelOpenSession": [ + { + "name": "hSessionHandle", + "type": "HANDLE" + } + ], + "WFDOpenLegacySession": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pLegacyMacAddress", + "type": "PDOT11_MAC_ADDRESS" + }, + { + "name": "phSessionHandle", + "type": "HANDLE" + }, + { + "name": "pGuidSessionInterface", + "type": "GUID" + } + ], + "WFDCloseSession": [ + { + "name": "hSessionHandle", + "type": "HANDLE" + } + ], + "WFDUpdateDeviceVisibility": [ + { + "name": "pDeviceAddress", + "type": "PDOT11_MAC_ADDRESS" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wlanui_dll.json b/qiling/extensions/windows_sdk/defs/wlanui_dll.json new file mode 100644 index 000000000..8a2b800ec --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wlanui_dll.json @@ -0,0 +1,32 @@ +{ + "WlanUIEditProfile": [ + { + "name": "dwClientVersion", + "type": "DWORD" + }, + { + "name": "wstrProfileName", + "type": "LPCWSTR" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wlStartPage", + "type": "WL_DISPLAY_PAGES" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pWlanReasonCode", + "type": "PWLAN_REASON_CODE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wmvcore_dll.json b/qiling/extensions/windows_sdk/defs/wmvcore_dll.json new file mode 100644 index 000000000..5631467fe --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wmvcore_dll.json @@ -0,0 +1,154 @@ +{ + "WMCheckURLExtension": [ + { + "name": "pwszURL", + "type": "LPCWSTR" + } + ], + "WMCheckURLScheme": [ + { + "name": "pwszURLScheme", + "type": "LPCWSTR" + } + ], + "WMValidateData": [ + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataSize", + "type": "DWORD" + } + ], + "WMIsAvailableOffline": [ + { + "name": "pwszURL", + "type": "LPCWSTR" + }, + { + "name": "pwszLanguage", + "type": "LPCWSTR" + }, + { + "name": "pfIsAvailableOffline", + "type": "BOOL" + } + ], + "WMIsContentProtected": [ + { + "name": "pwszFileName", + "type": "WCHAR" + }, + { + "name": "pfIsProtected", + "type": "BOOL" + } + ], + "WMCreateWriter": [ + { + "name": "pUnkCert", + "type": "IUnknown" + }, + { + "name": "ppWriter", + "type": "IWMWriter" + } + ], + "WMCreateReader": [ + { + "name": "pUnkCert", + "type": "IUnknown" + }, + { + "name": "dwRights", + "type": "DWORD" + }, + { + "name": "ppReader", + "type": "IWMReader" + } + ], + "WMCreateSyncReader": [ + { + "name": "pUnkCert", + "type": "IUnknown" + }, + { + "name": "dwRights", + "type": "DWORD" + }, + { + "name": "ppSyncReader", + "type": "IWMSyncReader" + } + ], + "WMCreateEditor": [ + { + "name": "ppEditor", + "type": "IWMMetadataEditor" + } + ], + "WMCreateIndexer": [ + { + "name": "ppIndexer", + "type": "IWMIndexer" + } + ], + "WMCreateBackupRestorer": [ + { + "name": "pCallback", + "type": "IUnknown" + }, + { + "name": "ppBackup", + "type": "IWMLicenseBackup" + } + ], + "WMCreateProfileManager": [ + { + "name": "ppProfileManager", + "type": "IWMProfileManager" + } + ], + "WMCreateWriterFileSink": [ + { + "name": "ppSink", + "type": "IWMWriterFileSink" + } + ], + "WMCreateWriterNetworkSink": [ + { + "name": "ppSink", + "type": "IWMWriterNetworkSink" + } + ], + "WMCreateWriterPushSink": [ + { + "name": "ppSink", + "type": "IWMWriterPushSink" + } + ], + "WMCreateDeviceRegistration": [ + { + "name": "ppDevReg", + "type": "IWMDeviceRegistration" + } + ], + "WMCreateDRMTranscryptor": [ + { + "name": "ppTranscryptor", + "type": "IWMDRMTranscryptor" + } + ], + "WMCreateLicenseRevocationAgent": [ + { + "name": "pCallback", + "type": "IUnknown" + }, + { + "name": "ppLicenseRevocationAgent", + "type": "IWMLicenseRevocationAgent" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wofutil_dll.json b/qiling/extensions/windows_sdk/defs/wofutil_dll.json new file mode 100644 index 000000000..8feaea870 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wofutil_dll.json @@ -0,0 +1,176 @@ +{ + "WofShouldCompressBinaries": [ + { + "name": "Volume", + "type": "LPCWSTR" + }, + { + "name": "Algorithm", + "type": "PULONG" + } + ], + "WofGetDriverVersion": [ + { + "name": "FileOrVolumeHandle", + "type": "HANDLE" + }, + { + "name": "Provider", + "type": "ULONG" + }, + { + "name": "WofVersion", + "type": "PULONG" + } + ], + "WofSetFileDataLocation": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "Provider", + "type": "ULONG" + }, + { + "name": "ExternalFileInfo", + "type": "PVOID" + }, + { + "name": "Length", + "type": "ULONG" + } + ], + "WofIsExternalFile": [ + { + "name": "FilePath", + "type": "LPCWSTR" + }, + { + "name": "IsExternalFile", + "type": "PBOOL" + }, + { + "name": "Provider", + "type": "PULONG" + }, + { + "name": "ExternalFileInfo", + "type": "PVOID" + }, + { + "name": "BufferLength", + "type": "PULONG" + } + ], + "WofEnumEntries": [ + { + "name": "VolumeName", + "type": "PCWSTR" + }, + { + "name": "Provider", + "type": "ULONG" + }, + { + "name": "EnumProc", + "type": "WofEnumEntryProc" + }, + { + "name": "UserData", + "type": "PVOID" + } + ], + "WofWimAddEntry": [ + { + "name": "VolumeName", + "type": "PCWSTR" + }, + { + "name": "WimPath", + "type": "PCWSTR" + }, + { + "name": "WimType", + "type": "DWORD" + }, + { + "name": "WimIndex", + "type": "DWORD" + }, + { + "name": "DataSourceId", + "type": "PLARGE_INTEGER" + } + ], + "WofWimEnumFiles": [ + { + "name": "VolumeName", + "type": "PCWSTR" + }, + { + "name": "DataSourceId", + "type": "LARGE_INTEGER" + }, + { + "name": "EnumProc", + "type": "WofEnumFilesProc" + }, + { + "name": "UserData", + "type": "PVOID" + } + ], + "WofWimSuspendEntry": [ + { + "name": "VolumeName", + "type": "PCWSTR" + }, + { + "name": "DataSourceId", + "type": "LARGE_INTEGER" + } + ], + "WofWimRemoveEntry": [ + { + "name": "VolumeName", + "type": "PCWSTR" + }, + { + "name": "DataSourceId", + "type": "LARGE_INTEGER" + } + ], + "WofWimUpdateEntry": [ + { + "name": "VolumeName", + "type": "PCWSTR" + }, + { + "name": "DataSourceId", + "type": "LARGE_INTEGER" + }, + { + "name": "NewWimPath", + "type": "PCWSTR" + } + ], + "WofFileEnumFiles": [ + { + "name": "VolumeName", + "type": "PCWSTR" + }, + { + "name": "Algorithm", + "type": "ULONG" + }, + { + "name": "EnumProc", + "type": "WofEnumFilesProc" + }, + { + "name": "UserData", + "type": "PVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/ws2_32_dll.json b/qiling/extensions/windows_sdk/defs/ws2_32_dll.json new file mode 100644 index 000000000..3c7be12be --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/ws2_32_dll.json @@ -0,0 +1,2720 @@ +{ + "getaddrinfo": [ + { + "name": "pNodeName", + "type": "PCSTR" + }, + { + "name": "pServiceName", + "type": "PCSTR" + }, + { + "name": "pHints", + "type": "ADDRINFOA" + }, + { + "name": "ppResult", + "type": "PADDRINFOA" + } + ], + "GetAddrInfoW": [ + { + "name": "pNodeName", + "type": "PCWSTR" + }, + { + "name": "pServiceName", + "type": "PCWSTR" + }, + { + "name": "pHints", + "type": "ADDRINFOW" + }, + { + "name": "ppResult", + "type": "PADDRINFOW" + } + ], + "GetAddrInfoExA": [ + { + "name": "pName", + "type": "PCSTR" + }, + { + "name": "pServiceName", + "type": "PCSTR" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpNspId", + "type": "LPGUID" + }, + { + "name": "hints", + "type": "ADDRINFOEXA" + }, + { + "name": "ppResult", + "type": "PADDRINFOEXA" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPLOOKUPSERVICE_COMPLETION_ROUTINE" + }, + { + "name": "lpNameHandle", + "type": "LPHANDLE" + } + ], + "GetAddrInfoExW": [ + { + "name": "pName", + "type": "PCWSTR" + }, + { + "name": "pServiceName", + "type": "PCWSTR" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpNspId", + "type": "LPGUID" + }, + { + "name": "hints", + "type": "ADDRINFOEXW" + }, + { + "name": "ppResult", + "type": "PADDRINFOEXW" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPLOOKUPSERVICE_COMPLETION_ROUTINE" + }, + { + "name": "lpHandle", + "type": "LPHANDLE" + } + ], + "GetAddrInfoExCancel": [ + { + "name": "lpHandle", + "type": "LPHANDLE" + } + ], + "GetAddrInfoExOverlappedResult": [ + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "SetAddrInfoExA": [ + { + "name": "pName", + "type": "PCSTR" + }, + { + "name": "pServiceName", + "type": "PCSTR" + }, + { + "name": "pAddresses", + "type": "SOCKET_ADDRESS" + }, + { + "name": "dwAddressCount", + "type": "DWORD" + }, + { + "name": "lpBlob", + "type": "LPBLOB" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpNspId", + "type": "LPGUID" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPLOOKUPSERVICE_COMPLETION_ROUTINE" + }, + { + "name": "lpNameHandle", + "type": "LPHANDLE" + } + ], + "SetAddrInfoExW": [ + { + "name": "pName", + "type": "PCWSTR" + }, + { + "name": "pServiceName", + "type": "PCWSTR" + }, + { + "name": "pAddresses", + "type": "SOCKET_ADDRESS" + }, + { + "name": "dwAddressCount", + "type": "DWORD" + }, + { + "name": "lpBlob", + "type": "LPBLOB" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpNspId", + "type": "LPGUID" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPLOOKUPSERVICE_COMPLETION_ROUTINE" + }, + { + "name": "lpNameHandle", + "type": "LPHANDLE" + } + ], + "freeaddrinfo": [ + { + "name": "pAddrInfo", + "type": "PADDRINFOA" + } + ], + "FreeAddrInfoW": [ + { + "name": "pAddrInfo", + "type": "PADDRINFOW" + } + ], + "FreeAddrInfoEx": [ + { + "name": "pAddrInfoEx", + "type": "PADDRINFOEXA" + } + ], + "FreeAddrInfoExW": [ + { + "name": "pAddrInfoEx", + "type": "PADDRINFOEXW" + } + ], + "getnameinfo": [ + { + "name": "pSockaddr", + "type": "SOCKADDR" + }, + { + "name": "SockaddrLength", + "type": "socklen_t" + }, + { + "name": "pNodeBuffer", + "type": "PCHAR" + }, + { + "name": "NodeBufferSize", + "type": "DWORD" + }, + { + "name": "pServiceBuffer", + "type": "PCHAR" + }, + { + "name": "ServiceBufferSize", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "INT" + } + ], + "GetNameInfoW": [ + { + "name": "pSockaddr", + "type": "SOCKADDR" + }, + { + "name": "SockaddrLength", + "type": "socklen_t" + }, + { + "name": "pNodeBuffer", + "type": "PWCHAR" + }, + { + "name": "NodeBufferSize", + "type": "DWORD" + }, + { + "name": "pServiceBuffer", + "type": "PWCHAR" + }, + { + "name": "ServiceBufferSize", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "INT" + } + ], + "InetPtonW": [ + { + "name": "Family", + "type": "INT" + }, + { + "name": "pszAddrString", + "type": "PCWSTR" + }, + { + "name": "pAddrBuf", + "type": "PVOID" + } + ], + "InetNtopW": [ + { + "name": "Family", + "type": "INT" + }, + { + "name": "pAddr", + "type": "void" + }, + { + "name": "pStringBuf", + "type": "PWSTR" + }, + { + "name": "StringBufSize", + "type": "size_t" + } + ], + "setipv4sourcefilter": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Interface", + "type": "IN_ADDR" + }, + { + "name": "Group", + "type": "IN_ADDR" + }, + { + "name": "FilterMode", + "type": "MULTICAST_MODE_TYPE" + }, + { + "name": "SourceCount", + "type": "ULONG" + }, + { + "name": "SourceList", + "type": "IN_ADDR" + } + ], + "getipv4sourcefilter": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Interface", + "type": "IN_ADDR" + }, + { + "name": "Group", + "type": "IN_ADDR" + }, + { + "name": "FilterMode", + "type": "MULTICAST_MODE_TYPE" + }, + { + "name": "SourceCount", + "type": "ULONG" + }, + { + "name": "SourceList", + "type": "IN_ADDR" + } + ], + "setsourcefilter": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Interface", + "type": "ULONG" + }, + { + "name": "Group", + "type": "SOCKADDR" + }, + { + "name": "GroupLength", + "type": "int" + }, + { + "name": "FilterMode", + "type": "MULTICAST_MODE_TYPE" + }, + { + "name": "SourceCount", + "type": "ULONG" + }, + { + "name": "SourceList", + "type": "SOCKADDR_STORAGE" + } + ], + "getsourcefilter": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Interface", + "type": "ULONG" + }, + { + "name": "Group", + "type": "SOCKADDR" + }, + { + "name": "GroupLength", + "type": "int" + }, + { + "name": "FilterMode", + "type": "MULTICAST_MODE_TYPE" + }, + { + "name": "SourceCount", + "type": "ULONG" + }, + { + "name": "SourceList", + "type": "SOCKADDR_STORAGE" + } + ], + "WSAGetIPUserMtu": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Mtu", + "type": "DWORD" + } + ], + "WSASetIPUserMtu": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Mtu", + "type": "DWORD" + } + ], + "WSAGetFailConnectOnIcmpError": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Enabled", + "type": "DWORD" + } + ], + "WSASetFailConnectOnIcmpError": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Enabled", + "type": "DWORD" + } + ], + "WSAGetIcmpErrorInfo": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Info", + "type": "ICMP_ERROR_INFO" + } + ], + "WSAGetUdpSendMessageSize": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "MsgSize", + "type": "DWORD" + } + ], + "WSASetUdpSendMessageSize": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "MsgSize", + "type": "DWORD" + } + ], + "WSAGetUdpRecvMaxCoalescedSize": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "MaxCoalescedMsgSize", + "type": "DWORD" + } + ], + "WSASetUdpRecvMaxCoalescedSize": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "MaxCoalescedMsgSize", + "type": "DWORD" + } + ], + "WSCEnumProtocols": [ + { + "name": "lpiProtocols", + "type": "LPINT" + }, + { + "name": "lpProtocolBuffer", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCEnumProtocols32": [ + { + "name": "lpiProtocols", + "type": "LPINT" + }, + { + "name": "lpProtocolBuffer", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCDeinstallProvider": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCDeinstallProvider32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCInstallProvider": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "WCHAR" + }, + { + "name": "lpProtocolInfoList", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "dwNumberOfEntries", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCInstallProvider64_32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "WCHAR" + }, + { + "name": "lpProtocolInfoList", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "dwNumberOfEntries", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCGetProviderPath": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "WCHAR" + }, + { + "name": "lpProviderDllPathLen", + "type": "LPINT" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCGetProviderPath32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "WCHAR" + }, + { + "name": "lpProviderDllPathLen", + "type": "LPINT" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCUpdateProvider": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "WCHAR" + }, + { + "name": "lpProtocolInfoList", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "dwNumberOfEntries", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCUpdateProvider32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "WCHAR" + }, + { + "name": "lpProtocolInfoList", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "dwNumberOfEntries", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCSetProviderInfo": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "InfoType", + "type": "WSC_PROVIDER_INFO_TYPE" + }, + { + "name": "Info", + "type": "PBYTE" + }, + { + "name": "InfoSize", + "type": "size_t" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCGetProviderInfo": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "InfoType", + "type": "WSC_PROVIDER_INFO_TYPE" + }, + { + "name": "Info", + "type": "PBYTE" + }, + { + "name": "InfoSize", + "type": "size_t" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCSetProviderInfo32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "InfoType", + "type": "WSC_PROVIDER_INFO_TYPE" + }, + { + "name": "Info", + "type": "PBYTE" + }, + { + "name": "InfoSize", + "type": "size_t" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCGetProviderInfo32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "InfoType", + "type": "WSC_PROVIDER_INFO_TYPE" + }, + { + "name": "Info", + "type": "PBYTE" + }, + { + "name": "InfoSize", + "type": "size_t" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCSetApplicationCategory": [ + { + "name": "Path", + "type": "LPCWSTR" + }, + { + "name": "PathLength", + "type": "DWORD" + }, + { + "name": "Extra", + "type": "LPCWSTR" + }, + { + "name": "ExtraLength", + "type": "DWORD" + }, + { + "name": "PermittedLspCategories", + "type": "DWORD" + }, + { + "name": "pPrevPermLspCat", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCGetApplicationCategory": [ + { + "name": "Path", + "type": "LPCWSTR" + }, + { + "name": "PathLength", + "type": "DWORD" + }, + { + "name": "Extra", + "type": "LPCWSTR" + }, + { + "name": "ExtraLength", + "type": "DWORD" + }, + { + "name": "pPermittedLspCategories", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCEnumNameSpaceProviders32": [ + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpnspBuffer", + "type": "LPWSANAMESPACE_INFOW" + } + ], + "WSCEnumNameSpaceProvidersEx32": [ + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpnspBuffer", + "type": "LPWSANAMESPACE_INFOEXW" + } + ], + "WSCInstallNameSpace": [ + { + "name": "lpszIdentifier", + "type": "LPWSTR" + }, + { + "name": "lpszPathName", + "type": "LPWSTR" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "lpProviderId", + "type": "LPGUID" + } + ], + "WSCUnInstallNameSpace": [ + { + "name": "lpProviderId", + "type": "LPGUID" + } + ], + "WSCInstallNameSpaceEx": [ + { + "name": "lpszIdentifier", + "type": "LPWSTR" + }, + { + "name": "lpszPathName", + "type": "LPWSTR" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpProviderSpecific", + "type": "LPBLOB" + } + ], + "WSCInstallNameSpaceEx32": [ + { + "name": "lpszIdentifier", + "type": "LPWSTR" + }, + { + "name": "lpszPathName", + "type": "LPWSTR" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpProviderSpecific", + "type": "LPBLOB" + } + ], + "WSCEnableNSProvider": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "fEnable", + "type": "BOOL" + } + ], + "WSCEnableNSProvider32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "fEnable", + "type": "BOOL" + } + ], + "WSCInstallProviderAndChains64_32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "LPWSTR" + }, + { + "name": "lpszProviderDllPath32", + "type": "LPWSTR" + }, + { + "name": "lpszLspName", + "type": "LPWSTR" + }, + { + "name": "dwServiceFlags", + "type": "DWORD" + }, + { + "name": "lpProtocolInfoList", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "dwNumberOfEntries", + "type": "DWORD" + }, + { + "name": "lpdwCatalogEntryId", + "type": "LPDWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSAAdvertiseProvider": [ + { + "name": "puuidProviderId", + "type": "GUID" + }, + { + "name": "pNSPv2Routine", + "type": "LPCNSPV2_ROUTINE" + } + ], + "WSAUnadvertiseProvider": [ + { + "name": "puuidProviderId", + "type": "GUID" + } + ], + "WSAProviderCompleteAsyncCall": [ + { + "name": "hAsyncCall", + "type": "HANDLE" + }, + { + "name": "iRetCode", + "type": "INT" + } + ], + "inet_addr": [ + { + "name": "cp", + "type": "char" + } + ], + "WSAAsyncGetHostByName": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "name", + "type": "char" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "WSAAsyncGetHostByAddr": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "addr", + "type": "char" + }, + { + "name": "len", + "type": "int" + }, + { + "name": "type", + "type": "int" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "__WSAFDIsSet": [ + { + "name": "fd", + "type": "SOCKET" + }, + { + "name": "VOID", + "type": "fd_set" + } + ], + "bind": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "name", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "namelen", + "type": "int" + } + ], + "closesocket": [ + { + "name": "s", + "type": "SOCKET" + } + ], + "ioctlsocket": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "cmd", + "type": "long" + }, + { + "name": "argp", + "type": "u_long" + } + ], + "getpeername": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "name", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "namelen", + "type": "int" + } + ], + "getsockname": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "name", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "namelen", + "type": "int" + } + ], + "getsockopt": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "level", + "type": "int" + }, + { + "name": "optname", + "type": "int" + }, + { + "name": "optval", + "type": "char" + }, + { + "name": "optlen", + "type": "int" + } + ], + "htonl": [ + { + "name": "hostlong", + "type": "u_long" + } + ], + "htons": [ + { + "name": "hostshort", + "type": "u_short" + } + ], + "ntohl": [ + { + "name": "netlong", + "type": "u_long" + } + ], + "ntohs": [ + { + "name": "netshort", + "type": "u_short" + } + ], + "recv": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "len", + "type": "int" + }, + { + "name": "flags", + "type": "int" + } + ], + "recvfrom": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "len", + "type": "int" + }, + { + "name": "flags", + "type": "int" + }, + { + "name": "from", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "fromlen", + "type": "int" + } + ], + "sendto": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "len", + "type": "int" + }, + { + "name": "flags", + "type": "int" + }, + { + "name": "to", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "tolen", + "type": "int" + } + ], + "setsockopt": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "level", + "type": "int" + }, + { + "name": "optname", + "type": "int" + }, + { + "name": "optval", + "type": "char" + }, + { + "name": "optlen", + "type": "int" + } + ], + "shutdown": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "how", + "type": "int" + } + ], + "gethostname": [ + { + "name": "name", + "type": "char" + }, + { + "name": "namelen", + "type": "int" + } + ], + "WSAStartup": [ + { + "name": "wVersionRequested", + "type": "WORD" + }, + { + "name": "lpWSAData", + "type": "LPWSADATA" + } + ], + "WSACleanup": [ + { + "name": "VOID", + "type": "void" + } + ], + "WSASetLastError": [ + { + "name": "iError", + "type": "int" + } + ], + "WSAGetLastError": [ + { + "name": "VOID", + "type": "void" + } + ], + "WSAAsyncGetServByName": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "name", + "type": "char" + }, + { + "name": "proto", + "type": "char" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "WSAAsyncGetServByPort": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "port", + "type": "int" + }, + { + "name": "proto", + "type": "char" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "WSAAsyncGetProtoByName": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "name", + "type": "char" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "WSAAsyncGetProtoByNumber": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "number", + "type": "int" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "WSACancelAsyncRequest": [ + { + "name": "hAsyncTaskHandle", + "type": "HANDLE" + } + ], + "WSAAsyncSelect": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "lEvent", + "type": "long" + } + ], + "accept": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "addr", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "addrlen", + "type": "int" + } + ], + "connect": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "name", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "namelen", + "type": "int" + } + ], + "listen": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "backlog", + "type": "int" + } + ], + "select": [ + { + "name": "nfds", + "type": "int" + }, + { + "name": "readfds", + "type": "fd_set" + }, + { + "name": "writefds", + "type": "fd_set" + }, + { + "name": "exceptfds", + "type": "fd_set" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + } + ], + "send": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "len", + "type": "int" + }, + { + "name": "flags", + "type": "int" + } + ], + "socket": [ + { + "name": "af", + "type": "int" + }, + { + "name": "type", + "type": "int" + }, + { + "name": "protocol", + "type": "int" + } + ], + "GetHostNameW": [ + { + "name": "name", + "type": "PWSTR" + }, + { + "name": "namelen", + "type": "int" + } + ], + "WSAAccept": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "addr", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "addrlen", + "type": "LPINT" + }, + { + "name": "lpfnCondition", + "type": "LPCONDITIONPROC" + }, + { + "name": "dwCallbackData", + "type": "DWORD_PTR" + } + ], + "WSACloseEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "WSAConnect": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "name", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "namelen", + "type": "int" + }, + { + "name": "lpCallerData", + "type": "LPWSABUF" + }, + { + "name": "lpCalleeData", + "type": "LPWSABUF" + }, + { + "name": "lpSQOS", + "type": "LPQOS" + }, + { + "name": "lpGQOS", + "type": "LPQOS" + } + ], + "WSAConnectByNameW": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "nodename", + "type": "LPWSTR" + }, + { + "name": "servicename", + "type": "LPWSTR" + }, + { + "name": "LocalAddressLength", + "type": "LPDWORD" + }, + { + "name": "LocalAddress", + "type": "LPSOCKADDR" + }, + { + "name": "RemoteAddressLength", + "type": "LPDWORD" + }, + { + "name": "RemoteAddress", + "type": "LPSOCKADDR" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "Reserved", + "type": "LPWSAOVERLAPPED" + } + ], + "WSAConnectByNameA": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "nodename", + "type": "LPCSTR" + }, + { + "name": "servicename", + "type": "LPCSTR" + }, + { + "name": "LocalAddressLength", + "type": "LPDWORD" + }, + { + "name": "LocalAddress", + "type": "LPSOCKADDR" + }, + { + "name": "RemoteAddressLength", + "type": "LPDWORD" + }, + { + "name": "RemoteAddress", + "type": "LPSOCKADDR" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "Reserved", + "type": "LPWSAOVERLAPPED" + } + ], + "WSAConnectByList": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "SocketAddress", + "type": "PSOCKET_ADDRESS_LIST" + }, + { + "name": "LocalAddressLength", + "type": "LPDWORD" + }, + { + "name": "LocalAddress", + "type": "LPSOCKADDR" + }, + { + "name": "RemoteAddressLength", + "type": "LPDWORD" + }, + { + "name": "RemoteAddress", + "type": "LPSOCKADDR" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "Reserved", + "type": "LPWSAOVERLAPPED" + } + ], + "WSACreateEvent": [ + { + "name": "VOID", + "type": "void" + } + ], + "WSADuplicateSocketA": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "dwProcessId", + "type": "DWORD" + }, + { + "name": "lpProtocolInfo", + "type": "LPWSAPROTOCOL_INFOA" + } + ], + "WSADuplicateSocketW": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "dwProcessId", + "type": "DWORD" + }, + { + "name": "lpProtocolInfo", + "type": "LPWSAPROTOCOL_INFOW" + } + ], + "WSAEnumNetworkEvents": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "hEventObject", + "type": "HANDLE" + }, + { + "name": "lpNetworkEvents", + "type": "LPWSANETWORKEVENTS" + } + ], + "WSAEnumProtocolsA": [ + { + "name": "lpiProtocols", + "type": "LPINT" + }, + { + "name": "lpProtocolBuffer", + "type": "LPWSAPROTOCOL_INFOA" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "WSAEnumProtocolsW": [ + { + "name": "lpiProtocols", + "type": "LPINT" + }, + { + "name": "lpProtocolBuffer", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "WSAEventSelect": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "hEventObject", + "type": "HANDLE" + }, + { + "name": "lNetworkEvents", + "type": "long" + } + ], + "WSAGetOverlappedResult": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "lpOverlapped", + "type": "LPWSAOVERLAPPED" + }, + { + "name": "lpcbTransfer", + "type": "LPDWORD" + }, + { + "name": "fWait", + "type": "BOOL" + }, + { + "name": "lpdwFlags", + "type": "LPDWORD" + } + ], + "WSAGetQOSByName": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "lpQOSName", + "type": "LPWSABUF" + }, + { + "name": "lpQOS", + "type": "LPQOS" + } + ], + "WSAHtonl": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "hostlong", + "type": "u_long" + }, + { + "name": "lpnetlong", + "type": "u_long" + } + ], + "WSAHtons": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "hostshort", + "type": "u_short" + }, + { + "name": "lpnetshort", + "type": "u_short" + } + ], + "WSAIoctl": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "dwIoControlCode", + "type": "DWORD" + }, + { + "name": "lpvInBuffer", + "type": "LPVOID" + }, + { + "name": "cbInBuffer", + "type": "DWORD" + }, + { + "name": "lpvOutBuffer", + "type": "LPVOID" + }, + { + "name": "cbOutBuffer", + "type": "DWORD" + }, + { + "name": "lpcbBytesReturned", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPWSAOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPWSAOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "WSAJoinLeaf": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "name", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "namelen", + "type": "int" + }, + { + "name": "lpCallerData", + "type": "LPWSABUF" + }, + { + "name": "lpCalleeData", + "type": "LPWSABUF" + }, + { + "name": "lpSQOS", + "type": "LPQOS" + }, + { + "name": "lpGQOS", + "type": "LPQOS" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WSANtohl": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "netlong", + "type": "u_long" + }, + { + "name": "lphostlong", + "type": "u_long" + } + ], + "WSANtohs": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "netshort", + "type": "u_short" + }, + { + "name": "lphostshort", + "type": "u_short" + } + ], + "WSARecv": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "lpBuffers", + "type": "LPWSABUF" + }, + { + "name": "dwBufferCount", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesRecvd", + "type": "LPDWORD" + }, + { + "name": "lpFlags", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPWSAOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPWSAOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "WSARecvDisconnect": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "lpInboundDisconnectData", + "type": "LPWSABUF" + } + ], + "WSARecvFrom": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "lpBuffers", + "type": "LPWSABUF" + }, + { + "name": "dwBufferCount", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesRecvd", + "type": "LPDWORD" + }, + { + "name": "lpFlags", + "type": "LPDWORD" + }, + { + "name": "lpFrom", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "lpFromlen", + "type": "LPINT" + }, + { + "name": "lpOverlapped", + "type": "LPWSAOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPWSAOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "WSAResetEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "WSASend": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "lpBuffers", + "type": "LPWSABUF" + }, + { + "name": "dwBufferCount", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesSent", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPWSAOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPWSAOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "WSASendMsg": [ + { + "name": "Handle", + "type": "SOCKET" + }, + { + "name": "lpMsg", + "type": "LPWSAMSG" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesSent", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPWSAOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPWSAOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "WSASendDisconnect": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "lpOutboundDisconnectData", + "type": "LPWSABUF" + } + ], + "WSASendTo": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "lpBuffers", + "type": "LPWSABUF" + }, + { + "name": "dwBufferCount", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesSent", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpTo", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "iTolen", + "type": "int" + }, + { + "name": "lpOverlapped", + "type": "LPWSAOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPWSAOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "WSASetEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "WSASocketA": [ + { + "name": "af", + "type": "int" + }, + { + "name": "type", + "type": "int" + }, + { + "name": "protocol", + "type": "int" + }, + { + "name": "lpProtocolInfo", + "type": "LPWSAPROTOCOL_INFOA" + }, + { + "name": "g", + "type": "GROUP" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WSASocketW": [ + { + "name": "af", + "type": "int" + }, + { + "name": "type", + "type": "int" + }, + { + "name": "protocol", + "type": "int" + }, + { + "name": "lpProtocolInfo", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "g", + "type": "GROUP" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WSAWaitForMultipleEvents": [ + { + "name": "cEvents", + "type": "DWORD" + }, + { + "name": "lphEvents", + "type": "HANDLE" + }, + { + "name": "fWaitAll", + "type": "BOOL" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "fAlertable", + "type": "BOOL" + } + ], + "WSAAddressToStringA": [ + { + "name": "lpsaAddress", + "type": "LPSOCKADDR" + }, + { + "name": "dwAddressLength", + "type": "DWORD" + }, + { + "name": "lpProtocolInfo", + "type": "LPWSAPROTOCOL_INFOA" + }, + { + "name": "lpszAddressString", + "type": "LPSTR" + }, + { + "name": "lpdwAddressStringLength", + "type": "LPDWORD" + } + ], + "WSAAddressToStringW": [ + { + "name": "lpsaAddress", + "type": "LPSOCKADDR" + }, + { + "name": "dwAddressLength", + "type": "DWORD" + }, + { + "name": "lpProtocolInfo", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "lpszAddressString", + "type": "LPWSTR" + }, + { + "name": "lpdwAddressStringLength", + "type": "LPDWORD" + } + ], + "WSAStringToAddressA": [ + { + "name": "AddressString", + "type": "LPSTR" + }, + { + "name": "AddressFamily", + "type": "INT" + }, + { + "name": "lpProtocolInfo", + "type": "LPWSAPROTOCOL_INFOA" + }, + { + "name": "lpAddress", + "type": "LPSOCKADDR" + }, + { + "name": "lpAddressLength", + "type": "LPINT" + } + ], + "WSAStringToAddressW": [ + { + "name": "AddressString", + "type": "LPWSTR" + }, + { + "name": "AddressFamily", + "type": "INT" + }, + { + "name": "lpProtocolInfo", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "lpAddress", + "type": "LPSOCKADDR" + }, + { + "name": "lpAddressLength", + "type": "LPINT" + } + ], + "WSALookupServiceBeginA": [ + { + "name": "lpqsRestrictions", + "type": "LPWSAQUERYSETA" + }, + { + "name": "dwControlFlags", + "type": "DWORD" + }, + { + "name": "lphLookup", + "type": "LPHANDLE" + } + ], + "WSALookupServiceBeginW": [ + { + "name": "lpqsRestrictions", + "type": "LPWSAQUERYSETW" + }, + { + "name": "dwControlFlags", + "type": "DWORD" + }, + { + "name": "lphLookup", + "type": "LPHANDLE" + } + ], + "WSALookupServiceNextA": [ + { + "name": "hLookup", + "type": "HANDLE" + }, + { + "name": "dwControlFlags", + "type": "DWORD" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpqsResults", + "type": "LPWSAQUERYSETA" + } + ], + "WSALookupServiceNextW": [ + { + "name": "hLookup", + "type": "HANDLE" + }, + { + "name": "dwControlFlags", + "type": "DWORD" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpqsResults", + "type": "LPWSAQUERYSETW" + } + ], + "WSALookupServiceEnd": [ + { + "name": "hLookup", + "type": "HANDLE" + } + ], + "WSAInstallServiceClassA": [ + { + "name": "lpServiceClassInfo", + "type": "LPWSASERVICECLASSINFOA" + } + ], + "WSAInstallServiceClassW": [ + { + "name": "lpServiceClassInfo", + "type": "LPWSASERVICECLASSINFOW" + } + ], + "WSARemoveServiceClass": [ + { + "name": "lpServiceClassId", + "type": "LPGUID" + } + ], + "WSAGetServiceClassInfoA": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpServiceClassId", + "type": "LPGUID" + }, + { + "name": "lpdwBufSize", + "type": "LPDWORD" + }, + { + "name": "lpServiceClassInfo", + "type": "LPWSASERVICECLASSINFOA" + } + ], + "WSAGetServiceClassInfoW": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpServiceClassId", + "type": "LPGUID" + }, + { + "name": "lpdwBufSize", + "type": "LPDWORD" + }, + { + "name": "lpServiceClassInfo", + "type": "LPWSASERVICECLASSINFOW" + } + ], + "WSAEnumNameSpaceProvidersA": [ + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpnspBuffer", + "type": "LPWSANAMESPACE_INFOA" + } + ], + "WSAEnumNameSpaceProvidersW": [ + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpnspBuffer", + "type": "LPWSANAMESPACE_INFOW" + } + ], + "WSAEnumNameSpaceProvidersExA": [ + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpnspBuffer", + "type": "LPWSANAMESPACE_INFOEXA" + } + ], + "WSAEnumNameSpaceProvidersExW": [ + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpnspBuffer", + "type": "LPWSANAMESPACE_INFOEXW" + } + ], + "WSAGetServiceClassNameByClassIdA": [ + { + "name": "lpServiceClassId", + "type": "LPGUID" + }, + { + "name": "lpszServiceClassName", + "type": "LPSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "WSAGetServiceClassNameByClassIdW": [ + { + "name": "lpServiceClassId", + "type": "LPGUID" + }, + { + "name": "lpszServiceClassName", + "type": "LPWSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "WSASetServiceA": [ + { + "name": "lpqsRegInfo", + "type": "LPWSAQUERYSETA" + }, + { + "name": "essoperation", + "type": "WSAESETSERVICEOP" + }, + { + "name": "dwControlFlags", + "type": "DWORD" + } + ], + "WSASetServiceW": [ + { + "name": "lpqsRegInfo", + "type": "LPWSAQUERYSETW" + }, + { + "name": "essoperation", + "type": "WSAESETSERVICEOP" + }, + { + "name": "dwControlFlags", + "type": "DWORD" + } + ], + "WSAProviderConfigChange": [ + { + "name": "lpNotificationHandle", + "type": "LPHANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPWSAOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPWSAOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "WSAPoll": [ + { + "name": "fdArray", + "type": "LPWSAPOLLFD" + }, + { + "name": "fds", + "type": "ULONG" + }, + { + "name": "timeout", + "type": "INT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wsbonline_dll.json b/qiling/extensions/windows_sdk/defs/wsbonline_dll.json new file mode 100644 index 000000000..d7f1ebc95 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wsbonline_dll.json @@ -0,0 +1,20 @@ +{ + "RegisterOnlineBackupWithWindowsServerBackup": [ + { + "name": "pOBRegistrationInfo", + "type": "WSB_OB_REGISTRATION_INFO" + } + ], + "DeregisterOnlineBackupFromWindowsServerBackup": [ + { + "name": "guidSnapinId", + "type": "GUID" + } + ], + "UpdateOBStatusInWindowsServerBackup": [ + { + "name": "pOBRegistrationInfo", + "type": "WSB_OB_STATUS_INFO" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wscapi_dll.json b/qiling/extensions/windows_sdk/defs/wscapi_dll.json new file mode 100644 index 000000000..18c8c75da --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wscapi_dll.json @@ -0,0 +1,36 @@ +{ + "WscRegisterForChanges": [ + { + "name": "Reserved", + "type": "LPVOID" + }, + { + "name": "phCallbackRegistration", + "type": "PHANDLE" + }, + { + "name": "lpCallbackAddress", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "pContext", + "type": "PVOID" + } + ], + "WscUnRegisterChanges": [ + { + "name": "hRegistrationHandle", + "type": "HANDLE" + } + ], + "WscGetSecurityProviderHealth": [ + { + "name": "Providers", + "type": "DWORD" + }, + { + "name": "pHealth", + "type": "PWSC_SECURITY_PROVIDER_HEALTH" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wsclient_dll.json b/qiling/extensions/windows_sdk/defs/wsclient_dll.json new file mode 100644 index 000000000..bbf4c002c --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wsclient_dll.json @@ -0,0 +1,24 @@ +{ + "CheckDeveloperLicense": [ + { + "name": "pExpiration", + "type": "FILETIME" + } + ], + "AcquireDeveloperLicense": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "pExpiration", + "type": "FILETIME" + } + ], + "RemoveDeveloperLicense": [ + { + "name": "hwndParent", + "type": "HWND" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wsdapi_dll.json b/qiling/extensions/windows_sdk/defs/wsdapi_dll.json new file mode 100644 index 000000000..fe208dd73 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wsdapi_dll.json @@ -0,0 +1,28 @@ +{ + "WSDCreateOutboundAttachment": [ + { + "name": "ppAttachment", + "type": "IWSDOutboundAttachment" + } + ], + "WSDXMLGetNameFromBuiltinNamespace": [ + { + "name": "pszNamespace", + "type": "LPCWSTR" + }, + { + "name": "pszName", + "type": "LPCWSTR" + }, + { + "name": "ppName", + "type": "WSDXML_NAME" + } + ], + "WSDXMLCreateContext": [ + { + "name": "ppContext", + "type": "IWSDXMLContext" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wsnmp32_dll.json b/qiling/extensions/windows_sdk/defs/wsnmp32_dll.json new file mode 100644 index 000000000..ac1c222c9 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wsnmp32_dll.json @@ -0,0 +1,622 @@ +{ + "SnmpGetTranslateMode": [ + { + "name": "nTranslateMode", + "type": "smiLPUINT32" + } + ], + "SnmpSetTranslateMode": [ + { + "name": "nTranslateMode", + "type": "smiUINT32" + } + ], + "SnmpGetRetransmitMode": [ + { + "name": "nRetransmitMode", + "type": "smiLPUINT32" + } + ], + "SnmpSetRetransmitMode": [ + { + "name": "nRetransmitMode", + "type": "smiUINT32" + } + ], + "SnmpGetTimeout": [ + { + "name": "hEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "nPolicyTimeout", + "type": "smiLPTIMETICKS" + }, + { + "name": "nActualTimeout", + "type": "smiLPTIMETICKS" + } + ], + "SnmpSetTimeout": [ + { + "name": "hEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "nPolicyTimeout", + "type": "smiTIMETICKS" + } + ], + "SnmpGetRetry": [ + { + "name": "hEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "nPolicyRetry", + "type": "smiLPUINT32" + }, + { + "name": "nActualRetry", + "type": "smiLPUINT32" + } + ], + "SnmpSetRetry": [ + { + "name": "hEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "nPolicyRetry", + "type": "smiUINT32" + } + ], + "SnmpGetVendorInfo": [ + { + "name": "vendorInfo", + "type": "smiLPVENDORINFO" + } + ], + "SnmpStartup": [ + { + "name": "nMajorVersion", + "type": "smiLPUINT32" + }, + { + "name": "nMinorVersion", + "type": "smiLPUINT32" + }, + { + "name": "nLevel", + "type": "smiLPUINT32" + }, + { + "name": "nTranslateMode", + "type": "smiLPUINT32" + }, + { + "name": "nRetransmitMode", + "type": "smiLPUINT32" + } + ], + "SnmpCleanup": [ + { + "name": "VOID", + "type": "void" + } + ], + "SnmpOpen": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "UINT" + } + ], + "SnmpClose": [ + { + "name": "session", + "type": "HSNMP_SESSION" + } + ], + "SnmpSendMsg": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "srcEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "dstEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "context", + "type": "HSNMP_CONTEXT" + }, + { + "name": "PDU", + "type": "HSNMP_PDU" + } + ], + "SnmpRecvMsg": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "srcEntity", + "type": "LPHSNMP_ENTITY" + }, + { + "name": "dstEntity", + "type": "LPHSNMP_ENTITY" + }, + { + "name": "context", + "type": "LPHSNMP_CONTEXT" + }, + { + "name": "PDU", + "type": "LPHSNMP_PDU" + } + ], + "SnmpRegister": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "srcEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "dstEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "context", + "type": "HSNMP_CONTEXT" + }, + { + "name": "notification", + "type": "smiLPCOID" + }, + { + "name": "state", + "type": "smiUINT32" + } + ], + "SnmpCreateSession": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "UINT" + }, + { + "name": "fCallBack", + "type": "SNMPAPI_CALLBACK" + }, + { + "name": "lpClientData", + "type": "LPVOID" + } + ], + "SnmpListen": [ + { + "name": "hEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "lStatus", + "type": "SNMPAPI_STATUS" + } + ], + "SnmpCancelMsg": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "reqId", + "type": "smiINT32" + } + ], + "SnmpStartupEx": [ + { + "name": "nMajorVersion", + "type": "smiLPUINT32" + }, + { + "name": "nMinorVersion", + "type": "smiLPUINT32" + }, + { + "name": "nLevel", + "type": "smiLPUINT32" + }, + { + "name": "nTranslateMode", + "type": "smiLPUINT32" + }, + { + "name": "nRetransmitMode", + "type": "smiLPUINT32" + } + ], + "SnmpCleanupEx": [ + { + "name": "VOID", + "type": "void" + } + ], + "SnmpStrToEntity": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "string", + "type": "LPCSTR" + } + ], + "SnmpEntityToStr": [ + { + "name": "entity", + "type": "HSNMP_ENTITY" + }, + { + "name": "size", + "type": "smiUINT32" + }, + { + "name": "string", + "type": "LPSTR" + } + ], + "SnmpFreeEntity": [ + { + "name": "entity", + "type": "HSNMP_ENTITY" + } + ], + "SnmpStrToContext": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "string", + "type": "smiLPCOCTETS" + } + ], + "SnmpContextToStr": [ + { + "name": "context", + "type": "HSNMP_CONTEXT" + }, + { + "name": "string", + "type": "smiLPOCTETS" + } + ], + "SnmpFreeContext": [ + { + "name": "context", + "type": "HSNMP_CONTEXT" + } + ], + "SnmpSetPort": [ + { + "name": "hEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "nPort", + "type": "UINT" + } + ], + "SnmpCreatePdu": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "PDU_type", + "type": "smiINT" + }, + { + "name": "request_id", + "type": "smiINT32" + }, + { + "name": "error_status", + "type": "smiINT" + }, + { + "name": "error_index", + "type": "smiINT" + }, + { + "name": "varbindlist", + "type": "HSNMP_VBL" + } + ], + "SnmpGetPduData": [ + { + "name": "PDU", + "type": "HSNMP_PDU" + }, + { + "name": "PDU_type", + "type": "smiLPINT" + }, + { + "name": "request_id", + "type": "smiLPINT32" + }, + { + "name": "error_status", + "type": "smiLPINT" + }, + { + "name": "error_index", + "type": "smiLPINT" + }, + { + "name": "varbindlist", + "type": "LPHSNMP_VBL" + } + ], + "SnmpSetPduData": [ + { + "name": "PDU", + "type": "HSNMP_PDU" + }, + { + "name": "PDU_type", + "type": "smiINT" + }, + { + "name": "request_id", + "type": "smiINT32" + }, + { + "name": "non_repeaters", + "type": "smiINT" + }, + { + "name": "max_repetitions", + "type": "smiINT" + }, + { + "name": "varbindlist", + "type": "HSNMP_VBL" + } + ], + "SnmpDuplicatePdu": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "PDU", + "type": "HSNMP_PDU" + } + ], + "SnmpFreePdu": [ + { + "name": "PDU", + "type": "HSNMP_PDU" + } + ], + "SnmpCreateVbl": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "name", + "type": "smiLPCOID" + }, + { + "name": "value", + "type": "smiLPCVALUE" + } + ], + "SnmpDuplicateVbl": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "vbl", + "type": "HSNMP_VBL" + } + ], + "SnmpFreeVbl": [ + { + "name": "vbl", + "type": "HSNMP_VBL" + } + ], + "SnmpCountVbl": [ + { + "name": "vbl", + "type": "HSNMP_VBL" + } + ], + "SnmpGetVb": [ + { + "name": "vbl", + "type": "HSNMP_VBL" + }, + { + "name": "index", + "type": "smiUINT32" + }, + { + "name": "name", + "type": "smiLPOID" + }, + { + "name": "value", + "type": "smiLPVALUE" + } + ], + "SnmpSetVb": [ + { + "name": "vbl", + "type": "HSNMP_VBL" + }, + { + "name": "index", + "type": "smiUINT32" + }, + { + "name": "name", + "type": "smiLPCOID" + }, + { + "name": "value", + "type": "smiLPCVALUE" + } + ], + "SnmpDeleteVb": [ + { + "name": "vbl", + "type": "HSNMP_VBL" + }, + { + "name": "index", + "type": "smiUINT32" + } + ], + "SnmpGetLastError": [ + { + "name": "session", + "type": "HSNMP_SESSION" + } + ], + "SnmpStrToOid": [ + { + "name": "string", + "type": "LPCSTR" + }, + { + "name": "dstOID", + "type": "smiLPOID" + } + ], + "SnmpOidToStr": [ + { + "name": "srcOID", + "type": "smiLPCOID" + }, + { + "name": "size", + "type": "smiUINT32" + }, + { + "name": "string", + "type": "LPSTR" + } + ], + "SnmpOidCopy": [ + { + "name": "srcOID", + "type": "smiLPCOID" + }, + { + "name": "dstOID", + "type": "smiLPOID" + } + ], + "SnmpOidCompare": [ + { + "name": "xOID", + "type": "smiLPCOID" + }, + { + "name": "yOID", + "type": "smiLPCOID" + }, + { + "name": "maxlen", + "type": "smiUINT32" + }, + { + "name": "result", + "type": "smiLPINT" + } + ], + "SnmpEncodeMsg": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "srcEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "dstEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "context", + "type": "HSNMP_CONTEXT" + }, + { + "name": "pdu", + "type": "HSNMP_PDU" + }, + { + "name": "msgBufDesc", + "type": "smiLPOCTETS" + } + ], + "SnmpDecodeMsg": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "srcEntity", + "type": "LPHSNMP_ENTITY" + }, + { + "name": "dstEntity", + "type": "LPHSNMP_ENTITY" + }, + { + "name": "context", + "type": "LPHSNMP_CONTEXT" + }, + { + "name": "pdu", + "type": "LPHSNMP_PDU" + }, + { + "name": "msgBufDesc", + "type": "smiLPCOCTETS" + } + ], + "SnmpFreeDescriptor": [ + { + "name": "syntax", + "type": "smiUINT32" + }, + { + "name": "descriptor", + "type": "smiLPOPAQUE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/wtsapi32_dll.json b/qiling/extensions/windows_sdk/defs/wtsapi32_dll.json new file mode 100644 index 000000000..157b63fd7 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/wtsapi32_dll.json @@ -0,0 +1,1100 @@ +{ + "WTSSetRenderHint": [ + { + "name": "pRenderHintID", + "type": "UINT64" + }, + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "renderHintType", + "type": "DWORD" + }, + { + "name": "cbHintDataLength", + "type": "DWORD" + }, + { + "name": "pHintData", + "type": "BYTE" + } + ], + "WTSStopRemoteControlSession": [ + { + "name": "LogonId", + "type": "ULONG" + } + ], + "WTSStartRemoteControlSessionW": [ + { + "name": "pTargetServerName", + "type": "LPWSTR" + }, + { + "name": "TargetLogonId", + "type": "ULONG" + }, + { + "name": "HotkeyVk", + "type": "BYTE" + }, + { + "name": "HotkeyModifiers", + "type": "USHORT" + } + ], + "WTSStartRemoteControlSessionA": [ + { + "name": "pTargetServerName", + "type": "LPSTR" + }, + { + "name": "TargetLogonId", + "type": "ULONG" + }, + { + "name": "HotkeyVk", + "type": "BYTE" + }, + { + "name": "HotkeyModifiers", + "type": "USHORT" + } + ], + "WTSConnectSessionA": [ + { + "name": "LogonId", + "type": "ULONG" + }, + { + "name": "TargetLogonId", + "type": "ULONG" + }, + { + "name": "pPassword", + "type": "PSTR" + }, + { + "name": "bWait", + "type": "BOOL" + } + ], + "WTSConnectSessionW": [ + { + "name": "LogonId", + "type": "ULONG" + }, + { + "name": "TargetLogonId", + "type": "ULONG" + }, + { + "name": "pPassword", + "type": "PWSTR" + }, + { + "name": "bWait", + "type": "BOOL" + } + ], + "WTSEnumerateServersW": [ + { + "name": "pDomainName", + "type": "LPWSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "Version", + "type": "DWORD" + }, + { + "name": "ppServerInfo", + "type": "PWTS_SERVER_INFOW" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSEnumerateServersA": [ + { + "name": "pDomainName", + "type": "LPSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "Version", + "type": "DWORD" + }, + { + "name": "ppServerInfo", + "type": "PWTS_SERVER_INFOA" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSOpenServerW": [ + { + "name": "pServerName", + "type": "LPWSTR" + } + ], + "WTSOpenServerA": [ + { + "name": "pServerName", + "type": "LPSTR" + } + ], + "WTSOpenServerExW": [ + { + "name": "pServerName", + "type": "LPWSTR" + } + ], + "WTSOpenServerExA": [ + { + "name": "pServerName", + "type": "LPSTR" + } + ], + "WTSCloseServer": [ + { + "name": "hServer", + "type": "HANDLE" + } + ], + "WTSEnumerateSessionsW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "Version", + "type": "DWORD" + }, + { + "name": "ppSessionInfo", + "type": "PWTS_SESSION_INFOW" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSEnumerateSessionsA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "Version", + "type": "DWORD" + }, + { + "name": "ppSessionInfo", + "type": "PWTS_SESSION_INFOA" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSEnumerateSessionsExW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pLevel", + "type": "DWORD" + }, + { + "name": "Filter", + "type": "DWORD" + }, + { + "name": "ppSessionInfo", + "type": "PWTS_SESSION_INFO_1W" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSEnumerateSessionsExA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pLevel", + "type": "DWORD" + }, + { + "name": "Filter", + "type": "DWORD" + }, + { + "name": "ppSessionInfo", + "type": "PWTS_SESSION_INFO_1A" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSEnumerateProcessesW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "Version", + "type": "DWORD" + }, + { + "name": "ppProcessInfo", + "type": "PWTS_PROCESS_INFOW" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSEnumerateProcessesA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "Version", + "type": "DWORD" + }, + { + "name": "ppProcessInfo", + "type": "PWTS_PROCESS_INFOA" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSTerminateProcess": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "ProcessId", + "type": "DWORD" + }, + { + "name": "ExitCode", + "type": "DWORD" + } + ], + "WTSQuerySessionInformationW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "WTSInfoClass", + "type": "WTS_INFO_CLASS" + }, + { + "name": "ppBuffer", + "type": "LPWSTR" + }, + { + "name": "pBytesReturned", + "type": "DWORD" + } + ], + "WTSQuerySessionInformationA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "WTSInfoClass", + "type": "WTS_INFO_CLASS" + }, + { + "name": "ppBuffer", + "type": "LPSTR" + }, + { + "name": "pBytesReturned", + "type": "DWORD" + } + ], + "WTSQueryUserConfigW": [ + { + "name": "pServerName", + "type": "LPWSTR" + }, + { + "name": "pUserName", + "type": "LPWSTR" + }, + { + "name": "WTSConfigClass", + "type": "WTS_CONFIG_CLASS" + }, + { + "name": "ppBuffer", + "type": "LPWSTR" + }, + { + "name": "pBytesReturned", + "type": "DWORD" + } + ], + "WTSQueryUserConfigA": [ + { + "name": "pServerName", + "type": "LPSTR" + }, + { + "name": "pUserName", + "type": "LPSTR" + }, + { + "name": "WTSConfigClass", + "type": "WTS_CONFIG_CLASS" + }, + { + "name": "ppBuffer", + "type": "LPSTR" + }, + { + "name": "pBytesReturned", + "type": "DWORD" + } + ], + "WTSSetUserConfigW": [ + { + "name": "pServerName", + "type": "LPWSTR" + }, + { + "name": "pUserName", + "type": "LPWSTR" + }, + { + "name": "WTSConfigClass", + "type": "WTS_CONFIG_CLASS" + }, + { + "name": "pBuffer", + "type": "LPWSTR" + }, + { + "name": "DataLength", + "type": "DWORD" + } + ], + "WTSSetUserConfigA": [ + { + "name": "pServerName", + "type": "LPSTR" + }, + { + "name": "pUserName", + "type": "LPSTR" + }, + { + "name": "WTSConfigClass", + "type": "WTS_CONFIG_CLASS" + }, + { + "name": "pBuffer", + "type": "LPSTR" + }, + { + "name": "DataLength", + "type": "DWORD" + } + ], + "WTSSendMessageW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "pTitle", + "type": "LPWSTR" + }, + { + "name": "TitleLength", + "type": "DWORD" + }, + { + "name": "pMessage", + "type": "LPWSTR" + }, + { + "name": "MessageLength", + "type": "DWORD" + }, + { + "name": "Style", + "type": "DWORD" + }, + { + "name": "Timeout", + "type": "DWORD" + }, + { + "name": "pResponse", + "type": "DWORD" + }, + { + "name": "bWait", + "type": "BOOL" + } + ], + "WTSSendMessageA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "pTitle", + "type": "LPSTR" + }, + { + "name": "TitleLength", + "type": "DWORD" + }, + { + "name": "pMessage", + "type": "LPSTR" + }, + { + "name": "MessageLength", + "type": "DWORD" + }, + { + "name": "Style", + "type": "DWORD" + }, + { + "name": "Timeout", + "type": "DWORD" + }, + { + "name": "pResponse", + "type": "DWORD" + }, + { + "name": "bWait", + "type": "BOOL" + } + ], + "WTSDisconnectSession": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "bWait", + "type": "BOOL" + } + ], + "WTSLogoffSession": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "bWait", + "type": "BOOL" + } + ], + "WTSShutdownSystem": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "ShutdownFlag", + "type": "DWORD" + } + ], + "WTSWaitSystemEvent": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "EventMask", + "type": "DWORD" + }, + { + "name": "pEventFlags", + "type": "DWORD" + } + ], + "WTSVirtualChannelOpen": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "pVirtualName", + "type": "LPSTR" + } + ], + "WTSVirtualChannelOpenEx": [ + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "pVirtualName", + "type": "LPSTR" + }, + { + "name": "flags", + "type": "DWORD" + } + ], + "WTSVirtualChannelClose": [ + { + "name": "hChannelHandle", + "type": "HANDLE" + } + ], + "WTSVirtualChannelRead": [ + { + "name": "hChannelHandle", + "type": "HANDLE" + }, + { + "name": "TimeOut", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PCHAR" + }, + { + "name": "BufferSize", + "type": "ULONG" + }, + { + "name": "pBytesRead", + "type": "PULONG" + } + ], + "WTSVirtualChannelWrite": [ + { + "name": "hChannelHandle", + "type": "HANDLE" + }, + { + "name": "Buffer", + "type": "PCHAR" + }, + { + "name": "Length", + "type": "ULONG" + }, + { + "name": "pBytesWritten", + "type": "PULONG" + } + ], + "WTSVirtualChannelPurgeInput": [ + { + "name": "hChannelHandle", + "type": "HANDLE" + } + ], + "WTSVirtualChannelPurgeOutput": [ + { + "name": "hChannelHandle", + "type": "HANDLE" + } + ], + "WTSVirtualChannelQuery": [ + { + "name": "hChannelHandle", + "type": "HANDLE" + }, + { + "name": "VOID", + "type": "WTS_VIRTUAL_CLASS" + }, + { + "name": "ppBuffer", + "type": "PVOID" + }, + { + "name": "pBytesReturned", + "type": "DWORD" + } + ], + "WTSFreeMemory": [ + { + "name": "pMemory", + "type": "PVOID" + } + ], + "WTSRegisterSessionNotification": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WTSUnRegisterSessionNotification": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "WTSRegisterSessionNotificationEx": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WTSUnRegisterSessionNotificationEx": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "hWnd", + "type": "HWND" + } + ], + "WTSQueryUserToken": [ + { + "name": "SessionId", + "type": "ULONG" + }, + { + "name": "phToken", + "type": "PHANDLE" + } + ], + "WTSFreeMemoryExW": [ + { + "name": "WTSTypeClass", + "type": "WTS_TYPE_CLASS" + }, + { + "name": "pMemory", + "type": "PVOID" + }, + { + "name": "NumberOfEntries", + "type": "ULONG" + } + ], + "WTSFreeMemoryExA": [ + { + "name": "WTSTypeClass", + "type": "WTS_TYPE_CLASS" + }, + { + "name": "pMemory", + "type": "PVOID" + }, + { + "name": "NumberOfEntries", + "type": "ULONG" + } + ], + "WTSEnumerateProcessesExW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pLevel", + "type": "DWORD" + }, + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "ppProcessInfo", + "type": "LPWSTR" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSEnumerateProcessesExA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pLevel", + "type": "DWORD" + }, + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "ppProcessInfo", + "type": "LPSTR" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSEnumerateListenersW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListeners", + "type": "PWTSLISTENERNAMEW" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSEnumerateListenersA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListeners", + "type": "PWTSLISTENERNAMEA" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSQueryListenerConfigW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListenerName", + "type": "LPWSTR" + }, + { + "name": "pBuffer", + "type": "PWTSLISTENERCONFIGW" + } + ], + "WTSQueryListenerConfigA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListenerName", + "type": "LPSTR" + }, + { + "name": "pBuffer", + "type": "PWTSLISTENERCONFIGA" + } + ], + "WTSCreateListenerW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListenerName", + "type": "LPWSTR" + }, + { + "name": "pBuffer", + "type": "PWTSLISTENERCONFIGW" + }, + { + "name": "flag", + "type": "DWORD" + } + ], + "WTSCreateListenerA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListenerName", + "type": "LPSTR" + }, + { + "name": "pBuffer", + "type": "PWTSLISTENERCONFIGA" + }, + { + "name": "flag", + "type": "DWORD" + } + ], + "WTSSetListenerSecurityW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListenerName", + "type": "LPWSTR" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "WTSSetListenerSecurityA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListenerName", + "type": "LPSTR" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "WTSGetListenerSecurityW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListenerName", + "type": "LPWSTR" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "WTSGetListenerSecurityA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListenerName", + "type": "LPSTR" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "WTSEnableChildSessions": [ + { + "name": "bEnable", + "type": "BOOL" + } + ], + "WTSIsChildSessionsEnabled": [ + { + "name": "pbEnabled", + "type": "PBOOL" + } + ], + "WTSGetChildSessionId": [ + { + "name": "pSessionId", + "type": "PULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/xinput1_4_dll.json b/qiling/extensions/windows_sdk/defs/xinput1_4_dll.json new file mode 100644 index 000000000..81bf2eb58 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/xinput1_4_dll.json @@ -0,0 +1,92 @@ +{ + "XInputGetState": [ + { + "name": "dwUserIndex", + "type": "DWORD" + }, + { + "name": "pState", + "type": "XINPUT_STATE" + } + ], + "XInputSetState": [ + { + "name": "dwUserIndex", + "type": "DWORD" + }, + { + "name": "pVibration", + "type": "XINPUT_VIBRATION" + } + ], + "XInputGetCapabilities": [ + { + "name": "dwUserIndex", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pCapabilities", + "type": "XINPUT_CAPABILITIES" + } + ], + "XInputEnable": [ + { + "name": "enable", + "type": "BOOL" + } + ], + "XInputGetAudioDeviceIds": [ + { + "name": "dwUserIndex", + "type": "DWORD" + }, + { + "name": "pRenderDeviceId", + "type": "LPWSTR" + }, + { + "name": "pRenderCount", + "type": "UINT" + }, + { + "name": "pCaptureDeviceId", + "type": "LPWSTR" + }, + { + "name": "pCaptureCount", + "type": "UINT" + } + ], + "XInputGetBatteryInformation": [ + { + "name": "dwUserIndex", + "type": "DWORD" + }, + { + "name": "devType", + "type": "BYTE" + }, + { + "name": "pBatteryInformation", + "type": "XINPUT_BATTERY_INFORMATION" + } + ], + "XInputGetKeystroke": [ + { + "name": "dwUserIndex", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "pKeystroke", + "type": "PXINPUT_KEYSTROKE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/defs/xpsprint_dll.json b/qiling/extensions/windows_sdk/defs/xpsprint_dll.json new file mode 100644 index 000000000..29e1bb921 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/xpsprint_dll.json @@ -0,0 +1,74 @@ +{ + "StartXpsPrintJob": [ + { + "name": "printerName", + "type": "LPCWSTR" + }, + { + "name": "jobName", + "type": "LPCWSTR" + }, + { + "name": "outputFileName", + "type": "LPCWSTR" + }, + { + "name": "progressEvent", + "type": "HANDLE" + }, + { + "name": "completionEvent", + "type": "HANDLE" + }, + { + "name": "printablePagesOn", + "type": "UINT8" + }, + { + "name": "printablePagesOnCount", + "type": "UINT32" + }, + { + "name": "xpsPrintJob", + "type": "IXpsPrintJob" + }, + { + "name": "documentStream", + "type": "IXpsPrintJobStream" + }, + { + "name": "printTicketStream", + "type": "IXpsPrintJobStream" + } + ], + "StartXpsPrintJob1": [ + { + "name": "printerName", + "type": "LPCWSTR" + }, + { + "name": "jobName", + "type": "LPCWSTR" + }, + { + "name": "outputFileName", + "type": "LPCWSTR" + }, + { + "name": "progressEvent", + "type": "HANDLE" + }, + { + "name": "completionEvent", + "type": "HANDLE" + }, + { + "name": "xpsPrintJob", + "type": "IXpsPrintJob" + }, + { + "name": "printContentReceiver", + "type": "IXpsOMPackageTarget" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winsdk_dump.py b/qiling/extensions/windows_sdk/winsdk_dump.py new file mode 100644 index 000000000..2b795fdb4 --- /dev/null +++ b/qiling/extensions/windows_sdk/winsdk_dump.py @@ -0,0 +1,90 @@ +#!/usr/bin/env python3 +# +# Cross Platform and Multi Architecture Advanced Binary Emulation Framework +# Built on top of Unicorn emulator (www.unicorn-engine.org) + +# windows sdk data file can download here: 'https://github.com/ohjeongwook/windows_sdk_data.git' + +import json +import os + +result_dict = {} + + +def parse_winsdk(dir): + def PtrDecl_detect(dic): + param_dict = {} + if dic['data_type'] in ['PtrDecl', 'ArrayDecl']: + return PtrDecl_detect(dic['type']) + elif dic['data_type'] == 'TypeDecl': + if 'name' in dic.keys(): + param_dict['name'] = dic['name'] + else: + param_dict['name'] = 'VOID' + param_dict['type'] = dic['type'] + elif dic['data_type'] == 'FuncDecl': + param_dict['name'] = dic['func']['name'] + param_dict['type'] = dic['func']['type']['type'] + else: + print(dic['data_type']) + exit(0) + return param_dict + + if dir != '.DS_Store': + with open("../data/" + dir, 'r') as f: + winsdk = json.loads(f.read()) + f.close() + else: + return + + entry = 'funcdefs' + + for func in winsdk[entry]: # read function dict + if 'name' in func.keys(): + func_name = func['name'] + elif func['type']['data_type'] == 'TypeDecl': + func_name = func['type']['name'] + else: + func_name = func['type']['type']['name'] + + if 'api_locations' in func.keys(): + func_dll = func['api_locations'][0].lower() + else: + continue + + func_dict = {} + param_list = [] + argument = func['arguments'] + + for argu in argument: + param = PtrDecl_detect(argu) + param_list.append(param) + func_dict[func_name] = param_list + + if func_dll in result_dict.keys(): + old_func_dict = result_dict[func_dll].copy() + result_dict[func_dll] = {} + result_dict[func_dll] = dict(old_func_dict, **func_dict) + else: + result_dict[func_dll] = func_dict + + +def save2json(): + print("begin to save ...") + for dllname in result_dict: + result_json = json.dumps(result_dict[dllname], sort_keys=False, indent=4, separators=(',', ': ')) + print(dllname) + if dllname[0].isupper(): + dllname = '_'+dllname + fo = open('./windows_sdk/'+dllname.replace('.', '_')+'.json', 'w+') + fo.write(result_json) + fo.close() + + +if __name__ == '__main__': + dir = '../data' + result_dict = {} + for parent, dirnames, filenames in os.walk(dir, followlinks=True): + for filename in filenames: + parse_winsdk(filename) + save2json() diff --git a/qiling/loader/elf.py b/qiling/loader/elf.py index e79cbda21..76409186e 100644 --- a/qiling/loader/elf.py +++ b/qiling/loader/elf.py @@ -568,8 +568,6 @@ def load_with_ld(self, stack_addr, load_address = -1, argv = [], env = {}): self.elf_phent = (elfhead['e_phentsize']) self.elf_phnum = (elfhead['e_phnum']) self.elf_pagesz = 0x1000 - if self.ql.archendian == QL_ENDIAN.EB: - self.elf_pagesz = 0x0010 self.elf_guid = self.ql.os.uid self.elf_flags = 0 self.elf_entry = (load_address + elfhead['e_entry']) diff --git a/qiling/loader/pe_uefi.py b/qiling/loader/pe_uefi.py index 94b3319b2..c940ca3bd 100644 --- a/qiling/loader/pe_uefi.py +++ b/qiling/loader/pe_uefi.py @@ -18,6 +18,8 @@ from qiling.os.uefi.fncc import * from qiling.os.uefi.bootup import * from qiling.os.uefi.runtime import * +from qiling.os.uefi.dxe_service import * +from qiling.os.uefi.smm_base2_protocol import * from qiling.os.windows.fncc import * @@ -32,6 +34,7 @@ def __init__(self, ql): self.events = {} self.handle_dict = {} self.notify_list = [] + self.next_image_base = 0x10000 @contextmanager def map_memory(self, addr, size): @@ -68,11 +71,16 @@ def map_and_load(self, path, execute_now=False, callback_ctx=None): pe = pefile.PE(path, fast_load=True) # Make sure no module will occupy the NULL page - IMAGE_BASE = max(pe.OPTIONAL_HEADER.ImageBase, 0x10000) + if self.next_image_base > pe.OPTIONAL_HEADER.ImageBase: + IMAGE_BASE = self.next_image_base + pe.relocate_image(IMAGE_BASE) + else: + IMAGE_BASE = pe.OPTIONAL_HEADER.ImageBase IMAGE_SIZE = ql.mem.align(pe.OPTIONAL_HEADER.SizeOfImage, 0x1000) while IMAGE_BASE + IMAGE_SIZE < self.heap_base_address: if not ql.mem.is_mapped(IMAGE_BASE, 1): + self.next_image_base = IMAGE_BASE + 0x10000 ql.mem.map(IMAGE_BASE, IMAGE_SIZE) pe.parse_data_directories() data = bytearray(pe.get_memory_mapped_image()) @@ -195,38 +203,62 @@ def run(self): self.efi_configuration_table_ptr = system_table_heap_ptr system_table.ConfigurationTable = self.efi_configuration_table_ptr - system_table.NumberOfTableEntries = 1 + system_table.NumberOfTableEntries = 2 system_table_heap_ptr += ctypes.sizeof(EFI_CONFIGURATION_TABLE) * 100 # We don't expect more then a few entries. efi_configuration_table = EFI_CONFIGURATION_TABLE() # 0x7739f24c, 0x93d7, 0x11d4, {0x9a, 0x3a, 0x0, 0x90, 0x27, 0x3f, 0xc1, 0x4d } \ - efi_configuration_table.VendorGuid.Data1 = int(self.ql.os.profile.get("GUID", "data1"), 16) - efi_configuration_table.VendorGuid.Data2 = int(self.ql.os.profile.get("GUID", "data2"), 16) - efi_configuration_table.VendorGuid.Data3 = int(self.ql.os.profile.get("GUID", "data3"), 16) + efi_configuration_table.VendorGuid.Data1 = int(self.ql.os.profile.get("HOB_LIST", "data1"), 16) + efi_configuration_table.VendorGuid.Data2 = int(self.ql.os.profile.get("HOB_LIST", "data2"), 16) + efi_configuration_table.VendorGuid.Data3 = int(self.ql.os.profile.get("HOB_LIST", "data3"), 16) - data4 = ast.literal_eval(self.ql.os.profile.get("GUID", "data4")) + data4 = ast.literal_eval(self.ql.os.profile.get("HOB_LIST", "data4")) datalist = 0 for data4_list in data4: efi_configuration_table.VendorGuid.Data4[datalist] = data4_list datalist += 1 VendorTable_ptr = system_table_heap_ptr - write_int64(self.ql, VendorTable_ptr, int(self.ql.os.profile.get("GUID", "vendortable"),16)) + write_int64(self.ql, VendorTable_ptr, int(self.ql.os.profile.get("HOB_LIST", "vendortable"),16)) system_table_heap_ptr += pointer_size efi_configuration_table.VendorTable = VendorTable_ptr - self.efi_configuration_table = [self.ql.os.profile["GUID"]["configuration_table"]] + self.efi_configuration_table = [self.ql.os.profile["HOB_LIST"]["guid"]] + self.ql.mem.write(self.efi_configuration_table_ptr, convert_struct_to_bytes(efi_configuration_table)) + + self.smm_base2_protocol_ptr = system_table_heap_ptr + system_table_heap_ptr += ctypes.sizeof(EFI_SMM_BASE2_PROTOCOL) + system_table_heap_ptr, smm_base2_protocol = install_EFI_SMM_BASE2_PROTOCOL(self.ql, system_table_heap_ptr) + self.handle_dict[1] = {self.ql.os.profile.get("EFI_SMM_BASE2_PROTOCOL", "guid"): self.smm_base2_protocol_ptr} + + self.dxe_services_ptr = system_table_heap_ptr + system_table_heap_ptr += ctypes.sizeof(EFI_DXE_SERVICES) + system_table_heap_ptr, dxe_services = install_EFI_DXE_SERVICES(self.ql, system_table_heap_ptr) + efi_configuration_table = EFI_CONFIGURATION_TABLE() + efi_configuration_table.VendorGuid.Data1 = int(self.ql.os.profile.get("DXE_SERVICE_TABLE", "data1"), 16) + efi_configuration_table.VendorGuid.Data2 = int(self.ql.os.profile.get("DXE_SERVICE_TABLE", "data2"), 16) + efi_configuration_table.VendorGuid.Data3 = int(self.ql.os.profile.get("DXE_SERVICE_TABLE", "data3"), 16) + + data4 = ast.literal_eval(self.ql.os.profile.get("DXE_SERVICE_TABLE", "data4")) + datalist = 0 + for data4_list in data4: + efi_configuration_table.VendorGuid.Data4[datalist] = data4_list + datalist += 1 + + efi_configuration_table.VendorTable = self.dxe_services_ptr + self.ql.mem.write(self.efi_configuration_table_ptr + ctypes.sizeof(EFI_CONFIGURATION_TABLE), convert_struct_to_bytes(efi_configuration_table)) + self.efi_configuration_table.append(self.ql.os.profile.get("DXE_SERVICE_TABLE", "guid")) + + self.ql.mem.write(runtime_services_ptr, convert_struct_to_bytes(runtime_services)) self.ql.mem.write(boot_services_ptr, convert_struct_to_bytes(boot_services)) - self.ql.mem.write(self.efi_configuration_table_ptr, convert_struct_to_bytes(efi_configuration_table)) self.ql.mem.write(self.system_table_ptr, convert_struct_to_bytes(system_table)) + self.ql.mem.write(self.smm_base2_protocol_ptr, convert_struct_to_bytes(smm_base2_protocol)) + self.ql.mem.write(self.dxe_services_ptr, convert_struct_to_bytes(dxe_services)) - if len(self.ql.argv) > 1: - for dependency in self.ql.argv[1:]: - if not self.map_and_load(dependency): - raise QlErrorFileType("Can't map dependency") + for dependency in self.ql.argv: + if not self.map_and_load(dependency): + raise QlErrorFileType("Can't map dependency") - # Load main module - self.map_and_load(self.ql.path) self.ql.nprint("[+] Done with loading %s" % self.ql.path) #return address diff --git a/qiling/loader/utils.py b/qiling/loader/utils.py index 03a51b539..16e62f3ef 100644 --- a/qiling/loader/utils.py +++ b/qiling/loader/utils.py @@ -43,12 +43,10 @@ def getident(): osabi = ident[0x7] e_machine = ident[0x12:0x14] - if osabi == 0x11 or osabi == 0x03 or osabi == 0x0: - ostype = QL_OS.LINUX - elif osabi == 0x09: + if osabi == 0x09: ostype = QL_OS.FREEBSD - else: - ostype = None + elif osabi in (0x0, 0x03) or osabi >= 0x11: + ostype = QL_OS.LINUX if e_machine == b"\x03\x00": archendian = QL_ENDIAN.EL diff --git a/qiling/os/memory.py b/qiling/os/memory.py index 66b720925..d50902485 100644 --- a/qiling/os/memory.py +++ b/qiling/os/memory.py @@ -130,6 +130,9 @@ def _perms_mapping(ps): self.ql.nprint("[+] Start End Perm. Path") for start, end, perm, info in self.map_info: _perm = _perms_mapping(perm) + image = self.ql.os.find_containing_image(start) + if image: + info += f" ({image.path})" self.ql.nprint("[+] %08x - %08x - %s %s" % (start, end, _perm, info)) @@ -183,19 +186,25 @@ def search(self, needle: bytes, begin= None, end= None): Search for a sequence of bytes in memory. Returns all sequences that match """ + addrs = [] - for region in list(self.ql.uc.mem_regions()): - if (begin and end) and end > begin: - haystack = self.read(begin, end) - else: - haystack = self.read(region[0], region[1] - region[0]) - - addrs += [ - x.start(0) + region[0] - for x in re.finditer(needle, haystack) - ] - return addrs + if (begin and end) and end > begin: + haystack = self.read(begin, end - begin) + addrs = [x.start(0) + begin for x in re.finditer(needle, haystack)] + + if not begin: + begin = self.map_info[0][0] # search from the first mapped region + if not end: + end = self.map_info[-1][1] # search till the last mapped region + mapped_range = [(_begin, _end) for _begin, _end, _ in self.ql.uc.mem_regions() + if _begin in range(begin, end) or _end in range(begin, end)] + + for _begin, _end in mapped_range: + haystack = self.read(_begin, _end - _begin) + addrs += [x.start(0) + _begin for x in re.finditer(needle, haystack)] + + return addrs def unmap(self, addr, size) -> None: ''' @@ -453,3 +462,9 @@ def free(self, addr): chunk.inuse = False return True return False + + def _find(self, addr): + for chunk in self.chunks: + if addr == chunk.address: + return chunk + return None diff --git a/qiling/os/os.py b/qiling/os/os.py index 17f73db3c..5b64b9ce1 100644 --- a/qiling/os/os.py +++ b/qiling/os/os.py @@ -55,6 +55,11 @@ def __init__(self, ql): self.appeared_strings = {} self.setup_output() + def find_containing_image(self, pc): + for image in self.ql.loader.images: + if image.base <= pc <= image.end: + return image + def emu_error(self): self.ql.nprint("[!] Emulation Error") @@ -66,7 +71,13 @@ def emu_error(self): self.ql.nprint("[-] %s\t:\t 0x%x" % (REG_NAME, REG_VAL)) self.ql.nprint("\n") - self.ql.nprint("[+] PC = 0x%x" %(self.ql.reg.arch_pc)) + self.ql.nprint("[+] PC = 0x%x" % (self.ql.reg.arch_pc), end="") + containing_image = self.find_containing_image(self.ql.reg.arch_pc) + if containing_image: + offset = self.ql.reg.arch_pc - containing_image.base + self.ql.nprint(" (%s+0x%x)" % (containing_image.path, offset)) + else: + self.ql.nprint("\n") self.ql.mem.show_mapinfo() buf = self.ql.mem.read(self.ql.reg.arch_pc, 8) diff --git a/qiling/os/posix/const_mapping.py b/qiling/os/posix/const_mapping.py index 1ff31de9c..db7ef2b92 100644 --- a/qiling/os/posix/const_mapping.py +++ b/qiling/os/posix/const_mapping.py @@ -105,22 +105,24 @@ def flag_mapping(flags, mapping_name, mapping_from, mapping_to): 'O_DIRECTORY': 0x100000, } - if ql.archtype!= QL_ARCH.MIPS: + f = {} + t = {} + + if ql.archtype != QL_ARCH.MIPS: if ql.platform == None or ql.platform == ql.ostype: return flags - if ql.platform == QL_OS.MACOS and ql.ostype == QL_OS.LINUX: f = linux_open_flags t = mac_open_flags - elif ql.platform == QL_OS.LINUX and ql.ostype == QL_OS.MACOS: f = mac_open_flags t = linux_open_flags - - elif ql.archtype== QL_ARCH.MIPS and ql.platform == QL_OS.LINUX: + elif ql.archtype == QL_ARCH.MIPS and ql.platform == QL_OS.LINUX: f = mips_open_flags t = linux_open_flags - + elif ql.archtype == QL_ARCH.MIPS and ql.platform == QL_OS.MACOS: + f = mips_open_flags + t = mac_open_flags return flag_mapping(flags, open_flags_name, f, t) @@ -157,7 +159,7 @@ def mmap_flag_mapping(flags): def mmap_prot_mapping(prots): - + if prots == 0x0: return 'PROT_NONE' @@ -196,5 +198,5 @@ def socket_domain_mapping(p, arch): #FIXME: QL_OS.MACOS is QL_OS #QL_OS.MACOS: "macos_socket_domain", }.get(arch) - + return _constant_mapping(p, socket_domain_map, single_mapping=True) diff --git a/qiling/os/posix/syscall/unistd.py b/qiling/os/posix/syscall/unistd.py index d83c48fa4..a67586b10 100644 --- a/qiling/os/posix/syscall/unistd.py +++ b/qiling/os/posix/syscall/unistd.py @@ -262,9 +262,10 @@ def ql_syscall_write(ql, write_fd, write_buf, write_count, *args, **kw): if buf: ql.dprint(D_CTNT, "[+] write() CONTENT:") ql.dprint(D_CTNT, "%s" % buf) + + ql.nprint("write(%d,%x,%i) = %d" % (write_fd, write_buf, write_count, regreturn)) ql.os.file_des[write_fd].write(buf) regreturn = write_count - ql.nprint("write(%d,%x,%i) = %d" % (write_fd, write_buf, write_count, regreturn)) except: regreturn = -1 diff --git a/qiling/os/uefi/bootup.py b/qiling/os/uefi/bootup.py index 7c6c623d6..6d2e8dad4 100644 --- a/qiling/os/uefi/bootup.py +++ b/qiling/os/uefi/bootup.py @@ -474,10 +474,9 @@ def hook_UninstallMultipleProtocolInterfaces(ql, address, params): GUID = str(ql.os.read_guid(GUID_ptr)) ql.nprint(f'\t {GUID}, {protocol_ptr:x}') dic = ql.loader.handle_dict[handle] - protocol = params["Protocol"] - if protocol not in dic: + if GUID not in dic: return EFI_INVALID_PARAMETER - del dic[protocol] + del dic[GUID] index +=2 return EFI_SUCCESS diff --git a/qiling/os/uefi/const.py b/qiling/os/uefi/const.py index e3597a7df..821281639 100644 --- a/qiling/os/uefi/const.py +++ b/qiling/os/uefi/const.py @@ -45,5 +45,5 @@ SEARCHTYPE_AllHandles = 0 SEARCHTYPE_ByRegisterNotify = 1 -SEARCHTYPE_ByProtoco = 2 +SEARCHTYPE_ByProtocol = 2 diff --git a/qiling/os/uefi/dxe_service.py b/qiling/os/uefi/dxe_service.py new file mode 100644 index 000000000..2466be6c4 --- /dev/null +++ b/qiling/os/uefi/dxe_service.py @@ -0,0 +1,209 @@ +from qiling.const import * +from qiling.os.const import * +from .const import * +from .utils import * +from .dxe_service_type64 import * +from .fncc import * + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, + "a2": ULONGLONG, + "a3": ULONGLONG, +}) +def hook_AddMemorySpace(ctx, address, params): + return EFI_OUT_OF_RESOURCES + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, + "a2": ULONGLONG, + "a3": ULONGLONG, + "a4": POINTER, #POINTER_T(ctypes.c_uint64) + "a5": POINTER, #POINTER_T(None) + "a6": POINTER, #POINTER_T(None) +}) +def hook_AllocateMemorySpace(ctx, address, params): + return EFI_OUT_OF_RESOURCES + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, +}) +def hook_FreeMemorySpace(ctx, address, params): + return EFI_SUCCESS + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, +}) +def hook_RemoveMemorySpace(ctx, address, params): + return EFI_SUCCESS + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": POINTER, #POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR) +}) +def hook_GetMemorySpaceDescriptor(ctx, address, params): + return EFI_UNSUPPORTED + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, + "a2": ULONGLONG, +}) +def hook_SetMemorySpaceAttributes(ctx, address, params): + return EFI_UNSUPPORTED + +@dxeapi(params={ + "a0": POINTER, #POINTER_T(ctypes.c_uint64) + "a1": POINTER, #POINTER_T(POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR)) +}) +def hook_GetMemorySpaceMap(ctx, address, params): + return EFI_UNSUPPORTED + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, + "a2": ULONGLONG, +}) +def hook_AddIoSpace(ctx, address, params): + return EFI_OUT_OF_RESOURCES + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, + "a2": ULONGLONG, + "a3": ULONGLONG, + "a4": POINTER, #POINTER_T(ctypes.c_uint64) + "a5": POINTER, #POINTER_T(None) + "a6": POINTER, #POINTER_T(None) +}) +def hook_AllocateIoSpace(ctx, address, params): + return EFI_OUT_OF_RESOURCES + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, +}) +def hook_FreeIoSpace(ctx, address, params): + return EFI_SUCCESS + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, +}) +def hook_RemoveIoSpace(ctx, address, params): + return EFI_SUCCESS + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": POINTER, #POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR) +}) +def hook_GetIoSpaceDescriptor(ctx, address, params): + return EFI_NOT_FOUND + +@dxeapi(params={ + "a0": POINTER, #POINTER_T(ctypes.c_uint64) + "a1": POINTER, #POINTER_T(POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR)) +}) +def hook_GetIoSpaceMap(ctx, address, params): + return EFI_OUT_OF_RESOURCES + +@dxeapi(params={ +}) +def hook_Dispatch(ctx, address, params): + return EFI_SUCCESS + +@dxeapi(params={ + "a0": POINTER, #POINTER_T(None) + "a1": GUID, +}) +def hook_Schedule(ctx, address, params): + return EFI_SUCCESS + +@dxeapi(params={ + "a0": POINTER, #POINTER_T(None) + "a1": GUID, +}) +def hook_Trust(ctx, address, params): + return EFI_NOT_FOUND + +@dxeapi(params={ + "a0": POINTER, #POINTER_T(None) + "a1": ULONGLONG, + "a2": POINTER, #POINTER_T(POINTER_T(None)) +}) +def hook_ProcessFirmwareVolume(ctx, address, params): + return EFI_OUT_OF_RESOURCES + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, + "a2": ULONGLONG, +}) +def hook_SetMemorySpaceCapabilities(ctx, address, params): + return EFI_UNSUPPORTED + + + +def install_EFI_DXE_SERVICES(ql, start_ptr): + efi_dxe_services = EFI_DXE_SERVICES() + ptr = start_ptr + pointer_size = 8 + efi_dxe_services.AddMemorySpace = ptr + ql.hook_address(hook_AddMemorySpace, ptr) + ptr += pointer_size + efi_dxe_services.AllocateMemorySpace = ptr + ql.hook_address(hook_AllocateMemorySpace, ptr) + ptr += pointer_size + efi_dxe_services.FreeMemorySpace = ptr + ql.hook_address(hook_FreeMemorySpace, ptr) + ptr += pointer_size + efi_dxe_services.RemoveMemorySpace = ptr + ql.hook_address(hook_RemoveMemorySpace, ptr) + ptr += pointer_size + efi_dxe_services.GetMemorySpaceDescriptor = ptr + ql.hook_address(hook_GetMemorySpaceDescriptor, ptr) + ptr += pointer_size + efi_dxe_services.SetMemorySpaceAttributes = ptr + ql.hook_address(hook_SetMemorySpaceAttributes, ptr) + ptr += pointer_size + efi_dxe_services.GetMemorySpaceMap = ptr + ql.hook_address(hook_GetMemorySpaceMap, ptr) + ptr += pointer_size + efi_dxe_services.AddIoSpace = ptr + ql.hook_address(hook_AddIoSpace, ptr) + ptr += pointer_size + efi_dxe_services.AllocateIoSpace = ptr + ql.hook_address(hook_AllocateIoSpace, ptr) + ptr += pointer_size + efi_dxe_services.FreeIoSpace = ptr + ql.hook_address(hook_FreeIoSpace, ptr) + ptr += pointer_size + efi_dxe_services.RemoveIoSpace = ptr + ql.hook_address(hook_RemoveIoSpace, ptr) + ptr += pointer_size + efi_dxe_services.GetIoSpaceDescriptor = ptr + ql.hook_address(hook_GetIoSpaceDescriptor, ptr) + ptr += pointer_size + efi_dxe_services.GetIoSpaceMap = ptr + ql.hook_address(hook_GetIoSpaceMap, ptr) + ptr += pointer_size + efi_dxe_services.Dispatch = ptr + ql.hook_address(hook_Dispatch, ptr) + ptr += pointer_size + efi_dxe_services.Schedule = ptr + ql.hook_address(hook_Schedule, ptr) + ptr += pointer_size + efi_dxe_services.Trust = ptr + ql.hook_address(hook_Trust, ptr) + ptr += pointer_size + efi_dxe_services.ProcessFirmwareVolume = ptr + ql.hook_address(hook_ProcessFirmwareVolume, ptr) + ptr += pointer_size + efi_dxe_services.SetMemorySpaceCapabilities = ptr + ql.hook_address(hook_SetMemorySpaceCapabilities, ptr) + ptr += pointer_size + return (ptr, efi_dxe_services) + diff --git a/qiling/os/uefi/dxe_service_type64.py b/qiling/os/uefi/dxe_service_type64.py new file mode 100644 index 000000000..a76483667 --- /dev/null +++ b/qiling/os/uefi/dxe_service_type64.py @@ -0,0 +1,292 @@ +# -*- coding: utf-8 -*- +# +# TARGET arch is: [] +# WORD_SIZE is: 8 +# POINTER_SIZE is: 8 +# LONGDOUBLE_SIZE is: 16 +# +import ctypes + + +c_int128 = ctypes.c_ubyte*16 +c_uint128 = c_int128 +void = None +if ctypes.sizeof(ctypes.c_longdouble) == 16: + c_long_double_t = ctypes.c_longdouble +else: + c_long_double_t = ctypes.c_ubyte*16 + +# if local wordsize is same as target, keep ctypes pointer function. +# required to access _ctypes +import _ctypes +# Emulate a pointer class using the approriate c_int32/c_int64 type +# The new class should have : +# ['__module__', 'from_param', '_type_', '__dict__', '__weakref__', '__doc__'] +# but the class should be submitted to a unique instance for each base type +# to that if A == B, POINTER_T(A) == POINTER_T(B) +ctypes._pointer_t_type_cache = {} +def POINTER_T(pointee): + # a pointer should have the same length as LONG + fake_ptr_base_type = ctypes.c_uint64 + # specific case for c_void_p + if pointee is None: # VOID pointer type. c_void_p. + pointee = type(None) # ctypes.c_void_p # ctypes.c_ulong + clsname = 'c_void' + else: + clsname = pointee.__name__ + if clsname in ctypes._pointer_t_type_cache: + return ctypes._pointer_t_type_cache[clsname] + # make template + _class = type('LP_%d_%s'%(8, clsname), (fake_ptr_base_type,),{}) + ctypes._pointer_t_type_cache[clsname] = _class + return _class + + + +undefined = ctypes.c_ubyte +ImageBaseOffset32 = ctypes.c_uint32 +byte = ctypes.c_ubyte +dword = ctypes.c_uint32 +longlong = ctypes.c_int64 +qword = ctypes.c_uint64 +uchar = ctypes.c_ubyte +uint = ctypes.c_uint32 +ulong = ctypes.c_uint64 +ulonglong = ctypes.c_uint64 +undefined1 = ctypes.c_ubyte +undefined4 = ctypes.c_uint32 +undefined8 = ctypes.c_uint64 +ushort = ctypes.c_uint16 +word = ctypes.c_uint16 +class struct_DXE_SERVICES(ctypes.Structure): + pass + +class struct_EFI_TABLE_HEADER(ctypes.Structure): + _pack_ = True # source:False + _functions_ = [] + _fields_ = [ + ('Signature', ctypes.c_uint64), + ('Revision', ctypes.c_uint32), + ('HeaderSize', ctypes.c_uint32), + ('CRC32', ctypes.c_uint32), + ('Reserved', ctypes.c_uint32), + ] + + +# values for enumeration 'enum_852' +enum_852__enumvalues = { + 7: 'EfiGcdMemoryTypeMaximum', + 3: 'EfiGcdMemoryTypeMemoryMappedIo', + 6: 'EfiGcdMemoryTypeMoreReliable', + 0: 'EfiGcdMemoryTypeNonExistent', + 4: 'EfiGcdMemoryTypePersistent', + 5: 'EfiGcdMemoryTypePersistentMemory', + 1: 'EfiGcdMemoryTypeReserved', + 2: 'EfiGcdMemoryTypeSystemMemory', +} +EfiGcdMemoryTypeMaximum = 7 +EfiGcdMemoryTypeMemoryMappedIo = 3 +EfiGcdMemoryTypeMoreReliable = 6 +EfiGcdMemoryTypeNonExistent = 0 +EfiGcdMemoryTypePersistent = 4 +EfiGcdMemoryTypePersistentMemory = 5 +EfiGcdMemoryTypeReserved = 1 +EfiGcdMemoryTypeSystemMemory = 2 +enum_852 = ctypes.c_int # enum +class struct_EFI_GCD_IO_SPACE_DESCRIPTOR(ctypes.Structure): + pass + +class struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR(ctypes.Structure): + pass + +class struct_GUID(ctypes.Structure): + pass + + +# values for enumeration 'enum_853' +enum_853__enumvalues = { + 2: 'EfiGcdIoTypeIo', + 3: 'EfiGcdIoTypeMaximum', + 0: 'EfiGcdIoTypeNonExistent', + 1: 'EfiGcdIoTypeReserved', +} +EfiGcdIoTypeIo = 2 +EfiGcdIoTypeMaximum = 3 +EfiGcdIoTypeNonExistent = 0 +EfiGcdIoTypeReserved = 1 +enum_853 = ctypes.c_int # enum + +# values for enumeration 'enum_854' +enum_854__enumvalues = { + 2: 'EfiGcdAllocateAddress', + 0: 'EfiGcdAllocateAnySearchBottomUp', + 3: 'EfiGcdAllocateAnySearchTopDown', + 1: 'EfiGcdAllocateMaxAddressSearchBottomUp', + 4: 'EfiGcdAllocateMaxAddressSearchTopDown', + 5: 'EfiGcdMaxAllocateType', +} +EfiGcdAllocateAddress = 2 +EfiGcdAllocateAnySearchBottomUp = 0 +EfiGcdAllocateAnySearchTopDown = 3 +EfiGcdAllocateMaxAddressSearchBottomUp = 1 +EfiGcdAllocateMaxAddressSearchTopDown = 4 +EfiGcdMaxAllocateType = 5 +enum_854 = ctypes.c_int # enum +struct_DXE_SERVICES._pack_ = True # source:False +struct_DXE_SERVICES._functions_ = [] +struct_DXE_SERVICES._fields_ = [ + ('Hdr', struct_EFI_TABLE_HEADER), + ('AddMemorySpace', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_852, ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64))), + ('AllocateMemorySpace', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_854, enum_852, ctypes.c_uint64, ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(None), POINTER_T(None)))), + ('FreeMemorySpace', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64))), + ('RemoveMemorySpace', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64))), + ('GetMemorySpaceDescriptor', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR)))), + ('SetMemorySpaceAttributes', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64))), + ('GetMemorySpaceMap', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR))))), + ('AddIoSpace', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_853, ctypes.c_uint64, ctypes.c_uint64))), + ('AllocateIoSpace', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_854, enum_853, ctypes.c_uint64, ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(None), POINTER_T(None)))), + ('FreeIoSpace', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64))), + ('RemoveIoSpace', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64))), + ('GetIoSpaceDescriptor', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR)))), + ('GetIoSpaceMap', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR))))), + ('Dispatch', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64))), + ('Schedule', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(struct_GUID)))), + ('Trust', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(struct_GUID)))), + ('ProcessFirmwareVolume', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), ctypes.c_uint64, POINTER_T(POINTER_T(None))))), + ('SetMemorySpaceCapabilities', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64))), +] + +struct_DXE_SERVICES._functions_.append(("AddMemorySpace",['ctypes.c_uint64', 'enum_852', 'ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64'])) +struct_DXE_SERVICES._functions_.append(("AllocateMemorySpace",['ctypes.c_uint64', 'enum_854', 'enum_852', 'ctypes.c_uint64', 'ctypes.c_uint64', 'POINTER_T(ctypes.c_uint64)', 'POINTER_T(None)', 'POINTER_T(None)'])) +struct_DXE_SERVICES._functions_.append(("FreeMemorySpace",['ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64'])) +struct_DXE_SERVICES._functions_.append(("RemoveMemorySpace",['ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64'])) +struct_DXE_SERVICES._functions_.append(("GetMemorySpaceDescriptor",['ctypes.c_uint64', 'ctypes.c_uint64', 'POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR)'])) +struct_DXE_SERVICES._functions_.append(("SetMemorySpaceAttributes",['ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64'])) +struct_DXE_SERVICES._functions_.append(("GetMemorySpaceMap",['ctypes.c_uint64', 'POINTER_T(ctypes.c_uint64)', 'POINTER_T(POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR))'])) +struct_DXE_SERVICES._functions_.append(("AddIoSpace",['ctypes.c_uint64', 'enum_853', 'ctypes.c_uint64', 'ctypes.c_uint64'])) +struct_DXE_SERVICES._functions_.append(("AllocateIoSpace",['ctypes.c_uint64', 'enum_854', 'enum_853', 'ctypes.c_uint64', 'ctypes.c_uint64', 'POINTER_T(ctypes.c_uint64)', 'POINTER_T(None)', 'POINTER_T(None)'])) +struct_DXE_SERVICES._functions_.append(("FreeIoSpace",['ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64'])) +struct_DXE_SERVICES._functions_.append(("RemoveIoSpace",['ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64'])) +struct_DXE_SERVICES._functions_.append(("GetIoSpaceDescriptor",['ctypes.c_uint64', 'ctypes.c_uint64', 'POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR)'])) +struct_DXE_SERVICES._functions_.append(("GetIoSpaceMap",['ctypes.c_uint64', 'POINTER_T(ctypes.c_uint64)', 'POINTER_T(POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR))'])) +struct_DXE_SERVICES._functions_.append(("Dispatch",['ctypes.c_uint64'])) +struct_DXE_SERVICES._functions_.append(("Schedule",['ctypes.c_uint64', 'POINTER_T(None)', 'POINTER_T(struct_GUID)'])) +struct_DXE_SERVICES._functions_.append(("Trust",['ctypes.c_uint64', 'POINTER_T(None)', 'POINTER_T(struct_GUID)'])) +struct_DXE_SERVICES._functions_.append(("ProcessFirmwareVolume",['ctypes.c_uint64', 'POINTER_T(None)', 'ctypes.c_uint64', 'POINTER_T(POINTER_T(None))'])) +struct_DXE_SERVICES._functions_.append(("SetMemorySpaceCapabilities",['ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64'])) +DXE_SERVICES = struct_DXE_SERVICES +PDXE_SERVICES = POINTER_T(struct_DXE_SERVICES) +EFI_DXE_SERVICES = struct_DXE_SERVICES +EFI_TABLE_HEADER = struct_EFI_TABLE_HEADER +PEFI_TABLE_HEADER = POINTER_T(struct_EFI_TABLE_HEADER) +UINT64 = ctypes.c_uint64 +UINTN = ctypes.c_uint64 +RETURN_STATUS = ctypes.c_uint64 +EFI_STATUS = ctypes.c_uint64 +EFI_GCD_MEMORY_TYPE = enum_852 +EFI_GCD_MEMORY_TYPE__enumvalues = enum_852__enumvalues +EFI_PHYSICAL_ADDRESS = ctypes.c_uint64 +EFI_ADD_MEMORY_SPACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_852, ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64)) +EFI_GCD_ALLOCATE_TYPE = enum_854 +EFI_GCD_ALLOCATE_TYPE__enumvalues = enum_854__enumvalues +EFI_HANDLE = POINTER_T(None) +EFI_ALLOCATE_MEMORY_SPACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_854, enum_852, ctypes.c_uint64, ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(None), POINTER_T(None))) +EFI_FREE_MEMORY_SPACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64)) +EFI_REMOVE_MEMORY_SPACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64)) +struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR._pack_ = True # source:False +struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR._functions_ = [] +struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR._fields_ = [ + ('BaseAddress', ctypes.c_uint64), + ('Length', ctypes.c_uint64), + ('Capabilities', ctypes.c_uint64), + ('Attributes', ctypes.c_uint64), + ('GcdMemoryType', EFI_GCD_MEMORY_TYPE), + ('PADDING_0', ctypes.c_ubyte * 4), + ('ImageHandle', POINTER_T(None)), + ('DeviceHandle', POINTER_T(None)), +] + +EFI_GCD_MEMORY_SPACE_DESCRIPTOR = struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR +PEFI_GCD_MEMORY_SPACE_DESCRIPTOR = POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR) +EFI_GET_MEMORY_SPACE_DESCRIPTOR = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR))) +EFI_SET_MEMORY_SPACE_ATTRIBUTES = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64)) +EFI_GET_MEMORY_SPACE_MAP = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR)))) +EFI_GCD_IO_TYPE = enum_853 +EFI_GCD_IO_TYPE__enumvalues = enum_853__enumvalues +EFI_ADD_IO_SPACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_853, ctypes.c_uint64, ctypes.c_uint64)) +EFI_ALLOCATE_IO_SPACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_854, enum_853, ctypes.c_uint64, ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(None), POINTER_T(None))) +EFI_FREE_IO_SPACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64)) +EFI_REMOVE_IO_SPACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64)) +PEFI_GCD_IO_SPACE_DESCRIPTOR = POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR) +struct_EFI_GCD_IO_SPACE_DESCRIPTOR._pack_ = True # source:False +struct_EFI_GCD_IO_SPACE_DESCRIPTOR._functions_ = [] +struct_EFI_GCD_IO_SPACE_DESCRIPTOR._fields_ = [ + ('BaseAddress', ctypes.c_uint64), + ('Length', ctypes.c_uint64), + ('GcdIoType', EFI_GCD_IO_TYPE), + ('PADDING_0', ctypes.c_ubyte * 4), + ('ImageHandle', POINTER_T(None)), + ('DeviceHandle', POINTER_T(None)), +] + +EFI_GCD_IO_SPACE_DESCRIPTOR = struct_EFI_GCD_IO_SPACE_DESCRIPTOR +EFI_GET_IO_SPACE_DESCRIPTOR = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR))) +EFI_GET_IO_SPACE_MAP = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR)))) +EFI_DISPATCH = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64)) +struct_GUID._pack_ = True # source:False +struct_GUID._functions_ = [] +struct_GUID._fields_ = [ + ('Data1', ctypes.c_uint32), + ('Data2', ctypes.c_uint16), + ('Data3', ctypes.c_uint16), + ('Data4', ctypes.c_ubyte * 8), +] + +GUID = struct_GUID +PGUID = POINTER_T(struct_GUID) +EFI_GUID = struct_GUID +EFI_SCHEDULE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(struct_GUID))) +EFI_TRUST = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(struct_GUID))) +EFI_PROCESS_FIRMWARE_VOLUME = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), ctypes.c_uint64, POINTER_T(POINTER_T(None)))) +EFI_SET_MEMORY_SPACE_CAPABILITIES = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64)) +UINT32 = ctypes.c_uint32 +UINT16 = ctypes.c_uint16 +UINT8 = ctypes.c_ubyte +__all__ = \ + ['DXE_SERVICES', 'EFI_ADD_IO_SPACE', 'EFI_ADD_MEMORY_SPACE', + 'EFI_ALLOCATE_IO_SPACE', 'EFI_ALLOCATE_MEMORY_SPACE', + 'EFI_DISPATCH', 'EFI_DXE_SERVICES', 'EFI_FREE_IO_SPACE', + 'EFI_FREE_MEMORY_SPACE', 'EFI_GCD_ALLOCATE_TYPE', + 'EFI_GCD_ALLOCATE_TYPE__enumvalues', + 'EFI_GCD_IO_SPACE_DESCRIPTOR', 'EFI_GCD_IO_TYPE', + 'EFI_GCD_IO_TYPE__enumvalues', 'EFI_GCD_MEMORY_SPACE_DESCRIPTOR', + 'EFI_GCD_MEMORY_TYPE', 'EFI_GCD_MEMORY_TYPE__enumvalues', + 'EFI_GET_IO_SPACE_DESCRIPTOR', 'EFI_GET_IO_SPACE_MAP', + 'EFI_GET_MEMORY_SPACE_DESCRIPTOR', 'EFI_GET_MEMORY_SPACE_MAP', + 'EFI_GUID', 'EFI_HANDLE', 'EFI_PHYSICAL_ADDRESS', + 'EFI_PROCESS_FIRMWARE_VOLUME', 'EFI_REMOVE_IO_SPACE', + 'EFI_REMOVE_MEMORY_SPACE', 'EFI_SCHEDULE', + 'EFI_SET_MEMORY_SPACE_ATTRIBUTES', + 'EFI_SET_MEMORY_SPACE_CAPABILITIES', 'EFI_STATUS', + 'EFI_TABLE_HEADER', 'EFI_TRUST', 'EfiGcdAllocateAddress', + 'EfiGcdAllocateAnySearchBottomUp', + 'EfiGcdAllocateAnySearchTopDown', + 'EfiGcdAllocateMaxAddressSearchBottomUp', + 'EfiGcdAllocateMaxAddressSearchTopDown', 'EfiGcdIoTypeIo', + 'EfiGcdIoTypeMaximum', 'EfiGcdIoTypeNonExistent', + 'EfiGcdIoTypeReserved', 'EfiGcdMaxAllocateType', + 'EfiGcdMemoryTypeMaximum', 'EfiGcdMemoryTypeMemoryMappedIo', + 'EfiGcdMemoryTypeMoreReliable', 'EfiGcdMemoryTypeNonExistent', + 'EfiGcdMemoryTypePersistent', 'EfiGcdMemoryTypePersistentMemory', + 'EfiGcdMemoryTypeReserved', 'EfiGcdMemoryTypeSystemMemory', + 'GUID', 'ImageBaseOffset32', 'PDXE_SERVICES', + 'PEFI_GCD_IO_SPACE_DESCRIPTOR', + 'PEFI_GCD_MEMORY_SPACE_DESCRIPTOR', 'PEFI_TABLE_HEADER', 'PGUID', + 'RETURN_STATUS', 'UINT16', 'UINT32', 'UINT64', 'UINT8', 'UINTN', + 'byte', 'dword', 'enum_852', 'enum_853', 'enum_854', 'longlong', + 'qword', 'struct_DXE_SERVICES', + 'struct_EFI_GCD_IO_SPACE_DESCRIPTOR', + 'struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR', + 'struct_EFI_TABLE_HEADER', 'struct_GUID', 'uchar', 'uint', + 'ulong', 'ulonglong', 'undefined', 'undefined1', 'undefined4', + 'undefined8', 'ushort', 'word'] diff --git a/qiling/os/uefi/smm_base2_protocol.py b/qiling/os/uefi/smm_base2_protocol.py new file mode 100644 index 000000000..f4be93730 --- /dev/null +++ b/qiling/os/uefi/smm_base2_protocol.py @@ -0,0 +1,37 @@ +from qiling.const import * +from qiling.os.const import * +from .const import * +from .utils import * +from .smm_base2_type import * +from .fncc import * + + +@dxeapi(params={ + "This": POINTER, #POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL) + "InSmram": POINTER, #POINTER_T(ctypes.c_ubyte) +}) +def hook_InSmm(ql, address, params): + write_int64(ql, params["InSmram"], 0) + return EFI_SUCCESS + +@dxeapi(params={ + "This": POINTER, #POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL) + "Smst": POINTER, #POINTER_T(POINTER_T(struct__EFI_SMM_SYSTEM_TABLE2)) +}) +def hook_GetSmstLocation(ql, address, params): + return EFI_UNSUPPORTED # since InSmm always returns False, we should return EFI_UNSUPPORTED here, since we are not in SMM mode. + + + +def install_EFI_SMM_BASE2_PROTOCOL(ql, start_ptr): + efi_smm_base2_protocol = EFI_SMM_BASE2_PROTOCOL() + ptr = start_ptr + pointer_size = 8 + efi_smm_base2_protocol.InSmm = ptr + ql.hook_address(hook_InSmm, ptr) + ptr += pointer_size + efi_smm_base2_protocol.GetSmstLocation = ptr + ql.hook_address(hook_GetSmstLocation, ptr) + ptr += pointer_size + return (ptr, efi_smm_base2_protocol) + diff --git a/qiling/os/uefi/smm_base2_type.py b/qiling/os/uefi/smm_base2_type.py new file mode 100644 index 000000000..675af0b89 --- /dev/null +++ b/qiling/os/uefi/smm_base2_type.py @@ -0,0 +1,368 @@ +# -*- coding: utf-8 -*- +# +# TARGET arch is: [] +# WORD_SIZE is: 8 +# POINTER_SIZE is: 8 +# LONGDOUBLE_SIZE is: 16 +# +import ctypes + + +# if local wordsize is same as target, keep ctypes pointer function. +# required to access _ctypes +import _ctypes +# Emulate a pointer class using the approriate c_int32/c_int64 type +# The new class should have : +# ['__module__', 'from_param', '_type_', '__dict__', '__weakref__', '__doc__'] +# but the class should be submitted to a unique instance for each base type +# to that if A == B, POINTER_T(A) == POINTER_T(B) +ctypes._pointer_t_type_cache = {} +def POINTER_T(pointee): + # a pointer should have the same length as LONG + fake_ptr_base_type = ctypes.c_uint64 + # specific case for c_void_p + if pointee is None: # VOID pointer type. c_void_p. + pointee = type(None) # ctypes.c_void_p # ctypes.c_ulong + clsname = 'c_void' + else: + clsname = pointee.__name__ + if clsname in ctypes._pointer_t_type_cache: + return ctypes._pointer_t_type_cache[clsname] + # make template + _class = type('LP_%d_%s'%(8, clsname), (fake_ptr_base_type,),{}) + ctypes._pointer_t_type_cache[clsname] = _class + return _class + +c_int128 = ctypes.c_ubyte*16 +c_uint128 = c_int128 +void = None +if ctypes.sizeof(ctypes.c_longdouble) == 16: + c_long_double_t = ctypes.c_longdouble +else: + c_long_double_t = ctypes.c_ubyte*16 + + + +undefined = ctypes.c_ubyte +ImageBaseOffset32 = ctypes.c_uint32 +byte = ctypes.c_ubyte +dword = ctypes.c_uint32 +longlong = ctypes.c_int64 +qword = ctypes.c_uint64 +uchar = ctypes.c_ubyte +uint = ctypes.c_uint32 +ulong = ctypes.c_uint64 +ulonglong = ctypes.c_uint64 +undefined1 = ctypes.c_ubyte +undefined4 = ctypes.c_uint32 +undefined8 = ctypes.c_uint64 +ushort = ctypes.c_uint16 +word = ctypes.c_uint16 +class struct__EFI_SMM_BASE2_PROTOCOL(ctypes.Structure): + pass + +class struct__EFI_SMM_SYSTEM_TABLE2(ctypes.Structure): + pass + +struct__EFI_SMM_BASE2_PROTOCOL._pack_ = True # source:False +struct__EFI_SMM_BASE2_PROTOCOL._functions_ = [] +struct__EFI_SMM_BASE2_PROTOCOL._fields_ = [ + ('InSmm', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL), POINTER_T(ctypes.c_ubyte)))), + ('GetSmstLocation', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL), POINTER_T(POINTER_T(struct__EFI_SMM_SYSTEM_TABLE2))))), +] + +struct__EFI_SMM_BASE2_PROTOCOL._functions_.append(("InSmm",['ctypes.c_uint64', 'POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL)', 'POINTER_T(ctypes.c_ubyte)'])) +struct__EFI_SMM_BASE2_PROTOCOL._functions_.append(("GetSmstLocation",['ctypes.c_uint64', 'POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL)', 'POINTER_T(POINTER_T(struct__EFI_SMM_SYSTEM_TABLE2))'])) +_EFI_SMM_BASE2_PROTOCOL = struct__EFI_SMM_BASE2_PROTOCOL +P_EFI_SMM_BASE2_PROTOCOL = POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL) +EFI_SMM_BASE2_PROTOCOL = struct__EFI_SMM_BASE2_PROTOCOL +UINT64 = ctypes.c_uint64 +UINTN = ctypes.c_uint64 +RETURN_STATUS = ctypes.c_uint64 +EFI_STATUS = ctypes.c_uint64 +BOOLEAN = ctypes.c_ubyte +EFI_SMM_INSIDE_OUT2 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL), POINTER_T(ctypes.c_ubyte))) +class struct_EFI_TABLE_HEADER(ctypes.Structure): + _pack_ = True # source:False + _functions_ = [] + _fields_ = [ + ('Signature', ctypes.c_uint64), + ('Revision', ctypes.c_uint32), + ('HeaderSize', ctypes.c_uint32), + ('CRC32', ctypes.c_uint32), + ('Reserved', ctypes.c_uint32), + ] + +class struct_EFI_CONFIGURATION_TABLE(ctypes.Structure): + pass + +class struct_GUID(ctypes.Structure): + _pack_ = True # source:False + _functions_ = [] + _fields_ = [ + ('Data1', ctypes.c_uint32), + ('Data2', ctypes.c_uint16), + ('Data3', ctypes.c_uint16), + ('Data4', ctypes.c_ubyte * 8), + ] + +EFI_GUID = struct_GUID +struct_EFI_CONFIGURATION_TABLE._pack_ = True # source:False +struct_EFI_CONFIGURATION_TABLE._functions_ = [] +struct_EFI_CONFIGURATION_TABLE._fields_ = [ + ('VendorGuid', EFI_GUID), + ('VendorTable', POINTER_T(None)), +] + + +# values for enumeration 'enum_494' +enum_494__enumvalues = { + 2: 'AllocateAddress', + 0: 'AllocateAnyPages', + 1: 'AllocateMaxAddress', + 3: 'MaxAllocateType', +} +AllocateAddress = 2 +AllocateAnyPages = 0 +AllocateMaxAddress = 1 +MaxAllocateType = 3 +enum_494 = ctypes.c_int # enum + +# values for enumeration 'enum_16' +enum_16__enumvalues = { + 10: 'EfiACPIMemoryNVS', + 9: 'EfiACPIReclaimMemory', + 3: 'EfiBootServicesCode', + 4: 'EfiBootServicesData', + 7: 'EfiConventionalMemory', + 1: 'EfiLoaderCode', + 2: 'EfiLoaderData', + 15: 'EfiMaxMemoryType', + 11: 'EfiMemoryMappedIO', + 12: 'EfiMemoryMappedIOPortSpace', + 13: 'EfiPalCode', + 14: 'EfiPersistentMemory', + 0: 'EfiReservedMemoryType', + 5: 'EfiRuntimeServicesCode', + 6: 'EfiRuntimeServicesData', + 8: 'EfiUnusableMemory', +} +EfiACPIMemoryNVS = 10 +EfiACPIReclaimMemory = 9 +EfiBootServicesCode = 3 +EfiBootServicesData = 4 +EfiConventionalMemory = 7 +EfiLoaderCode = 1 +EfiLoaderData = 2 +EfiMaxMemoryType = 15 +EfiMemoryMappedIO = 11 +EfiMemoryMappedIOPortSpace = 12 +EfiPalCode = 13 +EfiPersistentMemory = 14 +EfiReservedMemoryType = 0 +EfiRuntimeServicesCode = 5 +EfiRuntimeServicesData = 6 +EfiUnusableMemory = 8 +enum_16 = ctypes.c_int # enum + +# values for enumeration 'enum_498' +enum_498__enumvalues = { + 0: 'EFI_NATIVE_INTERFACE', +} +EFI_NATIVE_INTERFACE = 0 +enum_498 = ctypes.c_int # enum + +# values for enumeration 'enum_500' +enum_500__enumvalues = { + 0: 'AllHandles', + 2: 'ByProtocol', + 1: 'ByRegisterNotify', +} +AllHandles = 0 +ByProtocol = 2 +ByRegisterNotify = 1 +enum_500 = ctypes.c_int # enum +class struct__EFI_MM_CPU_IO_PROTOCOL(ctypes.Structure): + pass + +class struct_EFI_MM_IO_ACCESS(ctypes.Structure): + pass + + +# values for enumeration 'enum_859' +enum_859__enumvalues = { + 1: 'MM_IO_UINT16', + 2: 'MM_IO_UINT32', + 3: 'MM_IO_UINT64', + 0: 'MM_IO_UINT8', +} +MM_IO_UINT16 = 1 +MM_IO_UINT32 = 2 +MM_IO_UINT64 = 3 +MM_IO_UINT8 = 0 +enum_859 = ctypes.c_int # enum +struct_EFI_MM_IO_ACCESS._pack_ = True # source:False +struct_EFI_MM_IO_ACCESS._functions_ = [] +struct_EFI_MM_IO_ACCESS._fields_ = [ + ('Read', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct__EFI_MM_CPU_IO_PROTOCOL), enum_859, ctypes.c_uint64, ctypes.c_uint64, POINTER_T(None)))), + ('Write', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct__EFI_MM_CPU_IO_PROTOCOL), enum_859, ctypes.c_uint64, ctypes.c_uint64, POINTER_T(None)))), +] + +struct_EFI_MM_IO_ACCESS._functions_.append(("Read",['ctypes.c_uint64', 'POINTER_T(struct__EFI_MM_CPU_IO_PROTOCOL)', 'enum_859', 'ctypes.c_uint64', 'ctypes.c_uint64', 'POINTER_T(None)'])) +struct_EFI_MM_IO_ACCESS._functions_.append(("Write",['ctypes.c_uint64', 'POINTER_T(struct__EFI_MM_CPU_IO_PROTOCOL)', 'enum_859', 'ctypes.c_uint64', 'ctypes.c_uint64', 'POINTER_T(None)'])) +struct__EFI_MM_CPU_IO_PROTOCOL._pack_ = True # source:False +struct__EFI_MM_CPU_IO_PROTOCOL._functions_ = [] +struct__EFI_MM_CPU_IO_PROTOCOL._fields_ = [ + ('Mem', struct_EFI_MM_IO_ACCESS), + ('Io', struct_EFI_MM_IO_ACCESS), +] + +EFI_SMM_CPU_IO2_PROTOCOL = struct__EFI_MM_CPU_IO_PROTOCOL +struct__EFI_SMM_SYSTEM_TABLE2._pack_ = True # source:False +struct__EFI_SMM_SYSTEM_TABLE2._functions_ = [] +struct__EFI_SMM_SYSTEM_TABLE2._fields_ = [ + ('Hdr', struct_EFI_TABLE_HEADER), + ('SmmFirmwareVendor', POINTER_T(ctypes.c_uint16)), + ('SmmFirmwareRevision', ctypes.c_uint32), + ('PADDING_0', ctypes.c_ubyte * 4), + ('SmmInstallConfigurationTable', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct__EFI_SMM_SYSTEM_TABLE2), POINTER_T(struct_GUID), POINTER_T(None), ctypes.c_uint64))), + ('SmmIo', EFI_SMM_CPU_IO2_PROTOCOL), + ('SmmAllocatePool', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_16, ctypes.c_uint64, POINTER_T(POINTER_T(None))))), + ('SmmFreePool', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None)))), + ('SmmAllocatePages', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_494, enum_16, ctypes.c_uint64, POINTER_T(ctypes.c_uint64)))), + ('SmmFreePages', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64))), + ('SmmStartupThisAp', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(None))), ctypes.c_uint64, POINTER_T(None)))), + ('CurrentlyExecutingCpu', ctypes.c_uint64), + ('NumberOfCpus', ctypes.c_uint64), + ('CpuSaveStateSize', POINTER_T(ctypes.c_uint64)), + ('CpuSaveState', POINTER_T(POINTER_T(None))), + ('NumberOfTableEntries', ctypes.c_uint64), + ('SmmConfigurationTable', POINTER_T(struct_EFI_CONFIGURATION_TABLE)), + ('SmmInstallProtocolInterface', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(POINTER_T(None)), POINTER_T(struct_GUID), enum_498, POINTER_T(None)))), + ('SmmUninstallProtocolInterface', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(struct_GUID), POINTER_T(None)))), + ('SmmHandleProtocol', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(struct_GUID), POINTER_T(POINTER_T(None))))), + ('SmmRegisterProtocolNotify', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(None))), POINTER_T(POINTER_T(None))))), + ('SmmLocateHandle', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_500, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(ctypes.c_uint64), POINTER_T(POINTER_T(None))))), + ('SmmLocateProtocol', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(POINTER_T(None))))), + ('SmiManage', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(None), POINTER_T(ctypes.c_uint64)))), + ('SmiHandlerRegister', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(None), POINTER_T(None), POINTER_T(ctypes.c_uint64))), POINTER_T(struct_GUID), POINTER_T(POINTER_T(None))))), + ('SmiHandlerUnRegister', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None)))), +] + +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmInstallConfigurationTable",['ctypes.c_uint64', 'POINTER_T(struct__EFI_SMM_SYSTEM_TABLE2)', 'POINTER_T(struct_GUID)', 'POINTER_T(None)', 'ctypes.c_uint64'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmAllocatePool",['ctypes.c_uint64', 'enum_16', 'ctypes.c_uint64', 'POINTER_T(POINTER_T(None))'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmFreePool",['ctypes.c_uint64', 'POINTER_T(None)'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmAllocatePages",['ctypes.c_uint64', 'enum_494', 'enum_16', 'ctypes.c_uint64', 'POINTER_T(ctypes.c_uint64)'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmFreePages",['ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmStartupThisAp",['ctypes.c_uint64', 'POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(None)))', 'ctypes.c_uint64', 'POINTER_T(None)'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmInstallProtocolInterface",['ctypes.c_uint64', 'POINTER_T(POINTER_T(None))', 'POINTER_T(struct_GUID)', 'enum_498', 'POINTER_T(None)'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmUninstallProtocolInterface",['ctypes.c_uint64', 'POINTER_T(None)', 'POINTER_T(struct_GUID)', 'POINTER_T(None)'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmHandleProtocol",['ctypes.c_uint64', 'POINTER_T(None)', 'POINTER_T(struct_GUID)', 'POINTER_T(POINTER_T(None))'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmRegisterProtocolNotify",['ctypes.c_uint64', 'POINTER_T(struct_GUID)', 'POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(None)))', 'POINTER_T(POINTER_T(None))'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmLocateHandle",['ctypes.c_uint64', 'enum_500', 'POINTER_T(struct_GUID)', 'POINTER_T(None)', 'POINTER_T(ctypes.c_uint64)', 'POINTER_T(POINTER_T(None))'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmLocateProtocol",['ctypes.c_uint64', 'POINTER_T(struct_GUID)', 'POINTER_T(None)', 'POINTER_T(POINTER_T(None))'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmiManage",['ctypes.c_uint64', 'POINTER_T(struct_GUID)', 'POINTER_T(None)', 'POINTER_T(None)', 'POINTER_T(ctypes.c_uint64)'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmiHandlerRegister",['ctypes.c_uint64', 'POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(None), POINTER_T(None), POINTER_T(ctypes.c_uint64)))', 'POINTER_T(struct_GUID)', 'POINTER_T(POINTER_T(None))'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmiHandlerUnRegister",['ctypes.c_uint64', 'POINTER_T(None)'])) +_EFI_SMM_SYSTEM_TABLE2 = struct__EFI_SMM_SYSTEM_TABLE2 +P_EFI_SMM_SYSTEM_TABLE2 = POINTER_T(struct__EFI_SMM_SYSTEM_TABLE2) +EFI_SMM_SYSTEM_TABLE2 = struct__EFI_SMM_SYSTEM_TABLE2 +EFI_SMM_GET_SMST_LOCATION2 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL), POINTER_T(POINTER_T(struct__EFI_SMM_SYSTEM_TABLE2)))) +EFI_TABLE_HEADER = struct_EFI_TABLE_HEADER +PEFI_TABLE_HEADER = POINTER_T(struct_EFI_TABLE_HEADER) +CHAR16 = ctypes.c_uint16 +UINT32 = ctypes.c_uint32 +GUID = struct_GUID +PGUID = POINTER_T(struct_GUID) +EFI_SMM_INSTALL_CONFIGURATION_TABLE2 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct__EFI_SMM_SYSTEM_TABLE2), POINTER_T(struct_GUID), POINTER_T(None), ctypes.c_uint64)) +_EFI_MM_CPU_IO_PROTOCOL = struct__EFI_MM_CPU_IO_PROTOCOL +P_EFI_MM_CPU_IO_PROTOCOL = POINTER_T(struct__EFI_MM_CPU_IO_PROTOCOL) +EFI_MM_CPU_IO_PROTOCOL = struct__EFI_MM_CPU_IO_PROTOCOL +EFI_MEMORY_TYPE = enum_16 +EFI_MEMORY_TYPE__enumvalues = enum_16__enumvalues +EFI_ALLOCATE_POOL = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_16, ctypes.c_uint64, POINTER_T(POINTER_T(None)))) +EFI_FREE_POOL = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None))) +EFI_ALLOCATE_TYPE = enum_494 +EFI_ALLOCATE_TYPE__enumvalues = enum_494__enumvalues +EFI_PHYSICAL_ADDRESS = ctypes.c_uint64 +EFI_ALLOCATE_PAGES = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_494, enum_16, ctypes.c_uint64, POINTER_T(ctypes.c_uint64))) +EFI_FREE_PAGES = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64)) +EFI_AP_PROCEDURE = POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(None))) +EFI_MM_STARTUP_THIS_AP = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(None))), ctypes.c_uint64, POINTER_T(None))) +EFI_SMM_STARTUP_THIS_AP = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(None))), ctypes.c_uint64, POINTER_T(None))) +PEFI_CONFIGURATION_TABLE = POINTER_T(struct_EFI_CONFIGURATION_TABLE) +EFI_CONFIGURATION_TABLE = struct_EFI_CONFIGURATION_TABLE +EFI_HANDLE = POINTER_T(None) +EFI_INTERFACE_TYPE = enum_498 +EFI_INTERFACE_TYPE__enumvalues = enum_498__enumvalues +EFI_INSTALL_PROTOCOL_INTERFACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(POINTER_T(None)), POINTER_T(struct_GUID), enum_498, POINTER_T(None))) +EFI_UNINSTALL_PROTOCOL_INTERFACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(struct_GUID), POINTER_T(None))) +EFI_HANDLE_PROTOCOL = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(struct_GUID), POINTER_T(POINTER_T(None)))) +EFI_MM_NOTIFY_FN = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(None))) +EFI_MM_REGISTER_PROTOCOL_NOTIFY = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(None))), POINTER_T(POINTER_T(None)))) +EFI_SMM_REGISTER_PROTOCOL_NOTIFY = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(None))), POINTER_T(POINTER_T(None)))) +EFI_LOCATE_SEARCH_TYPE = enum_500 +EFI_LOCATE_SEARCH_TYPE__enumvalues = enum_500__enumvalues +EFI_LOCATE_HANDLE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_500, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(ctypes.c_uint64), POINTER_T(POINTER_T(None)))) +EFI_LOCATE_PROTOCOL = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(POINTER_T(None)))) +EFI_MM_INTERRUPT_MANAGE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(None), POINTER_T(ctypes.c_uint64))) +EFI_SMM_INTERRUPT_MANAGE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(None), POINTER_T(ctypes.c_uint64))) +EFI_MM_HANDLER_ENTRY_POINT = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(None), POINTER_T(None), POINTER_T(ctypes.c_uint64))) +EFI_MM_INTERRUPT_REGISTER = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(None), POINTER_T(None), POINTER_T(ctypes.c_uint64))), POINTER_T(struct_GUID), POINTER_T(POINTER_T(None)))) +EFI_SMM_INTERRUPT_REGISTER = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(None), POINTER_T(None), POINTER_T(ctypes.c_uint64))), POINTER_T(struct_GUID), POINTER_T(POINTER_T(None)))) +EFI_MM_INTERRUPT_UNREGISTER = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None))) +EFI_SMM_INTERRUPT_UNREGISTER = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None))) +UINT16 = ctypes.c_uint16 +UINT8 = ctypes.c_ubyte +EFI_MM_IO_ACCESS = struct_EFI_MM_IO_ACCESS +PEFI_MM_IO_ACCESS = POINTER_T(struct_EFI_MM_IO_ACCESS) +EFI_MM_IO_WIDTH = enum_859 +EFI_MM_IO_WIDTH__enumvalues = enum_859__enumvalues +EFI_MM_CPU_IO = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct__EFI_MM_CPU_IO_PROTOCOL), enum_859, ctypes.c_uint64, ctypes.c_uint64, POINTER_T(None))) +__all__ = \ + ['AllHandles', 'AllocateAddress', 'AllocateAnyPages', + 'AllocateMaxAddress', 'BOOLEAN', 'ByProtocol', 'ByRegisterNotify', + 'CHAR16', 'EFI_ALLOCATE_PAGES', 'EFI_ALLOCATE_POOL', + 'EFI_ALLOCATE_TYPE', 'EFI_ALLOCATE_TYPE__enumvalues', + 'EFI_AP_PROCEDURE', 'EFI_CONFIGURATION_TABLE', 'EFI_FREE_PAGES', + 'EFI_FREE_POOL', 'EFI_GUID', 'EFI_HANDLE', 'EFI_HANDLE_PROTOCOL', + 'EFI_INSTALL_PROTOCOL_INTERFACE', 'EFI_INTERFACE_TYPE', + 'EFI_INTERFACE_TYPE__enumvalues', 'EFI_LOCATE_HANDLE', + 'EFI_LOCATE_PROTOCOL', 'EFI_LOCATE_SEARCH_TYPE', + 'EFI_LOCATE_SEARCH_TYPE__enumvalues', 'EFI_MEMORY_TYPE', + 'EFI_MEMORY_TYPE__enumvalues', 'EFI_MM_CPU_IO', + 'EFI_MM_CPU_IO_PROTOCOL', 'EFI_MM_HANDLER_ENTRY_POINT', + 'EFI_MM_INTERRUPT_MANAGE', 'EFI_MM_INTERRUPT_REGISTER', + 'EFI_MM_INTERRUPT_UNREGISTER', 'EFI_MM_IO_ACCESS', + 'EFI_MM_IO_WIDTH', 'EFI_MM_IO_WIDTH__enumvalues', + 'EFI_MM_NOTIFY_FN', 'EFI_MM_REGISTER_PROTOCOL_NOTIFY', + 'EFI_MM_STARTUP_THIS_AP', 'EFI_NATIVE_INTERFACE', + 'EFI_PHYSICAL_ADDRESS', 'EFI_SMM_BASE2_PROTOCOL', + 'EFI_SMM_CPU_IO2_PROTOCOL', 'EFI_SMM_GET_SMST_LOCATION2', + 'EFI_SMM_INSIDE_OUT2', 'EFI_SMM_INSTALL_CONFIGURATION_TABLE2', + 'EFI_SMM_INTERRUPT_MANAGE', 'EFI_SMM_INTERRUPT_REGISTER', + 'EFI_SMM_INTERRUPT_UNREGISTER', + 'EFI_SMM_REGISTER_PROTOCOL_NOTIFY', 'EFI_SMM_STARTUP_THIS_AP', + 'EFI_SMM_SYSTEM_TABLE2', 'EFI_STATUS', 'EFI_TABLE_HEADER', + 'EFI_UNINSTALL_PROTOCOL_INTERFACE', 'EfiACPIMemoryNVS', + 'EfiACPIReclaimMemory', 'EfiBootServicesCode', + 'EfiBootServicesData', 'EfiConventionalMemory', 'EfiLoaderCode', + 'EfiLoaderData', 'EfiMaxMemoryType', 'EfiMemoryMappedIO', + 'EfiMemoryMappedIOPortSpace', 'EfiPalCode', 'EfiPersistentMemory', + 'EfiReservedMemoryType', 'EfiRuntimeServicesCode', + 'EfiRuntimeServicesData', 'EfiUnusableMemory', 'GUID', + 'ImageBaseOffset32', 'MM_IO_UINT16', 'MM_IO_UINT32', + 'MM_IO_UINT64', 'MM_IO_UINT8', 'MaxAllocateType', + 'PEFI_CONFIGURATION_TABLE', 'PEFI_MM_IO_ACCESS', + 'PEFI_TABLE_HEADER', 'PGUID', 'P_EFI_MM_CPU_IO_PROTOCOL', + 'P_EFI_SMM_BASE2_PROTOCOL', 'P_EFI_SMM_SYSTEM_TABLE2', + 'RETURN_STATUS', 'UINT16', 'UINT32', 'UINT64', 'UINT8', 'UINTN', + '_EFI_MM_CPU_IO_PROTOCOL', '_EFI_SMM_BASE2_PROTOCOL', + '_EFI_SMM_SYSTEM_TABLE2', 'byte', 'dword', 'enum_16', 'enum_494', + 'enum_498', 'enum_500', 'enum_859', 'longlong', 'qword', + 'struct_EFI_CONFIGURATION_TABLE', 'struct_EFI_MM_IO_ACCESS', + 'struct_EFI_TABLE_HEADER', 'struct_GUID', + 'struct__EFI_MM_CPU_IO_PROTOCOL', + 'struct__EFI_SMM_BASE2_PROTOCOL', 'struct__EFI_SMM_SYSTEM_TABLE2', + 'uchar', 'uint', 'ulong', 'ulonglong', 'undefined', 'undefined1', + 'undefined4', 'undefined8', 'ushort', 'word'] diff --git a/qiling/os/uefi/utils.py b/qiling/os/uefi/utils.py index c729eac00..775bd73ce 100644 --- a/qiling/os/uefi/utils.py +++ b/qiling/os/uefi/utils.py @@ -43,9 +43,9 @@ def read_int64(ql, address): def LocateHandles(ql, address, params): handles = [] - if params["SearchKey"] == SEARCHTYPE_AllHandles: + if params["SearchType"] == SEARCHTYPE_AllHandles: handles = ql.loader.handle_dict.keys() - elif params["SearchKey"] == SEARCHTYPE_ByProtoco: + elif params["SearchType"] == SEARCHTYPE_ByProtocol: for handle, guid_dic in ql.loader.handle_dict.items(): if params["Protocol"] in guid_dic: handles.append(handle) diff --git a/qiling/os/utils.py b/qiling/os/utils.py index 3309d9e32..a4516df2c 100644 --- a/qiling/os/utils.py +++ b/qiling/os/utils.py @@ -199,9 +199,8 @@ def restore(ql): # we want to rewrite the return address to the function self.ql.stack_write(0, start) - def disassembler(self, ql, address, size): - tmp = self.ql.mem.read(address, size) + def create_disassembler(self): if self.ql.archtype == QL_ARCH.ARM: # QL_ARM reg_cpsr = self.ql.reg.cpsr mode = CS_MODE_ARM @@ -238,6 +237,13 @@ def disassembler(self, ql, address, size): else: raise QlErrorArch("[!] Unknown arch defined in utils.py (debug output mode)") + return md + + def disassembler(self, ql, address, size): + tmp = self.ql.mem.read(address, size) + + md = self.create_disassembler() + insn = md.disasm(tmp, address) opsize = int(size) diff --git a/qiling/os/windows/const.py b/qiling/os/windows/const.py index 4745a4e00..bf80f9ff2 100644 --- a/qiling/os/windows/const.py +++ b/qiling/os/windows/const.py @@ -16,6 +16,7 @@ ERROR_INSUFFICIENT_BUFFER = 0x7A ERROR_ALREADY_EXISTS = 0xB7 ERROR_MORE_DATA = 0xEA +ERROR_NOT_OWNER = 0x120 ERROR_OLD_WIN_VERSION = 0X47E # ... @@ -379,6 +380,18 @@ 0x409: LOCALE_EN_US, "default": LOCALE_EN_US } +# SYSTEM_INFORMATION_CLASS +# Defined in Winternl.h +# Used by NTQuerySystemInformation and ZwQuerySystemInformation +SystemBasicInformation = 0 +SystemPerformanceInformation = 2 +SystemTimeOfDayInformation = 3 +SystemProcessInformation = 5 +SystemProcessorPerformanceInformation = 8 +SystemInterruptInformation = 23 +SystemExceptionInformation = 33 +SystemRegistryQuotaInformation = 37 +SystemLookasideInformation = 45 # Code Page Identifiers # https://docs.microsoft.com/en-us/windows/win32/intl/code-page-identifiers OEM_US = 437 @@ -649,4 +662,4 @@ # https://docs.microsoft.com/en-us/windows/win32/api/handleapi/nf-handleapi-sethandleinformation HANDLE_FLAG_INHERIT = 0x1 -HANDLE_FLAG_PROTECT_FROM_CLOSE = 0x2 \ No newline at end of file +HANDLE_FLAG_PROTECT_FROM_CLOSE = 0x2 diff --git a/qiling/os/windows/dlls/advapi32.py b/qiling/os/windows/dlls/advapi32.py index b61efb236..ece6fec6c 100644 --- a/qiling/os/windows/dlls/advapi32.py +++ b/qiling/os/windows/dlls/advapi32.py @@ -10,6 +10,7 @@ from qiling.os.windows.const import * from qiling.os.windows.structs import * +dllname = 'advapi32_dll' def _RegOpenKey(ql, address, params): hKey = params["hKey"] @@ -95,13 +96,7 @@ def RegQueryValue(ql, address, params): # REGSAM samDesired, # PHKEY phkResult # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": STRING, - "ulOptions": DWORD, - "samDesired": POINTER, - "phkResult": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegOpenKeyExA(ql, address, params): return _RegOpenKey(ql, address, params) @@ -113,13 +108,7 @@ def hook_RegOpenKeyExA(ql, address, params): # REGSAM samDesired, # PHKEY phkResult # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": WSTRING, - "ulOptions": DWORD, - "samDesired": POINTER, - "phkResult": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegOpenKeyExW(ql, address, params): return _RegOpenKey(ql, address, params) @@ -129,25 +118,17 @@ def hook_RegOpenKeyExW(ql, address, params): # LPCWSTR lpSubKey, # PHKEY phkResult # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": WSTRING, - "phkResult": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegOpenKeyW(ql, address, params): return _RegOpenKey(ql, address, params) # LSTATUS RegOpenKeyA( # HKEY hKey, -# LPCWSTR lpSubKey, +# LPCSTR lpSubKey, # PHKEY phkResult # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": STRING, - "phkResult": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegOpenKeyA(ql, address, params): return _RegOpenKey(ql, address, params) @@ -160,14 +141,7 @@ def hook_RegOpenKeyA(ql, address, params): # LPBYTE lpData, # LPDWORD lpcbData # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpValueName": STRING, - "lpReserved": POINTER, - "lpType": POINTER, - "lpData": POINTER, - "lpcbData": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegQueryValueExA(ql, address, params): return RegQueryValue(ql, address, params) @@ -180,14 +154,7 @@ def hook_RegQueryValueExA(ql, address, params): # LPBYTE lpData, # LPDWORD lpcbData # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpValueName": WSTRING, - "lpReserved": POINTER, - "lpType": POINTER, - "lpData": POINTER, - "lpcbData": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegQueryValueExW(ql, address, params): return RegQueryValue(ql, address, params) @@ -195,9 +162,7 @@ def hook_RegQueryValueExW(ql, address, params): # LSTATUS RegCloseKey( # HKEY hKey # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegCloseKey(ql, address, params): ret = ERROR_SUCCESS hKey = params["hKey"] @@ -210,11 +175,7 @@ def hook_RegCloseKey(ql, address, params): # LPCSTR lpSubKey, # PHKEY phkResult # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": STRING, - "phkResult": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegCreateKeyA(ql, address, params): return hook_RegCreateKeyW.__wrapped__(ql, address, params) @@ -224,11 +185,7 @@ def hook_RegCreateKeyA(ql, address, params): # LPCWSTR lpSubKey, # PHKEY phkResult # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": WSTRING, - "phkResult": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegCreateKeyW(ql, address, params): ret = ERROR_SUCCESS @@ -268,17 +225,7 @@ def hook_RegCreateKeyW(ql, address, params): # PHKEY phkResult, # LPDWORD lpdwDisposition # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": WSTRING, - "Reserved": POINTER, - "lpClass": POINTER, - "dwOptions": POINTER, - "samDesired": POINTER, - "lpSecurityAttributes": POINTER, - "phkResult": POINTER, - "lpdwDisposition": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'DWORD': 'POINTER'}) def hook_RegCreateKeyExW(ql, address, params): ret = ERROR_SUCCESS @@ -314,13 +261,7 @@ def hook_RegCreateKeyExW(ql, address, params): # LPCSTR lpData, # DWORD cbData # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": STRING, - "dwType": DWORD, - "lpData": STRING, - "cbData": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegSetValueA(ql, address, params): ret = ERROR_SUCCESS @@ -347,14 +288,7 @@ def hook_RegSetValueA(ql, address, params): # const BYTE *lpData, # DWORD cbData # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpValueName": WSTRING, - "Reserved": DWORD, - "dwType": DWORD, - "lpData": WSTRING, - "cbData": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegSetValueExW(ql, address, params): ret = ERROR_SUCCESS @@ -377,10 +311,7 @@ def hook_RegSetValueExW(ql, address, params): # HKEY hKey, # LPCSTR lpSubKey # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": STRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegDeleteKeyA(ql, address, params): return hook_RegDeleteKeyW.__wrapped__(ql, address, params) @@ -389,10 +320,7 @@ def hook_RegDeleteKeyA(ql, address, params): # HKEY hKey, # LPCWSTR lpSubKey # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": WSTRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegDeleteKeyW(ql, address, params): ret = ERROR_SUCCESS @@ -411,10 +339,7 @@ def hook_RegDeleteKeyW(ql, address, params): # HKEY hKey, # LPCSTR lpValueName # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpValueName": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegDeleteValueA(ql, address, params): return hook_RegDeleteValueW.__wrapped__(ql, address, params) @@ -423,10 +348,7 @@ def hook_RegDeleteValueA(ql, address, params): # HKEY hKey, # LPCWSTR lpValueName # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpValueName": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegDeleteValueW(ql, address, params): ret = ERROR_SUCCESS @@ -448,13 +370,7 @@ def hook_RegDeleteValueW(ql, address, params): # DWORD TokenInformationLength, # PDWORD ReturnLength # ); -@winapi(cc=STDCALL, params={ - "TokenHandle": HANDLE, - "TokenInformationClass": DWORD, - "TokenInformation": POINTER, - "TokenInformationLength": DWORD, - "ReturnLength": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetTokenInformation(ql, address, params): id_token = params["TokenHandle"] information = params["TokenInformationClass"] @@ -479,9 +395,7 @@ def hook_GetTokenInformation(ql, address, params): # PUCHAR GetSidSubAuthorityCount( # PSID pSid # ); -@winapi(cc=STDCALL, params={ - "pSid": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetSidSubAuthorityCount(ql, address, params): sid = ql.os.handle_manager.get(params["pSid"]).obj addr_authority_count = sid.addr + 1 # +1 because the first byte is revision @@ -492,10 +406,7 @@ def hook_GetSidSubAuthorityCount(ql, address, params): # PSID pSid, # DWORD nSubAuthority # ); -@winapi(cc=STDCALL, params={ - "pSid": HANDLE, - "nSubAuthority": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'DWORD': 'INT'}) def hook_GetSidSubAuthority(ql, address, params): num = params["nSubAuthority"] sid = ql.os.handle_manager.get(params["pSid"]).obj @@ -516,20 +427,7 @@ def hook_GetSidSubAuthority(ql, address, params): # DWORD nSubAuthority7, # PSID *pSid # ); -@winapi(cc=STDCALL, params={ - "pIdentifierAuthority": POINTER, - "nSubAuthorityCount": BYTE, - "nSubAuthority0": DWORD, - "nSubAuthority1": DWORD, - "nSubAuthority2": DWORD, - "nSubAuthority3": DWORD, - "nSubAuthority4": DWORD, - "nSubAuthority5": DWORD, - "nSubAuthority6": DWORD, - "nSubAuthority7": DWORD, - "pSid": POINTER - -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_AllocateAndInitializeSid(ql, address, params): count = params["nSubAuthorityCount"] subs = b"" @@ -549,10 +447,7 @@ def hook_AllocateAndInitializeSid(ql, address, params): # PVOID FreeSid( # PSID pSid # ); -@winapi(cc=STDCALL, params={ - "pSid": HANDLE - -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_FreeSid(ql, address, params): ql.os.heap.free(params["pSid"]) return 0 @@ -562,11 +457,7 @@ def hook_FreeSid(ql, address, params): # PSID pSid1, # PSID pSid2 # ); -@winapi(cc=STDCALL, params={ - "pSid1": HANDLE, - "pSid2": HANDLE, - -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_EqualSid(ql, address, params): # TODO once i have understood better how SID are wrote in memory. Fucking documentation # technically this one should be my SID that i created at the start. I said should, because when testing, it has a diff --git a/qiling/os/windows/dlls/crypt32.py b/qiling/os/windows/dlls/crypt32.py index d744889b2..2544c0596 100644 --- a/qiling/os/windows/dlls/crypt32.py +++ b/qiling/os/windows/dlls/crypt32.py @@ -10,6 +10,7 @@ from qiling.os.windows.handle import * from qiling.os.windows.const import * +dllname = 'crypt32_dll' # BOOL CryptStringToBinaryA( # LPCSTR pszString, @@ -20,15 +21,8 @@ # DWORD *pdwSkip, # DWORD *pdwFlags # ); -@winapi(cc=STDCALL, params={ - "pszString": STRING, - "cchString": DWORD, - "dwFlags": DWORD, - "pbBinary": POINTER, - "pcbBinary": POINTER, - "pdwSkip": POINTER, - "pdwFlags": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'BYTE': 'POINTER'}, + replace_params={"pcbBinary": POINTER, "pdwSkip": POINTER, "pdwFlags": POINTER}) def hook_CryptStringToBinaryA(ql, address, params): flag_src = params["dwFlags"] string_src = params["pszString"] diff --git a/qiling/os/windows/dlls/kernel32/consoleapi2.py b/qiling/os/windows/dlls/kernel32/consoleapi2.py index ae77fe420..90ec108b9 100644 --- a/qiling/os/windows/dlls/kernel32/consoleapi2.py +++ b/qiling/os/windows/dlls/kernel32/consoleapi2.py @@ -13,13 +13,12 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # BOOL WINAPI SetConsoleTitle( # _In_ LPCTSTR lpConsoleTitle # ); -@winapi(cc=STDCALL, params={ - "lpConsoleTitle": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"lpConsoleTitle": WSTRING}) def hook_SetConsoleTitleW(ql, address, params): return 1 @@ -28,10 +27,7 @@ def hook_SetConsoleTitleW(ql, address, params): # _In_ HANDLE hConsoleOutput, # _Out_ PCONSOLE_SCREEN_BUFFER_INFO lpConsoleScreenBufferInfo # ); -@winapi(cc=STDCALL, params={ - "hConsoleOutput": HANDLE, - "lpConsoleScreenBufferInfo": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"hConsoleOutput": HANDLE, "lpConsoleScreenBufferInfo": POINTER}) def hook_GetConsoleScreenBufferInfo(ql, address, params): # Todo should we really? return 1 @@ -41,9 +37,6 @@ def hook_GetConsoleScreenBufferInfo(ql, address, params): # _In_ HANDLE hConsoleOutput, # _In_ WORD wAttributes # ); -@winapi(cc=STDCALL, params={ - "hConsoleOutput": HANDLE, - "wAttributes": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"hConsoleOutput": HANDLE, "wAttributes": INT}) def hook_SetConsoleTextAttribute(ql, address, params): return 1 diff --git a/qiling/os/windows/dlls/kernel32/consoleapi3.py b/qiling/os/windows/dlls/kernel32/consoleapi3.py index 75d6cce33..81103770e 100644 --- a/qiling/os/windows/dlls/kernel32/consoleapi3.py +++ b/qiling/os/windows/dlls/kernel32/consoleapi3.py @@ -13,10 +13,10 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # HWND WINAPI GetConsoleWindow(void); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetConsoleWindow(ql, address, params): handle = Handle(name="console_window") ql.os.handle_manager.append(handle) diff --git a/qiling/os/windows/dlls/kernel32/debugapi.py b/qiling/os/windows/dlls/kernel32/debugapi.py index f26e81c16..cd78dc2cf 100644 --- a/qiling/os/windows/dlls/kernel32/debugapi.py +++ b/qiling/os/windows/dlls/kernel32/debugapi.py @@ -13,10 +13,10 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # BOOL IsDebuggerPresent(); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_IsDebuggerPresent(ql, address, params): return 0 @@ -25,10 +25,7 @@ def hook_IsDebuggerPresent(ql, address, params): # HANDLE hProcess, # PBOOL pbDebuggerPresent # ); -@winapi(cc=STDCALL, params={ - "hProcess": HANDLE, - "pbDebuggerPresent": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CheckRemoteDebuggerPresent(ql, address, params): pointer = params["pbDebuggerPresent"] ql.mem.write(pointer, 0x0.to_bytes(1, byteorder="little")) @@ -38,9 +35,7 @@ def hook_CheckRemoteDebuggerPresent(ql, address, params): # void OutputDebugStringW( # LPCWSTR lpOutputString # ); -@winapi(cc=STDCALL, params={ - "lpOutputString": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_OutputDebugStringW(ql, address, params): string = params["lpOutputString"] ql.nprint('OutputDebugStringW: "%s"' % (string.encode())) @@ -50,9 +45,7 @@ def hook_OutputDebugStringW(ql, address, params): # void OutputDebugStringA( # LPCSTR lpOutputString # ); -@winapi(cc=STDCALL, params={ - "lpOutputString": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_OutputDebugStringA(ql, address, params): ql.nprint('OutputDebugStringA: "%s"' % (params['lpOutputString'])) return 0 diff --git a/qiling/os/windows/dlls/kernel32/errhandlingapi.py b/qiling/os/windows/dlls/kernel32/errhandlingapi.py index 19b8fb4ce..131cb74da 100644 --- a/qiling/os/windows/dlls/kernel32/errhandlingapi.py +++ b/qiling/os/windows/dlls/kernel32/errhandlingapi.py @@ -13,13 +13,12 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # LPTOP_LEVEL_EXCEPTION_FILTER SetUnhandledExceptionFilter( # LPTOP_LEVEL_EXCEPTION_FILTER lpTopLevelExceptionFilter # ); -@winapi(cc=STDCALL, params={ - "lpTopLevelExceptionFilter": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SetUnhandledExceptionFilter(ql, address, params): addr = params["lpTopLevelExceptionFilter"] handle = ql.os.handle_manager.search("TopLevelExceptionHandler") @@ -32,7 +31,7 @@ def hook_SetUnhandledExceptionFilter(ql, address, params): # _Post_equals_last_error_ DWORD GetLastError(); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetLastError(ql, address, params): return ql.os.last_error @@ -40,9 +39,7 @@ def hook_GetLastError(ql, address, params): # void SetLastError( # DWORD dwErrCode # ); -@winapi(cc=STDCALL, params={ - "dwErrCode": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'DWORD': 'UINT'}) def hook_SetLastError(ql, address, params): ql.os.last_error = params['dwErrCode'] return 0 @@ -51,9 +48,7 @@ def hook_SetLastError(ql, address, params): # LONG UnhandledExceptionFilter( # _EXCEPTION_POINTERS *ExceptionInfo # ); -@winapi(cc=STDCALL, params={ - "ExceptionInfo": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_UnhandledExceptionFilter(ql, address, params): ret = 1 return ret @@ -62,9 +57,7 @@ def hook_UnhandledExceptionFilter(ql, address, params): # UINT SetErrorMode( # UINT uMode # ); -@winapi(cc=STDCALL, params={ - "uMode": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SetErrorMode(ql, address, params): # TODO maybe this need a better implementation return 0 @@ -76,12 +69,7 @@ def hook_SetErrorMode(ql, address, params): # DWORD nNumberOfArguments, # const ULONG_PTR *lpArguments # ); -@winapi(cc=STDCALL, params={ - "dwExceptionCode": DWORD, - "dwExceptionFlags": DWORD, - "nNumberOfArguments": DWORD, - "lpArguments": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RaiseException(ql, address, params): func_addr = ql.os.handle_manager.search("TopLevelExceptionHandler").obj @@ -96,10 +84,7 @@ def hook_RaiseException(ql, address, params): # ULONG First, # PVECTORED_EXCEPTION_HANDLER Handler # ); -@winapi(cc=STDCALL, params={ - "First": UINT, - "Handler": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'ULONG': 'UINT'}) def hook_AddVectoredExceptionHandler(ql, address, params): # this case is an anomaly from other interrupts (from what i learned, can be wrong) @@ -145,10 +130,8 @@ def exec_standard_into(ql, into, user_data): # ULONG RemoveVectoredExceptionHandler( # PVOID Handle # ); -@winapi(cc=STDCALL, params={ - "Handler": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'PVOID': 'HANDLE'}) def hook_RemoveVectoredExceptionHandler(ql, address, params): - hook = ql.os.handle_manager.get(params["Handler"]).obj + hook = ql.os.handle_manager.get(params["Handle"]).obj hook.remove() return 0 diff --git a/qiling/os/windows/dlls/kernel32/fibersapi.py b/qiling/os/windows/dlls/kernel32/fibersapi.py index 236ac7b34..4d62189b3 100644 --- a/qiling/os/windows/dlls/kernel32/fibersapi.py +++ b/qiling/os/windows/dlls/kernel32/fibersapi.py @@ -13,13 +13,12 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # DWORD FlsFree( # DWORD dwFlsIndex # ); -@winapi(cc=STDCALL, params={ - "dwFlsIndex": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'DWORD': 'UINT'}) def hook_FlsFree(ql, address, params): return ql.os.fiber_manager.free(params['dwFlsIndex']) @@ -27,29 +26,24 @@ def hook_FlsFree(ql, address, params): # LPVOID FlsGetValue( # DWORD dwFlsIndex # ); -@winapi(cc=STDCALL, params={ - "dwFlsIndex": UINT}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'DWORD': 'UINT'}) def hook_FlsGetValue(ql, address, params): return ql.os.fiber_manager.get(params['dwFlsIndex']) # LPVOID FlsSetValue( # DWORD dwFlsIndex +# PVOID lpFlsData # ); -@winapi(cc=STDCALL, params={ - "dwFlsIndex": UINT, - "lpFlsValue": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'DWORD': 'UINT'}) def hook_FlsSetValue(ql, address, params): - return ql.os.fiber_manager.set(params['dwFlsIndex'], params['lpFlsValue']) + return ql.os.fiber_manager.set(params['dwFlsIndex'], params['lpFlsData']) # DWORD FlsAlloc( # PFLS_CALLBACK_FUNCTION lpCallback # ); -@winapi(cc=STDCALL, params={ - "lpCallback": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_FlsAlloc(ql, address, params): # global cb = params['lpCallback'] cb = params['lpCallback'] diff --git a/qiling/os/windows/dlls/kernel32/fileapi.py b/qiling/os/windows/dlls/kernel32/fileapi.py index 5f21b1fe1..129ee17d2 100644 --- a/qiling/os/windows/dlls/kernel32/fileapi.py +++ b/qiling/os/windows/dlls/kernel32/fileapi.py @@ -14,13 +14,12 @@ from qiling.os.windows.thread import * from qiling.os.windows.handle import * +dllname = 'kernel32_dll' # DWORD GetFileType( # HANDLE hFile # ); -@winapi(cc=STDCALL, params={ - "hFile": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetFileType(ql, address, params): hFile = params["hFile"] if hFile == STD_INPUT_HANDLE or hFile == STD_OUTPUT_HANDLE or hFile == STD_ERROR_HANDLE: @@ -39,10 +38,7 @@ def hook_GetFileType(ql, address, params): # LPCSTR lpFileName, # LPWIN32_FIND_DATAA lpFindFileData # ); -@winapi(cc=STDCALL, params={ - "lpFilename": POINTER, - "lpFindFileData": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCSTR': 'POINTER'}) def hook_FindFirstFileA(ql, address, params): pass @@ -51,10 +47,7 @@ def hook_FindFirstFileA(ql, address, params): # LPCSTR lpFileName, # LPWIN32_FIND_DATAA lpFindFileData # ); -@winapi(cc=STDCALL, params={ - "lpFilename": POINTER, - "lpFindFileData": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCSTR': 'POINTER'}) def hook_FindNextFileA(ql, address, params): pass @@ -62,9 +55,7 @@ def hook_FindNextFileA(ql, address, params): # BOOL FindClose( # HANDLE hFindFile # ); -@winapi(cc=STDCALL, params={ - "hFindFile": HANDLE, -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_FindClose(ql, address, params): pass @@ -76,13 +67,7 @@ def hook_FindClose(ql, address, params): # LPDWORD lpNumberOfBytesRead, # LPOVERLAPPED lpOverlapped # ); -@winapi(cc=STDCALL, params={ - "hFile": HANDLE, - "lpBuffer": POINTER, - "nNumberOfBytesToRead": DWORD, - "lpNumberOfBytesRead": POINTER, - "lpOverlapped": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_ReadFile(ql, address, params): ret = 1 hFile = params["hFile"] @@ -119,13 +104,7 @@ def hook_ReadFile(ql, address, params): # LPDWORD lpNumberOfBytesWritten, # LPOVERLAPPED lpOverlapped # ); -@winapi(cc=STDCALL, params={ - "hFile": HANDLE, - "lpBuffer": POINTER, - "nNumberOfBytesToWrite": DWORD, - "lpNumberOfBytesWritten": POINTER, - "lpOverlapped": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_WriteFile(ql, address, params): ret = 1 hFile = params["hFile"] @@ -193,15 +172,7 @@ def _CreateFile(ql, address, params, name): # DWORD dwFlagsAndAttributes, # HANDLE hTemplateFile # ); -@winapi(cc=STDCALL, params={ - "lpFileName": STRING, - "dwDesiredAccess": DWORD, - "dwShareMode": DWORD, - "lpSecurityAttributes": POINTER, - "dwCreationDisposition": DWORD, - "dwFlagsAndAttributes": DWORD, - "hTemplateFile": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateFileA(ql, address, params): ret = _CreateFile(ql, address, params, "CreateFileA") return ret @@ -216,15 +187,7 @@ def hook_CreateFileA(ql, address, params): # DWORD dwFlagsAndAttributes, # HANDLE hTemplateFile # ); -@winapi(cc=STDCALL, params={ - "lpFileName": WSTRING, - "dwDesiredAccess": DWORD, - "dwShareMode": DWORD, - "lpSecurityAttributes": POINTER, - "dwCreationDisposition": DWORD, - "dwFlagsAndAttributes": DWORD, - "hTemplateFile": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateFileW(ql, address, params): ret = _CreateFile(ql, address, params, "CreateFileW") return ret @@ -234,10 +197,7 @@ def hook_CreateFileW(ql, address, params): # DWORD nBufferLength, # LPWSTR lpBuffer # ); -@winapi(cc=STDCALL, params={ - "nBufferLength": DWORD, - "lpBuffer": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetTempPathW(ql, address, params): temp = (ql.os.windir + "Temp" + "\\\x00").encode('utf-16le') dest = params["lpBuffer"] @@ -253,11 +213,7 @@ def hook_GetTempPathW(ql, address, params): # LPWSTR lpszShortPath, # DWORD cchBuffer # ); -@winapi(cc=STDCALL, params={ - "lpszLongPath": WSTRING, - "lpszShortPath": POINTER, - "cchBuffer": DWORD, -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetShortPathNameW(ql, address, params): paths = params["lpszLongPath"].split("\\") dst = params["lpszShortPath"] @@ -289,16 +245,7 @@ def hook_GetShortPathNameW(ql, address, params): # LPWSTR lpFileSystemNameBuffer, # DWORD nFileSystemNameSize # ); -@winapi(cc=STDCALL, params={ - "lpRootPathName": WSTRING, - "lpVolumeNameBuffer": POINTER, - "nVolumeNameSize": DWORD, - "lpVolumeSerialNumber": POINTER, - "lpMaximumComponentLength": POINTER, - "lpFileSystemFlags": POINTER, - "lpFileSystemNameBuffer": POINTER, - "nFileSystemNameSize": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetVolumeInformationW(ql, address, params): root = params["lpRootPathName"] if root != 0: @@ -334,9 +281,7 @@ def hook_GetVolumeInformationW(ql, address, params): # UINT GetDriveTypeW( # LPCWSTR lpRootPathName # ); -@winapi(cc=STDCALL, params={ - "lpRootPathName": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCWSTR': 'POINTER'}) def hook_GetDriveTypeW(ql, address, params): path = params["lpRootPathName"] if path != 0: @@ -355,13 +300,7 @@ def hook_GetDriveTypeW(ql, address, params): # LPDWORD lpNumberOfFreeClusters, # LPDWORD lpTotalNumberOfClusters # ); -@winapi(cc=STDCALL, params={ - "lpRootPathName": WSTRING, - "lpSectorsPerCluster": POINTER, - "lpBytesPerSector": POINTER, - "lpNumberOfFreeClusters": POINTER, - "lpTotalNumberOfClusters": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCWSTR': 'POINTER'}) def hook_GetDiskFreeSpaceW(ql, address, params): path = params["lpRootPathName"] if path == ql.os.profile["PATH"]["systemdrive"]: @@ -386,10 +325,7 @@ def hook_GetDiskFreeSpaceW(ql, address, params): # LPCSTR lpPathName, # LPSECURITY_ATTRIBUTES lpSecurityAttributes # ); -@winapi(cc=STDCALL, params={ - "lpPathName": STRING, - "lpSecurityAttributes": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateDirectoryA(ql, address, params): path_name = params["lpPathName"] target_dir = os.path.join(ql.rootfs, path_name.replace("\\", os.sep)) @@ -408,10 +344,7 @@ def hook_CreateDirectoryA(ql, address, params): # HANDLE hFile, # LPDWORD lpFileSizeHigh # ); -@winapi(cc=STDCALL, params={ - "hFile": HANDLE, - "lpFileSizeHigh": DWORD, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPDWORD': 'DWORD'}) def hook_GetFileSize(ql, address, params): try: handle = ql.handle_manager.get(params['hFile'].file) @@ -422,19 +355,19 @@ def hook_GetFileSize(ql, address, params): # BOOL AreFileApisANSI(); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_AreFileApisANSI(ql, address, params): # TODO make this coherent with SetFileApisToANSI/OEM calls return 1 # void SetFileApisToANSI(); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SetFileApisToANSI(ql, address, params): return # void SetFileApisToOEM(); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SetFileApisToOEM(ql, address, params): return diff --git a/qiling/os/windows/dlls/kernel32/handleapi.py b/qiling/os/windows/dlls/kernel32/handleapi.py index 59c14b82a..5688823e9 100644 --- a/qiling/os/windows/dlls/kernel32/handleapi.py +++ b/qiling/os/windows/dlls/kernel32/handleapi.py @@ -13,6 +13,7 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # BOOL DuplicateHandle( # HANDLE hSourceProcessHandle, @@ -23,15 +24,7 @@ # BOOL bInheritHandle, # DWORD dwOptions # ); -@winapi(cc=STDCALL, params={ - "hSourceProcessHandle": POINTER, - "hSourceHandle": POINTER, - "hTargetProcessHandle": POINTER, - "lpTargetHandle": POINTER, - "dwDesiredAccess": DWORD, - "bInheritHandle": BOOL, - "dwOptions": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HANDLE': 'POINTER'}) def hook_DuplicateHandle(ql, address, params): # TODO for how we manage handle, i think this doesn't work content = params["hSourceHandle"] @@ -43,9 +36,7 @@ def hook_DuplicateHandle(ql, address, params): # BOOL CloseHandle( # HANDLE hObject # ); -@winapi(cc=STDCALL, params={ - "hObject": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CloseHandle(ql, address, params): value = params["hObject"] handle = ql.os.handle_manager.get(value) @@ -67,11 +58,7 @@ def hook_CloseHandle(ql, address, params): # DWORD dwMask, # DWORD dwFlags # ); -@winapi(cc=STDCALL, params={ - "hObject": HANDLE, - "dwMask": DWORD, - "dwFlags": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HANDLE': 'POINTER'}) def hook_SetHandleInformation(ql, address, params): val = params["hObject"] handle = ql.os.handle_manager.get(val) diff --git a/qiling/os/windows/dlls/kernel32/heapapi.py b/qiling/os/windows/dlls/kernel32/heapapi.py index 5b02b7504..2015541a5 100644 --- a/qiling/os/windows/dlls/kernel32/heapapi.py +++ b/qiling/os/windows/dlls/kernel32/heapapi.py @@ -13,17 +13,14 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # HANDLE HeapCreate( # DWORD flOptions, # SIZE_T dwInitialSize, # SIZE_T dwMaximumSize # ); -@winapi(cc=STDCALL, params={ - "flOptions": DWORD, - "dwInitialSize": SIZE_T, - "dwMaximumSize": SIZE_T -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_HeapCreate(ql, address, params): dwInitialSize = params["dwInitialSize"] addr = ql.os.heap.alloc(dwInitialSize) @@ -35,11 +32,7 @@ def hook_HeapCreate(ql, address, params): # DWORD dwFlags, # SIZE_T dwBytes # ); -@winapi(cc=STDCALL, params={ - "hHeap": HANDLE, - "dwFlags": DWORD, - "dwBytes": SIZE_T -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_HeapAlloc(ql, address, params): ret = ql.os.heap.alloc(params["dwBytes"]) return ret @@ -50,11 +43,7 @@ def hook_HeapAlloc(ql, address, params): # DWORD dwFlags, # LPCVOID lpMem # ); -@winapi(cc=STDCALL, params={ - "hHeap": HANDLE, - "dwFlags": DWORD, - "lpMem": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_HeapSize(ql, address, params): pointer = params["lpMem"] return ql.os.heap.size(pointer) @@ -65,11 +54,7 @@ def hook_HeapSize(ql, address, params): # DWORD dwFlags, # _Frees_ptr_opt_ LPVOID lpMem # ); -@winapi(cc=STDCALL, params={ - "hHeap": HANDLE, - "dwFlags": DWORD, - "lpMem": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_HeapFree(ql, address, params): return ql.os.heap.free(params['lpMem']) @@ -80,19 +65,14 @@ def hook_HeapFree(ql, address, params): # PVOID HeapInformation, # SIZE_T HeapInformationLength # ); -@winapi(cc=STDCALL, params={ - "HeapHandle": HANDLE, - "HeapInformationClass": UINT, - "HeapInformation": POINTER, - "HeapInformationLength": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'SIZE_T': 'UINT'}) def hook_HeapSetInformation(ql, address, params): return 1 # HANDLE GetProcessHeap( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetProcessHeap(ql, address, params): ret = ql.os.heap.start_address return ret diff --git a/qiling/os/windows/dlls/kernel32/interlockedapi.py b/qiling/os/windows/dlls/kernel32/interlockedapi.py index c4a24b59c..081deda37 100644 --- a/qiling/os/windows/dlls/kernel32/interlockedapi.py +++ b/qiling/os/windows/dlls/kernel32/interlockedapi.py @@ -13,13 +13,12 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # void InitializeSListHead( # PSLIST_HEADER ListHead # ); -@winapi(cc=STDCALL, params={ - "ListHead": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InitializeSListHead(ql, address, params): addr = params["ListHead"] handle = Handle(obj=[], id=addr) diff --git a/qiling/os/windows/dlls/kernel32/ioapiset.py b/qiling/os/windows/dlls/kernel32/ioapiset.py index f64e80d02..f88029123 100644 --- a/qiling/os/windows/dlls/kernel32/ioapiset.py +++ b/qiling/os/windows/dlls/kernel32/ioapiset.py @@ -13,6 +13,7 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # BOOL DeviceIoControl( # HANDLE hDevice, @@ -24,16 +25,7 @@ # LPDWORD lpBytesReturned, # LPOVERLAPPED lpOverlapped # ); -@winapi(cc=STDCALL, params={ - "hDevice": HANDLE, - "dwIoControlCode": DWORD, - "lpInBuffer": POINTER, - "nInBufferSize": DWORD, - "lpOutBuffer": POINTER, - "nOutBufferSize": DWORD, - "lpBytesReturned": POINTER, - "lpOverlapped": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_DeviceIoControl(ql, address, params): operation = params["dwIoControlCode"] data = params["lpInBuffer"] diff --git a/qiling/os/windows/dlls/kernel32/libloaderapi.py b/qiling/os/windows/dlls/kernel32/libloaderapi.py index 61dd9ce04..9a19c0f7d 100644 --- a/qiling/os/windows/dlls/kernel32/libloaderapi.py +++ b/qiling/os/windows/dlls/kernel32/libloaderapi.py @@ -13,6 +13,7 @@ from qiling.os.windows.utils import * from qiling.os.windows.thread import * +dllname = 'kernel32_dll' def _GetModuleHandle(ql, address, params): lpModuleName = params["lpModuleName"] @@ -33,9 +34,7 @@ def _GetModuleHandle(ql, address, params): # HMODULE GetModuleHandleA( # LPCSTR lpModuleName # ); -@winapi(cc=STDCALL, params={ - "lpModuleName": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetModuleHandleA(ql, address, params): return _GetModuleHandle(ql, address, params) @@ -43,9 +42,7 @@ def hook_GetModuleHandleA(ql, address, params): # HMODULE GetModuleHandleW( # LPCWSTR lpModuleName # ); -@winapi(cc=STDCALL, params={ - "lpModuleName": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetModuleHandleW(ql, address, params): return _GetModuleHandle(ql, address, params) @@ -55,11 +52,7 @@ def hook_GetModuleHandleW(ql, address, params): # LPCWSTR lpModuleName, # HMODULE *phModule # ); -@winapi(cc=STDCALL, params={ - "dwFlags": DWORD, - "lpModuleName": WSTRING, - "phModule": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetModuleHandleExW(ql, address, params): res = _GetModuleHandle(ql, address, params) dst = params["phModule"] @@ -72,11 +65,7 @@ def hook_GetModuleHandleExW(ql, address, params): # LPSTR lpFilename, # DWORD nSize # ); -@winapi(cc=STDCALL, params={ - "hModule": HANDLE, - "lpFilename": POINTER, - "nSize": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetModuleFileNameA(ql, address, params): ret = 0 hModule = params["hModule"] @@ -105,11 +94,7 @@ def hook_GetModuleFileNameA(ql, address, params): # LPSTR lpFilename, # DWORD nSize # ); -@winapi(cc=STDCALL, params={ - "hModule": HANDLE, - "lpFilename": POINTER, - "nSize": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetModuleFileNameW(ql, address, params): ret = 0 hModule = params["hModule"] @@ -135,10 +120,7 @@ def hook_GetModuleFileNameW(ql, address, params): # HMODULE hModule, # LPCSTR lpProcName # ); -@winapi(cc=STDCALL, params={ - "hModule": POINTER, - "lpProcName": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCSTR': 'POINTER'}) def hook_GetProcAddress(ql, address, params): if params["lpProcName"] > MAXUSHORT: # Look up by name @@ -173,9 +155,7 @@ def hook_GetProcAddress(ql, address, params): # HMODULE LoadLibraryA( # LPCSTR lpLibFileName # ); -@winapi(cc=STDCALL, params={ - "lpLibFileName": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LoadLibraryA(ql, address, params): lpLibFileName = params["lpLibFileName"] if lpLibFileName == ql.loader.filepath.decode(): @@ -190,11 +170,7 @@ def hook_LoadLibraryA(ql, address, params): # HANDLE hFile, # DWORD dwFlags # ); -@winapi(cc=STDCALL, params={ - "lpLibFileName": STRING, - "hFile": POINTER, - "dwFlags": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HANDLE': 'POINTER'}) def hook_LoadLibraryExA(ql, address, params): lpLibFileName = params["lpLibFileName"] dll_base = ql.loader.load_dll(lpLibFileName.encode()) @@ -204,9 +180,7 @@ def hook_LoadLibraryExA(ql, address, params): # HMODULE LoadLibraryW( # LPCWSTR lpLibFileName # ); -@winapi(cc=STDCALL, params={ - "lpLibFileName": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LoadLibraryW(ql, address, params): lpLibFileName = params["lpLibFileName"].encode() dll_base = ql.loader.load_dll(lpLibFileName) @@ -218,11 +192,7 @@ def hook_LoadLibraryW(ql, address, params): # HANDLE hFile, # DWORD dwFlags # ); -@winapi(cc=STDCALL, params={ - "lpLibFileName": WSTRING, - "hFile": POINTER, - "dwFlags": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HANDLE': 'POINTER'}) def hook_LoadLibraryExW(ql, address, params): lpLibFileName = params["lpLibFileName"].encode() dll_base = ql.loader.load_dll(lpLibFileName) @@ -233,10 +203,7 @@ def hook_LoadLibraryExW(ql, address, params): # HMODULE hModule, # HRSRC hResInfo # ); -@winapi(cc=STDCALL, params={ - "hModule": POINTER, - "hResInfo": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HMODULE': 'POINTER'}) def hook_SizeofResource(ql, address, params): # Return size of resource # TODO set a valid value. More tests have to be made to find it. @@ -247,10 +214,7 @@ def hook_SizeofResource(ql, address, params): # HMODULE hModule, # HRSRC hResInfo # ); -@winapi(cc=STDCALL, params={ - "hModule": POINTER, - "hResInfo": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HMODULE': 'POINTER'}) def hook_LoadResource(ql, address, params): pointer = params["hResInfo"] return pointer @@ -259,9 +223,7 @@ def hook_LoadResource(ql, address, params): # LPVOID LockResource( # HGLOBAL hResData # ); -@winapi(cc=STDCALL, params={ - "hResData": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HMODULE': 'POINTER'}) def hook_LockResource(ql, address, params): pointer = params["hResData"] return pointer @@ -270,9 +232,7 @@ def hook_LockResource(ql, address, params): # BOOL DisableThreadLibraryCalls( # HMODULE hLibModule # ); -@winapi(cc=STDCALL, params={ - "hLibModule": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HMODULE': 'POINTER'}) def hook_DisableThreadLibraryCalls(ql, address, params): return 1 @@ -280,9 +240,7 @@ def hook_DisableThreadLibraryCalls(ql, address, params): # BOOL FreeLibrary( # HMODULE hLibModule # ); -@winapi(cc=STDCALL, params={ - "hLibModule": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HMODULE': 'POINTER'}) def hook_FreeLibrary(ql, address, params): return 1 @@ -290,9 +248,7 @@ def hook_FreeLibrary(ql, address, params): # BOOL SetDefaultDllDirectories( # DWORD DirectoryFlags # ); -@winapi(cc=STDCALL, params={ - "DirectoryFlags": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SetDefaultDllDirectories(ql, address, params): value = params["DirectoryFlags"] if value == LOAD_LIBRARY_SEARCH_USER_DIRS: diff --git a/qiling/os/windows/dlls/kernel32/memoryapi.py b/qiling/os/windows/dlls/kernel32/memoryapi.py index 063c2d7b0..355d7463c 100644 --- a/qiling/os/windows/dlls/kernel32/memoryapi.py +++ b/qiling/os/windows/dlls/kernel32/memoryapi.py @@ -13,6 +13,7 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # LPVOID VirtualAlloc( # LPVOID lpAddress, @@ -20,12 +21,7 @@ # DWORD flAllocationType, # DWORD flProtect # ); -@winapi(cc=STDCALL, params={ - "lpAddress": POINTER, - "dwSize": SIZE_T, - "flAllocationType": DWORD, - "flProtect": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_VirtualAlloc(ql, address, params): dwSize = params["dwSize"] addr = ql.os.heap.alloc(dwSize) @@ -37,11 +33,7 @@ def hook_VirtualAlloc(ql, address, params): # SIZE_T dwSize, # DWORD dwFreeType # ); -@winapi(cc=STDCALL, params={ - "lpAddress": POINTER, - "dwSize": SIZE_T, - "dwFreeType": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_VirtualFree(ql, address, params): lpAddress = params["lpAddress"] ql.os.heap.free(lpAddress) @@ -54,12 +46,7 @@ def hook_VirtualFree(ql, address, params): # DWORD flNewProtect, # PDWORD lpflOldProtect # ); -@winapi(cc=STDCALL, params={ - "lpAddress": POINTER, - "dwSize": UINT, - "flNewProtect": UINT, - "lpflOldProtect": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'SIZE_T': 'UINT', 'DWORD': 'UINT'}) def hook_VirtualProtect(ql, address, params): return 1 @@ -69,11 +56,7 @@ def hook_VirtualProtect(ql, address, params): # PMEMORY_BASIC_INFORMATION lpBuffer, # SIZE_T dwLength # ); -@winapi(cc=STDCALL, params={ - "lpAddress": POINTER, - "lpBuffer": POINTER, - "dwLength": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'SIZE_T': 'UINT', 'DWORD': 'UINT'}) def hook_VirtualQuery(ql, address, params): """ typedef struct _MEMORY_BASIC_INFORMATION { diff --git a/qiling/os/windows/dlls/kernel32/processenv.py b/qiling/os/windows/dlls/kernel32/processenv.py index a450f936b..2a795f13d 100644 --- a/qiling/os/windows/dlls/kernel32/processenv.py +++ b/qiling/os/windows/dlls/kernel32/processenv.py @@ -6,14 +6,12 @@ from qiling.os.windows.fncc import * from qiling.exception import * +dllname = 'kernel32_dll' + # HANDLE WINAPI GetStdHandle( # _In_ DWORD nStdHandle # ); - - -@winapi(cc=STDCALL, params={ - "nStdHandle": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"nStdHandle": DWORD}) def hook_GetStdHandle(ql, address, params): nStdHandle = params["nStdHandle"] return nStdHandle @@ -21,7 +19,7 @@ def hook_GetStdHandle(ql, address, params): # LPSTR GetCommandLineA( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetCommandLineA(ql, address, params): cmdline = ql.loader.cmdline + b"\x00" addr = ql.os.heap.alloc(len(cmdline)) @@ -31,7 +29,7 @@ def hook_GetCommandLineA(ql, address, params): # LPSTR GetCommandLineW( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetCommandLineW(ql, address, params): cmdline = ql.loader.cmdline.decode('ascii').encode('utf-16le') addr = ql.os.heap.alloc(len(cmdline)) @@ -40,8 +38,8 @@ def hook_GetCommandLineW(ql, address, params): # LPWCH GetEnvironmentStrings( -# );s -@winapi(cc=STDCALL, params={}) +# ); +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetEnvironmentStrings(ql, address, params): cmdline = b"\x00" addr = ql.os.heap.alloc(len(cmdline)) @@ -51,7 +49,7 @@ def hook_GetEnvironmentStrings(ql, address, params): # LPWCH GetEnvironmentStringsW( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetEnvironmentStringsW(ql, address, params): cmdline = b"\x00\x00" addr = ql.os.heap.alloc(len(cmdline)) @@ -62,9 +60,7 @@ def hook_GetEnvironmentStringsW(ql, address, params): # BOOL FreeEnvironmentStringsW( # LPWCH penv # ); -@winapi(cc=STDCALL, params={ - "penv": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_FreeEnvironmentStringsW(ql, address, params): ret = 1 return ret @@ -75,11 +71,7 @@ def hook_FreeEnvironmentStringsW(ql, address, params): # LPWSTR lpDst, # DWORD nSize # ); -@winapi(cc=STDCALL, params={ - "lpSrc": WSTRING, - "lpDst": POINTER, - "nSize": DWORD, -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_ExpandEnvironmentStringsW(ql, address, params): string: str = params["lpSrc"] start = string.find("%") @@ -102,11 +94,17 @@ def hook_ExpandEnvironmentStringsW(ql, address, params): # LPSTR lpBuffer, # DWORD nSize # ); -@winapi(cc=STDCALL, params={ - "lpName": STRING, - "lpBuffer": POINTER, - "nSize": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetEnvironmentVariableA(ql, address, params): ret = 0 return ret + +# DWORD GetEnvironmentVariableW( +# LPCWSTR lpName, +# LPWSTR lpBuffer, +# DWORD nSize +# ); +@winsdkapi(cc=STDCALL, dllname=dllname) +def hook_GetEnvironmentVariableW(ql, address, params): + ret = 0 + return ret diff --git a/qiling/os/windows/dlls/kernel32/processthreadsapi.py b/qiling/os/windows/dlls/kernel32/processthreadsapi.py index 12c56b590..6a8d0ebcc 100644 --- a/qiling/os/windows/dlls/kernel32/processthreadsapi.py +++ b/qiling/os/windows/dlls/kernel32/processthreadsapi.py @@ -14,13 +14,13 @@ from qiling.exception import * from qiling.os.windows.structs import * +dllname = 'kernel32_dll' + # void ExitProcess( # UINT uExitCode # ); -@winapi(cc=STDCALL, params={ - "uExitCode": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'UINT': 'DWORD'}) def hook_ExitProcess(ql, address, params): ql.emu_stop() ql.os.PE_RUN = False @@ -38,9 +38,7 @@ def _GetStartupInfo(ql, address, params): # VOID WINAPI GetStartupInfoA( # _Out_ LPSTARTUPINFO lpStartupInfo # ); -@winapi(cc=STDCALL, params={ - "lpStartupInfo": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetStartupInfoA(ql, address, params): return _GetStartupInfo(ql, address, params) @@ -48,16 +46,14 @@ def hook_GetStartupInfoA(ql, address, params): # VOID WINAPI GetStartupInfoW( # _Out_ LPSTARTUPINFO lpStartupInfo # ); -@winapi(cc=STDCALL, params={ - "lpStartupInfo": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetStartupInfoW(ql, address, params): # The struct for the W version uses LPWSTRING, but i think is the same in this context return _GetStartupInfo(ql, address, params) # DWORD TlsAlloc(); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL) def hook_TlsAlloc(ql, address, params): idx = ql.os.thread_manager.cur_thread.tls_index ql.os.thread_manager.cur_thread.tls_index += 1 @@ -68,9 +64,7 @@ def hook_TlsAlloc(ql, address, params): # DWORD TlsFree( # DWORD dwTlsIndex # ); -@winapi(cc=STDCALL, params={ - "dwTlsIndex": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"dwTlsIndex": UINT}) def hook_TlsFree(ql, address, params): idx = params['dwTlsIndex'] if idx not in ql.os.thread_manager.cur_thread.tls: @@ -84,8 +78,7 @@ def hook_TlsFree(ql, address, params): # LPVOID TlsGetValue( # DWORD dwTlsIndex # ); -@winapi(cc=STDCALL, params={ - "dwTlsIndex": UINT}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"dwTlsIndex": UINT}) def hook_TlsGetValue(ql, address, params): idx = params['dwTlsIndex'] if idx not in ql.os.thread_manager.cur_thread.tls: @@ -101,10 +94,7 @@ def hook_TlsGetValue(ql, address, params): # LPVOID TlsSetValue( # DWORD dwTlsIndex # ); -@winapi(cc=STDCALL, params={ - "dwTlsIndex": UINT, - "lpTlsValue": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"dwTlsIndex": UINT, "lpTlsValue": POINTER}) def hook_TlsSetValue(ql, address, params): idx = params['dwTlsIndex'] if idx not in ql.os.thread_manager.cur_thread.tls: @@ -117,7 +107,7 @@ def hook_TlsSetValue(ql, address, params): # DWORD GetCurrentThreadId( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetCurrentThreadId(ql, address, params): ret = ql.os.thread_manager.cur_thread.id return ret @@ -125,7 +115,7 @@ def hook_GetCurrentThreadId(ql, address, params): # DWORD GetCurrentProcessId( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetCurrentProcessId(ql, address, params): # Let's return a valid value return ql.os.profile.getint("KERNEL", "pid") @@ -134,9 +124,7 @@ def hook_GetCurrentProcessId(ql, address, params): # BOOL IsProcessorFeaturePresent( # DWORD ProcessorFeature # ); -@winapi(cc=STDCALL, params={ - "ProcessorFeature": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_IsProcessorFeaturePresent(ql, address, params): feature = params["ProcessorFeature"] if feature == PF_XSAVE_ENABLED: @@ -154,14 +142,7 @@ def hook_IsProcessorFeaturePresent(ql, address, params): # DWORD dwCreationFlags, # LPDWORD lpThreadId # ); -@winapi(cc=STDCALL, params={ - "lpThreadAttributes": POINTER, - "dwStackSize": SIZE_T, - "lpStartAddress": POINTER, - "lpParameter": POINTER, - "dwCreationFlags": DWORD, - "lpThreadId": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateThread(ql, address, params): CREATE_RUN = 0 CREATE_SUSPENDED = 0x00000004 @@ -181,8 +162,7 @@ def hook_CreateThread(ql, address, params): thread_status = QlWindowsThread.READY else: thread_status = QlWindowsThread.RUNNING - - + # create new thread thread_id = new_thread.create( lpStartAddress, @@ -200,8 +180,8 @@ def hook_CreateThread(ql, address, params): # set lpThreadId # FIXME: Temporary fix for the crash - #if lpThreadId != 0: - #ql.mem.write(lpThreadId, ql.pack(thread_id)) + # if lpThreadId != 0: + # ql.mem.write(lpThreadId, ql.pack(thread_id)) # set thread handle return ret @@ -209,7 +189,7 @@ def hook_CreateThread(ql, address, params): # HANDLE GetCurrentProcess( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetCurrentProcess(ql, address, params): return ql.os.profile.getint("KERNEL", "pid") @@ -218,10 +198,7 @@ def hook_GetCurrentProcess(ql, address, params): # HANDLE hProcess, # UINT uExitCode # ); -@winapi(cc=STDCALL, params={ - "hProcess": HANDLE, - "uExitCode": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_TerminateProcess(ql, address, params): # Samples will try to kill other process! We don't want to always stop! process = params["hProcess"] @@ -233,8 +210,7 @@ def hook_TerminateProcess(ql, address, params): # HANDLE GetCurrentThread(); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetCurrentThread(ql, address, params): ret = ql.os.thread_manager.cur_thread.id return ret @@ -245,11 +221,7 @@ def hook_GetCurrentThread(ql, address, params): # BOOL bInheritHandle, # DWORD dwProcessId # ); -@winapi(cc=STDCALL, params={ - "dwDesiredAccess": DWORD, - "bInheritHandle": HANDLE, - "dwProcessId": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'BOOL': 'HANDLE'}) def hook_OpenProcess(ql, address, params): proc = params["dwProcessId"] # If the specified process is the System Process (0x00000000), @@ -271,11 +243,8 @@ def hook_OpenProcess(ql, address, params): # DWORD DesiredAccess, # PHANDLE TokenHandle # ); -@winapi(cc=STDCALL, params={ - "ProcessHandle": HANDLE, - "DesiredAccess": DWORD, - "TokenHandle": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, + replace_params={"ProcessHandle": HANDLE, "DesiredAccess": DWORD, "TokenHandle": POINTER}) def hook_OpenProcessToken(ql, address, params): token_pointer = params["TokenHandle"] token = Token(ql) @@ -289,10 +258,7 @@ def hook_OpenProcessToken(ql, address, params): # HANDLE hThread, # LPCONTEXT lpContext # ); -@winapi(cc=STDCALL, params={ - "hThread": HANDLE, - "lpContext": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetThreadContext(ql, address, params): return 1 @@ -303,12 +269,8 @@ def hook_GetThreadContext(ql, address, params): # BOOL OpenAsSelf, # PHANDLE TokenHandle # ); -@winapi(cc=STDCALL, params={ - "ThreadHandle": HANDLE, - "DesiredAccess": DWORD, - "OpenAsSelf": BOOL, - "TokenHandle": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, + replace_params={"ThreadHandle": HANDLE, "DesiredAccess": DWORD, "OpenAsSelf": BOOL, "TokenHandle": POINTER}) def hook_OpenThreadToken(ql, address, params): token_pointer = params["TokenHandle"] token = Token(ql) @@ -325,12 +287,6 @@ def hook_OpenThreadToken(ql, address, params): # LPFILETIME lpKernelTime, # LPFILETIME lpUserTime # ); -@winapi(cc=STDCALL, params={ - "hThread": HANDLE, - "lpCreationTime": POINTER, - "lpExitTime": POINTER, - "lpKernelTime": POINTER, - "lpUserTime": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetThreadTimes(ql, address, params): return 1 diff --git a/qiling/os/windows/dlls/kernel32/profileapi.py b/qiling/os/windows/dlls/kernel32/profileapi.py index 63c08dc63..ecfb1e6d4 100644 --- a/qiling/os/windows/dlls/kernel32/profileapi.py +++ b/qiling/os/windows/dlls/kernel32/profileapi.py @@ -13,13 +13,12 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # BOOL QueryPerformanceCounter( # LARGE_INTEGER *lpPerformanceCount # ); -@winapi(cc=STDCALL, params={ - "lpPerformanceCount": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_QueryPerformanceCounter(ql, address, params): ret = 0 return ret @@ -28,9 +27,7 @@ def hook_QueryPerformanceCounter(ql, address, params): # BOOL QueryPerformanceFrequency( # LARGE_INTEGER *lpFrequency # ); -@winapi(cc=STDCALL, params={ - "lpFrequency": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_QueryPerformanceFrequency(ql, address, params): ql.mem.write(params['lpFrequency'], (10000000).to_bytes(length=8, byteorder='little')) return 1 diff --git a/qiling/os/windows/dlls/kernel32/psapi.py b/qiling/os/windows/dlls/kernel32/psapi.py index 4f51066d6..8ec718909 100644 --- a/qiling/os/windows/dlls/kernel32/psapi.py +++ b/qiling/os/windows/dlls/kernel32/psapi.py @@ -13,6 +13,7 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # BOOL GetModuleInformation( # HANDLE hProcess, @@ -20,12 +21,7 @@ # LPMODULEINFO lpmodinfo, # DWORD cb # ); -@winapi(cc=STDCALL, params={ - "hProcess": HANDLE, - "hModule": HANDLE, - "lpmodinfo": POINTER, - "cb": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_K32GetModuleInformation(self, address, params): # TODO return 0 diff --git a/qiling/os/windows/dlls/kernel32/stringapiset.py b/qiling/os/windows/dlls/kernel32/stringapiset.py index 55e13cd76..acab06530 100644 --- a/qiling/os/windows/dlls/kernel32/stringapiset.py +++ b/qiling/os/windows/dlls/kernel32/stringapiset.py @@ -13,6 +13,7 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # BOOL GetStringTypeW( # DWORD dwInfoType, @@ -20,12 +21,7 @@ # int cchSrc, # LPWORD lpCharType # ); -@winapi(cc=STDCALL, params={ - "dwInfoType": DWORD, - "lpSrcStr": POINTER, - "cchSrc": INT, - "lpCharType": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetStringTypeW(ql, address, params): # TODO implement ret = 1 @@ -40,13 +36,7 @@ def hook_GetStringTypeW(ql, address, params): # INT count, # LPWORD chartype # ) -@winapi(cc=STDCALL, params={ - "locale": POINTER, - "type": DWORD, - "src": STRING, - "count": INT, - "chartype": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetStringTypeExA(ql, address, params): # TODO implement ret = 1 @@ -63,16 +53,7 @@ def hook_GetStringTypeExA(ql, address, params): # LPCCH lpDefaultChar, # LPBOOL lpUsedDefaultChar # ); -@winapi(cc=STDCALL, params={ - "CodePage": UINT, - "dwFlags": DWORD, - "lpWideCharStr": WSTRING, - "cchWideChar": INT, - "lpMultiByteStr": POINTER, - "cbMultiByte": INT, - "lpDefaultChar": POINTER, - "lpUsedDefaultChar": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCWCH': 'WSTRING'}) def hook_WideCharToMultiByte(ql, address, params): ret = 0 @@ -95,14 +76,7 @@ def hook_WideCharToMultiByte(ql, address, params): # LPWSTR lpWideCharStr, # int cchWideChar # ); -@winapi(cc=STDCALL, params={ - "CodePage": UINT, - "dwFlags": UINT, - "lpMultiByteStr": WSTRING, - "cbMultiByte": INT, - "lpWideCharStr": POINTER, - "cchWideChar": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'DWORD': 'UINT', 'LPCCH': 'WSTRING'}) def hook_MultiByteToWideChar(ql, address, params): wide_str = (params['lpMultiByteStr']+"\x00").encode('utf-16le') if params['cchWideChar'] != 0: diff --git a/qiling/os/windows/dlls/kernel32/synchapi.py b/qiling/os/windows/dlls/kernel32/synchapi.py index 0cb319543..3cd30841b 100644 --- a/qiling/os/windows/dlls/kernel32/synchapi.py +++ b/qiling/os/windows/dlls/kernel32/synchapi.py @@ -15,13 +15,12 @@ from qiling.os.windows.structs import * from qiling.const import * +dllname = 'kernel32_dll' # void Sleep( # DWORD dwMilliseconds # ); -@winapi(cc=STDCALL, params={ - "dwMilliseconds": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_Sleep(ql, address, params): # time.sleep(params["dwMilliseconds"] * 10**(-3)) pass @@ -30,9 +29,7 @@ def hook_Sleep(ql, address, params): # void EnterCriticalSection( # LPCRITICAL_SECTION lpCriticalSection # ); -@winapi(cc=STDCALL, params={ - "lpCriticalSection": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_EnterCriticalSection(ql, address, params): return 0 @@ -40,9 +37,7 @@ def hook_EnterCriticalSection(ql, address, params): # void LeaveCriticalSection( # LPCRITICAL_SECTION lpCriticalSection # ); -@winapi(cc=STDCALL, params={ - "lpCriticalSection": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LeaveCriticalSection(ql, address, params): return 0 @@ -50,9 +45,7 @@ def hook_LeaveCriticalSection(ql, address, params): # void DeleteCriticalSection( # LPCRITICAL_SECTION lpCriticalSection # ); -@winapi(cc=STDCALL, params={ - "lpCriticalSection": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_DeleteCriticalSection(ql, address, params): return 0 @@ -60,9 +53,7 @@ def hook_DeleteCriticalSection(ql, address, params): # void InitializeCriticalSection( # LPCRITICAL_SECTION lpCriticalSection # ); -@winapi(cc=STDCALL, params={ - "lpCriticalSection": POINTER, -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InitializeCriticalSection(ql, address, params): return 1 @@ -72,11 +63,7 @@ def hook_InitializeCriticalSection(ql, address, params): # DWORD dwSpinCount, # DWORD Flags # ); -@winapi(cc=STDCALL, params={ - "lpCriticalSection": POINTER, - "dwSpinCount": DWORD, - "Flags": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InitializeCriticalSectionEx(ql, address, params): return 1 @@ -85,10 +72,7 @@ def hook_InitializeCriticalSectionEx(ql, address, params): # LPCRITICAL_SECTION lpCriticalSection, # DWORD dwSpinCount # ); -@winapi(cc=STDCALL, params={ - "lpCriticalSection": POINTER, - "dwSpinCount": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'DWORD': 'UINT'}) def hook_InitializeCriticalSectionAndSpinCount(ql, address, params): return 1 @@ -97,10 +81,7 @@ def hook_InitializeCriticalSectionAndSpinCount(ql, address, params): # HANDLE hHandle, # DWORD dwMilliseconds # ); -@winapi(cc=STDCALL, params={ - "hHandle": HANDLE, - "dwMilliseconds": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_WaitForSingleObject(ql, address, params): ret = 0 hHandle = params["hHandle"] @@ -119,11 +100,7 @@ def hook_WaitForSingleObject(ql, address, params): # DWORD dwMilliseconds # BOOL bAlertable # ); -@winapi(cc=STDCALL, params={ - "hHandle": HANDLE, - "dwMilliseconds": DWORD, - "bAlertable": BOOL -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_WaitForSingleObjectEx(ql, address, params): ret = 0 hHandle = params["hHandle"] @@ -142,12 +119,7 @@ def hook_WaitForSingleObjectEx(ql, address, params): # BOOL bWaitAll, # DWORD dwMilliseconds # ); -@winapi(cc=STDCALL, params={ - "nCount": DWORD, - "lpHandles": POINTER, - "bWaitAll": BOOL, - "dwMilliseconds": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HANDLE': 'POINTER'}) def hook_WaitForMultipleObjects(ql, address, params): ret = 0 nCount = params["nCount"] @@ -169,11 +141,7 @@ def hook_WaitForMultipleObjects(ql, address, params): # BOOL bInheritHandle, # LPCWSTR lpName # ); -@winapi(cc=STDCALL, params={ - "dwDesiredAccess": DWORD, - "bInheritHandle": BOOL, - "lpName": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_OpenMutexW(ql, address, params): # The name can have a "Global" or "Local" prefix to explicitly open an object in the global or session namespace. # It can also have no prefix @@ -209,11 +177,7 @@ def hook_OpenMutexW(ql, address, params): # BOOL bInheritHandle, # LPCSTR lpName # ); -@winapi(cc=STDCALL, params={ - "dwDesiredAccess": DWORD, - "bInheritHandle": BOOL, - "lpName": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_OpenMutexA(ql, address, params): return hook_OpenMutexW.__wrapped__(ql, address, params) @@ -223,11 +187,7 @@ def hook_OpenMutexA(ql, address, params): # BOOL bInitialOwner, # LPCWSTR lpName # ); -@winapi(cc=STDCALL, params={ - "lpMutexAttributes": POINTER, - "bInitialOwner": BOOL, - "lpName": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateMutexW(ql, address, params): try: _type, name = params["lpName"].split("\\") @@ -255,14 +215,33 @@ def hook_CreateMutexW(ql, address, params): # BOOL bInitialOwner, # LPCSTR lpName # ); -@winapi(cc=STDCALL, params={ - "lpMutexAttributes": POINTER, - "bInitialOwner": BOOL, - "lpName": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateMutexA(ql, address, params): return hook_CreateMutexW.__wrapped__(ql, address, params) +# BOOL ReleaseMutex( +# HANDLE hMutex +# ); +@winsdkapi(cc=STDCALL, dllname=dllname) +def hook_ReleaseMutex(ql, address, params): + hMutex = params["hMutex"] + handle = ql.os.handle_manager.get(hMutex) + if not handle: + ql.os.last_error = ERROR_INVALID_HANDLE + return 0 + + mutex = handle.obj + + if not mutex or not isinstance(mutex, Mutex): + return 0 + + if mutex.isFree(): + ql.os.last_error = ERROR_NOT_OWNER + return 0 + + # FIXME: Only the owner is allowed to do this! + mutex.unlock() + return 1 # HANDLE CreateEventA( # LPSECURITY_ATTRIBUTES lpEventAttributes, @@ -270,14 +249,9 @@ def hook_CreateMutexA(ql, address, params): # BOOL bInitialState, # LPCSTR lpName # ); -@winapi(cc=STDCALL, params={ - "lpEventAttributes": POINTER, - "bManualReset": BOOL, - "bInitialState": BOOL, - "lpName": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateEventA(ql, address, params): - """ + """ Implementation seems similar enough to Mutex to just use it """ try: @@ -303,12 +277,7 @@ def hook_CreateEventA(ql, address, params): # BOOL bInitialState, # LPCWSTR lpName # ); -@winapi(cc=STDCALL, params={ - "lpEventAttributes": POINTER, - "bManualReset": BOOL, - "bInitialState": BOOL, - "lpName": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateEventW(ql, address, params): return hook_CreateEventA.__wrapped__(ql, address, params) @@ -316,9 +285,7 @@ def hook_CreateEventW(ql, address, params): # void InitializeSRWLock( # PSRWLOCK SRWLock # ); -@winapi(cc=STDCALL, params={ - "SRWLock": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InitializeSRWLock(ql, address, params): return @@ -326,9 +293,7 @@ def hook_InitializeSRWLock(ql, address, params): # void AcquireSRWLockExclusive( # PSRWLOCK SRWLock # ); -@winapi(cc=STDCALL, params={ - "SRWLock": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_AcquireSRWLockExclusive(ql, address, params): return @@ -336,9 +301,7 @@ def hook_AcquireSRWLockExclusive(ql, address, params): # void AcquireSRWLockShared( # PSRWLOCK SRWLock # ); -@winapi(cc=STDCALL, params={ - "SRWLock": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_AcquireSRWLockShared(ql, address, params): return @@ -346,9 +309,7 @@ def hook_AcquireSRWLockShared(ql, address, params): # void ReleaseSRWLockExclusive( # PSRWLOCK SRWLock # ); -@winapi(cc=STDCALL, params={ - "SRWLock": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_ReleaseSRWLockExclusive(ql, address, params): return @@ -356,8 +317,6 @@ def hook_ReleaseSRWLockExclusive(ql, address, params): # void ReleaseSRWLockShared( # PSRWLOCK SRWLock # ); -@winapi(cc=STDCALL, params={ - "SRWLock": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_ReleaseSRWLockShared(ql, address, params): return diff --git a/qiling/os/windows/dlls/kernel32/sysinfoapi.py b/qiling/os/windows/dlls/kernel32/sysinfoapi.py index e8a629547..3a32a405a 100644 --- a/qiling/os/windows/dlls/kernel32/sysinfoapi.py +++ b/qiling/os/windows/dlls/kernel32/sysinfoapi.py @@ -15,10 +15,11 @@ from qiling.exception import * from qiling.os.windows.structs import * +dllname = 'kernel32_dll' # NOT_BUILD_WINDOWS_DEPRECATE DWORD GetVersion( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetVersion(ql, address, params): ret = 0x0004 ret = ret << 16 @@ -29,10 +30,7 @@ def hook_GetVersion(ql, address, params): # NOT_BUILD_WINDOWS_DEPRECATE BOOL GetVersionExA( # LPOSVERSIONINFOA lpVersionInformation # ); -@winapi(cc=STDCALL, params={ - "lpVersionInformation": STRING - -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetVersionExA(ql, address, params): return hook_GetVersionExW.__wrapped__(ql, address, params) @@ -40,10 +38,7 @@ def hook_GetVersionExA(ql, address, params): # NOT_BUILD_WINDOWS_DEPRECATE BOOL GetVersionExW( # LPOSVERSIONINFOW lpVersionInformation # ); -@winapi(cc=STDCALL, params={ - "lpVersionInformation": WSTRING - -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetVersionExW(ql, address, params): return 1 @@ -51,9 +46,7 @@ def hook_GetVersionExW(ql, address, params): # void GetSystemInfo( # LPSYSTEM_INFO lpSystemInfo # ); -@winapi(cc=STDCALL, params={ - "lpSystemInfo": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetSystemInfo(ql, address, params): pointer = params["lpSystemInfo"] system_info = SystemInfo(ql, 0, ql.os.heap.page_size, ql.loader.pe_image_address, @@ -66,9 +59,7 @@ def hook_GetSystemInfo(ql, address, params): # void GetLocalTime( # LPSYSTEMTIME lpSystemTime # ); -@winapi(cc=STDCALL, params={ - "lpSystemTime": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetLocalTime(ql, address, params): import datetime ptr = params['lpSystemTime'] @@ -82,9 +73,7 @@ def hook_GetLocalTime(ql, address, params): # void GetSystemTimeAsFileTime( # LPFILETIME lpSystemTimeAsFileTime # ); -@winapi(cc=STDCALL, params={ - "lpSystemTimeAsFileTime": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetSystemTimeAsFileTime(ql, address, params): # TODO pass @@ -92,7 +81,7 @@ def hook_GetSystemTimeAsFileTime(ql, address, params): # DWORD GetTickCount( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetTickCount(ql, address, params): ret = 200000 return ret @@ -102,23 +91,25 @@ def hook_GetTickCount(ql, address, params): # LPWSTR lpBuffer, # UINT uSize # ); -@winapi(cc=STDCALL, params={ - "lpBuffer": POINTER, - "uSize": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetWindowsDirectoryW(ql, address, params): dst = params["lpBuffer"] value = (ql.os.windir + "\x00").encode("utf-16le") ql.mem.write(dst, value) return len(value) - 2 +# UINT GetSystemWindowsDirectoryW( +# LPWSTR lpBuffer, +# UINT uSize +# ); +@winsdkapi(cc=STDCALL, dllname=dllname) +def hook_GetSystemWindowsDirectoryW(ql, address, params): + return hook_GetWindowsDirectoryW.__wrapped__(ql, address, params) # void GetNativeSystemInfo( # LPSYSTEM_INFO lpSystemInfo # ); -@winapi(cc=STDCALL, params={ - "lpSystemInfo": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetNativeSystemInfo(ql, address, params): pointer = params["lpSystemInfo"] system_info = SystemInfo(ql, 0, ql.os.heap.page_size, ql.loader.pe_image_address, @@ -136,9 +127,7 @@ def hook_GetNativeSystemInfo(ql, address, params): # void GetSystemTimePreciseAsFileTime( # LPFILETIME lpSystemTimeAsFileTime # ); -@winapi(cc=STDCALL, params={ - "lpSystemTimeAsFileTime": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetSystemTimePreciseAsFileTime(ql, address, params): # todo check if the value is correct dt = datetime.now().microsecond.to_bytes(8, byteorder="little") diff --git a/qiling/os/windows/dlls/kernel32/tlhelp32.py b/qiling/os/windows/dlls/kernel32/tlhelp32.py index 2fce9ca69..f0c1469fe 100644 --- a/qiling/os/windows/dlls/kernel32/tlhelp32.py +++ b/qiling/os/windows/dlls/kernel32/tlhelp32.py @@ -14,16 +14,13 @@ from qiling.exception import * from qiling.const import * +dllname = 'kernel32_dll' # HANDLE CreateToolhelp32Snapshot( # DWORD dwFlags, # DWORD th32ProcessID # ); -@winapi(cc=STDCALL, params={ - "dwFlags": DWORD, - "th32ProcessID": DWORD - -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateToolhelp32Snapshot(ql, address, params): # TODO thinking about implementing an handler, gonna see if is really necessary flag = params["dwFlags"] @@ -38,11 +35,7 @@ def hook_CreateToolhelp32Snapshot(ql, address, params): # HANDLE hSnapshot, # LPPROCESSENTRY32W lppe # ); -@winapi(cc=STDCALL, params={ - "hSnapshot": HANDLE, - "lppe": POINTER - -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_Process32FirstW(ql, address, params): return 0x1 @@ -51,11 +44,7 @@ def hook_Process32FirstW(ql, address, params): # HANDLE hSnapshot, # LPPROCESSENTRY32W lppe # ); -@winapi(cc=STDCALL, params={ - "hSnapshot": HANDLE, - "lppe": POINTER - -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_Process32NextW(ql, address, params): # Return True if more process, 0 else if ql.os.syscall_count["Process32NextW"] >= 3: # I don' know how many process the sample want's to cycle diff --git a/qiling/os/windows/dlls/kernel32/winbase.py b/qiling/os/windows/dlls/kernel32/winbase.py index cfb73f6ac..186af0164 100644 --- a/qiling/os/windows/dlls/kernel32/winbase.py +++ b/qiling/os/windows/dlls/kernel32/winbase.py @@ -9,15 +9,12 @@ from qiling.exception import * from qiling.os.windows.structs import * +dllname = 'kernel32_dll' # __analysis_noreturn VOID FatalExit( # int ExitCode # ); - - -@winapi(cc=STDCALL, params={ - "ExitCode": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_FatalExit(ql, address, params): ql.emu_stop() ql.os.PE_RUN = False @@ -26,9 +23,7 @@ def hook_FatalExit(ql, address, params): # PVOID EncodePointer( # _In_ PVOID Ptr # ); -@winapi(cc=STDCALL, params={ - "Ptr": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"Ptr": POINTER}) def hook_EncodePointer(ql, address, params): return params['Ptr'] @@ -36,9 +31,7 @@ def hook_EncodePointer(ql, address, params): # PVOID DecodePointer( # _In_ PVOID Ptr # ); -@winapi(cc=STDCALL, params={ - "Ptr": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"Ptr": POINTER}) def hook_DecodePointer(ql, address, params): return params['Ptr'] @@ -47,10 +40,7 @@ def hook_DecodePointer(ql, address, params): # LPCSTR lpCmdLine, # UINT uCmdShow # ); -@winapi(cc=STDCALL, params={ - "lpCmdLine": STRING, - "uCmdShow": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_WinExec(ql, address, params): return 33 @@ -59,10 +49,7 @@ def hook_WinExec(ql, address, params): # UINT uFlags, # SIZE_T uBytes # ); -@winapi(cc=STDCALL, params={ - "uFlags": UINT, - "uBytes": SIZE_T -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LocalAlloc(ql, address, params): ret = ql.os.heap.alloc(params["uBytes"]) return ret @@ -73,11 +60,7 @@ def hook_LocalAlloc(ql, address, params): # SIZE_T uBytes, # UINT uFlags # ); -@winapi(cc=STDCALL, params={ - "hMem": POINTER, - "uBytes": SIZE_T, - "uFlags": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LocalReAlloc(ql, address, params): old_mem = params["hMem"] ql.os.heap.free(old_mem) @@ -88,9 +71,7 @@ def hook_LocalReAlloc(ql, address, params): # HLOCAL LocalFree( # _Frees_ptr_opt_ HLOCAL hMem # ); -@winapi(cc=STDCALL, params={ - "hMem": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LocalFree(ql, address, params): old_mem = params["hMem"] ql.os.heap.free(old_mem) @@ -100,9 +81,7 @@ def hook_LocalFree(ql, address, params): # UINT SetHandleCount( # UINT uNumber # ); -@winapi(cc=STDCALL, params={ - "uNumber": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SetHandleCount(ql, address, params): uNumber = params["uNumber"] return uNumber @@ -111,9 +90,7 @@ def hook_SetHandleCount(ql, address, params): # LPVOID GlobalLock( # HGLOBAL hMem # ); -@winapi(cc=STDCALL, params={ - "hMem": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GlobalLock(ql, address, params): return params['hMem'] @@ -121,9 +98,7 @@ def hook_GlobalLock(ql, address, params): # LPVOID GlobalUnlock( # HGLOBAL hMem # ); -@winapi(cc=STDCALL, params={ - "hMem": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GlobalUnlock(ql, address, params): return 1 @@ -132,10 +107,7 @@ def hook_GlobalUnlock(ql, address, params): # UINT uFlags, # SIZE_T dwBytes # ); -@winapi(cc=STDCALL, params={ - "uFlags": UINT, - "dwBytes": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'SIZE_T': 'UINT'}) def hook_GlobalAlloc(ql, address, params): return ql.os.heap.alloc(params["dwBytes"]) @@ -143,9 +115,7 @@ def hook_GlobalAlloc(ql, address, params): # HGLOBAL GlobalFree( # _Frees_ptr_opt_ HGLOBAL hMem # ); -@winapi(cc=STDCALL, params={ - "hMem": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GlobalFree(ql, address, params): old_mem = params["hMem"] ql.os.heap.free(old_mem) @@ -155,9 +125,7 @@ def hook_GlobalFree(ql, address, params): # HGLOBAL GlobalHandle( # LPCVOID pMem # ); -@winapi(cc=STDCALL, params={ - "pMem": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GlobalHandle(ql, address, params): return params["pMem"] @@ -167,11 +135,7 @@ def hook_GlobalHandle(ql, address, params): # LPCSTR lpString2, # int iMaxLength # ); -@winapi(cc=STDCALL, params={ - "lpString1": POINTER, - "lpString2": STRING, - "iMaxLength": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_lstrcpynA(ql, address, params): # Copy String2 into String for max iMaxLength chars src = params["lpString2"] @@ -188,11 +152,7 @@ def hook_lstrcpynA(ql, address, params): # LPCWSTR lpString2, # int iMaxLength # ); -@winapi(cc=STDCALL, params={ - "lpString1": POINTER, - "lpString2": WSTRING, - "iMaxLength": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_lstrcpynW(ql, address, params): # Copy String2 into String for max iMaxLength chars src = params["lpString2"] @@ -208,10 +168,7 @@ def hook_lstrcpynW(ql, address, params): # LPSTR lpString1, # LPCSTR lpString2, # ); -@winapi(cc=STDCALL, params={ - "lpString1": POINTER, - "lpString2": STRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_lstrcpyA(ql, address, params): # Copy String2 into String src = params["lpString2"] @@ -224,10 +181,7 @@ def hook_lstrcpyA(ql, address, params): # LPSTR lpString1, # LPCSTR lpString2, # ); -@winapi(cc=STDCALL, params={ - "lpString1": POINTER, - "lpString2": WSTRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_lstrcpyW(ql, address, params): # Copy String2 into String src = params["lpString2"] @@ -240,10 +194,7 @@ def hook_lstrcpyW(ql, address, params): # LPSTR lpString1, # LPCSTR lpString2 # ); -@winapi(cc=STDCALL, params={ - "lpString1": POINTER, - "lpString2": STRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_lstrcatA(ql, address, params): # Copy String2 into String src = params["lpString2"] @@ -259,10 +210,7 @@ def hook_lstrcatA(ql, address, params): # LPWSTR lpString1, # LPCWSTR lpString2 # ); -@winapi(cc=STDCALL, params={ - "lpString1": POINTER, - "lpString2": WSTRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_lstrcatW(ql, address, params): # Copy String2 into String src = params["lpString2"] @@ -278,10 +226,7 @@ def hook_lstrcatW(ql, address, params): # LPCWSTR lpString1, # LPCWSTR lpString2 # ); -@winapi(cc=STDCALL, params={ - "lpString1": WSTRING, - "lpString2": WSTRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_lstrcmpiW(ql, address, params): # Copy String2 into String str1 = params["lpString1"] @@ -298,10 +243,7 @@ def hook_lstrcmpiW(ql, address, params): # LPCSTR lpString1, # LPCSTR lpString2 # ); -@winapi(cc=STDCALL, params={ - "lpString1": STRING, - "lpString2": STRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_lstrcmpiA(ql, address, params): return hook_lstrcmpiW.__wrapped__(ql, address, params) @@ -311,11 +253,7 @@ def hook_lstrcmpiA(ql, address, params): # LPCSTR lpName, # LPCSTR lpType # ); -@winapi(cc=STDCALL, params={ - "hModule": POINTER, - "lpName": POINTER, - "lpType": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_FindResourceA(ql, address, params): # Retrieve a resource # Name e Type can be int or strings, this can be a problem @@ -329,10 +267,7 @@ def hook_FindResourceA(ql, address, params): # const VOID *lp, # UINT_PTR ucb # ); -@winapi(cc=STDCALL, params={ - "lp": POINTER, - "ucb": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_IsBadReadPtr(ql, address, params): # Check read permission for size of memory ACCESS_TRUE = 0 @@ -344,10 +279,7 @@ def hook_IsBadReadPtr(ql, address, params): # const VOID *lp, # UINT_PTR ucb # ); -@winapi(cc=STDCALL, params={ - "lp": POINTER, - "ucb": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_IsBadWritePtr(ql, address, params): # Check read permission for size of memory ACCESS_TRUE = 0 @@ -390,11 +322,7 @@ def compare(p1, operator, p2): # DWORD dwTypeMask, # DWORDLONG dwlConditionMask # ); -@winapi(cc=STDCALL, params={ - "lpVersionInformation": POINTER, - "dwTypeMask": DWORD, - "dwlConditionMask": ULONGLONG -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_VerifyVersionInfoW(ql, address, params): # https://docs.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-verifyversioninfow2 pointer = params["lpVersionInformation"] @@ -452,10 +380,7 @@ def hook_VerifyVersionInfoW(ql, address, params): # LPWSTR lpBuffer, # LPDWORD pcbBuffer # ); -@winapi(cc=STDCALL, params={ - "lpBuffer": POINTER, - "pcbBuffer": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"lpBuffer": POINTER, "pcbBuffer": POINTER}) def hook_GetUserNameW(ql, address, params): username = (ql.os.profile["USER"]["username"] + "\x00").encode("utf-16le") dst = params["lpBuffer"] @@ -473,10 +398,7 @@ def hook_GetUserNameW(ql, address, params): # LPCSTR lpBuffer, # LPDWORD pcbBuffer # ); -@winapi(cc=STDCALL, params={ - "lpBuffer": POINTER, - "pcbBuffer": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetUserNameA(ql, address, params): username = (ql.os.profile["USER"]["username"] + "\x00").encode() dst = params["lpBuffer"] @@ -494,10 +416,7 @@ def hook_GetUserNameA(ql, address, params): # LPWSTR lpBuffer, # LPDWORD nSize # ); -@winapi(cc=STDCALL, params={ - "lpBuffer": POINTER, - "nSize": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetComputerNameW(ql, address, params): computer = (ql.os.profile["SYSTEM"]["computername"] + "\x00").encode("utf-16le") dst = params["lpBuffer"] @@ -515,10 +434,7 @@ def hook_GetComputerNameW(ql, address, params): # LPCSTR lpBuffer, # LPDWORD nSize # ); -@winapi(cc=STDCALL, params={ - "lpBuffer": POINTER, - "nSize": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetComputerNameA(ql, address, params): computer = (ql.os.profile["SYSTEM"]["computername"] + "\x00").encode() dst = params["lpBuffer"] diff --git a/qiling/os/windows/dlls/kernel32/winnls.py b/qiling/os/windows/dlls/kernel32/winnls.py index d15913d1e..f29a079dc 100644 --- a/qiling/os/windows/dlls/kernel32/winnls.py +++ b/qiling/os/windows/dlls/kernel32/winnls.py @@ -14,26 +14,25 @@ from qiling.exception import * from qiling.const import * +dllname = 'kernel32_dll' # BOOL SetThreadLocale( # LCID Locale # ); -@winapi(cc=STDCALL, params={ - "Locale": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LCID': 'UINT'}) def hook_SetThreadLocale(ql, address, params): return 0xC000 # LOCALE_CUSTOM_DEFAULT # LCID GetThreadLocale(); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetThreadLocale(ql, address, params): return 0xC000 # LOCALE_CUSTOM_DEFAULT # UINT GetACP( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetACP(ql, address, params): return OEM_US @@ -42,10 +41,7 @@ def hook_GetACP(ql, address, params): # UINT CodePage, # LPCPINFO lpCPInfo # ); -@winapi(cc=STDCALL, params={ - "CodePage": UINT, - "lpCPInfo": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetCPInfo(ql, address, params): ret = 1 return ret @@ -57,12 +53,7 @@ def hook_GetCPInfo(ql, address, params): # LPSTR lpLCData, # int cchData # ); -@winapi(cc=STDCALL, params={ - "Locale": DWORD, - "LCType": DWORD, - "lpLCData": POINTER, - "cchData": INT, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LCID': 'DWORD', 'LCTYPE': 'DWORD'}) def hook_GetLocaleInfoA(ql, address, params): locale_value = params["Locale"] lctype_value = params["LCType"] @@ -85,9 +76,7 @@ def hook_GetLocaleInfoA(ql, address, params): # BOOL IsValidCodePage( # UINT CodePage # ); -@winapi(cc=STDCALL, params={ - "CodePage": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_IsValidCodePage(ql, address, params): return 1 @@ -110,14 +99,7 @@ def _LCMapString(ql, address, params): # LPWSTR lpDestStr, # int cchDest # ); -@winapi(cc=STDCALL, params={ - "Locale": POINTER, - "dwMapFlags": DWORD, - "lpSrcStr": WSTRING, - "cchSrc": INT, - "lpDestStr": POINTER, - "cchDest": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LCMapStringW(ql, address, params): return _LCMapString(ql, address, params) @@ -130,14 +112,7 @@ def hook_LCMapStringW(ql, address, params): # LPSTR lpDestStr, # int cchDest # ); -@winapi(cc=STDCALL, params={ - "Locale": POINTER, - "dwMapFlags": DWORD, - "lpSrcStr": STRING, - "cchSrc": INT, - "lpDestStr": POINTER, - "cchDest": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LCMapStringA(ql, address, params): return _LCMapString(ql, address, params) @@ -153,25 +128,13 @@ def hook_LCMapStringA(ql, address, params): # LPVOID lpReserved, # LPARAM sortHandle # ); -@winapi(cc=STDCALL, params={ - "lpLocaleName": POINTER, - "dwMapFlags": DWORD, - "lpSrcStr": WSTRING, - "cchSrc": INT, - "lpDestStr": POINTER, - "cchDest": INT, - "lpVersionInformation": POINTER, - "lpReserved": UINT, - "sortHandle": UINT - -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LCMapStringEx(ql, address, params): return _LCMapString(ql, address, params) # LANGID GetUserDefaultUILanguage(); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetUserDefaultUILanguage(ql, address, params): # TODO find better documentation # https://docs.microsoft.com/it-it/windows/win32/intl/language-identifiers @@ -179,8 +142,7 @@ def hook_GetUserDefaultUILanguage(ql, address, params): # LANGID GetSystemDefaultUILanguage(); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetSystemDefaultUILanguage(ql, address, params): # TODO find better documentation # https://docs.microsoft.com/it-it/windows/win32/intl/language-identifiers @@ -195,14 +157,7 @@ def hook_GetSystemDefaultUILanguage(ql, address, params): # PCNZCH lpString2, # int cchCount2 # ); -@winapi(cc=STDCALL, params={ - "Locale": POINTER, - "dwCmpFlags": DWORD, - "lpString1": STRING, - "cchCount1": INT, - "lpString2": STRING, - "cchCount2": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CompareStringA(ql, address, params): st1 = params["lpString1"] st2 = params["lpString2"] diff --git a/qiling/os/windows/dlls/kernel32/winnt.py b/qiling/os/windows/dlls/kernel32/winnt.py index d5539d4c0..442bc36e0 100644 --- a/qiling/os/windows/dlls/kernel32/winnt.py +++ b/qiling/os/windows/dlls/kernel32/winnt.py @@ -6,17 +6,13 @@ from qiling.os.windows.const import * from qiling.os.windows.fncc import * +dllname = 'kernel32_dll' # LONG InterlockedExchange( # LONG volatile *Target, # LONG Value # ); - - -@winapi(cc=STDCALL, params={ - "Target": POINTER, - "Value": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"Target": POINTER, "Value": UINT}) def hook_InterlockedExchange(ql, address, params): old = int.from_bytes(ql.mem.read(params['Target'], ql.pointersize), byteorder='little') ql.mem.write(params['Target'], params['Value'].to_bytes(length=ql.pointersize, byteorder='little')) @@ -26,9 +22,7 @@ def hook_InterlockedExchange(ql, address, params): # LONG InterlockedIncrement( # LONG volatile *Target, # ); -@winapi(cc=STDCALL, params={ - "Target": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"Target": POINTER}) def hook_InterlockedIncrement(ql, address, params): val = int.from_bytes(ql.mem.read(params['Target'], 4), byteorder='little') val += 1 & (2 ** 32) # increment and overflow back to 0 if applicable @@ -39,9 +33,7 @@ def hook_InterlockedIncrement(ql, address, params): # LONG InterlockedDecrement( # LONG volatile *Target, # ); -@winapi(cc=STDCALL, params={ - "Target": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"Target": POINTER}) def hook_InterlockedDecrement(ql, address, params): val = int.from_bytes(ql.mem.read(params['Target'], 4), byteorder='little') val -= 1 @@ -56,11 +48,7 @@ def hook_InterlockedDecrement(ql, address, params): # DWORD TypeMask, # BYTE Condition # ); -@winapi(cc=STDCALL, params={ - "ConditionMask": ULONGLONG, - "TypeMask": DWORD, - "Condition": BYTE -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"ConditionMask": ULONGLONG, "TypeMask": DWORD, "Condition": BYTE}) def hook_VerSetConditionMask(ql, address, params): # ConditionMask = params["ConditionMask"] TypeMask = params["TypeMask"] diff --git a/qiling/os/windows/dlls/kernel32/wow64apiset.py b/qiling/os/windows/dlls/kernel32/wow64apiset.py index 6afda7872..347675ba6 100644 --- a/qiling/os/windows/dlls/kernel32/wow64apiset.py +++ b/qiling/os/windows/dlls/kernel32/wow64apiset.py @@ -14,15 +14,13 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # BOOL IsWow64Process( # HANDLE hProcess, # PBOOL Wow64Process # ); -@winapi(cc=STDCALL, params={ - "hProcess": HANDLE, - "Wow64Process": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_IsWow64Process(ql, address, params): pointer = params["Wow64Process"] false = 0x0.to_bytes(length=1, byteorder='little') diff --git a/qiling/os/windows/dlls/mscoree.py b/qiling/os/windows/dlls/mscoree.py index 45e14d238..5af2f1e19 100644 --- a/qiling/os/windows/dlls/mscoree.py +++ b/qiling/os/windows/dlls/mscoree.py @@ -10,21 +10,19 @@ from qiling.os.windows.handle import * from qiling.os.windows.const import * +dllname = 'mscoree_dll' # void STDMETHODCALLTYPE CorExitProcess ( # int exitCode # ); -@winapi(cc=STDCALL, params={ - "exitCode": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'int': 'DWORD'}) def hook_CorExitProcess(ql, address, params): ql.emu_stop() ql.os.PE_RUN = False # __int32 STDMETHODCALLTYPE _CorExeMain (); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname='crypt32_dll') def hook__CorExeMain(ql, address, params): # TODO implement + check call type pass diff --git a/qiling/os/windows/dlls/msi.py b/qiling/os/windows/dlls/msi.py index 7994a596c..20b90c040 100644 --- a/qiling/os/windows/dlls/msi.py +++ b/qiling/os/windows/dlls/msi.py @@ -12,6 +12,7 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'msi_dll' # UINT MsiGetComponentStateA( # MSIHANDLE hInstall, @@ -19,11 +20,6 @@ # INSTALLSTATE *piInstalled, # INSTALLSTATE *piAction # ); -@winapi(cc=STDCALL, params={ - "package": POINTER, - "szComponent": STRING, - "piInstalled": POINTER, - "piAction": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_MsiGetComponentStateA(ql, address, params): return 6 # INVALID_HANDLE diff --git a/qiling/os/windows/dlls/msvcrt.py b/qiling/os/windows/dlls/msvcrt.py index 0adc1a17b..0334f3af6 100644 --- a/qiling/os/windows/dlls/msvcrt.py +++ b/qiling/os/windows/dlls/msvcrt.py @@ -11,14 +11,12 @@ from qiling.os.const import * from qiling.os.windows.const import * - +dllname = 'msvcrt_dll' # void __set_app_type ( # int at # ) -@winapi(cc=CDECL, params={ - "at": INT -}) +@winsdkapi(cc=CDECL) def hook___set_app_type(ql, address, params): pass @@ -29,13 +27,8 @@ def hook___set_app_type(ql, address, params): # char *** _Env, # int _DoWildCard, # _startupinfo * _StartInfo); -@winapi(cc=CDECL, params={ - "_Argc": POINTER, - "_Argv": POINTER, - "_Env": POINTER, - "_DoWildCard": INT, - "_StartInfo": POINTER -}) +@winsdkapi(cc=CDECL, + replace_params={"_Argc": POINTER, "_Argv": POINTER, "_Env": POINTER, "_DoWildCard": INT, "_StartInfo": POINTER}) def hook___getmainargs(ql, address, params): ret = 0 return ret @@ -43,7 +36,7 @@ def hook___getmainargs(ql, address, params): # int* __p__fmode( # ); -@winapi(cc=CDECL, params={}) +@winsdkapi(cc=CDECL) def hook___p__fmode(ql, address, params): addr = ql.os.heap.alloc(ql.pointersize) return addr @@ -51,15 +44,15 @@ def hook___p__fmode(ql, address, params): # int * __p__commode( # ); -@winapi(cc=CDECL, params={}) +@winsdkapi(cc=CDECL) def hook___p__commode(ql, address, params): addr = ql.os.heap.alloc(ql.pointersize) return addr -# int * __p__commode( +# int * __p__acmdln( # ); -@winapi(cc=CDECL, params={}) +@winsdkapi(cc=CDECL) def hook___p__acmdln(self, address, params): addr = self.ql.loader.import_address_table['msvcrt.dll'][b'_acmdln'] return addr @@ -69,10 +62,7 @@ def hook___p__acmdln(self, address, params): # unsigned int new, # unsigned int mask # ); -@winapi(cc=CDECL, params={ - "new": UINT, - "mask": UINT -}) +@winsdkapi(cc=CDECL, replace_params={"new": UINT, "mask": UINT}) def hook__controlfp(ql, address, params): ret = 0x8001f return ret @@ -81,16 +71,14 @@ def hook__controlfp(ql, address, params): # int atexit( # void (__cdecl *func)(void) # ); -@winapi(cc=CDECL, params={ - "func": POINTER -}) +@winsdkapi(cc=CDECL, replace_params={"func": POINTER}) def hook_atexit(ql, address, params): ret = 0 return ret # char*** __p__environ(void) -@winapi(cc=CDECL, params={}) +@winsdkapi(cc=CDECL) def hook___p__environ(ql, address, params): ret = ql.os.heap.alloc(ql.pointersize * len(ql.os.env)) count = 0 @@ -108,9 +96,7 @@ def hook___p__environ(ql, address, params): # int puts( # const char *str # ); -@winapi(cc=CDECL, params={ - "str": STRING -}) +@winsdkapi(cc=CDECL, replace_params={"str": STRING}) def hook_puts(ql, address, params): ret = 0 string = params["str"] @@ -120,7 +106,7 @@ def hook_puts(ql, address, params): # void _cexit( void ); -@winapi(cc=CDECL, params={}) +@winsdkapi(cc=CDECL) def hook__cexit(ql, address, params): pass @@ -129,10 +115,7 @@ def hook__cexit(ql, address, params): # PVFV *, # PVFV * # ); -@winapi(cc=CDECL, params={ - "pfbegin": POINTER, - "pfend": POINTER -}) +@winsdkapi(cc=CDECL, replace_params={"pfbegin": POINTER, "pfend": POINTER}) def hook__initterm(ql, address, params): pass @@ -140,9 +123,7 @@ def hook__initterm(ql, address, params): # void exit( # int const status # ); -@winapi(cc=CDECL, params={ - "status": INT -}) +@winsdkapi(cc=CDECL, replace_params={"status": INT}) def hook_exit(ql, address, params): ql.emu_stop() ql.os.PE_RUN = False @@ -152,16 +133,13 @@ def hook_exit(ql, address, params): # PVFV *, # PVFV * # ); -@winapi(cc=CDECL, params={ - "pfbegin": POINTER, - "pfend": POINTER -}) +@winsdkapi(cc=CDECL, replace_params={"pfbegin": POINTER, "pfend": POINTER}) def hook__initterm_e(ql, address, params): return 0 # char*** __cdecl __p___argv (void); -@winapi(cc=CDECL, params={}) +@winsdkapi(cc=CDECL) def hook___p___argv(ql, address, params): ret = ql.os.heap.alloc(ql.pointersize * len(ql.argv)) count = 0 @@ -176,14 +154,14 @@ def hook___p___argv(ql, address, params): # int* __p___argc(void) -@winapi(cc=CDECL, params={}) +@winsdkapi(cc=CDECL) def hook___p___argc(ql, address, params): ret = ql.os.heap.alloc(ql.pointersize) ql.mem.write(ret, ql.pack(len(ql.argv))) return ret -@winapi(cc=CDECL, params={}) +@winsdkapi(cc=CDECL) def hook__get_initial_narrow_environment(ql, address, params): ret = 0 count = 0 @@ -198,7 +176,7 @@ def hook__get_initial_narrow_environment(ql, address, params): # int printf(const char *format, ...) -@winapi(cc=CDECL, param_num=1) +@winsdkapi(cc=CDECL, param_num=1) def hook_printf(ql, address, _): ret = 0 format_string = ql.os.get_function_param(1) @@ -226,15 +204,13 @@ def hook_printf(ql, address, _): # MSVCRT_FILE * CDECL MSVCRT___acrt_iob_func(unsigned idx) -@winapi(cc=CDECL, params={ - "idx": UINT -}) +@winsdkapi(cc=CDECL, replace_params={"idx": UINT}) def hook___acrt_iob_func(ql, address, params): ret = 0 return ret -@winapi(cc=CDECL, param_num=2) +@winsdkapi(cc=CDECL, param_num=2) def hook___stdio_common_vfprintf(ql, address, _): ret = 0 if ql.pointersize == 8: @@ -246,7 +222,7 @@ def hook___stdio_common_vfprintf(ql, address, _): return ret -@winapi(cc=CDECL, param_num=4) +@winsdkapi(cc=CDECL, param_num=4) def hook___stdio_common_vfwprintf(ql, address, _): ret = 0 _, _, _, p_format, _, p_args = ql.os.get_function_param(6) @@ -256,7 +232,7 @@ def hook___stdio_common_vfwprintf(ql, address, _): return ret -@winapi(cc=CDECL, param_num=4) +@winsdkapi(cc=CDECL, param_num=4) def hook___stdio_common_vswprintf_s(ql, address, _): ret = 0 _, size, p_format, p_args = ql.os.get_function_param(4) @@ -270,9 +246,7 @@ def hook___stdio_common_vswprintf_s(ql, address, _): # int lstrlenA( # LPCSTR lpString # ); -@winapi(cc=CDECL, params={ - 'lpString': POINTER -}) +@winsdkapi(cc=CDECL, replace_params={'lpString': POINTER}) def hook_lstrlenA(ql, address, params): addr = params["lpString"] string = b"" @@ -288,9 +262,7 @@ def hook_lstrlenA(ql, address, params): # int lstrlenW( # LPCWSTR lpString # ); -@winapi(cc=CDECL, params={ - 'lpString': POINTER -}) +@winsdkapi(cc=CDECL, replace_params={'lpString': POINTER}) def hook_lstrlenW(ql, address, params): addr = params["lpString"] string = b"" @@ -303,7 +275,7 @@ def hook_lstrlenW(ql, address, params): return len(string) -@winapi(cc=CDECL, params={}) +@winsdkapi(cc=CDECL) def hook___lconv_init(ql, address, params): ret = 0 return ret @@ -312,9 +284,7 @@ def hook___lconv_init(ql, address, params): # size_t strlen( # const char *str # ); -@winapi(cc=CDECL, params={ - "str": STRING -}) +@winsdkapi(cc=CDECL, replace_params={"str": STRING}) def hook_strlen(ql, address, params): _str = params["str"] strlen = len(_str) @@ -326,11 +296,7 @@ def hook_strlen(ql, address, params): # const char *string2, # size_t count # ); -@winapi(cc=CDECL, params={ - "string1": STRING, - "string2": STRING, - "count": SIZE_T -}) +@winsdkapi(cc=CDECL, replace_params={"string1": STRING, "string2": STRING, "count": SIZE_T}) def hook_strncmp(ql, address, params): s1 = params["string1"] s2 = params["string2"] @@ -348,9 +314,7 @@ def hook_strncmp(ql, address, params): # void* malloc（unsigned int size) -@winapi(cc=CDECL, params={ - "size": UINT -}) +@winsdkapi(cc=CDECL, replace_params={"size": UINT}) def hook_malloc(ql, address, params): size = params['size'] addr = ql.os.heap.alloc(size) @@ -360,9 +324,7 @@ def hook_malloc(ql, address, params): # _onexit_t _onexit( # _onexit_t function # ); -@winapi(cc=CDECL, params={ - "function": POINTER -}) +@winsdkapi(cc=CDECL, replace_params={"function": POINTER}) def hook__onexit(ql, address, params): function = params['function'] addr = ql.os.heap.alloc(ql.pointersize) @@ -375,11 +337,7 @@ def hook__onexit(ql, address, params): # int c, # size_t count # ); -@winapi(cc=CDECL, params={ - "dest": POINTER, - "c": INT, - "count": SIZE_T -}) +@winsdkapi(cc=CDECL, replace_params={"dest": POINTER, "c": INT, "count": SIZE_T}) def hook_memset(ql, address, params): dest = params["dest"] c = params["c"] @@ -392,10 +350,7 @@ def hook_memset(ql, address, params): # size_t num, # size_t size # ); -@winapi(cc=CDECL, params={ - "num": SIZE_T, - "size": SIZE_T -}) +@winsdkapi(cc=CDECL, replace_params={"num": SIZE_T, "size": SIZE_T}) def hook_calloc(ql, address, params): num = params['num'] size = params['size'] @@ -408,11 +363,7 @@ def hook_calloc(ql, address, params): # const void *src, # size_t num # ); -@winapi(cc=CDECL, params={ - "dest": POINTER, - "src": POINTER, - "num": SIZE_T -}) +@winsdkapi(cc=CDECL, replace_params={"dest": POINTER, "src": POINTER, "num": SIZE_T}) def hook_memmove(ql, address, params): data = ql.mem.read(params['src'], params['num']) ql.mem.write(params['dest'], bytes(data)) @@ -422,9 +373,7 @@ def hook_memmove(ql, address, params): # int _ismbblead( # unsigned int c # ); -@winapi(cc=CDECL, params={ - "c": UINT -}) +@winsdkapi(cc=CDECL, replace_params={"c": UINT}) def hook__ismbblead(ql, address, params): # TODO check if is CDECL or not # If locale is utf-8 always return 0 @@ -440,11 +389,7 @@ def hook__ismbblead(ql, address, params): # const wchar_t *filename, # const wchar_t *mode # ); -@winapi(cc=CDECL, params={ - "pFile": POINTER, - "filename": WSTRING, - "mode": WSTRING -}) +@winsdkapi(cc=CDECL, replace_params={"pFile": POINTER, "filename": WSTRING, "mode": WSTRING}) def hook__wfopen_s(ql, address, params): dst = params["pFile"] filename = params["filename"] @@ -458,9 +403,7 @@ def hook__wfopen_s(ql, address, params): # time_t time( time_t *destTime ); -@winapi(cc=CDECL, params={ - "destTime": POINTER -}) +@winsdkapi(cc=CDECL, replace_params={"destTime": POINTER}) def hook__time64(ql, address, params): dst = params["destTime"] time_wasted = int(time.time()) diff --git a/qiling/os/windows/dlls/ntdll.py b/qiling/os/windows/dlls/ntdll.py index f91c1de47..a310e77f5 100644 --- a/qiling/os/windows/dlls/ntdll.py +++ b/qiling/os/windows/dlls/ntdll.py @@ -13,17 +13,14 @@ from qiling.exception import * import qiling.os.windows.structs +dllname = 'ntdll_dll' # void *memcpy( # void *dest, # const void *src, # size_t count # ); -@winapi(cc=CDECL, params={ - "dest": POINTER, - "src": POINTER, - "count": UINT -}) +@winsdkapi(cc=CDECL, dllname=dllname, replace_params={"dest": POINTER, "src": POINTER, "count": UINT}) def hook_memcpy(ql, address, params): try: data = bytes(ql.mem.read(params['src'], params['count'])) @@ -72,13 +69,9 @@ def _QueryInformationProcess(ql, address, params): # _In_ ULONG ProcessInformationLength, # _Out_opt_ PULONG ReturnLength # ); -@winapi(cc=STDCALL, params={ - "ProcessHandle": HANDLE, - "ProcessInformationClass": INT, - "ProcessInformation": POINTER, - "ProcessInformationLength": UINT, - "ReturnLength": POINTER -}) +@winsdkapi(cc=CDECL, dllname=dllname, + replace_params={"ProcessHandle": HANDLE, "ProcessInformationClass": INT, "ProcessInformation": POINTER, + "ProcessInformationLength": UINT, "ReturnLength": POINTER}) def hook_ZwQueryInformationProcess(ql, address, params): # TODO have no idea if is cdecl or stdcall @@ -92,18 +85,88 @@ def hook_ZwQueryInformationProcess(ql, address, params): # IN ULONG ProcessInformationLength, # OUT PULONG ReturnLength # ); -@winapi(cc=STDCALL, params={ - "ProcessHandle": HANDLE, - "ProcessInformationClass": INT, - "ProcessInformation": POINTER, - "ProcessInformationLength": UINT, - "ReturnLength": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_NtQueryInformationProcess(ql, address, params): # TODO have no idea if is cdecl or stdcall _QueryInformationProcess(ql, address, params) +def _QuerySystemInformation(ql, address, params): + siClass = params["SystemInformationClass"] + pt_res = params["ReturnLength"] + dst = params["SystemInformation"] + if (siClass == SystemBasicInformation): + bufferLength = params["SystemInformationLength"] + if (ql.archtype == QL_ARCH.X8664): + sbi = qiling.os.windows.structs.SystemBasicInforation(ql, + Reserved=0, + TimerResolution = 156250 , + PageSize=ql.os.heap.page_size, + NumberOfPhysicalPages = 0x003FC38A, + LowestPhysicalPageNumber=1, + HighestPhysicalPageNumber=0x0046DFFF, + AllocationGranularity=1, + MinimumUserModeAddress=0x10000, + MaximumUserModeAddress=0x7FFFFFFEFFFF, + ActiveProcessorsAffinityMask = 0x3F, + NumberOfProcessors = 0x6) + elif ql.archtype == QL_ARCH.X86: + sbi = qiling.os.windows.structs.SystemBasicInforation(ql, + Reserved=0, + TimerResolution=156250, + PageSize=ql.os.heap.page_size, + NumberOfPhysicalPages=0x003FC38A, + LowestPhysicalPageNumber=1, + HighestPhysicalPageNumber=0x0046DFFF, + AllocationGranularity=1, + MinimumUserModeAddress=0x10000, + MaximumUserModeAddress=0x7FFEFFFF, + ActiveProcessorsAffinityMask=0x3F, + NumberOfProcessors=0x6) + if (bufferLength==sbi.size): + sbi.write(dst) + if pt_res != 0: + ql.mem.write(pt_res, sbi.size.to_bytes(1, byteorder="little")) + else: + if pt_res != 0: + ql.mem.write(pt_res, sbi.size.to_bytes(1, byteorder="little")) + return STATUS_INFO_LENGTH_MISMATCH + else: + ql.dprint(D_INFO, str(siClass)) + raise QlErrorNotImplemented("[!] API not implemented") + + + return STATUS_SUCCESS + +# __kernel_entry NTSTATUS NtQuerySystemInformation( +# IN SYSTEM_INFORMATION_CLASS SystemInformationClass, +# OUT PVOID SystemInformation, +# IN ULONG SystemInformationLength, +# OUT PULONG ReturnLength +# ); +@winsdkapi(cc=STDCALL, dllname=dllname, + replace_params={"SystemInformationClass": UINT, "SystemInformation": POINTER, "SystemInformationLength": SIZE_T, + "ReturnLength": POINTER}) +def hook_NtQuerySystemInformation(ql, address, params): + # In minwindef.h + # #define WINAPI __stdcall + + _QuerySystemInformation(ql, address, params) + +# pub unsafe extern "system" fn ZwQuerySystemInformation( +# IN SYSTEM_INFORMATION_CLASS SystemInformationClass, +# OUT PVOID SystemInformation, +# IN ULONG SystemInformationLength, +# OUT PULONG ReturnLength +# ); +@winsdkapi(cc=STDCALL, dllname=dllname, + replace_params={"SystemInformationClass": UINT, "SystemInformation": POINTER, "SystemInformationLength": SIZE_T, + "ReturnLength": POINTER}) +def hook_ZwQuerySystemInformation(ql, address, params): + # In minwindef.h + # #define WINAPI __stdcall + + return _QuerySystemInformation(ql, address, params) # pub unsafe extern "system" fn ZwCreateDebugObject( # DebugObjectHandle: PHANDLE, @@ -111,12 +174,8 @@ def hook_NtQueryInformationProcess(ql, address, params): # ObjectAttributes: POBJECT_ATTRIBUTES, # Flags: ULONG # ) -> NTSTATUS -@winapi(cc=STDCALL, params={ - "DebugObjectHandle": HANDLE, - "DesiredAccess": INT, - "ObjectAttributes": POINTER, - "Flags": ULONGLONG -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"DebugObjectHandle": HANDLE, "DesiredAccess": INT, + "ObjectAttributes": POINTER, "Flags": ULONGLONG}) def hook_ZwCreateDebugObject(ql, address, params): # FIXME: find documentation, almost none was found online, and create the correct object handle = Handle(id=params["DebugObjectHandle"]) @@ -131,13 +190,7 @@ def hook_ZwCreateDebugObject(ql, address, params): # ULONG ObjectInformationLength, # PULONG ReturnLength # ); -@winapi(cc=STDCALL, params={ - "Handle": HANDLE, - "ObjectInformationClass": INT, - "ObjectInformation": POINTER, - "ObjectInformationLength": UINT, - "ReturnLength": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_ZwQueryObject(ql, address, params): infoClass = params["ObjectInformationClass"] dest = params["ObjectInformation"] @@ -173,8 +226,7 @@ def hook_ZwQueryObject(ql, address, params): # NTAPI # NtYieldExecution( # ); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_ZwYieldExecution(ql, address, params): # FIXME: offer timeslice of this thread return STATUS_NO_YIELD_PERFORMED @@ -185,12 +237,8 @@ def hook_ZwYieldExecution(ql, address, params): # IN PANSI_STRING FunctionName OPTIONAL, # IN WORD Oridinal OPTIONAL, # OUT PVOID *FunctionAddress ); -@winapi(cc=STDCALL, params={ - "ModuleHandle": POINTER, - "FunctionName": STRING, - "Ordinal": UINT, - "FunctionAddress": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"ModuleHandle": POINTER, + "FunctionName": STRING, "Ordinal": UINT, "FunctionAddress": POINTER}) def hook_LdrGetProcedureAddress(ql, address, params): if params['FunctionName']: identifier = bytes(params["lpProcName"], 'ascii') @@ -216,21 +264,15 @@ def hook_LdrGetProcedureAddress(ql, address, params): # ULONG Flags, # SIZE_T Size # ); -@winapi(cc=STDCALL, params={ - "HeapHandle": POINTER, - "Flags": UINT, - "Size": SIZE_T -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"HeapHandle": POINTER, + "Flags": UINT,"Size": SIZE_T}) def hook_RtlAllocateHeap(ql, address, params): ret = ql.os.heap.alloc(params["Size"]) return ret # wchar_t* wcsstr( const wchar_t* dest, const wchar_t* src ); -@winapi(cc=STDCALL, params={ - "dest": POINTER, - "src": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"dest": POINTER, "src": WSTRING}) def hook_wcsstr(ql, address, params): dest = params["dest"] value = ql.os.read_wstring(dest) @@ -243,8 +285,7 @@ def hook_wcsstr(ql, address, params): # HANDLE CsrGetProcessId(); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CsrGetProcessId(ql, address, params): pid = ql.os.profile["PROCESSES"].getint("csrss.exe", fallback=12345) - return pid + return pid \ No newline at end of file diff --git a/qiling/os/windows/dlls/ntoskrnl.py b/qiling/os/windows/dlls/ntoskrnl.py index 613b58d5c..7e1d3c9d4 100644 --- a/qiling/os/windows/dlls/ntoskrnl.py +++ b/qiling/os/windows/dlls/ntoskrnl.py @@ -13,13 +13,12 @@ from qiling.exception import * from qiling.os.windows.structs import * +dllname = 'ntoskrnl_dll' # NTSYSAPI NTSTATUS RtlGetVersion( # PRTL_OSVERSIONINFOW lpVersionInformation # ); -@winapi(cc=CDECL, params={ - "lpVersionInformation": POINTER -}) +@winsdkapi(cc=CDECL, dllname=dllname, replace_params={"lpVersionInformation": POINTER}) def hook_RtlGetVersion(ql, address, params): pointer = params["lpVersionInformation"] os = OsVersionInfoW(ql) @@ -37,13 +36,8 @@ def hook_RtlGetVersion(ql, address, params): # PVOID ThreadInformation, # ULONG ThreadInformationLength # ); -@winapi(cc=STDCALL, params={ - "ThreadHandle": HANDLE, - "ThreadInformationClass": INT, - "ThreadInformation": POINTER, - "ThreadInformationLength": UINT, - -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"ThreadHandle": HANDLE, + "ThreadInformationClass": INT, "ThreadInformation": POINTER, "ThreadInformationLength": UINT}) def hook_ZwSetInformationThread(ql, address, params): thread = params["ThreadHandle"] information = params["ThreadInformationClass"] @@ -68,10 +62,7 @@ def hook_ZwSetInformationThread(ql, address, params): # NTSYSAPI NTSTATUS ZwClose( # HANDLE Handle # ); -@winapi(cc=STDCALL, params={ - "Handle": HANDLE - -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"Handle": HANDLE}) def hook_ZwClose(ql, address, params): value = params["Handle"] handle = ql.os.handle_manager.get(value) diff --git a/qiling/os/windows/dlls/ole32.py b/qiling/os/windows/dlls/ole32.py index f954bf484..b2dc822e1 100644 --- a/qiling/os/windows/dlls/ole32.py +++ b/qiling/os/windows/dlls/ole32.py @@ -13,13 +13,12 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'ole32_dll' # HRESULT OleInitialize( # IN LPVOID pvReserved # ); -@winapi(cc=STDCALL, params={ - "pvReserved": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_OleInitialize(ql, address, params): # I don't think we need to do anything, we hook every call for the COM library and manage them locally return S_OK @@ -29,10 +28,7 @@ def hook_OleInitialize(ql, address, params): # LPMESSAGEFILTER lpMessageFilter, # LPMESSAGEFILTER *lplpMessageFilter # ); -@winapi(cc=STDCALL, params={ - "lpMessageFilter": POINTER, - "lplpMessageFilter": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CoRegisterMessageFilter(ql, address, params): return S_OK @@ -41,10 +37,7 @@ def hook_CoRegisterMessageFilter(ql, address, params): # LPVOID pvReserved, # DWORD dwCoInit # ); -@winapi(cc=STDCALL, params={ - "pvReserved": POINTER, - "dwCoInit": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CoInitializeEx(ql, address, params): return S_OK @@ -59,17 +52,7 @@ def hook_CoInitializeEx(ql, address, params): # DWORD dwCapabilities, # void *pReserved3 # ); -@winapi(cc=STDCALL, params={ - "pSecDesc": POINTER, - "cAuthSvc": ULONGLONG, - "asAuthSvc": POINTER, - "pReserved1": POINTER, - "dwAuthnLevel": DWORD, - "dwImpLevel": DWORD, - "pAuthList": POINTER, - "dwCapabilities": DWORD, - "pReserved3": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CoInitializeSecurity(ql, address, params): return S_OK @@ -81,13 +64,7 @@ def hook_CoInitializeSecurity(ql, address, params): # REFIID riid, # LPVOID *ppv # ); -@winapi(cc=STDCALL, params={ - "rclsid": POINTER, - "pUnkOuter": POINTER, - "dwClsContext": DWORD, - "riid": POINTER, - "ppv": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CoCreateInstance(ql, address, params): # FIXME: probably this needs implementation return S_OK \ No newline at end of file diff --git a/qiling/os/windows/dlls/oleaut32.py b/qiling/os/windows/dlls/oleaut32.py index 992602f2e..ad19df644 100644 --- a/qiling/os/windows/dlls/oleaut32.py +++ b/qiling/os/windows/dlls/oleaut32.py @@ -13,6 +13,7 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'oleaut32_dll' # TODO this file is VERY experimental. @@ -20,10 +21,7 @@ # const OLECHAR *strIn, # UINT ui # ); -@winapi(cc=STDCALL, params={ - "strIn": WSTRING, - "ui": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SysAllocStringLen(ql, address, params): addr = ql.os.heap.alloc(params["ui"] + 1) if params["strIn"] != 0: @@ -34,9 +32,7 @@ def hook_SysAllocStringLen(ql, address, params): # void SysFreeString( # BSTR bstrString # ); -@winapi(cc=STDCALL, params={ - "strIn": POINTER, -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SysFreeString(ql, address, params): addr = params["strIn"] if addr != 0: @@ -50,9 +46,7 @@ def hook_SysFreeString(ql, address, params): # UINT SysStringLen( # BSTR pbstr # ); -@winapi(cc=STDCALL, params={ - "pbstr": WSTRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SysStringLen(ql, address, params): string = params["pbstr"] if string != 0: @@ -65,11 +59,7 @@ def hook_SysStringLen(ql, address, params): # const OLECHAR *psz, # unsigned int len # ); -@winapi(cc=STDCALL, params={ - "pbstr": POINTER, - "psz": WSTRING, - "len": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SysReAllocStringLen(ql, address, params): content = params["psz"] size = params["len"] @@ -82,9 +72,7 @@ def hook_SysReAllocStringLen(ql, address, params): # BSTR SysAllocString( # const OLECHAR *psz # ); -@winapi(cc=STDCALL, params={ - "psz": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SysAllocString(ql, address, params): string = params["psz"] if string == 0: diff --git a/qiling/os/windows/dlls/shell32.py b/qiling/os/windows/dlls/shell32.py index 843caa4ab..a1e736fe9 100644 --- a/qiling/os/windows/dlls/shell32.py +++ b/qiling/os/windows/dlls/shell32.py @@ -15,6 +15,7 @@ from qiling.os.windows.structs import * from qiling.const import * +dllname = 'shell32_dll' # DWORD_PTR SHGetFileInfoA( # LPCSTR pszPath, @@ -23,13 +24,7 @@ # UINT cbFileInfo, # UINT uFlags # ); -@winapi(cc=STDCALL, params={ - "pszPath": STRING, - "dwFileAttributes": DWORD, - "psfi": POINTER, - "cbFileInfo": UINT, - "uFlags": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SHGetFileInfoA(ql, address, params): return hook_SHGetFileInfoW.__wrapped__(ql, address, params) @@ -41,13 +36,7 @@ def hook_SHGetFileInfoA(ql, address, params): # UINT cbFileInfo, # UINT uFlags # ); -@winapi(cc=STDCALL, params={ - "pszPath": WSTRING, - "dwFileAttributes": DWORD, - "psfi": POINTER, - "cbFileInfo": UINT, - "uFlags": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SHGetFileInfoW(ql, address, params): flags = params["uFlags"] if flags == SHGFI_LARGEICON: @@ -80,9 +69,7 @@ def _ShellExecute(ql, obj: ShellExecuteInfoA): # BOOL ShellExecuteExW( # SHELLEXECUTEINFOA *pExecInfo # ); -@winapi(cc=STDCALL, params={ - "pExecInfo": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_ShellExecuteExW(ql, address, params): pointer = params["pExecInfo"] @@ -106,17 +93,10 @@ def hook_ShellExecuteExW(ql, address, params): # LPCWSTR lpDirectory, # INT nShowCmd # ); -@winapi(cc=STDCALL, params={ - "hwnd": HANDLE, - "lpVerb": POINTER, - "lpFile": POINTER, - "lpParameters": POINTER, - "lpDirectory": POINTER, - "nShow": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCWSTR': 'POINTER'}) def hook_ShellExecuteW(ql, address, params): - shellInfo = ShellExecuteInfoA(ql, hwnd=params["hwnd"], lpVerb=params["lpVerb"], lpFile=params["lpFile"], - lpParams=params["lpParameters"], lpDir=params["lpDirectory"], show=params["nShow"]) + shellInfo = ShellExecuteInfoA(ql, hwnd=params["hwnd"], lpVerb=params["lpOperation"], lpFile=params["lpFile"], + lpParams=params["lpParameters"], lpDir=params["lpDirectory"], show=params["nShowCmd"]) _ = _ShellExecute(ql, shellInfo) return 33 @@ -127,12 +107,7 @@ def hook_ShellExecuteW(ql, address, params): # int csidl, # BOOL fCreate # ); -@winapi(cc=STDCALL, params={ - "hwnd": HANDLE, - "pszPath": POINTER, - "csidl": INT, - "fCreate": BOOL -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SHGetSpecialFolderPathW(ql, address, params): directory_id = params["csidl"] dst = params["pszPath"] diff --git a/qiling/os/windows/dlls/shlwapi.py b/qiling/os/windows/dlls/shlwapi.py index 6ec9a6685..552645b31 100644 --- a/qiling/os/windows/dlls/shlwapi.py +++ b/qiling/os/windows/dlls/shlwapi.py @@ -9,13 +9,13 @@ from qiling.os.windows.utils import * from qiling.os.windows.const import * +dllname = 'shlwapi_dll' + # LPCSTR PathFindExtensionA( # LPWSTR pszPath # ); -@winapi(cc=STDCALL, params={ - "pszPath": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_PathFindExtensionA(ql, address, params): # Must return the address of the dot pointer = params["pszPath"] @@ -29,9 +29,7 @@ def hook_PathFindExtensionA(ql, address, params): # LPCSTR PathFindExtensionW( # LPCSTR pszPath # ); -@winapi(cc=STDCALL, params={ - "pszPath": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_PathFindExtensionW(ql, address, params): # Must return the address of the dot pointer = params["pszPath"] @@ -45,9 +43,7 @@ def hook_PathFindExtensionW(ql, address, params): # LPCSTR PathFindFileNameA( # LPCSTR pszPath # ); -@winapi(cc=STDCALL, params={ - "pszPath": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_PathFindFileNameA(ql, address, params): # Must return the address of the start of the filename pointer = params["pszPath"] @@ -61,9 +57,7 @@ def hook_PathFindFileNameA(ql, address, params): # LPCSTR PathFindFileNameW( # LPWSTR pszPath # ); -@winapi(cc=STDCALL, params={ - "pszPath": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_PathFindFileNameW(ql, address, params): # Must return the address of the start of the filename pointer = params["pszPath"] @@ -78,10 +72,7 @@ def hook_PathFindFileNameW(ql, address, params): # PCWSTR psz1, # PCWSTR psz2 # ); -@winapi(cc=STDCALL, params={ - "psz1": WSTRING, - "psz2": WSTRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_StrCmpW(ql, address, params): # Copy String2 into String str1 = params["psz1"] diff --git a/qiling/os/windows/dlls/user32.py b/qiling/os/windows/dlls/user32.py index 085529dcf..3f386ca23 100644 --- a/qiling/os/windows/dlls/user32.py +++ b/qiling/os/windows/dlls/user32.py @@ -11,6 +11,7 @@ from qiling.const import * from qiling.os.windows.structs import * +dllname = 'user32_dll' # INT_PTR DialogBoxParamA( # HINSTANCE hInstance, @@ -19,13 +20,7 @@ # DLGPROC lpDialogFunc, # LPARAM dwInitParam # ); -@winapi(cc=STDCALL, params={ - "hInstance": HANDLE, - "lpTemplateName": POINTER, - "hWndParent": HANDLE, - "lpDialogFunc": POINTER, - "dwInitParam": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCSTR': 'POINTER'}) def hook_DialogBoxParamA(ql, address, params): ret = 0 return ret @@ -37,12 +32,7 @@ def hook_DialogBoxParamA(ql, address, params): # LPSTR lpString, # int cchMax # ); -@winapi(cc=STDCALL, params={ - "hDlg": HANDLE, - "nIDDlgItem": INT, - "lpString": POINTER, - "cchMax": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetDlgItemTextA(ql, address, params): ret = 0 hDlg = params["hDlg"] @@ -62,10 +52,7 @@ def hook_GetDlgItemTextA(ql, address, params): # HWND hDlg, # INT_PTR nResult # ); -@winapi(cc=STDCALL, params={ - "hDlg": HANDLE, - "nResult": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_EndDialog(ql, address, params): ret = 1 return ret @@ -73,7 +60,7 @@ def hook_EndDialog(ql, address, params): # HWND GetDesktopWindow(( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetDesktopWindow(ql, address, params): pass @@ -81,15 +68,13 @@ def hook_GetDesktopWindow(ql, address, params): # BOOL OpenClipboard( # HWND hWndNewOwner # ); -@winapi(cc=STDCALL, params={ - "hWndNewOwner": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_OpenClipboard(ql, address, params): return ql.os.clipboard.open(params['hWndNewOwner']) # BOOL CloseClipboard(); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CloseClipboard(ql, address, params): return ql.os.clipboard.close() @@ -98,10 +83,7 @@ def hook_CloseClipboard(ql, address, params): # UINT uFormat, # HANDLE hMem # ); -@winapi(cc=STDCALL, params={ - "uFormat": UINT, - "hMem": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SetClipboardData(ql, address, params): try: data = bytes(params['hMem'], 'ascii', 'ignore') @@ -113,9 +95,7 @@ def hook_SetClipboardData(ql, address, params): # HANDLE GetClipboardData( # UINT uFormat # ); -@winapi(cc=STDCALL, params={ - "uFormat": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetClipboardData(ql, address, params): data = ql.os.clipboard.get_data(params['uFormat']) if data: @@ -130,9 +110,7 @@ def hook_GetClipboardData(ql, address, params): # BOOL IsClipboardFormatAvailable( # UINT format # ); -@winapi(cc=STDCALL, params={ - "uFormat": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_IsClipboardFormatAvailable(ql, address, params): rtn = ql.os.clipboard.format_available(params['uFormat']) return rtn @@ -142,10 +120,7 @@ def hook_IsClipboardFormatAvailable(ql, address, params): # UINT uCode, # UINT uMapType # ); -@winapi(cc=STDCALL, params={ - "uCode": UINT, - "uMapType": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_MapVirtualKeyW(ql, address, params): map_value = params["uMapType"] code_value = params["uCode"] @@ -165,9 +140,7 @@ def hook_MapVirtualKeyW(ql, address, params): # SHORT GetKeyState( # int nVirtKey # ); -@winapi(cc=STDCALL, params={ - "nVirtKey": UINT, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'int': 'UINT'}) def hook_GetKeyState(ql, address, params): let = chr(params["nVirtKey"]) ql.dprint(0, let) @@ -179,9 +152,7 @@ def hook_GetKeyState(ql, address, params): # UINT RegisterWindowMessageA( # LPCSTR lpString # ); -@winapi(cc=STDCALL, params={ - "lpString": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegisterWindowMessageA(ql, address, params): return hook_RegisterWindowMessageW.__wrapped__(ql, address, params) @@ -189,17 +160,14 @@ def hook_RegisterWindowMessageA(ql, address, params): # UINT RegisterWindowMessageW( # LPCWSTR lpString # ); -@winapi(cc=STDCALL, params={ - "lpString": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegisterWindowMessageW(ql, address, params): # maybe some samples really use this and we need to have a real implementation return 0xD10C # HWND GetActiveWindow(); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetActiveWindow(ql, address, params): # maybe some samples really use this and we need to have a real implementation return 0xD10C @@ -208,9 +176,7 @@ def hook_GetActiveWindow(ql, address, params): # HWND GetLastActivePopup( # HWND hWnd # ); -@winapi(cc=STDCALL, params={ - "hWnd": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetLastActivePopup(ql, address, params): hwnd = params["hWnd"] return hwnd @@ -219,9 +185,7 @@ def hook_GetLastActivePopup(ql, address, params): # BOOL GetPhysicalCursorPos( # LPPOINT lpPoint # ); -@winapi(cc=STDCALL, params={ - "lpPoint": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetPhysicalCursorPos(ql, address, params): return 1 @@ -229,9 +193,7 @@ def hook_GetPhysicalCursorPos(ql, address, params): # int GetSystemMetrics( # int nIndex # ); -@winapi(cc=STDCALL, params={ - "nIndex": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetSystemMetrics(ql, address, params): info = params["nIndex"] if info == SM_CXICON or info == SM_CYICON: @@ -249,9 +211,7 @@ def hook_GetSystemMetrics(ql, address, params): # HDC GetDC( # HWND hWnd # ); -@winapi(cc=STDCALL, params={ - "hWnd": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetDC(ql, address, params): handler = params["hWnd"] # Maybe we should really emulate the handling of screens and windows. Is going to be a pain @@ -262,10 +222,7 @@ def hook_GetDC(ql, address, params): # HDC hdc, # int index # ); -@winapi(cc=STDCALL, params={ - "hdc": POINTER, - "index": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetDeviceCaps(ql, address, params): # Maybe we should really emulate the handling of screens and windows. Is going to be a pain return 1 @@ -275,10 +232,7 @@ def hook_GetDeviceCaps(ql, address, params): # HWND hWnd, # HDC hDC # ); -@winapi(cc=STDCALL, params={ - "hWnd": POINTER, - "hdc": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HWND': 'POINTER'}) def hook_ReleaseDC(ql, address, params): return 1 @@ -286,9 +240,7 @@ def hook_ReleaseDC(ql, address, params): # DWORD GetSysColor( # int nIndex # ); -@winapi(cc=STDCALL, params={ - "nIndex": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetSysColor(ql, address, params): info = params["nIndex"] return 0 @@ -297,9 +249,7 @@ def hook_GetSysColor(ql, address, params): # HBRUSH GetSysColorBrush( # int nIndex # ); -@winapi(cc=STDCALL, params={ - "nIndex": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetSysColorBrush(ql, address, params): info = params["nIndex"] return 0xd10c @@ -309,10 +259,7 @@ def hook_GetSysColorBrush(ql, address, params): # HINSTANCE hInstance, # LPCSTR lpCursorName # ); -@winapi(cc=STDCALL, params={ - "hInstance": POINTER, - "lpCursorName": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HINSTANCE': 'POINTER', 'LPCSTR': 'INT'}) def hook_LoadCursorA(ql, address, params): return 0xd10c @@ -320,19 +267,15 @@ def hook_LoadCursorA(ql, address, params): # HCURSOR LoadCursorFromFileA( # LPCSTR lpFileName # ); -@winapi(cc=STDCALL, params={ - "lpFileName": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LoadCursorFromFileA(ql, address, params): return hook_LoadCursorFromFileW.__wrapped__(ql, address, params) -# HCURSOR LoadCursorFromFileA( +# HCURSOR LoadCursorFromFileW( # LPCSTR lpFileName # ); -@winapi(cc=STDCALL, params={ - "lpFileName": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LoadCursorFromFileW(ql, address, params): handle = Handle() ql.os.handle_manager.append(handle) @@ -340,8 +283,7 @@ def hook_LoadCursorFromFileW(ql, address, params): # UINT GetOEMCP(); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetOEMCP(ql, address, params): return OEM_US @@ -352,12 +294,7 @@ def hook_GetOEMCP(ql, address, params): # LPSTR lpBuffer, # int cchBufferMax # ); -@winapi(cc=STDCALL, params={ - "hInstance": POINTER, - "uID": UINT, - "lpBuffer": POINTER, - "cchBufferMax": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HINSTANCE': 'POINTER'}) def hook_LoadStringW(ql, address, params): dst = params["lpBuffer"] max_len = params["cchBufferMax"] @@ -378,12 +315,7 @@ def hook_LoadStringW(ql, address, params): # LPSTR lpBuffer, # int cchBufferMax # ); -@winapi(cc=STDCALL, params={ - "hInstance": POINTER, - "uID": UINT, - "lpBuffer": POINTER, - "cchBufferMax": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HINSTANCE': 'POINTER'}) def hook_LoadStringA(ql, address, params): dst = params["lpBuffer"] max_len = params["cchBufferMax"] @@ -401,9 +333,7 @@ def hook_LoadStringA(ql, address, params): # BOOL MessageBeep( # UINT uType # ); -@winapi(cc=STDCALL, params={ - "uType": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_MessageBeep(ql, address, params): return 1 @@ -414,12 +344,7 @@ def hook_MessageBeep(ql, address, params): # HINSTANCE hmod, # DWORD dwThreadId # ); -@winapi(cc=STDCALL, params={ - "idHook": INT, - "lpfn": POINTER, - "hmod": POINTER, - "dwThreadId": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HINSTANCE': 'POINTER'}) def hook_SetWindowsHookExA(ql, address, params): # Should hook a procedure to a dll hook = params["lpfn"] @@ -429,9 +354,7 @@ def hook_SetWindowsHookExA(ql, address, params): # BOOL UnhookWindowsHookEx( # HHOOK hhk # ); -@winapi(cc=STDCALL, params={ - "hhk": POINTER, -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_UnhookWindowsHookEx(ql, address, params): return 1 @@ -440,10 +363,7 @@ def hook_UnhookWindowsHookEx(ql, address, params): # HWND hWnd, # int nCmdShow # ); -@winapi(cc=STDCALL, params={ - "hWnd": POINTER, - "nCmdShow": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HWND': 'POINTER'}) def hook_ShowWindow(ql, address, params): # return value depends on sample goal (evasion on just display error) return 0x1 @@ -453,10 +373,7 @@ def hook_ShowWindow(ql, address, params): # HINSTANCE hInstance, # LPCSTR lpIconName # ); -@winapi(cc=STDCALL, params={ - "hInstance": POINTER, - "lpIconName": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HINSTANCE': 'POINTER', 'LPCSTR': 'UINT'}) def hook_LoadIconA(ql, address, params): return hook_LoadIconW(ql, address, params) @@ -465,10 +382,7 @@ def hook_LoadIconA(ql, address, params): # HINSTANCE hInstance, # LPCWSTR lpIconName # ); -@winapi(cc=STDCALL, params={ - "hInstance": POINTER, - "lpIconName": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HINSTANCE': 'POINTER', 'LPCWSTR': 'UINT'}) def hook_LoadIconW(ql, address, params): handle = Handle() ql.os.handle_manager.append(handle) @@ -478,9 +392,7 @@ def hook_LoadIconW(ql, address, params): # BOOL IsWindow( # HWND hWnd # ); -@winapi(cc=STDCALL, params={ - "hWnd": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HWND': 'POINTER'}) def hook_IsWindow(ql, address, params): # return value depends on sample goal (evasion on just display error) return 0x1 @@ -492,12 +404,7 @@ def hook_IsWindow(ql, address, params): # WPARAM wParam, # LPARAM lParam # ); -@winapi(cc=STDCALL, params={ - "hWnd": POINTER, - "Msg": UINT, - "wParam": UINT, - "lParam": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HWND': 'POINTER', 'LPARAM': 'UINT'}) def hook_SendMessageA(ql, address, params): # TODO don't know how to get right return value return 0xD10C @@ -509,12 +416,7 @@ def hook_SendMessageA(ql, address, params): # WPARAM wParam, # LPARAM lParam # ); -@winapi(cc=STDCALL, params={ - "hWnd": POINTER, - "Msg": UINT, - "wParam": UINT, - "lParam": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HWND': 'POINTER', 'LPARAM': 'UINT'}) def hook_DefWindowProcA(ql, address, params): # TODO don't know how to get right return value return 0xD10C @@ -523,9 +425,7 @@ def hook_DefWindowProcA(ql, address, params): # LPWSTR CharNextW( # LPCWSTR lpsz # ); -@winapi(cc=STDCALL, params={ - "lpsz": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCWSTR': 'POINTER'}) def hook_CharNextW(ql, address, params): # Return next char if is different from \x00 point = params["lpsz"][0] @@ -538,11 +438,9 @@ def hook_CharNextW(ql, address, params): # LPWSTR CharNextA( -# LPCWSTR lpsz +# LPCSTR lpsz # ); -@winapi(cc=STDCALL, params={ - "lpsz": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CharNextA(ql, address, params): # Return next char if is different from \x00 point = params["lpsz"][0] @@ -558,10 +456,7 @@ def hook_CharNextA(ql, address, params): # LPCWSTR lpszStart, # LPCWSTR lpszCurrent # ); -@winapi(cc=STDCALL, params={ - "lpszStart": POINTER, - "lpszCurrent": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCWSTR': 'POINTER'}) def hook_CharPrevW(ql, address, params): # Return next char if is different from \x00 current = params["lpszCurrent"] @@ -577,13 +472,10 @@ def hook_CharPrevW(ql, address, params): # LPWSTR CharPrevA( -# LPCWSTR lpszStart, -# LPCWSTR lpszCurrent +# LPCSTR lpszStart, +# LPCSTR lpszCurrent # ); -@winapi(cc=STDCALL, params={ - "lpszStart": POINTER, - "lpszCurrent": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCSTR': 'POINTER'}) def hook_CharPrevA(ql, address, params): # Return next char if is different from \x00 current = params["lpszCurrent"] @@ -603,7 +495,7 @@ def hook_CharPrevA(ql, address, params): # LPCWSTR , # ... # ); -@winapi(cc=CDECL, param_num=3) +@winsdkapi(cc=CDECL, dllname=dllname, param_num=3) def hook_wsprintfW(ql, address, params): dst, p_format = ql.os.get_function_param(2) @@ -626,7 +518,7 @@ def hook_wsprintfW(ql, address, params): # LPCWSTR , # ... # ); -@winapi(cc=CDECL, param_num=3) +@winsdkapi(cc=CDECL, dllname=dllname, param_num=3) def hook_sprintf(ql, address, params): dst, p_format, p_args = ql.os.get_function_param(3) format_string = ql.os.read_wstring(p_format) @@ -642,8 +534,7 @@ def hook_sprintf(ql, address, params): # HWND GetForegroundWindow(); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetForegroundWindow(ql, address, params): return 0xF02E620D # Value so we can recognize inside dumps @@ -656,15 +547,7 @@ def hook_GetForegroundWindow(ql, address, params): # int nHeight, # BOOL bRepaint # ) -@winapi(cc=STDCALL, params={ - "hWnd": HANDLE, - "X": INT, - "Y": INT, - "nWidth": INT, - "nHeight": INT, - "bRepaint": BOOL - -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_MoveWindow(ql, address, params): return 1 @@ -672,12 +555,10 @@ def hook_MoveWindow(ql, address, params): # int GetKeyboardType( # int nTypeFlag # ); -@winapi(cc=STDCALL, params={ - "nTypeFlag": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'int': 'UINT'}) def hook_GetKeyboardType(ql, address, params): - """ - See https://salsa.debian.org/wine-team/wine/-/blob/master/dlls/user32/input.c + """ + See https://salsa.debian.org/wine-team/wine/-/blob/master/dlls/user32/input.c """ _type = params['nTypeFlag'] if _type == 0: # 0: Keyboard Type, 1: Keyboard subtype, 2: num func keys @@ -695,12 +576,7 @@ def hook_GetKeyboardType(ql, address, params): # LPCWSTR lpCaption, # UINT uType # ); -@winapi(cc=STDCALL, params={ - "hWnd": HANDLE, - "lpText": WSTRING, - "lpCaption": WSTRING, - "uType": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_MessageBoxW(ql, address, params): # We always return a positive result type_box = params["uType"] @@ -719,12 +595,7 @@ def hook_MessageBoxW(ql, address, params): # LPCWSTR lpCaption, # UINT uType # ); -@winapi(cc=STDCALL, params={ - "hWnd": HANDLE, - "lpText": STRING, - "lpCaption": STRING, - "uType": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_MessageBoxA(ql, address, params): return hook_MessageBoxW.__wrapped__(ql, address, params) @@ -732,9 +603,7 @@ def hook_MessageBoxA(ql, address, params): # BOOL GetCursorPos( # LPPOINT lpPoint # ); -@winapi(cc=STDCALL, params={ - "lpPoint": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetCursorPos(ql, address, params): # TODO maybe we can add it to the profile too p = Point(ql, 50, 50) @@ -746,9 +615,7 @@ def hook_GetCursorPos(ql, address, params): # HANDLE CreateActCtxW( # PCACTCTXW pActCtx # ); -@winapi(cc=STDCALL, params={ - "pActCtx": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateActCtxW(ql, address, params): # TODo maybe is necessary to really create this addr = params["pActCtx"] @@ -761,10 +628,7 @@ def hook_CreateActCtxW(ql, address, params): # HWND hWnd, # LPDWORD lpdwProcessId # ); -@winapi(cc=STDCALL, params={ - "hWnd": HANDLE, - "lpdwProcessId": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetWindowThreadProcessId(ql, address, params): target = params["hWnd"] if target == ql.os.profile.getint("KERNEL", "pid") or target == ql.os.profile.getint("KERNEL", "shell_pid"): @@ -778,7 +642,6 @@ def hook_GetWindowThreadProcessId(ql, address, params): # HWND GetShellWindow(); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetShellWindow(ql, address, params): return ql.os.profile.getint("KERNEL", "shell_pid") diff --git a/qiling/os/windows/dlls/wininet.py b/qiling/os/windows/dlls/wininet.py index 2ef7a3ffc..486d6b23c 100644 --- a/qiling/os/windows/dlls/wininet.py +++ b/qiling/os/windows/dlls/wininet.py @@ -8,6 +8,7 @@ from qiling.os.const import * from qiling.os.windows.utils import * +dllname = 'wininet_dll' # void InternetOpenA( # LPCSTR lpszAgent, @@ -16,13 +17,7 @@ # LPCSTR lpszProxyBypass, # DWORD dwFlags # ); -@winapi(cc=STDCALL, params={ - "lpszAgent": STRING, - "dwAccessType": DWORD, - "lpszProxy": STRING, - "lpszProxyBypass": STRING, - "dwFlags": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetOpenA(ql, address, params): pass @@ -34,13 +29,7 @@ def hook_InternetOpenA(ql, address, params): # LPCWSTR lpszProxyBypass, # DWORD dwFlags # ); -@winapi(cc=STDCALL, params={ - "lpszAgent": WSTRING, - "dwAccessType": DWORD, - "lpszProxy": WSTRING, - "lpszProxyBypass": WSTRING, - "dwFlags": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetOpenW(ql, address, params): pass @@ -53,14 +42,7 @@ def hook_InternetOpenW(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winapi(cc=STDCALL, params={ - "hInternet": POINTER, - "lpszUrl": STRING, - "lpszHeaders": STRING, - "dwHeadersLength": DWORD, - "dwFlags": DWORD, - "dwContext": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetOpenUrlA(ql, address, params): pass @@ -73,14 +55,7 @@ def hook_InternetOpenUrlA(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winapi(cc=STDCALL, params={ - "hInternet": POINTER, - "lpszUrl": WSTRING, - "lpszHeaders": WSTRING, - "dwHeadersLength": DWORD, - "dwFlags": DWORD, - "dwContext": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetOpenUrlW(ql, address, params): pass @@ -88,9 +63,7 @@ def hook_InternetOpenUrlW(ql, address, params): # BOOLAPI InternetCloseHandle( # HINTERNET hInternet # ); -@winapi(cc=STDCALL, params={ - "hInternet": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetCloseHandle(ql, address, params): ret = 1 return ret @@ -106,16 +79,7 @@ def hook_InternetCloseHandle(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winapi(cc=STDCALL, params={ - "hInternet": POINTER, - "lpszServerName": STRING, - "nServerPort": DWORD, - "lpszUserName": STRING, - "lpszPassword": STRING, - "dwService": DWORD, - "dwFlags": DWORD, - "dwContext": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetConnectA(ql, address, params): pass @@ -130,16 +94,7 @@ def hook_InternetConnectA(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winapi(cc=STDCALL, params={ - "hInternet": POINTER, - "lpszServerName": WSTRING, - "nServerPort": DWORD, - "lpszUserName": WSTRING, - "lpszPassword": WSTRING, - "dwService": DWORD, - "dwFlags": DWORD, - "dwContext": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetConnectW(ql, address, params): pass @@ -149,11 +104,7 @@ def hook_InternetConnectW(ql, address, params): # DWORD dwFlags, # DWORD dwReserved # ); -@winapi(cc=STDCALL, params={ - "lpszUrl": WSTRING, - "dwFlags": DWORD, - "dwContext": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetCheckConnectionA(ql, address, params): pass @@ -168,16 +119,7 @@ def hook_InternetCheckConnectionA(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winapi(cc=STDCALL, params={ - "hConnect": POINTER, - "lpszVerb": STRING, - "lpszObjectName": STRING, - "lpszVersion": STRING, - "lpszReferrer": STRING, - "lplpszAcceptTypes": POINTER, - "dwFlags": DWORD, - "dwContext": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_HttpOpenRequestA(ql, address, params): pass @@ -189,13 +131,7 @@ def hook_HttpOpenRequestA(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winapi(cc=STDCALL, params={ - "hRequest": POINTER, - "lpBuffersIn": POINTER, - "lpBuffersOut": STRING, - "dwFlags": DWORD, - "dwContext": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={'lpBuffersIn': 'POINTER', 'lpBuffersOut': 'STRING'}) def hook_HttpSendRequestExA(ql, address, params): pass @@ -210,16 +146,7 @@ def hook_HttpSendRequestExA(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winapi(cc=STDCALL, params={ - "hConnect": POINTER, - "lpszVerb": WSTRING, - "lpszObjectName": WSTRING, - "lpszVersion": WSTRING, - "lpszReferrer": WSTRING, - "lplpszAcceptTypes": POINTER, - "dwFlags": DWORD, - "dwContext": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_HttpOpenRequestW(ql, address, params): pass @@ -230,12 +157,7 @@ def hook_HttpOpenRequestW(ql, address, params): # LPVOID lpBuffer, # DWORD dwBufferLength # ); -@winapi(cc=STDCALL, params={ - "hInternet": POINTER, - "dwOption": DWORD, - "lpBuffer": POINTER, - "dwBufferLength": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetSetOptionA(ql, address, params): return 1 @@ -246,12 +168,7 @@ def hook_InternetSetOptionA(ql, address, params): # LPVOID lpBuffer, # DWORD dwBufferLength # ); -@winapi(cc=STDCALL, params={ - "hInternet": POINTER, - "dwOption": DWORD, - "lpBuffer": POINTER, - "dwBufferLength": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetSetOptionW(ql, address, params): return 1 @@ -263,13 +180,7 @@ def hook_InternetSetOptionW(ql, address, params): # LPVOID lpOptional, # DWORD dwOptionalLength # ); -@winapi(cc=STDCALL, params={ - "hRequest": POINTER, - "lpszHeaders": STRING, - "dwHeadersLength": DWORD, - "lpOptional": POINTER, - "dwOptionalLength": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_HttpSendRequestA(ql, address, params): return 1 @@ -281,13 +192,7 @@ def hook_HttpSendRequestA(ql, address, params): # LPVOID lpOptional, # DWORD dwOptionalLength # ); -@winapi(cc=STDCALL, params={ - "hRequest": POINTER, - "lpszHeaders": WSTRING, - "dwHeadersLength": DWORD, - "lpOptional": POINTER, - "dwOptionalLength": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_HttpSendRequestW(ql, address, params): return 1 @@ -299,13 +204,7 @@ def hook_HttpSendRequestW(ql, address, params): # DWORD dwFlags, # LPVOID *lppvData # ); -@winapi(cc=STDCALL, params={ - "hWnd": POINTER, - "hRequest": POINTER, - "dwError": DWORD, - "dwFlags": DWORD, - "lppvData": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HWND': 'POINTER'}) def hook_InternetErrorDlg(ql, address, params): pass @@ -316,12 +215,7 @@ def hook_InternetErrorDlg(ql, address, params): # DWORD dwNumberOfBytesToRead, # LPDWORD lpdwNumberOfBytesRead # ); -@winapi(cc=STDCALL, params={ - "hFile": POINTER, - "lpBuffer": POINTER, - "dwNumberOfBytesToRead": DWORD, - "lpdwNumberOfBytesRead": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetReadFile(ql, address, params): return 1 @@ -332,12 +226,7 @@ def hook_InternetReadFile(ql, address, params): # DWORD dwNumberOfBytesToWrite, # LPDWORD lpdwNumberOfBytesWritten # ); -@winapi(cc=STDCALL, params={ - "hFile": POINTER, - "lpBuffer": POINTER, - "dwNumberOfBytesToWrite": DWORD, - "lpdwNumberOfBytesWritten": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetWriteFile(ql, address, params): return 1 @@ -348,11 +237,6 @@ def hook_InternetWriteFile(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winapi(cc=STDCALL, params={ - "hFile": POINTER, - "lpBuffersOut": POINTER, - "dwFlags": DWORD, - "dwContext": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPINTERNET_BUFFERSA': 'POINTER'}) def hook_HttpEndRequestA(ql, address, params): return 1 diff --git a/qiling/os/windows/dlls/wsock32.py b/qiling/os/windows/dlls/wsock32.py index 6228a2826..891d3935f 100644 --- a/qiling/os/windows/dlls/wsock32.py +++ b/qiling/os/windows/dlls/wsock32.py @@ -13,12 +13,13 @@ from qiling.exception import * from qiling.os.windows.structs import * +dllname = 'ws2_32_dll' # int WSAStartup( # WORD wVersionRequired, # LPWSADATA lpWSAData # ); -@winapi(cc=STDCALL, params={"wVersionRequired": DWORD, "LPWSADATA": STRING}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_WSAStartup(ql, address, params): return 0 @@ -31,17 +32,7 @@ def hook_WSAStartup(ql, address, params): # GROUP g, # DWORD dwFlags # ); -@winapi( - STDCALL, - params={ - "af": INT, - "type": INT, - "protocol": INT, - "lpProtocolInfo": POINTER, - "g": INT, - "dwFlags": INT, - }, -) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'DWORD': 'INT'}) def hook_WSASocketA(ql, address, params): return 0 @@ -51,7 +42,7 @@ def hook_WSASocketA(ql, address, params): # const sockaddr *name, # int namelen # ); -@winapi(cc=STDCALL, params={"s": INT, "name": POINTER, "namelen": INT}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_connect(ql, address, params): sin_family = ql.mem.read(params["name"], 1)[0] sin_port = int.from_bytes(ql.mem.read(params["name"] + 2, 2), byteorder="big") @@ -78,9 +69,7 @@ def hook_connect(ql, address, params): # hostent * gethostbyname( # const char *name # ); -@winapi(cc=STDCALL, params={ - "name": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'char': 'POINTER'}) def hook_gethostbyname(ql, address, params): ip_str = ql.os.profile.getint("NETWORK", "dns_response_ip") ip = bytes([int(octet) for octet in ip_str.split('.')[::-1]]) diff --git a/qiling/os/windows/dlls/wudplatform.py b/qiling/os/windows/dlls/wudplatform.py index 09d273d8a..41be8f072 100644 --- a/qiling/os/windows/dlls/wudplatform.py +++ b/qiling/os/windows/dlls/wudplatform.py @@ -12,20 +12,16 @@ from qiling.os.windows.handle import * from qiling.exception import * - -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL) def hook_WudfIsUserDebuggerPresent(ql, address, params): return 0 -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL) def hook_WudfIsAnyDebuggerPresent(ql, address, params): return 0 -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL) def hook_WudfIsKernelDebuggerPresent(ql, address, params): return 0 diff --git a/qiling/os/windows/fncc.py b/qiling/os/windows/fncc.py index 8c6ed8eb6..d9d9ac5a0 100644 --- a/qiling/os/windows/fncc.py +++ b/qiling/os/windows/fncc.py @@ -3,6 +3,8 @@ # Cross Platform and Multi Architecture Advanced Binary Emulation Framework # Built on top of Unicorn emulator (www.unicorn-engine.org) +import os +import json import struct from functools import wraps @@ -12,19 +14,76 @@ from qiling.exception import * +def replacetype(type, specialtype=None): + if specialtype is None: + specialtype = {} + + if type in reptypedict.keys(): + if type not in specialtype.keys(): + return reptypedict[type] + else: + return specialtype[type] + else: + return type + # x86/x8664 PE should share Windows APIs -def winapi(cc, param_num=None, params=None): +def winsdkapi(cc, param_num=None, dllname=None, replace_params_type=None, replace_params={}): """ @cc: windows api calling convention, only x86 needs this, x64 is always fastcall - @params: params dict @param_num: the number of function params, used by variadic functions, e.g printf + @dllname: the name of function + @replace_params_type: customize replace type, e.g specialtype={'int':'UINT'} means repalce 'int' to 'UINT' + @replace_params: customize replace param_name's type, e.g specialtypeEx={'time':'int'} means + replace the original type of time to int """ - def decorator(func): @wraps(func) def wrapper(*args, **kwargs): + funcname = func.__name__[5:] + params = {} + funclist = [] ql = args[0] - + + if dllname is not None: + windows_abspath = os.path.dirname(os.path.abspath(__file__)) + winsdk_path = os.path.join(windows_abspath[:-11], 'extensions', 'windows_sdk', 'defs', dllname + '.json') + + if os.path.exists(winsdk_path): + f = open(winsdk_path, 'r') + funclist = json.load(f) + else: + ql.nprint('[!]', winsdk_path, 'not found') + if funcname not in funclist: + params = replace_params + else: + paramlist = funclist[funcname] + + if len(replace_params.keys()) == len(paramlist): + params = replace_params + for key in params: + if isinstance(params[key], str): + type = replacetype(params[key], replace_params_type) + params[key] = eval(type) + else: + for para in paramlist: + name = list(para.values())[0] + if name == 'VOID' or (name in replace_params.keys() and replace_params[name] == ''): + params = {} + break + elif replace_params is not None and name in replace_params.keys(): + type = replace_params[name] + params[name] = type + else: + type = list(para.values())[1] + if isinstance(type, dict): + type = replacetype(type['name'], replace_params_type) + else: + type = replacetype(list(para.values())[1], replace_params_type) + if isinstance(type, str): + params[name] = eval(type) + else: + params = replace_params + if ql.archtype == QL_ARCH.X86: if cc == STDCALL: return ql.os.x86_stdcall(param_num, params, func, args, kwargs) @@ -34,7 +93,6 @@ def wrapper(*args, **kwargs): return ql.os.x8664_fastcall(param_num, params, func, args, kwargs) else: raise QlErrorArch("[!] Unknown self.ql.arch") - return wrapper return decorator diff --git a/qiling/os/windows/registry.py b/qiling/os/windows/registry.py index a4e0264c6..14bd421cd 100644 --- a/qiling/os/windows/registry.py +++ b/qiling/os/windows/registry.py @@ -41,7 +41,7 @@ def __init__(self, ql, hive=None): self.hive = os.path.join(ql.rootfs, "Windows", "registry") ql.dprint(D_INFO, "[+] Windows Registry PATH: %s" % self.hive) if not os.path.exists(self.hive) and not self.ql.shellcoder: - raise QlErrorFileNotFound("Error: Registry files not found!") + raise QlErrorFileNotFound(f"Error: Registry files not found in '{self.hive}'!") if not os.path.exists(self.regdiff): self.registry_config = {} diff --git a/qiling/os/windows/structs.py b/qiling/os/windows/structs.py index 20d2cfa49..b41f541a9 100644 --- a/qiling/os/windows/structs.py +++ b/qiling/os/windows/structs.py @@ -493,6 +493,50 @@ def write(self, addr): def read(self, addr): super().generic_read(addr, [self.x, self.y]) +# typedef struct _SYSTEM_BASIC_INFORMATION +# { +# ULONG Reserved; +# ULONG TimerResolution; +# ULONG PageSize; +# ULONG NumberOfPhysicalPages; +# ULONG LowestPhysicalPageNumber; +# ULONG HighestPhysicalPageNumber; +# ULONG AllocationGranularity; +# ULONG_PTR c; +# ULONG_PTR MaximumUserModeAddress; +# ULONG_PTR ActiveProcessorsAffinityMask; +# CCHAR NumberOfProcessors; +# } SYSTEM_BASIC_INFORMATION, * PSYSTEM_BASIC_INFORMATION; + +class SystemBasicInforation(WindowsStruct): + def __init__(self,ql, Reserved,TimerResolution,PageSize=None, NumberOfPhysicalPages=None, LowestPhysicalPageNumber=None, + HighestPhysicalPageNumber=None, AllocationGranularity=None,MinimumUserModeAddress=None, + MaximumUserModeAddress=None,ActiveProcessorsAffinityMask=None,NumberOfProcessors=None): + super().__init__(ql) + self.size=self.BYTE_SIZE * 24 + 5*self.POINTER_SIZE + self.Reserved =[Reserved, self.DWORD_SIZE, "little", int] + self.TimerResolution=[TimerResolution, self.DWORD_SIZE, "little", int] + self.PageSize=[PageSize, self.DWORD_SIZE, "little", int] + self.NumberOfPhysicalPages = [NumberOfPhysicalPages, self.DWORD_SIZE, "little", int] + self.LowestPhysicalPageNumber = [LowestPhysicalPageNumber, self.DWORD_SIZE, "little", int] + self.HighestPhysicalPageNumber = [HighestPhysicalPageNumber, self.DWORD_SIZE, "little", int] + self.AllocationGranularity = [AllocationGranularity, self.DWORD_SIZE, "little", int] + self.MinimumUserModeAddress = [MinimumUserModeAddress, self.POINTER_SIZE, "little", int] + self.MaximumUserModeAddress = [MaximumUserModeAddress, self.POINTER_SIZE, "little", int] + self.ActiveProcessorsAffinityMask = [ActiveProcessorsAffinityMask, self.POINTER_SIZE, "little", int] + self.NumberOfProcessors = [NumberOfProcessors, self.POINTER_SIZE, "little", int] + def write(self, addr): + + super().generic_write(addr, [self.Reserved, self.TimerResolution, self.PageSize, self.NumberOfPhysicalPages, + self.LowestPhysicalPageNumber, self.HighestPhysicalPageNumber ,self.AllocationGranularity, + self.MinimumUserModeAddress,self.MaximumUserModeAddress,self.ActiveProcessorsAffinityMask, + self.NumberOfProcessors]) + + def read(self, addr): + super().generic_read(addr, [self.Reserved, self.TimerResolution, self.PageSize, self.NumberOfPhysicalPages, + self.LowestPhysicalPageNumber, self.HighestPhysicalPageNumber ,self.AllocationGranularity, + self.MinimumUserModeAddress,self.MaximumUserModeAddress,self.ActiveProcessorsAffinityMask, + self.NumberOfProcessors]) # typedef struct hostent { # char *h_name; diff --git a/qiling/profiles/uefi.ql b/qiling/profiles/uefi.ql index 480062db3..c23dfcd74 100644 --- a/qiling/profiles/uefi.ql +++ b/qiling/profiles/uefi.ql @@ -18,19 +18,29 @@ dll_address = 0x10000000 entry_point = 0x40000 -[GUID] +[HOB_LIST] # EFI_GLOBAL_VARIABLE -configuration_table = 7739f24c-93d7-11d4-9a3a-0090273fc14d +guid = 7739f24c-93d7-11d4-9a3a-0090273fc14d data1 = 0x7739f24c data2 = 0x93d7 data3 = 0x11d4 data4 = [0x9a, 0x3a, 0x0, 0x90, 0x27, 0x3f, 0xc1, 0x4d] vendortable = 0xffffffffffffffff +[DXE_SERVICE_TABLE] +guid = 05ad34ba-6f02-4214-952e-4da0398e2bb9 +data1 = 0x05AD34BA +data2 = 0x6F02 +data3 = 0x4214 +data4 = [0x95, 0x2E, 0x4D, 0xA0, 0x39, 0x8E, 0x2B, 0xB9] + [LOADED_IMAGE_PROTOCOL] guid = 5b1b31a1-9562-11d2-8e3f-00a0c969723b revision = 0x1000 +[EFI_SMM_BASE2_PROTOCOL] +guid = f4ccbfb7-f6e0-47fd-9dd4-10a8f150c191 + [KERNEL] pid = 1996 diff --git a/tests/test_elf.py b/tests/test_elf.py index 0f55080f3..eed7ecc35 100644 --- a/tests/test_elf.py +++ b/tests/test_elf.py @@ -159,9 +159,11 @@ def write_onexit(ql, arg1, arg2, arg3, *args): ql.set_syscall(1, write_onexit, QL_INTERCEPT.EXIT) ql.mem.map(0x1000, 0x1000) ql.mem.write(0x1000, b"\xFF\xFE\xFD\xFC\xFB\xFA\xFB\xFC\xFC\xFE\xFD") + ql.mem.map(0x2000, 0x1000) + ql.mem.write(0x2000, b"\xFF\xFE\xFD\xFC\xFB\xFA\xFB\xFC\xFC\xFE\xFD") ql.run() - self.assertEqual([0x1000], ql.mem.search(b"\xFF\xFE\xFD\xFC\xFB\xFA\xFB\xFC\xFC\xFE\xFD")) + self.assertEqual([0x1000,0x2000], ql.mem.search(b"\xFF\xFE\xFD\xFC\xFB\xFA\xFB\xFC\xFC\xFE\xFD")) self.assertEqual(93824992233162, self.set_api) self.assertEqual(True, self.set_api_onexit) self.assertEqual(True, self.set_api_onenter) @@ -901,5 +903,24 @@ def test_elf_linux_execve_x8664(self): del ql + def test_elf_linux_x86(self): + class Fake_urandom: + + def read(self, size): + return b"\x01" + + def fstat(self): + return -1 + + def close(self): + return 0 + + ql = Qiling(["../examples/rootfs/x86_linux/bin/x86_fetch_urandom"], "../examples/rootfs/x86_linux", output="debug") + ql.add_fs_mapper("/dev/urandom", Fake_urandom()) + ql.run() + del ql + + + if __name__ == "__main__": - unittest.main() \ No newline at end of file + unittest.main() diff --git a/tests/test_pe.py b/tests/test_pe.py index 10a1e5918..720094b9a 100644 --- a/tests/test_pe.py +++ b/tests/test_pe.py @@ -3,7 +3,7 @@ # Cross Platform and Multi Architecture Advanced Binary Emulation Framework # Built on top of Unicorn emulator (www.unicorn-engine.org) -import sys, random, unittest +import os, random, sys, unittest import string as st from binascii import unhexlify @@ -33,6 +33,8 @@ def test_pe_win_x86_hello(self): def test_pe_win_x86_uselessdisk(self): + if 'QL_FAST_TEST' in os.environ: + return ql = Qiling(["../examples/rootfs/x86_windows/bin/UselessDisk.bin"], "../examples/rootfs/x86_windows", output="debug") ql.run() @@ -40,6 +42,8 @@ def test_pe_win_x86_uselessdisk(self): def test_pe_win_x86_gandcrab(self): + if 'QL_FAST_TEST' in os.environ: + return def stop(ql, default_values): print("Ok for now") ql.emu_stop() @@ -160,6 +164,8 @@ def test_pe_win_x8664_fls(self): def test_pe_win_x86_wannacry(self): + if 'QL_FAST_TEST' in os.environ: + return def stop(ql): ql.nprint("killerswtichfound") ql.console = False @@ -171,8 +177,16 @@ def stop(ql): ql.run() del ql + def test_pe_win_x86_NtQueryInformationSystem(self): + ql = Qiling( + ["../examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe"], + "../examples/rootfs/x86_windows") + ql.run() + del ql def test_pe_win_al_khaser(self): + if 'QL_FAST_TEST' in os.environ: + return ql = Qiling(["../examples/rootfs/x86_windows/bin/al-khaser.bin"], "../examples/rootfs/x86_windows") # The hooks are to remove the prints to file. It crashes. will debug why in the future @@ -200,9 +214,7 @@ def end(ql): def test_pe_win_x8664_customapi(self): - @winapi(cc=CDECL, params={ - "str": STRING - }) + @winsdkapi(cc=CDECL, replace_params={"str": STRING}) def my_puts64(ql, address, params): ret = 0 print("\n+++++++++ My Windows 64bit Windows API +++++++++\n")